Hallo,
hier die Daten aus der Dump Analyse:
Debug session time : 2010-06-22 12:14:36.000
User Windows Mini Dump, 64-bit Addresses, PAE=n/a.
Windows Windows 7 (NO Service Pack).
ComputerName = G10754CTX1.
Process = C:\Windows\System32\svchost.exe.
//Top 7 Threads CPU Auslastung
User Mode Time
Thread Time
16:16bc 0 days 0:32:31.234
//16bc ist 5820 dezimal
9:ffc 0 days 0:30:28.312
// ffc ist 4092 dezimal
17:16c8 0 days 0:00:00.031
7:ff4 0 days 0:00:00.031
8:ff8 0 days 0:00:00.015
0:ef8 0 days 0:00:00.015
18:94c 0 days 0:00:00.000
…
…
//Dumping thread 5820
Child-SP RetAddr Call Site
00000000`0367f5f8 000007fe`fd33b399 ntdll!ZwDeviceIoControlFile+0xa
00000000`0367f600 00000000`7711610f KERNELBASE!DeviceIoControl+0x75
00000000`0367f670 000007fe`f61f3d7c kernel32!DeviceIoControlImplementation+0x7f
00000000`0367f6c0 00000000`00000000 picaddapi64!PICAIOCTLStack+0xec
//….. and 4092
Child-SP RetAddr Call Site
00000000`02d4fa28 000007fe`fd33b399 ntdll!ZwDeviceIoControlFile+0xa
00000000`02d4fa30 00000000`7711610f KERNELBASE!DeviceIoControl+0x75
00000000`02d4faa0 000007fe`f61f3d7c kernel32!DeviceIoControlImplementation+0x7f
00000000`02d4faf0 00000000`00000000 picaddapi64!PICAIOCTLStack+0xec
Die beiden Threads sind identisch und arbeiten an das IO einer Citrix Komponente.
Image path: C:\Program Files (x86)\Citrix\system32\picaddapi64.dll
Image name: picaddapi64.dll
Timestamp: Tue Mar 02 06:58:46 2010 (4B8C9B06)
Image path: C:\Program Files (x86)\Citrix\system32\rpm.dll
Image name: rpm.dll
Timestamp: Tue Mar 02 07:27:19 2010 (4B8CA1B7)
Wäre ein Fall für Citrix Support.
Hoffe das hiflt dir weiter.
Gruß,
Andrei
