Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hardware Interrupts Problem


  • Please log in to reply
6 replies to this topic

#1 novo

novo

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Bengal, India
  • Local time:02:49 PM

Posted 04 June 2009 - 04:09 PM

Hi guys,
I have win XP SP3, with all latest updates from Microsoft, installed in my computer. Last few days, I have noticed that, several times after booting the PC, CPU usage was remain always at 20% when computer is totally idle. The process explorer shows that, it is Hardware Interrupts uses that 20% and making the computer slow. Most of the time after restarting, things are getting normal.
Can anyone give any idea to solve this problem? Please write if any other details needed.
Thank you and forgive me for my English.

Novojit,
:thumbsup:

Edited by novo, 04 June 2009 - 04:10 PM.


BC AdBot (Login to Remove)

 


#2 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:09:19 AM

Posted 04 June 2009 - 04:27 PM

Hello,

The event viewer may give some more information.

1. Click Start select run
2. Type eventvwr.exe
3. Press enter
4. Search through the groups for errors and warnings.
5. Double click on each error and or warning.
6. Locate the copy to clipboard button, Posted Image (under the two arrows)
7. Let us know what you find. (paste the results)
Regards,

Alan.

#3 joseibarra

joseibarra

  • Members
  • 1,156 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Downstairs
  • Local time:05:19 AM

Posted 04 June 2009 - 05:33 PM

Along with Event Viewer stuff, right click My Computer, Properties, Hardware, Device Manager and expand the IDE ATA/ATAPI controllers section. Do you see any Xs, !s or ?s in that area?

There are 4 IDE channels of interest, two primary and two secondary. These correspond to the primary and secondary IDE connectors on your motherboard and the wide cable that goes to your HD and CD drives (usually).

Check the Properties, Advanced Tab of all 4 and report the Transfer Mode - DMA or PIO. Don't change them - just report the findings for all 4 IDE channels.

How many IDE dvices do you have (internal hard disks, CD, DVD)?

XP (and you) would prefer the more efficient DMA if available, but XP may change this to PIO if there are enough errors. If it changed, we need to figure out why and fix it. Errors can result in high interrupt usage that you see in ProcessExplorer.

Before doing any changing, see what the settings are now, check the event log and then we need to interpret the results to see what to do next. If the event log is overwhelming, you can clear it, reboot and just post the appropriate for this problem by looking a the time stamps on the events. (red X errors are generally the ones of interest)

The mediocre teacher tells. The good teacher explains. The superior teacher demonstrates.


#4 novo

novo
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Bengal, India
  • Local time:02:49 PM

Posted 06 June 2009 - 10:05 AM

Hi Alan,
As you asked for event viewer log of ‘error’ and ‘warning’ entries, here it is………

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 6/1/2009
Time: 10:15:32 AM
User: N/A
Computer: COMPUTER_1
Description:
Faulting application iexplore.exe, version 8.0.6001.18702, faulting module googletoolbardynamic_6d0d6fd66d664927.dll, version 6.1.1518.856, fault address 0x0016d1b1.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 69 65 78 ure iex
0018: 70 6c 6f 72 65 2e 65 78 plore.ex
0020: 65 20 38 2e 30 2e 36 30 e 8.0.60
0028: 30 31 2e 31 38 37 30 32 01.18702
0030: 20 69 6e 20 67 6f 6f 67 in goog
0038: 6c 65 74 6f 6f 6c 62 61 letoolba
0040: 72 64 79 6e 61 6d 69 63 rdynamic
0048: 5f 36 64 30 64 36 66 64 _6d0d6fd
0050: 36 36 64 36 36 34 39 32 66d66492
0058: 37 2e 64 6c 6c 20 36 2e 7.dll 6.
0060: 31 2e 31 35 31 38 2e 38 1.1518.8
0068: 35 36 20 61 74 20 6f 66 56 at of
0070: 66 73 65 74 20 30 30 31 fset 001
0078: 36 64 31 62 31 0d 0a 6d1b1..


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 5/24/2009
Time: 5:37:38 PM
User: N/A
Computer: COMPUTER_1
Description:
Faulting application powerdvd.exe, version 7.0.2509.0, faulting module msvcrt.dll, version 7.0.2600.5512, fault address 0x00037fd4.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 70 6f 77 ure pow
0018: 65 72 64 76 64 2e 65 78 erdvd.ex
0020: 65 20 37 2e 30 2e 32 35 e 7.0.25
0028: 30 39 2e 30 20 69 6e 20 09.0 in
0030: 6d 73 76 63 72 74 2e 64 msvcrt.d
0038: 6c 6c 20 37 2e 30 2e 32 ll 7.0.2
0040: 36 30 30 2e 35 35 31 32 600.5512
0048: 20 61 74 20 6f 66 66 73 at offs
0050: 65 74 20 30 30 30 33 37 et 00037
0058: 66 64 34 0d 0a fd4..


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 5/20/2009
Time: 8:06:22 PM
User: NT AUTHORITY\SYSTEM
Computer: COMPUTER_1
Description:
Windows saved user COMPUTER_1\Novojit Chakraborty registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 5
Date: 5/10/2009
Time: 8:07:05 AM
User: N/A
Computer: COMPUTER_1
Description:
Failed auto update retrieval of third-party root certificate from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/2796BAE63F1801E277261BA0D77770028F20EEE4.crt> with error: The specified server cannot perform the requested operation.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 5/4/2009
Time: 12:07:29 AM
User: N/A
Computer: COMPUTER_1
Description:
Faulting application iexplore.exe, version 8.0.6001.18702, faulting module mshtml.dll, version 8.0.6001.18702, fault address 0x00096bf0.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 69 65 78 ure iex
0018: 70 6c 6f 72 65 2e 65 78 plore.ex
0020: 65 20 38 2e 30 2e 36 30 e 8.0.60
0028: 30 31 2e 31 38 37 30 32 01.18702
0030: 20 69 6e 20 6d 73 68 74 in msht
0038: 6d 6c 2e 64 6c 6c 20 38 ml.dll 8
0040: 2e 30 2e 36 30 30 31 2e .0.6001.
0048: 31 38 37 30 32 20 61 74 18702 at
0050: 20 6f 66 66 73 65 74 20 offset
0058: 30 30 30 39 36 62 66 30 00096bf0
0060: 0d 0a ..


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 6/6/2009
Time: 7:31:53 PM
User: N/A
Computer: COMPUTER_1
Description:
The Power Manager service terminated unexpectedly. It has done this 1 time(s).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Dhcp
Event Category: None
Event ID: 1003
Date: 6/5/2009
Time: 7:41:38 AM
User: N/A
Computer: COMPUTER_1
Description:
Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 0013D3F43871. The following error occurred:
The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c7 04 00 00 Ē...


Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 6/5/2009
Time: 6:30:48 AM
User: N/A
Computer: COMPUTER_1
Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 29
Date: 6/3/2009
Time: 8:40:56 AM
User: N/A
Computer: COMPUTER_1
Description:
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: W32Time
Event Category: None
Event ID: 17
Date: 6/3/2009
Time: 8:40:56 AM
User: N/A
Computer: COMPUTER_1
Description:
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.nist.gov,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 6/2/2009
Time: 3:21:47 PM
User: N/A
Computer: COMPUTER_1
Description:
The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0e 00 00 00 04 00 4e 00 ......N.
0008: 00 00 00 00 01 00 00 c0 .......Ą
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: Windows Update Agent
Event Category: Software Sync
Event ID: 16
Date: 6/1/2009
Time: 10:43:26 AM
User: N/A
Computer: COMPUTER_1
Description:
Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 69 6e 33 32 48 52 65 Win32HRe
0008: 73 75 6c 74 3d 30 78 30 sult=0x0
0010: 30 30 30 30 30 30 30 20 0000000
0018: 55 70 64 61 74 65 49 44 UpdateID
0020: 3d 7b 30 30 30 30 30 30 ={000000
0028: 30 30 2d 30 30 30 30 2d 00-0000-
0030: 30 30 30 30 2d 30 30 30 0000-000
0038: 30 2d 30 30 30 30 30 30 0-000000
0040: 30 30 30 30 30 30 7d 20 000000}
0048: 52 65 76 69 73 69 6f 6e Revision
0050: 4e 75 6d 62 65 72 3d 30 Number=0
0058: 20 00 .


Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 5/24/2009
Time: 7:18:53 PM
User: NT AUTHORITY\SYSTEM
Computer: COMPUTER_1
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Disk
Event Category: None
Event ID: 51
Date: 5/24/2009
Time: 7:09:50 PM
User: N/A
Computer: COMPUTER_1
Description:
An error was detected on device \Device\Harddisk0\D during a paging operation.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 33 00 04 80 ....3..€
0010: 2d 01 00 00 00 00 00 00 -.......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 2e 11 bd 00 00 00 00 ...½....
0028: 79 24 00 00 00 00 00 00 y$......
0030: ff ff ff ff 03 00 00 00 ˙˙˙˙....
0038: 40 00 00 82 02 00 00 00 @..‚....
0040: 00 20 0a 12 80 01 20 40 . ..€. @
0048: 00 20 00 00 0a 00 00 00 . ......
0050: 00 30 43 83 a0 50 55 83 .0Cƒ PUƒ
0058: 00 00 00 00 70 5e 55 83 ....p^Uƒ
0060: 00 00 00 00 97 88 5e 00 ....—ˆ^.
0068: 2a 08 00 5e 88 97 00 00 *..^ˆ—..
0070: 10 00 00 00 00 00 00 00 ........
0078: f0 00 0b 00 00 00 00 0b š.......
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........


Event Type: Warning
Event Source: atapi
Event Category: None
Event ID: 26
Date: 5/24/2009
Time: 7:09:50 PM
User: N/A
Computer: COMPUTER_1
Description:
The driver has detected that device \Device\Ide\IdePort1 has old or out-of-date firmware. Reduced performance may result.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 10 00 01 00 64 00 ......d.
0008: 00 00 00 00 1a 00 04 80 .......€
0010: 04 00 00 00 00 00 00 00 ........
0018: 5b 29 00 00 00 00 00 00 [)......
0020: 00 00 00 00 00 00 00 00 ........
0028: 00 00 00 00 00 00 00 00 ........
0030: 00 00 00 00 09 00 00 00 ........


Event Type: Error
Event Source: Ntfs
Event Category: Disk
Event ID: 55
Date: 5/24/2009
Time: 7:09:44 PM
User: N/A
Computer: COMPUTER_1
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 4e 00 ......N.
0008: 02 00 00 00 37 00 04 c0 ....7..Ą
0010: 00 00 00 00 32 00 00 c0 ....2..Ą
0018: 18 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 5/24/2009
Time: 7:09:29 PM
User: N/A
Computer: COMPUTER_1
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
AmdK8
Fips
IPSec
MRxSmb
NetBIOS
NetBT
RasAcd
Rdbss
Tcpip

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Server
Event Category: None
Event ID: 2505
Date: 5/24/2009
Time: 12:18:39 PM
User: N/A
Computer: COMPUTER_1
Description:
The server could not bind to the transport \Device\NetBT_Tcpip_{B332C60D-C595-4618-ACC9-22B44531C0CB} because another computer on the network has the same name. The server could not start.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 34 00 00 00 4...


Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 5/19/2009
Time: 11:00:57 AM
User: N/A
Computer: COMPUTER_1
Description:
The Power Manager service terminated unexpectedly. It has done this 1 time(s).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Microsoft Office 12 Sessions
Event Category: None
Event ID: 7003
Date: 5/4/2009
Time: 8:03:06 AM
User: N/A
Computer: COMPUTER_1
Description:
ID: 16, Application Name: Microsoft Office Groove, Application Version: 5.1.2600.5512, Microsoft Office Version: 12.0.4518.1014. This session was terminated unexpectedly.

Thank you for looking this lengthy list.

Novojit

#5 novo

novo
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Bengal, India
  • Local time:02:49 PM

Posted 06 June 2009 - 10:10 AM

Hi Jose,
I’m trying to answer your questions according you put them together.

1. No, I haven’t seen any Xs, !s or ?s in that area.
2. Under ‘IDE ATA/ATAPI controllers section, I found only 3 not 4. They are….
a. Primary IDE Channel
b. Secondary IDE Channel
c. VIA Bus Master IDE Controller

Transfer Mode of ‘Primary IDE Channel’ is DMA if available and Current Transfer Mode is
Ultra DMA Mode 4.
Transfer Mode of ‘Secondary IDE Channel’ is DMA if available and Current Transfer Mode is
Ultra DMA Mode 5 and another is Ultra DMA Mode 2.
3. I have 3 IDE Devices, 1 internal hard disk, 1 CD-RW and 1 DVD-RAM drive.

I think I have answered your questions. If something not cleared enough or I misunderstood, please reply.

Thank you,

Novojit,
:thumbsup:

#6 nigglesnush85

nigglesnush85

  • Members
  • 4,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:09:19 AM

Posted 06 June 2009 - 11:49 AM

Hello,

There are a few concerning entries in that list. I would start by running http://www.hdtune.com/ (free version) to do an error scan on the system hard drive. and http://www.memtest.org/ to do a check on the systems memory.
Regards,

Alan.

#7 joseibarra

joseibarra

  • Members
  • 1,156 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Downstairs
  • Local time:05:19 AM

Posted 06 June 2009 - 11:57 AM

My thought (after some reading) was that there might be a HW problem in the area of the disk drive/cable, etc. where XP might have secretly switched to PIO mode due to errors.

I read that if it switched from DMA to PIO by itslef to reseat all the IDE cables (on the motherboard and device ends) to all HDD, CD, DVD, etc. (power off of course).

A long shot, but it seemed to work for a couple people and would not hurt to try it.

The mediocre teacher tells. The good teacher explains. The superior teacher demonstrates.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users