Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: svchost.exe + NTDLL.DLL Causing high CPU Usage

10 Nov 2009   #1
Satanical Eve

Windows 7 Professional 64 BIT
 
 
svchost.exe + NTDLL.DLL Causing high CPU Usage

Computer stats
Windows 7 Pro 64 Bit
Gigabyte Socket 775 Mobo
Intel Core 2 Duo 3.0 CPU
Nvidia 8800GT
4 GB DDR2 Ram
MSI TV Anywhere PCI TV Tuner
Soundblaster Audigy 2 ZS

I have recently beginning with last Thursday been experiencing after a good 4-7 hours of the computer being on a massive spike in CPU usage, it goes from 40%-60% and stays. I narrowed it down using Process Explorer to svchost with the culprit being ntdll.dll underneath it. Here is the picture of it

Its TID 752 that does it. The only way to stop the spike is by suspending the thread. If I do that it temporarily fixes the issue. Within a few hours it spikes back up again. Also sometimes if I suspend the thread I cannot load any new programs and Windows 7 ends up stalling. I don't know why it does this or how to resolve the issue. Can anyone help me as to the exact cause and how to resolve it. Thank you very much


My System SpecsSystem Spec
.
10 Nov 2009   #2
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

I'm not the right person to talk to about this, but that dll is a required one used by the kernel. I'm guessing, but I think that both of the processes that you mentioned may indicate that the problem is being caused by some other third party software on your system If that be the case, you would need to locate it by a process of elimination. Go into msconfig and using selective startup, disable everything listed on the startup tab window, and run it that way long enough to see if the problem reappears. If it does, then you might have to consider other possibilities, like a system restore or repair install.
My System SpecsSystem Spec
10 Nov 2009   #3
Satanical Eve

Windows 7 Professional 64 BIT
 
 

I'm gonna do that. I disabled my tuner card just to make sure that isn't causing the issue. But I doubt thats the cause because it happens regardless of if I use it or not
My System SpecsSystem Spec
.

10 Nov 2009   #4
cosomotion

Windows 7 Pro x64
 
 

did you happen to setup windows media experience recently ?

I had the same issue you are describing shortly after setting up the media experience feature. De-installing it sadly did not resolve the issue. After troubleshooting for a few hours i decided to restore my windows from a previous automatic backup from the day before, which resolved the issue.

So I'm still not 100% certain about the cause, but my issue was resolved by restoring windows to a previous automatic backup.
My System SpecsSystem Spec
10 Nov 2009   #5
zx81

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by cosomotion View Post
did you happen to setup windows media experience recently ?

I had the same issue you are describing shortly after setting up the media experience feature. De-installing it sadly did not resolve the issue. After troubleshooting for a few hours i decided to restore my windows from a previous automatic backup from the day before, which resolved the issue.

So I'm still not 100% certain about the cause, but my issue was resolved by restoring windows to a previous automatic backup.
Hello cosomotion,

What kind of backup did you restore?
- A system image?
- System recovery point?

Just so we know how you solved this. ;-)

Best regards,

zx81
My System SpecsSystem Spec
10 Nov 2009   #6
H2SO4

Win7x64
 
 

Quote   Quote: Originally Posted by Satanical Eve View Post
... Can anyone help me as to the exact cause and how to resolve it. Thank you very much
Nice job on the troubleshooting :)

The function names displayed for the ntoskrnl image are mostly wrong because there's no symbolic info. To get a more accurate stack representation, in Process Explorer, under Options, Configure symbols, put this into the "Symbols path:" field:

SRV*c:\SymCache*http://msdl.microsoft.com/download/symbol

Then restart ProcExp, repeat the procedure to find the offending thread, and copy it's stack once more (that "copy" button copies text to the clipboard so you don't have to bother with the screenshots).

An accurate stack representation of the busy thread should help in diagnosing the issue.
My System SpecsSystem Spec
10 Nov 2009   #7
Satanical Eve

Windows 7 Professional 64 BIT
 
 

Quote   Quote: Originally Posted by H2SO4 View Post
Quote   Quote: Originally Posted by Satanical Eve View Post
... Can anyone help me as to the exact cause and how to resolve it. Thank you very much
Nice job on the troubleshooting :)

The function names displayed for the ntoskrnl image are mostly wrong because there's no symbolic info. To get a more accurate stack representation, in Process Explorer, under Options, Configure symbols, put this into the "Symbols path:" field:

SRV*c:\SymCache*http://msdl.microsoft.com/download/symbol

Then restart ProcExp, repeat the procedure to find the offending thread, and copy it's stack once more (that "copy" button copies text to the clipboard so you don't have to bother with the screenshots).

An accurate stack representation of the busy thread should help in diagnosing the issue.
I did it
Thread 752 - ntdll.dll!tppwaiterpthread

Thats exactly what appears for it. With the same information for the stack as before
My System SpecsSystem Spec
10 Nov 2009   #8
logicearth

Windows 10 Pro (x64)
 
 

Not going to state anything conclusive. But NTDLL is not the cause. But what is interesting is that this svhost has Power Management, and Plug and Play Management. Something tells me it might have something to do with PnP and something (hardware) you have plugged in.

User-mode Power Service: Windows 7 DLL File Information - umpo.dll
User-mode Plug-and-Play Service: Windows 7 DLL File Information - umpnpmgr.dll
My System SpecsSystem Spec
10 Nov 2009   #9
Satanical Eve

Windows 7 Professional 64 BIT
 
 

Quote   Quote: Originally Posted by logicearth View Post
Not going to state anything conclusive. But NTDLL is not the cause. But what is interesting is that this svhost has Power Management, and Plug and Play Management. Something tells me it might have something to do with PnP and something (hardware) you have plugged in.

User-mode Power Service: Windows 7 DLL File Information - umpo.dll
User-mode Plug-and-Play Service: Windows 7 DLL File Information - umpnpmgr.dll
Well the only PNP devices I have installed are my webcam(Logitech Pro 4000), My Tuner Card(MSI TV Anywhere PCI). HP Printer, and my Bluetooth Adapter.

Thanks for the help guys.
My System SpecsSystem Spec
10 Nov 2009   #10
Satanical Eve

Windows 7 Professional 64 BIT
 
 

It just started doing it again. svchost.exe is at 49% right now. ntdll.dll!Tppworkerthread is at 48%. I have disabled most all of my PNP devices. My capture card is disabled and its not causing the issue. Im frustrated as to what device or thing is causing this.

I had to restart the PC because it stopped doing it for a minute or so then suddenly spiked back up. I don't know if it has to do with the PNP devices I have or if its the Power portion underneath svchost
My System SpecsSystem Spec
Reply

 svchost.exe + NTDLL.DLL Causing high CPU Usage




Thread Tools




Similar help and support threads
Thread Forum
High CPU Usage Due to svchost.exe
So this problem just happened out of the blue today. I was just browsing with my desktop and it just so happens that I noticed the jittery/laggy movement of my cursor occasionally. So I checked the Task Manager and noticed that svchost is putting my CPU usage at 50%~75% constantly. The high CPU...
Performance & Maintenance
svchost.exe High CPU usage 98% of at least one CPU.
I have had that message a couple of times whilst on the Forum. Haven't noticed it when I am doing anything else. Here's the info I get when I click on more details; Here's a screenshot of Process Explorer which I think indentifies the problem. I'm just not sure what to do to rectify this. ...
Performance & Maintenance
wuauserv causing svchost memory usage to explode
To be honest, I started out investigating the wrong thing. This all started because I would have errors in Chrome. The Aww, Snap or It's Dead Jim errors, etc. Or Chrome would just crash and I would relaunch and restore. I did normal Chrome things like check the shockwave and flash files, disable...
General Discussion
one of the svchost.exe causing my system to have high cpu usage
i saw this process in task manager svchost.exe causing my system to have 50% cpu load at idle, after i end task it the windows gui desktop turns to classic and returns back to normal. how to fix this btw i have windows xp but i know you encounter or read some of this problems please help me fix...
Hardware & Devices
Very high CPU usage, causing very high laptop CPU temps (90c idle)
This problem began yesterday. I noticed my CPU was at 90C constantly with very high CPU usage (>50%). I had no major programs running. I rebooted several times and the program persisted. 1. I went into safe mode and everything was normal. So this rules out hardware issues. 2. I reformatted and...
Performance & Maintenance


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 14:05.
Twitter Facebook Google+