Quantcast
Channel: Sysinternals Forums
Viewing all 10386 articles
Browse latest View live

Troubleshooting : Need help with Ntoskrnl thread causing high CPU

$
0
0
Author: iPoh touch
Subject: Need help with Ntoskrnl thread causing high CPU
Posted: 23 July 2014 at 11:07pm

Hello MagicAndre! 
You doing some good work helping people here. I decided to ask your help too.
My CPU usage sometimes reaches 25% (1 out of my 4 cores uses 100% CPU) and then after 2-6 seconds it returns back to normal. Because of that I just can't watch movies in high definition or play games like Battlefield 3 normally. I think these "CPU spikes" are the reason of my freezes in games and videos.
I downloaded the Process Explorer and found out that ntoskrnl.exe causes this loading.

So I made this trace.
https://www.dropbox.com/s/y2svbs37nk8gbiv/highcpuusage.7z

I would really appreciate your help.

Troubleshooting : memory leak in Internet Explorer 11??

$
0
0
Author: pinscomputer
Subject: memory leak in Internet Explorer 11??
Posted: 23 July 2014 at 11:07pm

sorry I haven't replied sooner.  Been prioritized with other issues.
 
the machine has 8GB of memory.
 
The issue WAS an add-on.
 
I was not initially suspecting add-ons since I do not have many installed.... and the ones that are installed are very common  (adobe flash, java, Silverlight, google opt-outs, & abine do not track me).
 
The one that was the problem, Abine's 'Do not track me' add-on,  I have used for a couple of years without problem.
 
However, I have to give Abine a big Fail on the version I had loaded from last week and the subsequent new version release they made yesterday.  Both versions have the memory leak.
 
So, 'do not track me' was un-installed and I just installed a standard tracking protection list (from the ie gallery) and will let explorer's built-in function do the job.
 
 
 

Troubleshooting : Need help with Ntoskrnl thread causing high CPU

$
0
0
Author: MagicAndre1981
Subject: Need help with Ntoskrnl thread causing high CPU
Posted: 24 July 2014 at 4:57am

Update NOD32 (eamon_fs.sys) and look if this fixes it.

Also install the Windows 7 SP1!!!!!!!!!!! You still have the RTM which doesn't get any new updates!!!!

http://windows.microsoft.com/en-us/windows7/install-windows-7-service-pack-1

PsTools : PSExec hanging

$
0
0
Author: shuricus
Subject: PSExec hanging
Posted: 24 July 2014 at 6:22am

had the same issue
ran procmon
it appears, that psexec hangs on call to WaitNamedPipeW("\\ComputerName\IPC$\", NMPWAIT_WAIT_FOREVER)
which sometimes never returns
 
timeout, specified in -n key have nothing to do with it

Miscellaneous Utilities : How to build NotMyFault

$
0
0
Author: bench
Subject: How to build NotMyFault
Posted: 24 July 2014 at 6:35am

Hello,
would like to extend notmyfault, but can't build the exe with 'build'.
First TARGETPATH was not defined in sources file.
Next, it reports error because of the manifest...
 
Which DDK Version would be required?
How to build?
 
Thanks.
 

PsTools : psexec Object Handle failure error

$
0
0
Author: sail23
Subject: psexec Object Handle failure error
Posted: 24 July 2014 at 4:14pm

I'm attempting using psexec with alternate credentials (-u and -p) to remotely connect to another Windows7 computer in my environment.   I am logged in to the source device as an ID that does NOT have Admin rights on the remote device, but the alternate user ID I am designating with psexec definitely does.

When I execute the test command:  psexec -e -s \\{remotedevicename} cmd.exe -u {uid} -p {password}, I receive the error "Could not start PSEXECSVC service on {remotedevicename}:  Access is denied".

When I look at the remote system event log after the failure, I see two successful 5145 events referencing the alternate user ID and one 4656 "A handle to an object was requested" FAIL event that references the user ID that i am logged into the source system with.   

If I am using alternate credentials via the -u and -p switches, why is psexec passing through my logged in user ID to the remote system and trying to use it to open an object handle?   Does anyone have any thoughts on this?

Thanks!

Miscellaneous Utilities : Dekstop 2.0 with different desktop backgrounds - a

$
0
0
Author: uwmuc
Subject: Dekstop 2.0 with different desktop backgrounds - a
Posted: 24 July 2014 at 4:36pm

Hello,
Dekstop 2.0 with different desktop backgrounds would be wicked;
and drag&drop between the screens gorgeous!  Any chance?
Best regards,
Uli


Process Explorer : How to detect cause of "Not Responding" msg

$
0
0
Author: KCav
Subject: How to detect cause of "Not Responding" msg
Posted: 24 July 2014 at 4:55pm

Hi - I'm running a desktop PC which has Win XP Pro 32-bit installed.  There are NO errors reported in Event Viewer Smile, but when I click Start > Control Panel > Administrative Tools I get "Not Responding," Cry.   What should I do? Ermm   

PsTools : Handle name may differ from Process Explorer

$
0
0
Author: MtheK
Subject: Handle name may differ from Process Explorer
Posted: 24 July 2014 at 11:32pm

Be aware that you may have to replace a DRIVE LETTER search name
w/the actual name of it, such as HarddiskVolume5 (for example).
I don't know why. In my case, specifying h: (the DRIVE LETTER per
explorer) fails to find any open handles on an external USB defined
as DRIVE_FIXED per INVOKE GetDriveType, but specifying HarddiskVolume5
(per INVOKE QueryDosDevice), AND THE -a switch, then finds what Process
Explorer/find handle shows when using just a DRIVE LETTER search name.

Process Explorer : How to detect cause of "Not Responding" msg

$
0
0
Author: MagicAndre1981
Subject: How to detect cause of "Not Responding" msg
Posted: 25 July 2014 at 4:41am

capture a dump of the hanging process with ProcessExplorer, open in in the Debugger (Windbg), fix symbols (http://support.microsoft.com/kb/311503/en-us) and run !analyze -v -hang. Post this output here.


Edited by MagicAndre1981 - 22 hours 5 minutes ago at 4:42am

Troubleshooting : Mystery file

$
0
0
Author: Sluice27
Subject: Mystery file
Posted: 25 July 2014 at 10:13am

There is a .tmp file that is being generated every morning at 07:00 and I need to find out what program is creating it. I would like to start the examination at 06:59 and finish at 07:08 to avoid gathering too much unnecessary data. How could I do this?

Process Explorer : Memory leak in Process Explorer ?

$
0
0
Author: Chrysalis
Subject: Memory leak in Process Explorer ?
Posted: 25 July 2014 at 3:19pm

Its a shame, a dozen or so hits on google ranging from 2005-2013, all reported memroy leaks, dev even replied to one or two but still no fix.

Ironic an app used to diagnose issues causes one itself.

I just restarted process explorer which was using 789mB of ram and after restart was using 32mB of ram.  So lots of leakage going on.

A bug that has existed for 9 years and not yet fixed :(

Process Monitor : Problem goes away when procmon.exe is runnnig

$
0
0
Author: MtheK
Subject: Problem goes away when procmon.exe is runnnig
Posted: 25 July 2014 at 3:45pm

FYI
I have a similar problem; it may be timing-related.

In my case, when trying to find the force-killer @PowerOff,
running PROCMON actually seems to delay it, in that my programs
then have enough time to react and terminate themselves gracefully.

Without PROCMON running, the results are different, and unless
I'm a SERVICE (per TASKLIST), I usually get force-killed, unless
I run w/a lower INVOKE Sleep interval (from 93ms to the
minimum-allowed (apparently, based on INVOKE GetTickCount
differences) 15ms).

Troubleshooting : Mystery file

$
0
0
Author: MagicAndre1981
Subject: Mystery file
Posted: 25 July 2014 at 4:40pm

Run ProcMon with Disk filtering or xperf (http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-45-WPT-File--Registry-Analysis) before 7:00 and stop it a bit later.

Here you can see which process creates this file.

PsTools : PSTools worked in XP won't work in Vista

$
0
0
Author: ars
Subject: PSTools worked in XP won't work in Vista
Posted: 25 July 2014 at 10:06pm

I cannot get psshutdown or pskill to work on a Vista box that is running a non-admin account to shutdown another computer on our domain.  The exact same commands worked fine under XP but I keep getting 'access denied' under Vista.  For example, running:
psshutdown.exe \\computer -u domain\administrator -p password -f

---this worked fine (and still works) on XP systems but running the same command under Vista returns 'access denied'.  I've tried 'running as administrator', no luck there either.  This seems to be more of a vista issue than pstools but what is the fix?  This worked so well under XP and is such a pain with Vista.  Windows firewall is turned off too by the way...

I've read the FAQ regarding Vista and disabled UAC and added the DWORD value Localaccounttokenfilterpolicy (set to 1)  in HKLM\Software\Microsoft\Windows\Currentversion\Policies\System ...this made no difference

BgInfo : BgInfo + Windows 8.1 + Dual Monitor

$
0
0
Author: dcohn
Subject: BgInfo + Windows 8.1 + Dual Monitor
Posted: 26 July 2014 at 10:35am

I also have an issue with BGINFO and Win 8.1.

I have a very high res desktop.  2880x1800

So BGINFO decides to give me 4 separate entries on the one desktop as if I have 4 monitors.  each 1440x900

But I have only 1.

Why does it decide this on it's own.  I have Multi Monitor set to 1.

Process Explorer : How do you select NO process in CPU usage sort??

$
0
0
Author: Zwaa
Subject: How do you select NO process in CPU usage sort??
Posted: 26 July 2014 at 2:33pm

Thanks,

I thought it was obvious what I meant. Sorry that I wasn't clear.

OK so consider this: "By picking a process, the CURRENT LINE jumps up and down and there's really nothing you can do but trying to keep up to SEE WHAT PROCESS IS ON TOP."

That means: When the CURRENT LINE jumps up and down, the PROCESS ON TOP IS RANDOMLY OBSCURED if/when the current line jumps SO LOW that THE NUMBER OF PROCESSES THAT FITS in the PE window undercuts what is needed to MAKE ROOM for all of them. I don't WANT to stretch the height so they can all fit, or enough of them, because I want to obscure as little as possible of what I have on the screen SO I CAN MONITOR the CPU usage while I'm actually DOING STUFF.

I also disagree that it's necessary to have a selected line. That depends ENTIRELY on what you're doing. I find the different coloring VERY distracting most of the time(except when I'm actually focused on one, and one process only. Which is NOT all of the time).
It's ESPECIALLY distracting in CPU usage view, because I DON'T KNOW which process is important(if I did I would certainly not sort on CPU usage: I would sort on NAME, or ANYTHING BUT CPU usage, really, UNLESS I'm actually interested in seeing it RISE and DROP. Which is NOT all of the time). And the process I'm focusing on switches all the time because it's the one CURRENTLY ON TOP: if I would like to have ANY line highlighted, it would simply be THE LINE ON TOP, but certainly NOT a particular PROCESS(UNLESS I'm actually INTERESTED in seeing it RISE and DROP).

I use the keyboard A LOT(albeit not ALL the time), and fixing a way to select a line if none is selected using the keyboard is surely within the capability of those programmers. There's an ocean of programs that have way more advanced keyboard support than that. Take for instance Chrome: to switch between URL line, bookmarks, and page, use F6(Shift-F6 for reverse order). To open a selected bookmark folder, use Enter. To close it, use Escape. This is little known, but it's there. And I use it. A LOT.

I hope this straitens out where I stand.

Thanks,

Process Explorer : How do you select NO process in CPU usage sort??

$
0
0
Author: LMiller7
Subject: How do you select NO process in CPU usage sort??
Posted: 26 July 2014 at 3:54pm

As mentioned previously, I don't believe there is any way to have no line selected.

You can disable the colors if they are distracting but not that of the selected line.

Process Explorer : ** Feature Req ** Select NO process in CPU usage

$
0
0
Author: Zwaa
Subject: ** Feature Req ** Select NO process in CPU usage
Posted: 26 July 2014 at 7:30pm

I'm a long time user, almost ver 1.0.0 and this has always bothered me. I would've thought it would be fixed some time but now it's time to at least point to the problem:

PE always forces me to pick a processBy picking a process in CPU usage column sort, the CURRENT LINE jumps up and down and there's really nothing you can do but trying to keep up to SEE WHAT PROCESS IS ON TOP

That means: When the CURRENT LINE jumps up and down, the PROCESS ON TOP IS RANDOMLY OBSCURED if/when the current line drops SO LOW that THE NUMBER OF PROCESSES THAT FITS in the PE window undercuts what is needed to MAKE ROOM for enough of them. I don't WANT to stretch the height so they can all fit, or enough of them fit, because I want to obscure as little as possible of what I have on the screen SO I CAN MONITOR the CPU usage while I'm actually DOING STUFF.

it's not necessary to have a selected line. That depends ENTIRELY on what you're doing. I find the different coloring VERY distracting most of the time(except when I'm actually focused on one, and one process only. Which is NOT all of the time).
It's ESPECIALLY distracting in CPU usage view, because I DON'T KNOW which process is important(if I did I would certainly not sort on CPU usage: I would sort on NAME, or ANYTHING BUT CPU usage, really, UNLESS I'm actually interested in seeing it RISE and DROP. Which is NOT all of the time). And the process I'm focusing on switches all the time because it's the one CURRENTLY ON TOP: if I would like to have ANY line highlighted, it would simply be THE LINE ON TOP, but certainly NOT a particular PROCESS(UNLESS I'm actually INTERESTED in seeing it RISE and DROP).

Thanks,

-END OF REQUEST-

Process Explorer : How do you select NO process in CPU usage sort??

$
0
0
Author: Zwaa
Subject: How do you select NO process in CPU usage sort??
Posted: 26 July 2014 at 7:32pm

Switched to Feature request. CLOSING.

http://forum.sysinternals.com/topic30650_post143475.html#143475


Viewing all 10386 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>