1

My System process (Not system idle process) is using 5-10% CPU constantly.

Using Sysinternals process explorer, I've identified the offending thread as having an ID of 8 and the following stack trace:

ntkrnlpa.exe!NtBuildNumber+0x33
ntkrnlpa.exe!MmIsDriverVerifying+0xb9a
ntkrnlpa.exe!ZwYieldExecution+0x941
ntkrnlpa.exe!KeRemoveQueue+0x276
ntkrnlpa.exe!MmTrimAllSystemPagableMemory+0x669b

How can I take the above information and determine which DLL/Driver/??? is the culprit?

Edit: Interestingly, after a reboot, the System process is still eating up CPU (It's the same Thread Id (8) which is using CPU but I'm assuming that's pure coincidence). The stack trace, however, is noticeably different:

ntkrnlpa.exe!KiDispatchInterrupt+0xa7
ntkrnlpa.exe!ZwYieldExecution+0x3744
ntkrnlpa.exe!NlsOemLeadByteInfo+0x19a74
ntkrnlpa.exe!PsRemoveCreateThreadNotifyRoutine+0x214
ntkrnlpa.exe!KiDispatchInterrupt+0x72e
Improve this question
1

1 Answer 1

Reset to default
1

Please configure your symbols so that you get more useful information, also look into the stacks if you can.

Other than that, you can try this procedure so that I could try to look into it (or you could yourself)... :)

Improve this answer
2
  • Thanks. I've added symbol support and edited the stack trace to include the additional information.
    – Basic
    Jun 12, 2011 at 15:35
  • @Basiclife: With the other procedure you can figure out which interrupts cause this behavior in System.
    – Tamara Wijsman
    Jun 12, 2011 at 16:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.