Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Cpu Spikes From The System Process (spoolsv, Cfgmgr32)

  • Please log in to reply
1 reply to this topic

#1 MaxRock17


  • Members
  • 1 posts
  • Local time:07:11 AM

Posted 15 November 2006 - 06:55 AM

Windows Taskmanager shows that the System process spikes every couple of seconds to about 30 CPU usage.
I have never noticed this behaviour before and I am pretty sure it did not use to do that :thumbsup:

Using filemon and regmon from Sysinternals I was able to figure out that spoolsv.exe accesses cfgmgr every couple of seconds and also does a bunch of stuff to the registry.

regmon log:

spoolsv.exe:2520 CreateKey HKLM\System\CurrentControlSet\Control\DeviceClasses SUCCESS Access: 0x20019
spoolsv.exe:2520 OpenKey HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C} SUCCESS Access: 0x20019
spoolsv.exe:2520 OpenKey HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\##?#ACPI#PNP0400#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c} SUCCESS Access: 0x20019
spoolsv.exe:2520 QueryValue HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\##?#ACPI#PNP0400#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c}\DeviceInstance SUCCESS "ACPI\PNP0400\3&61aaa01&0"
spoolsv.exe:2520 OpenKey HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\##?#ACPI#PNP0400#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c}\# SUCCESS Access: 0x20019
spoolsv.exe:2520 CloseKey HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\##?#ACPI#PNP0400#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c} SUCCESS
spoolsv.exe:2520 OpenKey HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\##?#ACPI#PNP0400#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c}\#\Control SUCCESS Access: 0x20019
spoolsv.exe:2520 QueryValue HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\##?#ACPI#PNP0400#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c}\#\Control\Linked SUCCESS 0x1
spoolsv.exe:2520 QueryValue HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\Default NOT FOUND
spoolsv.exe:2520 CloseKey HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\##?#ACPI#PNP0400#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c}\#\Control SUCCESS
spoolsv.exe:2520 CloseKey HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C}\##?#ACPI#PNP0400#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c}\# SUCCESS
spoolsv.exe:2520 CloseKey HKLM\System\CurrentControlSet\Control\DeviceClasses\{97F76EF0-F883-11D0-AF1F-0000F800845C} SUCCESS
spoolsv.exe:2520 CloseKey HKLM\System\CurrentControlSet\Control\DeviceClasses SUCCESS

Killing the spoolsv process in taskmanager or stopping the print spooler service stops the spikes.

An HP 3050 Printer/Scanner/fax was installed just recently and I removed all the HP stuff as well as I could (Add/Remove Programs, HP's uninstall link from the start menu). I'm not sure what was left behind though.

Ad-Aware, Spybot S&D and Avira Antivir didn't turn up anything either.

Does anybody have any suggestions on how to stop the spikes with spoolsv running (need to be able to print) or if this is some sort of intended behaviour by HP?

BC AdBot (Login to Remove)


#2 usasma


    Still visually handicapped (avatar is memory developed by my Dad

  • BSOD Kernel Dump Expert
  • 25,091 posts
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:10:11 AM

Posted 16 November 2006 - 08:28 AM

I'd suspect that the HP drivers are still causing the problem because of the remnants left behind after the uninstall. I've seen similar problems on the web within the last few months.

Try googling for "remove HP drivers" or something similar. Then remove the HP drivers as completely as possible from your registry and hard drive to see if that helps!

Be sure to backup before attempting this. If you don't want to try this, then I'd suggest running SFC.EXE /SCANNOW at the Run dialog ( http://www.bleepingcomputer.com/forums/t/43051/how-to-use-sfcexe-to-repair-system-files/ )

If that doesn't work, then I'd suggest a repair install of XP: http://www.michaelstevenstech.com/XPrepairinstall.htm
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users