Sysinternals Homepage
Forum Home Forum Home > Windows Discussions > Troubleshooting
  New Posts New Posts RSS Feed: DPC (Deferred Procedure Calls)
  FAQ FAQ  Forum Search   Calendar   Register Register  Login Login

DPC (Deferred Procedure Calls)
 Post Reply Post Reply Page  123 54>
Author
Message Reverse Sort Order
  Share Topic Share Topic  Topic Search Topic Search  Topic Options Topic Options
weberjn View Drop Down
Newbie
Newbie


Joined: 27 December 2007
Location: Germany
Online Status: Offline
Posts: 2 		Post Options Post Options   Quote weberjn Quote  Post ReplyReply Direct Link To This Post Topic: DPC (Deferred Procedure Calls)
    Posted: 15 August 2010 at 10:14pm
On my XP SP3 machine internet downloads (both with FF and IE) result in full CPU load and the fan constantly spinning.
Process explorer shows DPCs that eat up to 75% of CPU.

I booted from a Linux life CD, everything's fine, machine is responding quickly, no fan.
Then I did an XP system restore to a point in June. System runs fine, no DPCs.
Then I ran Windows update, it installed all fixes from June to now again.
And now, the DCPs are here again.

Anybody got an idea which Windows update was broken?

Thanks.
Back to Top
campbebl View Drop Down
Newbie
Newbie


Joined: 28 July 2010
Online Status: Offline
Posts: 1 		Post Options Post Options   Quote campbebl Quote  Post ReplyReply Direct Link To This Post Posted: 28 July 2010 at 9:38pm
I can't believe verifier.exe somehow fixed my problem too!  Thanks for posting your steps gtbfl ... even though it defies logic, it worked for me too!  Mine is an HP Pavilion a6430f with NVidia graphics/LAN (GeForce 6150SE nForce 430).  First I was sure it was hardware, then I was sure it was malware, then drivers, then back to malware.  I tried 7 different malware scanners, an XP repair install and several different processor and chipset drivers (processor driver because Kernrates always indicated AmdPPM.sys as the DPC hog, and chipset drivers because during the repair install I got a BSOD naming nvnrm.sys).  Getting nowhere, I decided to follow the same steps you took with verifier.exe, and instead of acpi.sys, mine showed nvatabus.sys and rspndr.sys.  Thanks!!!
 
Originally posted by gtbfl

This turned out to be a driver issue. The issue got fixed with microsoft verifier.exe tool but don't ask me how. You can see the steps I followed here :

http://www.bleepingcomputer.com/forums/index.php?showtopic=296141&st=15&gopid=1643974&#entry1643974


Edited by campbebl - 28 July 2010 at 9:40pm
Back to Top
Haysys View Drop Down
Newbie
Newbie
Avatar

Joined: 26 June 2010
Location: Sammamish, WA
Online Status: Offline
Posts: 12 		Post Options Post Options   Quote Haysys Quote  Post ReplyReply Direct Link To This Post Posted: 01 July 2010 at 2:02am
DirBase,
 
Well, I don't know about a fine job... I should have tumbled to that long before now. What I would say is that you have been a true champion, standing and delivering!! You deserve kudos, and you have them from me.
 
If you'll send me a conct address to david-at-haysys-dot-com, I'll send more than Kudos!!
 
Cheers!!
 
David


Edited by Haysys - 01 July 2010 at 2:03am
David Hays
Back to Top
dirbase View Drop Down
Senior Member
Senior Member
Avatar

Joined: 26 March 2008
Online Status: Online
Posts: 439 		Post Options Post Options   Quote dirbase Quote  Post ReplyReply Direct Link To This Post Posted: 30 June 2010 at 9:31pm
Concerning the Attributes value in the Registry, the purpose comes from this MS KB:
http://support.microsoft.com/kb/834631
which I thought could have helped...

But I think you have solved the problem all by yourself!
Your new reports show a system practically idle (97% instead of 40%); the DPCs and Interrupts have practically disappeared!

Congratulations for a fine job!
Back to Top
Haysys View Drop Down
Newbie
Newbie
Avatar

Joined: 26 June 2010
Location: Sammamish, WA
Online Status: Offline
Posts: 12 		Post Options Post Options   Quote Haysys Quote  Post ReplyReply Direct Link To This Post Posted: 30 June 2010 at 6:29pm
Good Morning,
 
the ACPI.sys ver is 5.2.3790.3959 with a creation and modified date of 4/23/2007 9:53:45 AM.
 
Under the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ACPI,
 
There is no Parameters sub key, only ENUM. I created a key "Parameters" and a DWord in it named "Attributes" with a hex value of 100. Reboot will not take place until the end of the workday.
 
Would you provide a short explanation of the purpose of this entry?
 
Now, here's something that may answer some questions. I was looking in the Add/Remove Programs utility for anything that could be affecting the system and found the Intel Management & Monitoring Console. This is something that was installed when the server was installed two years ago, and has not been used other than to update the bios in 2009. I decided to remove it and rebooted the system last night. I logged in this AM, and find the system MUCH more responsive. I have attached another run of the script with the file names Output5.txt and a snapshot of ProcExpl. Dare I say it... that the problem was with the Intel Managament tool and is solved with its removal????
 
Please take a look and see what you think.
 
Once again, thanks for all of your insight and assistance!!
 
 
David
 
David Hays
Back to Top
dirbase View Drop Down
Senior Member
Senior Member
Avatar

Joined: 26 March 2008
Online Status: Online
Posts: 439 		Post Options Post Options   Quote dirbase Quote  Post ReplyReply Direct Link To This Post Posted: 30 June 2010 at 10:54am
What is the version of acpi.sys (under windows\system32\drivers\)?

Could you open the Registry and check that the following value is present
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ACPI\Parameters\Attributes
with a DoubleWord data of 0x100.
If not present, please insert this value and see if it improves the situation (after rebooting).
Back to Top
Haysys View Drop Down
Newbie
Newbie
Avatar

Joined: 26 June 2010
Location: Sammamish, WA
Online Status: Offline
Posts: 12 		Post Options Post Options   Quote Haysys Quote  Post ReplyReply Direct Link To This Post Posted: 30 June 2010 at 1:48am
Hi,
 
Been out all day. I took a look at the event logs. Not a single ACPI related event that I could find. I filtered the System event log with ACPI and ACPIex and nothing showed up. I copied the device manager viewed by resource, expanded the IRQ and Memory sections, and copied into a png file. It is attached.
 
 
Cheers!!
David Hays
Back to Top
dirbase View Drop Down
Senior Member
Senior Member
Avatar

Joined: 26 March 2008
Online Status: Online
Posts: 439 		Post Options Post Options   Quote dirbase Quote  Post ReplyReply Direct Link To This Post Posted: 29 June 2010 at 8:29pm
Back to your ACPI interrupts issue:
a) anything to report in eventviewer linked to ACPI?
b) could you copy the content of the IRQ allocation table from device manager>view ressource by type>IRQ
Back to Top
dirbase View Drop Down
Senior Member
Senior Member
Avatar

Joined: 26 March 2008
Online Status: Online
Posts: 439 		Post Options Post Options   Quote dirbase Quote  Post ReplyReply Direct Link To This Post Posted: 29 June 2010 at 7:30pm
Hi David,

The symbols for ntkrnlpa.exe seem correct now. Notice the line:
DBGHELP: FindExecutableImageEx-> Looking for C:\WINDOWS\System32\ntkrnlpa.exe... OK
found
in Kernrate symbol dialog.

I'll come back during the World Cup match half-timeWink
Back to Top
Haysys View Drop Down
Newbie
Newbie
Avatar

Joined: 26 June 2010
Location: Sammamish, WA
Online Status: Offline
Posts: 12 		Post Options Post Options   Quote Haysys Quote  Post ReplyReply Direct Link To This Post Posted: 29 June 2010 at 6:21pm
Hi DirBase,
 
Sorry for my ignorance; I should have known better.
 
Attached is Output4, obtained with the requisite file renamed as per your instruction.  Thanks for your perserverance!!
 
David
 
David Hays
Back to Top
 Post Reply Post Reply Page  123 54>

Forum Jump Forum Permissions View Drop Down