I am having trouble with a certain svchost on a Windows XP Pro SP3 5.1.2600 box. The said service host alternately uses either nearly 100% cpu or 0% (%CPU usage looks like a square wave with random slow frequency). This does not happen in normal safe mode or safe mode with command prompt, but it does happen in safe mode w/ networking.
I am trying to find the responsible dll but unfortunately it runs 29 services. After some googling I found that windows update had a bug that can cause this behavior. So I tried stopping wuauserv using ProcessExplorer while the cpu was being maxed out to see if it would drop back down to a normal level but this had absolutely no effect. Thus I must conclude it is not windows update, or at least not wuauserv.
What is the most convenient way for me to figure out the guilty dll? Is there a way to see which services are using what cpu %? All other people that had this problem were able to fix it by switching windows update to manual but this does not work for me.
Here is what >>tasklist /SVC outputs(problem is with PID 1196):
Image Name PID Services ========================= ====== ============================================= System Idle Process 0 N/A System 4 N/A smss.exe 564 N/A avgchsvx.exe 612 N/A csrss.exe 768 N/A winlogon.exe 792 N/A services.exe 840 Eventlog, PlugPlay lsass.exe 852 PolicyAgent, ProtectedStorage, SamSs svchost.exe 1012 DcomLaunch, TermService svchost.exe 1096 RpcSs svchost.exe 1196 AudioSrv, BITS, Browser, CryptSvc, Dhcp, dmserver, ERSvc, EventSystem, FastUserSwitchingCompatibility, helpsvc, lanmanserver, lanmanworkstation, Netman, Nla, RasMan, Schedule, seclogon, SENS, SharedAccess, ShellHWDetection, srservice, TapiSrv, Themes, TrkWks, W32Time, winmgmt, wscsvc, wuauserv, WZCSVC svchost.exe 1316 Dnscache svchost.exe 1684 LmHosts, RemoteRegistry, SSDPSRV explorer.exe 1716 N/A spoolsv.exe 1972 Spooler svchost.exe 132 WebClient avgwdsvc.exe 192 avgwd jqs.exe 212 JavaQuickStarterService AVGIDSAgent.exe 1452 AVGIDSAgent avgnsx.exe 1416 N/A avgemcx.exe 1352 N/A hkcmd.exe 3132 N/A reader_sl.exe 3140 N/A AdobeARM.exe 3164 N/A jusched.exe 3176 N/A smax4pnp.exe 3188 N/A avgtray.exe 3204 N/A alg.exe 3256 ALG ctfmon.exe 3288 N/A RtWLan.exe 3348 N/A soffice.exe 3480 N/A soffice.bin 3548 N/A AVGIDSMonitor.exe 472 N/A taskmgr.exe 3432 N/A cmd.exe 1444 N/A firefox.exe 2932 N/A plugin-container.exe 3680 N/A wmiprvse.exe 1516 N/A avgrsx.exe 2372 N/A avgcsrvx.exe 1032 N/A tasklist.exe 3520 N/A
I will greatly appreciate any help or advice!
Thanks a ton,
PS- FYI I am not very good with Windows, being mostly a Linux/Unix guy. Windows stumps me a lot and I don't understand it that well. So sorry if this is a really easy or a dumb question.