jd0gg Posted January 12, 2013 Share Posted January 12, 2013 I figured I would save some poor saps still on XP SP3 some time by posting what I just dealt with. Any time I run into some serious issues and find a fix from a web forum I usually register to post my fix and what I did.I work as a laptop repair tech and through my troubleshooting narrowed down this exact problem to hardware interrupts and DPC's with a donor laptop for a customer.Long story short, his laptop went the way of the dodo bird and we just so happened to have a nearly identical model in the boneyard. So instead of spending hours troubleshooting his machine (and running up a nice labor bill) I just swapped his drive with his permission. But of course, it was too good to be true and I noticed the lockups. I kind of had an idea it was a hardware issue, I've been doing this since the 98 days so I have a little experience under my belt but I ran his Kapersky and a rootkit tool anyway and found nothing, which is not surprising because it appears to be almost a fresh XP install with only 27-29 processes running in the background.Unfortunately the poor guy is on an XP machine and NONE of the aformentioned fixes work in XP, unless I missed something. So, here's the rundown, so it turns up in a search engine.Compaq Presario 2100 2178CL 2178clAthlon 2400 mobile, 512 ddrXP SP3 with updatesI had tried re-installing ALL of the drivers to no avail. I used the ProcessExplorer tool to verify it was a hardware DPC issue of sorts. The old drive that was in this laptop did the exact same thing, and it would freeze every 5 seconds and the interrupt / DPC usage would spike to 18-25%. Through one measure or another, I tried installing the SDK tools mentioned earlier but of course those are for 8, it still wanted me to bump up to .NET framework 4.0, so I did. In the midst of grasping at straws I also did a BIOS flash in Windows from the HP website, rebooted and all seems to be well. So I think it's safe to say one of those things fixed the problem.Also new friend. I do a bit of case modding and I'll be posting my current project here in a week or so, it's a server case I've cut up and I'm putting in a Xeon dualie. Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted January 13, 2013 Author Share Posted January 13, 2013 the SDK can't be instaleld on XP. Install a 32Bit Win7/8, run SDK there and copy the WPT folder to XP. Run the xperf command and copy the file back to Win7/8 and run the command to generate the TXT file. Link to comment Share on other sites More sharing options...
geckados Posted January 25, 2013 Share Posted January 25, 2013 hello,sorry for my bad english but here it goes...e recently had a BSOD episode on my laptop when using internet sharing on my windows phone 8. Since then the CPU on my laptop sits at 100%. System process nt kernel 50%, explorer.exe 50% or sometimes System 50% svchost in all it's processes 50%. I have read the instructions on the first page off this thread, made my etl file, used windows performace analyzer and i narrowed it down to ntkrpamp.exe. But i don't have any clue what to do next, there are some functions i believe that are the culprits but i'm not shure.I almost forgot, there is another process that has a high count but it's marked with a question mark. I had the SPTD driver, but i uninstalled it and then made my tpl file http://www.sendspace.com/file/pcb2k0 Pls MagicAndre can you take a look at the tpl file? thank you Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted January 25, 2013 Author Share Posted January 25, 2013 you still have a lot of UNKNOWN calls. This is still dynamic code.It looks like you have enabled driver verifier after you got the BSOD. Disable this. Link to comment Share on other sites More sharing options...
geckados Posted January 25, 2013 Share Posted January 25, 2013 thanks andre for the fast replyi disabled the driver verifier and made a new tpl file, still got the dynamic code software that's using my cpuhere's the tpl file http://www.sendspace.com/file/yrim7t, do you have any idea what king of software uses dynamic code besides daemon tools, and kasperky? Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted January 25, 2013 Author Share Posted January 25, 2013 DPCs are mostly gone, but you still have dynamic code in the SYSTEM process:Stop all software until you found the software which causes it. Link to comment Share on other sites More sharing options...
geckados Posted January 25, 2013 Share Posted January 25, 2013 sorry but i dont't exactly understand how to do that..... stop procesess in task manager, or using msconfig? Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted January 26, 2013 Author Share Posted January 26, 2013 use msconfig/autoruns:http://support.microsoft.com/kb/929135 Link to comment Share on other sites More sharing options...
Hellkeeper Posted February 2, 2013 Share Posted February 2, 2013 Hello,using Windows 8 on a HP z420 with GTX680 GFX. With the help of this Thread I was able to identify which Process filles up one of my CPU Cores with 100% of interrupt handling.It's the ACPI.sys - but now I don't know how to investigate further and find our why ACPI.sys is eating up one Core of my System ...Maybe someone here can help me on this? (And what Information do you need for helping me out here?)Thank you, bye from snowy AustriaAndreas Schnederle-Wagner Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted February 2, 2013 Author Share Posted February 2, 2013 upload the ETL file. Link to comment Share on other sites More sharing options...
Hellkeeper Posted February 3, 2013 Share Posted February 3, 2013 upload the ETL file. ETL can be downloaded here: www.partynet.at/files/DPC_Interrupt.zip Link to comment Share on other sites More sharing options...
Hellkeeper Posted February 4, 2013 Share Posted February 4, 2013 upload the ETL file. ETL can be downloaded here: www.partynet.at/files/DPC_Interrupt.zipproblem solved!Intel Raid was the source of the problem! Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted February 5, 2013 Author Share Posted February 5, 2013 I know. I saw you are the same user like on Technet. Really wired that this causes the ACPI issue. Link to comment Share on other sites More sharing options...
joker197cinque Posted February 28, 2013 Share Posted February 28, 2013 Very cool post MagicAndre !It helped me a lot .. for me it was NIDS.sys too.bye Link to comment Share on other sites More sharing options...
MagicAndre1981 Posted February 28, 2013 Author Share Posted February 28, 2013 have you updated the network drivers? Did it fix the issues? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now