Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

My System process (Not system idle process) is using 5-10% CPU constantly.

Using Sysinternals process explorer, I've identified the offending thread as having an ID of 8 and the following stack trace:

ntkrnlpa.exe!NtBuildNumber+0x33
ntkrnlpa.exe!MmIsDriverVerifying+0xb9a
ntkrnlpa.exe!ZwYieldExecution+0x941
ntkrnlpa.exe!KeRemoveQueue+0x276
ntkrnlpa.exe!MmTrimAllSystemPagableMemory+0x669b

How can I take the above information and determine which DLL/Driver/??? is the culprit?

Edit: Interestingly, after a reboot, the System process is still eating up CPU (It's the same Thread Id (8) which is using CPU but I'm assuming that's pure coincidence). The stack trace, however, is noticeably different:

ntkrnlpa.exe!KiDispatchInterrupt+0xa7
ntkrnlpa.exe!ZwYieldExecution+0x3744
ntkrnlpa.exe!NlsOemLeadByteInfo+0x19a74
ntkrnlpa.exe!PsRemoveCreateThreadNotifyRoutine+0x214
ntkrnlpa.exe!KiDispatchInterrupt+0x72e
share|improve this question
2  
How to trace System Interrupts and high DPC....msfn.org/board/topic/… –  Moab Jun 12 '11 at 20:12

1 Answer 1

up vote 1 down vote accepted

Please configure your symbols so that you get more useful information, also look into the stacks if you can.

Other than that, you can try this procedure so that I could try to look into it (or you could yourself)... :)

share|improve this answer
    
Thanks. I've added symbol support and edited the stack trace to include the additional information. –  Basic Jun 12 '11 at 15:35
    
@Basiclife: With the other procedure you can figure out which interrupts cause this behavior in System. –  Tom Wijsman Jun 12 '11 at 16:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.