23 Februari 2009 1:09I'm not sure where to start on this one. I've noticed my first severe issue with Windows 7 OS. Every few seconds my CPU usages jumps and I get a similar affect to graphics lag in a graphics intensive game or application. I don't really have a clue what is causing it. I first noticed it when trying to play the game Half Life 2, after beating episode 2 I went to play it again and this problem started happening. I thought it was something that was wrong with the game until recently when it started happening every 10 or so seconds with something simple like microsoft word or this internet browser open even.
If there is sound playing during the lag it'll make a terrible sound like if you held a microphone to a speaker. Any video or display with have a delay, such as when typing I'll notice a short freeze up then the letters I had typed during the freeze would appear (or some of them at least.) It's become very obnoxious making my computer rather frustrating. I opened up task manager to watch the cpu usage while typing this description and there are a lot of sudden jumps from 0% to 80% or higher.
My computer is something I built from scratch a year ago intended to handle high end games. It's done well so far, and with Windows 7 even better until now.
I've tried uninstalling several programs that I had recently installed seeing if they might be the problem but the problem persists. I've also tried checking processes in task manager and they're all system stuff except firefox and some small applications running in the background I have that wouldn't be the problem.
One thing to note is that I have several duplicate processes running. For example I have about 10 svchost.exe services running right now and that looks odd to me. I thought there should be only 3 or 4. I've tried restarting my computer a few times. Computer defragments and virus scans itself once a week so that's not the problem either.
Anyone have any suggestions for further troubleshooting options I can try? I'd appreciate any help. Thanks in advance.
23 Februari 2009 1:28
Download and run Process Explorer from Microsoft Sysinternals (http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx).
When open, go to View > System Information. At the point where your CPU spikes, place the mouse pointer over the corresponding point on the graph. You will see a small description in the upper left corner along with the executable that was running at the time of that spike.
As for the multiple svchost.exe processes, that is normal. If you want to investigate which services are associated with each a particular listing, right-click the svchost.exe in question and select Go To Service(s).
23 Februari 2009 6:32The autoruns does a nice job at presenting just about every process in every catagory where once you know that a particular process is causing problems you can simply uncheck it in the "everything" listed tab. http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
24 Februari 2009 3:31Thanks for the suggestions. I am unable to find a process that might be causing it. It was just a suspicion. I'm beginning to believe now that the cpu spiking isn't relevant to my issue. I work in technical support and I've never seen anything like this before.
The issue is becoming more frequent. I've been testing it by running youtube videos since it seems to be very prevalent when I do that. I've tried turning off a lot of unnecessary process leaving only the ones that are unquestionable but that didn't help.
I apologize that I can't think of a better way to describe the issue. It's pretty strange.
24 Februari 2009 3:47Here's what the process log shows: The jumps you see are from watching a random youtube video. The processes showed running are firefox, svchost, and some audio processes. It looks normal but every time it skips my computer hangs for a second or two and if sound is playing it'll buzz like described in my OP.
24 Februari 2009 4:00That actually looks about normal. Nothing there stands out to me at least.
24 Februari 2009 8:36This looks wrong, especially the red line - this is the time spent in kernel space - goes way too high. You have to watch the Interupts and DPC's CPU consumption in Process Explorer
Mind to post your system HW characteristics, especially processor, sound, video and network components have to watched for.
25 Februari 2009 3:09I built this computer to handle high end games. It's been great until recently.
Processor: Intel Core2 Duo @2.66 GHz 2.67 GHz ... 32-bit
RAM: 3 GB
Video: NVIDIA GeForce 8800 GTS w/ 1896 MB memory
Sound: Integrated with motherboard
Motherboard: nVidia nForce 750i
Network Adapters: This may be related, I have an old Linksys PCI wireless adapter that I use. I recently switched to using an ethernet plugged into my motherboard. I don't know how this might be related but I did notice the problem a few times before this change occurred.
25 Februari 2009 10:14The HW looks right. One thing to keep an eye on is the exterme high kernel time (the red graph), this is an indication of a badly behaving kernel driver and/or device. In your case the first suspect is the network (wireless/wired) adapter.
25 Februari 2009 15:21I found the problem! There's a rogue svchost.exe that's running the services Netman, SysMain, PcaSvc, and HomeGroupListener. When I end the process the problem goes away until the process restarts itself. Do you guys think this could be fixed by disabling the home group Windows 7 forced me to set up? I'm on a network with maybe 10 pc's. This one is the only one with windows 7, the rest are vista and xp.
25 Februari 2009 15:27Sorry to make a redundant post, but some more services appeared under the same svchost.exe process:
Some of their name lead me to guess what they do, although it seems to be pretty spread out. I'm in way over my head now. Does anyone know how to correct this svchost problem?
25 Februari 2009 16:04You don't have to stop the svchost that hosts these services, what you can do is stop each service individually using the services administrative tool.
Only two services are somewhat related to the problem at hand; AudioEndPointBuilder - manages audio devices and WlanSvc manages the wirelesslan service. If you stop the first one you will loose your audio output and when you stop the second you will probably loose your wireless lan connection. So when you stop one of these, your problem will most likely go away (but so your sound), that doesn't mean the problem is with the service though, it only means that it calls into the kernel (device driver) to access some device (audio or wlan) and that's where the problem is.
25 Februari 2009 17:20Thanks for the help so far!
Is there a sure way to fix this Willy? If I repair my windows 7 install do you think that will help, or should I try something else? I think killing my sound and internet would create a bigger problem than the one it solves :-/ I am at work right now but as soon as I get home I'll try killing each service one at a time and testing it to narrow it down further.
25 Februari 2009 20:29I think the fix may be driver related, or possibly adding on PCI cardes sound and/or LAN devices, maybe just as part of a process of elimination.
26 Februari 2009 3:02Alright,
I think I narrowed down the perpetrators to SysMain.dll and Wlansvc.dll. SysMain.dll by itself takes up about 50MB of RAM space so I stopped it. Wlansvc must be the one that was causing the CPU jumps because when I stopped it the symptoms went away also. One last question though, how do I disable these in Component Services? I'm not familiar with using this tool and can't seem to find them in there.
Thanks for the help everyone!
26 Februari 2009 7:21Services > Name (Sysmain is labeled as Superfetch, WLansvc as WLANAutoconfig) > *Double Click*
Click 'Stop' then set Startup Type to 'Disabled'.
I'd keep them both on though. :^)
26 Februari 2009 12:53Services are managed through the Services administrative tool or Component Services - Services(Local) administrative tool. There's no reason to stop SysMain, it's the prefetcher service.
One question though, do you still use the wireless LAN? If you don't, you can disable the WLanSvc service, if you do, then you should not disable this service or you won't be able to connect. Anyways, you have a Wireless adapter issue to solve even if you don't use it now, you might be need it in the future.
21 Juni 2009 16:29Hi MousceLLaneouS:Are you still having these problems? Have you tried Windows 7 RC?-Nick
11 Mei 2012 6:38I was getting similar issues, but found it was a problem with McAfee. Process Explorer is a great tool for troubleshooting! Thanks!
15 Mei 2012 1:03youve probably have been compromised by an attacker, and the attacker jumped through an exploit in your browser, compromissed your computer, took admin privledge, then migrated his exploit to another process, a legit named exploit. I would run numorous antivirus's, TDSkiller, rkill, combofix, malwarebytes, and mse, if you still have issues, try removing your anti-virus and just use MSE. make sure to do all your windows updates inluding java, flash, adobe, etc. firmware, bios, etc. turn off all services not needed, you can view black vipers service turn off guide to review the servies you don't need. also remove any browser add ons, especially toolbars, to harden the OS, also run an SFC /scannow in cmd. if you are still experiencing problems, reply back and we will think up some more things for you to try.