Hi All, Hoping someone can shed some light on this as I've been battling with it for a week now and run out of things to try from the usual avenues of google etc. I have a machine that after logging onto a domain, services.exe comsumes 99% of the cpu. Now this only happens when network is connected. If I remove the network cable it doesn't occur. UPDATE: I've just noticed that even if left at the login screen without logging it happens. It seems if the network cable is plugged in it will happend logged on to the domain or not. I can't see anything suspicious in the HiJack this log and I've run various virus scanners and spyware scanners with no results, so I'm not thinking it is a virus but maybe a confllict somewhere. Now it's a co-workers machine so I don't know if they installed something and it happened or it just started happening. They seem to think it just started happening. After fiddling with various things I thought I had it licked, however after leaving the machine sitting idle for 15 minutes I went back to it and the it's back again. In process explorer when I bring up the properties for services.exe and view the threads, one with the start address of "kernal32.dllCreatethread+0x22" is the thread hogging all the CPU. Now if I click on the suspend button the cpu usage returns to normal but hogs the CPU again if I resume it. Obviously if I kill the thread the problem goes away. Here is the thread stack: ntkrnlpa.exe!KiUnexpectedInterrupt+0x8d ntkrnlpa.exe!PsLookupThreadByThreadId+0x4abc ntkrnlpa.exe!KiDeliverApc+0xb3 ntkrnlpa.exe!ZwYieldExecution+0x196c ntkrnlpa.exe!ZwYieldExecution+0x1900 hal.dll!HalClearSoftwareInterrupt+0x34a hal.dll!HalRequestSoftwareInterrupt+0x30 ntkrnlpa.exe!NtDuplicateObject+0x101d ntkrnlpa.exe!ObOpenObjectByName+0xeb ntkrnlpa.exe!LsaDeregisterLogonProcess+0xc811 ntkrnlpa.exe!KeReleaseInStackQueuedSpinLockFromDpcLevel+0xb14 ntdll.dll!KiFastSystemCallRet ADVAPI32.dll!RegDeleteKeyW+0x64 umpnpmgr.dll+0x19b58 umpnpmgr.dll+0x19b41 umpnpmgr.dll+0x19e93 umpnpmgr.dll!ServiceEntry+0x5908 umpnpmgr.dll!ServiceEntry+0x640f RPCRT4.dll!CheckVerificationTrailer+0x70 RPCRT4.dll!NdrStubCall2+0x215 RPCRT4.dll!NdrServerCall2+0x19 RPCRT4.dll!NdrGetTypeFlags+0x1c9 RPCRT4.dll!NdrGetTypeFlags+0x12e RPCRT4.dll!NdrGetTypeFlags+0x5a RPCRT4.dll!NdrConformantArrayFree+0x42e RPCRT4.dll!NdrConformantArrayFree+0x28b RPCRT4.dll!I_RpcBCacheFree+0x14c RPCRT4.dll!I_RpcBCacheFree+0x5e3 RPCRT4.dll!I_RpcBCacheFree+0x405 RPCRT4.dll!I_RpcBCacheFree+0x5cb kernel32.dll!GetModuleFileNameA+0x1ba If anyone can provide any info would be greatly appreciated. Cheers DN