RPCRT4.dll

net helpmsg 4006

   Hi Guntars,

Usually for this type of problem, it helps to configure symbols in Process Explorer. Then, when the event of interest happens, visit the process' Threads tab in the Process properties and sort by Cycles Delta (descending) and get the full stack of the topmost thread.

However, in this case, the activity is likely related to RPC work that services.exe is doing on behalf of some requestor (which may be difficult to determine).

I wonder if after stopping unnecessary services, processes, etc., selectively suspending processes with Process Explorer one at a time may give some hint as to what is causing the thread in services.exe to be active - if you suspend processX and activity returns to normal, the problem would seem somehow related to that process.

Author	Message Share Topic Printable Version Delicious Digg Facebook Furl Google MySpace Newsvine reddit StumbleUpon Translate Twitter Windows Live Yahoo Bookmarks Topic Search Topic Options Post Reply Create New Topic
molotov Members Profile Send Private Message Find Members Posts Visit Members Homepage Add to Buddy List Moderator Group Joined: 04 October 2006 Online Status: Offline Posts: 17492	Post Options Post Reply Quote molotov Report Post Quote Reply Topic: RPCRT4.dll Posted: 11 July 2008 at 4:30pm
	Hi Guntars, Usually for this type of problem, it helps to configure symbols in Process Explorer. Then, when the event of interest happens, visit the process' Threads tab in the Process properties and sort by Cycles Delta (descending) and get the full stack of the topmost thread. However, in this case, the activity is likely related to RPC work that services.exe is doing on behalf of some requestor (which may be difficult to determine). I wonder if after stopping unnecessary services, processes, etc., selectively suspending processes with Process Explorer one at a time may give some hint as to what is causing the thread in services.exe to be active - if you suspend processX and activity returns to normal, the problem would seem somehow related to that process.
	Daily affirmation: net helpmsg 4006

gsvriga Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 11 July 2008 Location: Latvia Online Status: Offline Posts: 1	Post Options Post Reply Quote gsvriga Report Post Quote Reply Posted: 11 July 2008 at 3:24pm
	Hi! I've noticed that My Vista Buisiness services.exe continually uses CPU (2-5%). Process Explorer Threads shows max cpu and cycles use to: RPCRT4.dll!UuidCreate+0x1bdb (this thread restarts periodically) Stack of the thread: ntoskrnl.exe!KiUnexpectedInterrupt+0x40 ntoskrnl.exe!IoAllocateWorkItem+0x458 ntoskrnl.exe!NtWriteFile+0x18f0 ntoskrnl.exe!KiDeliverApc+0xce ntoskrnl.exe!KePulseEvent+0x753 ntoskrnl.exe!ExAcquireSharedStarveExclusive+0x1058 ntoskrnl.exe!NtSetEvent+0x1bda ntoskrnl.exe!NtOpenThreadToken+0x131 ntoskrnl.exe!ZwQueryLicenseValue+0xc02 ntdll.dll!KiFastSystemCallRet RPCRT4.dll!UuidCreate+0x1e24 RPCRT4.dll!UuidCreate+0x1f5d RPCRT4.dll!UuidCreate+0x1b45 RPCRT4.dll!UuidCreate+0x1baf RPCRT4.dll!UuidCreate+0x1bf9 kernel32.dll!BaseThreadInitThunk+0x12 ntdll.dll!LdrInitializeThunk+0x4d Ideas needed! :)