MagicAndre1981

in this case try the Microsoft driver, please.

try to run Process Monitor at the time ou have the high CPU usage. Maybe this shows you want the Plug & Play service does.

update the Firmware of the INTEL SSD. Do you use the MS AHCI or the Intel driver?

yes. Resource Monitor, Process Explorer (>=Version 14) use Event tracing too, to monitor the Network/Disk IO. and you can't run several kernel traces the same time.

I know it the blog. I wrote their comments too. I was confused that it took 1 day to delete the files.

the svchost.exe has the high CPU usage. If you look at the "Stack count" Summary table you can see that the Umpnpmgr.DLL causes it. This is the Plug and Play service. Check the device manager if you can see yellow icons there. if yes, remove them and install the device drivers again.

hiberread="176952000" so reading from the hiberfile.sys takes 176seconds. Run powercfg to disable the hibernation file, defrag drive C and enable the hibernation file again. Does this help?

I think it was caused by the ASRock IES feature. I disabled the feature, selected the balanced powerplan of Windows 7 and now I have no issues for 1 week. Looks like my CPu has issues with the 2 reduced phases at low load.

If you transfer data DPCs are used. The higher the transfer rate is the more DPC usage you see. I don't really want to help users who have issues while downloading from usenet. Buy a good PCIe Network card (http://www.intel.com/products/desktop/adapters/pro1000pt/pro1000pt-overview.htm) with an a better chip which supports the CPU, not that Realtek thing and your issues are gone.

DPCs are sued if you transfer data with network. The newsleecher tool uses network very heavily so the high CPu usage occurs. Next time, don't use illegal usenet downloaders and buy Haunted 3D if you like it

use the updated tool from Lego instead of this tool which deletes file instead of removing the packages. If you want a small Windows use Windows Embedded Standard 7 / Thin PC.

no, If you have installed WPT you don't need to install the SDK any longer.

I can't see the DLL if it generates code while runtime. This is want I mean with dynamic code. Normal DLLs can be seen in a trace.

ok, I think it is Avira AntiVir which causes the issues. I still can't see the DLL which causes it: 0:000> !runaway User Mode Time Thread Time 0:14c0 0 days 0:00:44.725 2:24c 0 days 0:00:21.730 1:134c 0 days 0:00:00.078 3:126c 0 days 0:00:00.015 eax=88c1dc3f ebx=776641b8 ecx=00000073 edx=75e64268 esi=7ffd3028 edi=0010f3cc eip=00071a62 esp=0010f070 ebp=0010f078 iopl=0 nv up ei ng nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000286 00071a62 8945f8 mov dword ptr [ebp-8],eax ss:0023:0010f070=88c1dc73 ChildEBP RetAddr Args to Child WARNING: Frame IP not in any known module. Following frames may be wrong. 0010f078 000602c5 75e64257 75e62898 75e64257 0x71a62 0010f0b0 0006047c 75da0000 68807354 00000000 0x602c5 0010f0d0 0006bcd2 00000000 00000001 68807354 0x6047c 0010f0e8 0006bb4c 0005745b 00000000 0010f108 0x6bcd2 0010f0f8 00052b44 0000000c 002bd508 0010f150 0x6bb4c 0010f108 000557b2 002c2ad0 002bd508 ffffffff 0x52b44 0010f218 77608b2c 77608752 00000059 00000068 0x557b2 0010f30c 00055caa 002bed30 0010f31c 0010f390 ntdll!RtlpAllocateHeap+0xe2f (FPO: [Non-Fpo]) (CONV: fastcall) [d:\rtm\base\ntos\rtl\heap.c @ 5793] 0010f3b8 775f995d 00000000 00000000 00000000 0x55caa 0010f3bc 00000000 00000000 00000000 00010017 ntdll!KiUserApcDispatcher+0x25 [d:\rtm\base\ntos\rtl\i386\userdisp.asm @ 198] Next I listed the loaded DLLs and saw this: this is the only non Vista DLL loaded. And bing tells me this is Avira AntiVir. Update it or try a different tool. i hope this helps.

this is a good question. do you see this file? You can also try to get the Visual Studio 2010 tool or try the Windows7.1 SDK: http://go.microsoft.com/fwlink/?LinkID=191420

click on my profile and send me a "private Message".

please post inside the DPC/Interrupt topic next time. Your driver of the Realtek is "Rt64win7.sys", "7.043.0321.2011 built by: WinDDK", but the latest version is 7.046: http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false And the realtek chips have no own CPu to do operations and the main CPu must do all work.

with process explorer, rightclick on the process and create a dump, zip it and send me the dump.

The trace shows unknown. Unknown occurs if a tool uses dynamic code. And xperf can't trace this can you click here on stack? do you use any 3rd party DLLs invoked?

You're welcome. thanks

/o means online. The files are deleted if the PC is idle.

I can't see the first picture. Can you please zip the trace file, upload it to mediafire.com and send me the link via PM?

the files are not removed from the image. This is done after the installation

you must load the Debugging Symbols

Your Windows takes 25s to boot to the desktop and 45 to boot completely. your 5400rpm WD HDD is the bottleneck. The prefetcher does its best to improve it. What I can see is that apache takes 13s to start. Set the start-type (also for MySQL) to "on demand" and start the 2 services after you booted completely to the desktop with (NET START Apache2.2, NET START mysql. looks like you use XAMPP, correct?). Also the Intel Management service (IAStorDataMgrSvc) takes 5s to start. This happens during the time where your HDD is completely busy. André