Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: svchost.exe + NTDLL.DLL Causing high CPU Usage


10 Nov 2009   #1

Windows 7 Professional 64 BIT
 
 
svchost.exe + NTDLL.DLL Causing high CPU Usage

Computer stats
Windows 7 Pro 64 Bit
Gigabyte Socket 775 Mobo
Intel Core 2 Duo 3.0 CPU
Nvidia 8800GT
4 GB DDR2 Ram
MSI TV Anywhere PCI TV Tuner
Soundblaster Audigy 2 ZS

I have recently beginning with last Thursday been experiencing after a good 4-7 hours of the computer being on a massive spike in CPU usage, it goes from 40%-60% and stays. I narrowed it down using Process Explorer to svchost with the culprit being ntdll.dll underneath it. Here is the picture of it

Its TID 752 that does it. The only way to stop the spike is by suspending the thread. If I do that it temporarily fixes the issue. Within a few hours it spikes back up again. Also sometimes if I suspend the thread I cannot load any new programs and Windows 7 ends up stalling. I don't know why it does this or how to resolve the issue. Can anyone help me as to the exact cause and how to resolve it. Thank you very much

My System SpecsSystem Spec
.

10 Nov 2009   #2

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

I'm not the right person to talk to about this, but that dll is a required one used by the kernel. I'm guessing, but I think that both of the processes that you mentioned may indicate that the problem is being caused by some other third party software on your system If that be the case, you would need to locate it by a process of elimination. Go into msconfig and using selective startup, disable everything listed on the startup tab window, and run it that way long enough to see if the problem reappears. If it does, then you might have to consider other possibilities, like a system restore or repair install.
My System SpecsSystem Spec
10 Nov 2009   #3

Windows 7 Professional 64 BIT
 
 

I'm gonna do that. I disabled my tuner card just to make sure that isn't causing the issue. But I doubt thats the cause because it happens regardless of if I use it or not
My System SpecsSystem Spec
.


10 Nov 2009   #4

Windows 7 Pro x64
 
 

did you happen to setup windows media experience recently ?

I had the same issue you are describing shortly after setting up the media experience feature. De-installing it sadly did not resolve the issue. After troubleshooting for a few hours i decided to restore my windows from a previous automatic backup from the day before, which resolved the issue.

So I'm still not 100% certain about the cause, but my issue was resolved by restoring windows to a previous automatic backup.
My System SpecsSystem Spec
10 Nov 2009   #5

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by cosomotion View Post
did you happen to setup windows media experience recently ?

I had the same issue you are describing shortly after setting up the media experience feature. De-installing it sadly did not resolve the issue. After troubleshooting for a few hours i decided to restore my windows from a previous automatic backup from the day before, which resolved the issue.

So I'm still not 100% certain about the cause, but my issue was resolved by restoring windows to a previous automatic backup.
Hello cosomotion,

What kind of backup did you restore?
- A system image?
- System recovery point?

Just so we know how you solved this. ;-)

Best regards,

zx81
My System SpecsSystem Spec
10 Nov 2009   #6

Win7x64
 
 

Quote   Quote: Originally Posted by Satanical Eve View Post
... Can anyone help me as to the exact cause and how to resolve it. Thank you very much
Nice job on the troubleshooting

The function names displayed for the ntoskrnl image are mostly wrong because there's no symbolic info. To get a more accurate stack representation, in Process Explorer, under Options, Configure symbols, put this into the "Symbols path:" field:

SRV*c:\SymCache*http://msdl.microsoft.com/download/symbol

Then restart ProcExp, repeat the procedure to find the offending thread, and copy it's stack once more (that "copy" button copies text to the clipboard so you don't have to bother with the screenshots).

An accurate stack representation of the busy thread should help in diagnosing the issue.
My System SpecsSystem Spec
10 Nov 2009   #7

Windows 7 Professional 64 BIT
 
 

Quote   Quote: Originally Posted by H2SO4 View Post
Quote   Quote: Originally Posted by Satanical Eve View Post
... Can anyone help me as to the exact cause and how to resolve it. Thank you very much
Nice job on the troubleshooting

The function names displayed for the ntoskrnl image are mostly wrong because there's no symbolic info. To get a more accurate stack representation, in Process Explorer, under Options, Configure symbols, put this into the "Symbols path:" field:

SRV*c:\SymCache*http://msdl.microsoft.com/download/symbol

Then restart ProcExp, repeat the procedure to find the offending thread, and copy it's stack once more (that "copy" button copies text to the clipboard so you don't have to bother with the screenshots).

An accurate stack representation of the busy thread should help in diagnosing the issue.
I did it
Thread 752 - ntdll.dll!tppwaiterpthread

Thats exactly what appears for it. With the same information for the stack as before
My System SpecsSystem Spec
10 Nov 2009   #8

Windows 8.1 Pro (x64)
 
 

Not going to state anything conclusive. But NTDLL is not the cause. But what is interesting is that this svhost has Power Management, and Plug and Play Management. Something tells me it might have something to do with PnP and something (hardware) you have plugged in.

User-mode Power Service: Windows 7 DLL File Information - umpo.dll
User-mode Plug-and-Play Service: Windows 7 DLL File Information - umpnpmgr.dll
My System SpecsSystem Spec
10 Nov 2009   #9

Windows 7 Professional 64 BIT
 
 

Quote   Quote: Originally Posted by logicearth View Post
Not going to state anything conclusive. But NTDLL is not the cause. But what is interesting is that this svhost has Power Management, and Plug and Play Management. Something tells me it might have something to do with PnP and something (hardware) you have plugged in.

User-mode Power Service: Windows 7 DLL File Information - umpo.dll
User-mode Plug-and-Play Service: Windows 7 DLL File Information - umpnpmgr.dll
Well the only PNP devices I have installed are my webcam(Logitech Pro 4000), My Tuner Card(MSI TV Anywhere PCI). HP Printer, and my Bluetooth Adapter.

Thanks for the help guys.
My System SpecsSystem Spec
10 Nov 2009   #10

Windows 7 Professional 64 BIT
 
 

It just started doing it again. svchost.exe is at 49% right now. ntdll.dll!Tppworkerthread is at 48%. I have disabled most all of my PNP devices. My capture card is disabled and its not causing the issue. Im frustrated as to what device or thing is causing this.

I had to restart the PC because it stopped doing it for a minute or so then suddenly spiked back up. I don't know if it has to do with the PNP devices I have or if its the Power portion underneath svchost
My System SpecsSystem Spec
Reply

 svchost.exe + NTDLL.DLL Causing high CPU Usage




Thread Tools



Similar help and support threads for2: svchost.exe + NTDLL.DLL Causing high CPU Usage
Thread Forum
Very high CPU usage, causing very high laptop CPU temps (90c idle) Performance & Maintenance
svchost.exe high memory usage Performance & Maintenance
High SVCHOST.exe memory usage BSOD Help and Support
wermgr.exe causing high cpu usage Software
ntoskrnl.exe and USBPORT.SYS causing high CPU usage Performance & Maintenance
svchost.exe / Schedule, high CPU and RAM usage Performance & Maintenance
Network Traffic Causing High CPU Usage General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:54 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33