Sysinternals Homepage
Forum Home Forum Home > Windows Discussions > Troubleshooting
  New Posts New Posts RSS Feed - services.exe problem
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

services.exe problem

 Post Reply Post Reply
Author
Message
ys View Drop Down
Groupie
Groupie
Avatar

Joined: 03 April 2009
Location: China
Status: Offline
Points: 56
Post Options Post Options   Thanks (0) Thanks(0)   Quote ys Quote  Post ReplyReply Direct Link To This Post Topic: services.exe problem
    Posted: 06 September 2009 at 6:18pm
Dear all , I found services.exe hosted umpnpmgr.dll eat 90% of the cpu time , procexp's thread tab show following:
TID          CPU      CSwitch Delta        Start Address
-----------------------------------------------------------------------------
616          44.20        42871              umpnpmgr.dll!PNP_HwProfFlags+0x2b9
1264        14.49        15169               kernel32.dll!CreateThread+0x22
1140        13.77        13525               kernel32.dll!CreateThread+0x22
444         13.77        15661               kernel32.dll!CreateThread+0x22
...
------------------------------------------------------------------------------
umpnpmgr.dll 's stack is as follow
ntdll.dll!KiFastSystemCallRet
ADVAPI32.dll!RegCloseKey+0x84
umpnpmgr.dll!PNP_GetDeviceRegProp+0xba9
umpnpmgr.dll!PNP_GetDeviceRegProp+0xeed
umpnpmgr.dll!PNP_GetDeviceRegProp+0xc23
umpnpmgr.dll!PNP_HwProfFlags+0x35b
kernel32.dll!GetModuleFileNameA+0x1b4

Why this happen . I'm running XP Home Sp3 in safe mode , because in normal mode , system hung at loading user profile.
Many thanks


Edited by ys - 06 September 2009 at 6:25pm
nice done
Back to Top
Thor View Drop Down
Newbie
Newbie


Joined: 31 December 2008
Location: Australia
Status: Offline
Points: 30
Post Options Post Options   Thanks (0) Thanks(0)   Quote Thor Quote  Post ReplyReply Direct Link To This Post Posted: 07 September 2009 at 4:16am
Well as you probably can guess, it is trying to read Device information, based on PNP_HwProfFlags and PNP_GetDeviceRegProp

What I'd do is use Process Monitor to figure out what registry key it is reading (I see RegCloseKey in the stack which means it opens a registry key, as well as PNP_GetDeviceRegProp reads registry information) and also which file it is trying to read (as per GetModuleFileNameA in the stack), hence which device is the issue.

Also, have you added/removed/changed any devices recently and does the Event Viewer log any errors about devices?
Back to Top
zizebra View Drop Down
Senior Member
Senior Member
Avatar

Joined: 20 May 2009
Location: CT
Status: Offline
Points: 150
Post Options Post Options   Thanks (0) Thanks(0)   Quote zizebra Quote  Post ReplyReply Direct Link To This Post Posted: 07 September 2009 at 11:52am
yes as asked before. What has changed? Any hard changes you have made recently? or Software that you have recently installed.
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Status: Offline
Points: 17516
Post Options Post Options   Thanks (0) Thanks(0)   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 16 September 2009 at 11:05am
Symbols aren't configured or are not resolving, so export symbols are used; function names may not be accurate.
Daily affirmation:
net helpmsg 4006
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down