• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1298
  • Last Modified:

DWM (Desktop Windows Management) is hogging the CPU

Have a system where the process DWM is using so much of the CPU that nothing else will really run.  Once the system is booted, if you startup IE it'll take 5 minutes to load.

Also, when booting the system into Safe Mode, after the Dell splash screen appears, after pressing F8 the lines of text for the boot options and when the system is loading the drivers the lines of text take about 2 seconds/line to draw.  

I ran AVG in SafeMode.  It didn't find anything.

I pulled the drive and have it connected to another system.  Ran AVG again: Clean.  Windows Defender: Clean.  About to run Spybot.

Ideas?
0
CraigSNYC
Asked:
CraigSNYC
  • 10
  • 6
  • 3
1 Solution
 
johnb6767Commented:
"after pressing F8 the lines of text for the boot options and when the system is loading the drivers the lines of text take about 2 seconds/line to draw"

Do you happen to have another video card you can use to test with? Not many things that early in the bootup process that can affect your speeds.....
0
 
johnb6767Commented:
Process Explorer for Windows v11
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Double click the offending file. If it is a svchost.exe, then Select the Services Tab. Please list what services are in that svchost.exe.

Then Select the Threads tab, and see what .exe or .dll is using the CPU, and then select it by double clicking it....and copying/pasting the call stack here.....
0
 
IanThCommented:
see http://en.wikipedia.org/wiki/Desktop_Window_Manager

what did you do to get dwm hogging the cpu ie how did it start
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
CraigSNYCAuthor Commented:
IanTh DWM manages the process that manages graphics in Vista. It starts at boot.  

I'm running Proc Exp on the system now.  I haven't downloaded debug symbols so looking at the Threads will be pretty inconclusive.

DWM isn't run by a SVCHOST process.  It's its own process.  
0
 
johnb6767Commented:
Use the Microsoft Symbol Server to obtain debug symbol files
http://support.microsoft.com/kb/311503

Dont need the symbols.....

File>Configure Symbols inside of PE. Paste the following, after creating a c:\Symbols folder.....

SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
0
 
johnb6767Commented:
Sorry, Options>Configure Symbols
0
 
CraigSNYCAuthor Commented:
Once I pop the drive back in I'll run Proc Exp with symbols and I'll let you know what happens.
0
 
CraigSNYCAuthor Commented:
After running AVG, SpyBot, MalwareBytes, Defender and CHKDSK /R on the drive I popped it back in the system and it was fine for about 3 minutes then it began to slow down.

Here's the stack from Proc Exp. from the thread that's eating the CPU. (it's using about 50%)

ntkrnlpa.exe!KeWaitForMultipleObjects+0xab7
ntkrnlpa.exe!KeWaitForSingleObject+0x492
ntkrnlpa.exe!PsGetCurrentThreadTeb+0x377
ntkrnlpa.exe!KeInsertQueueDpc+0x670
ntkrnlpa.exe!KeWaitForSingleObject+0x492
ntkrnlpa.exe!NtWaitForSingleObject+0xc8
ntkrnlpa.exe!ZwQueryLicenseValue+0xbd2
ntdll.dll!KiFastSystemCallRet
kernel32.dll!WaitForSingleObject+0x12
milcore.dll!MilComposition_WaitForNextMessage+0x1e1c
milcore.dll!MilComposition_WaitForNextMessage+0x2775
milcore.dll!MilComposition_WaitForNextMessage+0x3122
milcore.dll!MilConnection_CreateChannel+0x9c7
kernel32.dll!BaseThreadInitThunk+0x12
ntdll.dll!RtlInitializeExceptionChain+0x63
ntdll.dll!RtlInitializeExceptionChain+0x36


0
 
CraigSNYCAuthor Commented:
One other detail: the system is fine when booted into Safe Mode.
0
 
CraigSNYCAuthor Commented:
Another detail:

I'm sorry, actually DWM is started via SVCHOST. Here's the command line for it:

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
0
 
IanThCommented:
try process explorer to really see whats going on behind the scenes

see
http://download.cnet.com/Process-Explorer/3000-2094_4-10223605.html
0
 
CraigSNYCAuthor Commented:
IanTh -- Process Explorer is what I'm using.
0
 
CraigSNYCAuthor Commented:
You're not going to believe this. There were several Windows updates that needed to be installed, so I shutdown the system and let them install.  The problem is gone!

Who knows!  I'll file this under, "FM". f*cking mystery.

As for the points, I'm awarding them to JohnB.  

Thanks!
0
 
CraigSNYCAuthor Commented:
The solution offered didn't fix the problem but gave great advice on how to track down the issue!
0
 
johnb6767Commented:
Im glad you are fixed. Sorry for the delay, just getting online. Whats this DLL belong to?

milcore.dll
0
 
IanThCommented:
typical m$ eh glad you got it sorted
0
 
CraigSNYCAuthor Commented:
Johnb, do you mean who's running MILCORE.DLL?
0
 
johnb6767Commented:
No, what app does it belong to?
0
 
CraigSNYCAuthor Commented:
I don't know.  
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

  • 10
  • 6
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now