Cpu usage Windows 2003 standaard

[Mark]

Hi,

I still got this problem with my win 2003 dedicated server.
The problem occurs when the uptime is around 5 uhr or so.. sometimes it takes longer...

The CPU usage is around 90 - 100% and the idle process is also around that???

Below is a taskmanager screenshot:
http://208.53.131.142/1.jpg

I know system idle should be like 99 when the system is idle.. but as you can see the CPU usage is 97%?! Should be 1 or 0 then.
Something is using the cpu. I can't find it.
I scanned for virusses none were found. Same for spyware.

This all slowes down the server.
Does anyone know how to deal with this problem?

Thanks
Mark

[psyxakias]

Hello,

I'm not able to view the screenshot you've given as the URL it's located, seems inaccessible.

Btw, I've got a Win2003 server as well and I haven't noticed such thing (yet).

Thanks.

[Mark]

Try to view it again,

The server is slow. coz of this all.
Its just that the cpu total usage is HIGH like 90 to 100 % but the system idle process is like 80 - 100% most of the time... So actually something is using the cpu. And its not listed. Or the cpu usage is high and nothing is using it...

I must say when I restart the server the problem is still there. When i ask for a reboot via support. They reboot my the server and the problem isn't there for a day max.. But It keeps returning.

[SEO Jeff]

Do you have anything causing a possible memory leak? Any additional services running in the background? Maybe could also be bad hardware.

[psyxakias]

I can see the screenshot now..

The only 2 things that come on my mind is:
a) problems related to memory leaks of an application or OS (that gets temporary fixed with reboot as RAM gets cleared)
b) temperature problems that makes CPU hangs every a few secs and give high cpu usage when it gets back.

[Mark]

Last week I contacted support about this, They sayed:
It's possible you are infected with a virus/worm/trojan of some kind. The server is now rebooting, the only thing we can really offer you is a reinstall if you wish for one.

I don't wish for an OS reinstall because of the loss of data... And I don't think it's a virus.

[Mark]

Do you have anything causing a possible memory leak? Any additional services running in the background? Maybe could also be bad hardware.

I can't find any processes that would indicated a virus or something.
I checked msconfig and nothing seems to be automaticly started that shouldn't be.

[psyxakias]

I don't wish for an OS reinstall because of the loss of data... And I don't think it's a virus.Actually, you can backup your data so you won't worry for data loss.

I'd mostly worry for the downtime OS reinstall (and reconfiguration) will cause. But if you're not worried of this, then why not do it? ;)

[Mark]

Its more then 25 GB of data...

And I only got this server for a little longer than a week... So thats why i don't think its a virus or something!
Lets say it is a hardware problem. what then?


Edit: It's back to normal again... hope it will take some time for the problem to return. I also checked the cpu temp its around 35 C
good temp... :)

[MQ-James]

maybe perform a trend mirco online house call (online virus scan) as that could pick up for viruses

[Mark]

I did the trend mirco online house call... None virusses found...

[MQ-James]

another problem could be another process is invoking the CPU to be used but is not showing up. I get this problem a lot and the only solution I find is rebooting, or ending all the processes. It may not be this, but it could be.

[Abobo]

I'm using windows 2003 and haven't noticed any problems, It has been up for a few weeks without a problem. So it's not something with all windows servers.

Hope you get it fixed :D

[SEO Jeff]

Yeah Windows 2003 server is a very reliable OS for me (claims that say it's not are very wrong)

[MQ-James]

Windows 2003 is a good operating system, I still prefer linux as it is better for my sort of site. Windows 2003 is perfect for an ASP.NET environment or an IIS6 environment, but for a PHP/Perl/Python environment I prefer linux. I will stop going off topic

[Mark]

I know its a good OS.. I have more servers using this OS.

But this problem keeps returning.

[bunghole]

i got the same problem on my two boxes; try getting more ram, because 256mb just doesn't cut it.

[Mark]

There is 512 Mb installed...

So I dont think the RAM is the problem.

[ChronoCross]

I consider myself a guru of sorts when it comes to virus' trojans rootkits etc on windows. So if anyone needs someone to check their machine I'm available for free. Ususally it doesn't exist if I don't find it.

I suggest lisiting what programs you have running (either in the open or as a service) apache, mysql, virus, firewall, etc. perhaps someone has used one of them before( particular versions) and can note if they have experienced similar things.

and to note about the temporary fix you seem to be having I would suggest to you that you use a system resources monitor and record these processor spikes (times, dates, what's using the cpu power) also it would be a good idea to check the system security logs Control panel/administrative tools. Check the Security log, program log and error log to see if there are any obvious signs. Also if you haven't already run a virusscan, ad-adware Personal, and spybot-SD.

[ChronoCross]

There is 512 Mb installed...

So I dont think the RAM is the problem.

it's not about the amount of ram. what he's suggesting is that the ram chip might be faulty. in which case you should have FDC replace it. Although if the ram is bad you wouldn't see a processor speedup but rather you would see a system freeze as whenever something is written to a fualty memory slot/especially windows idle processes the OS doesn't handle it well and you'll end up with a system freeze (I would like to note I had my ram replaced while I had a server and the system performance shot through the roof....so if you have ANY doubts just have them replace it, or at the very least they should use a ramtester on it.

[Michael]

Have you performed a port scan on your machine? Might be a wise thing to do. I've seen some services go rogue.. particularly Cold Fusion, SQL server and such. A good audit of the system wouldn't hurt. ( No matter how long you've had it. ) There may be some quirks with 2003. Never know. Or it could be an influx of network traffic causing the cpu usage to go nuts. Check for any enabled firewalls..could be the culprit if you had some incoming traffic..since it'd have to police the traffic which would equal cpu usage.
Not sure what that would show up under the task manager as if at all.

Disable any services that aren't needed as well.

[Mark]

I think I found the problem!

I downloaded a trail of TaskInfo2003 and it seems the Interrupts Time PlaceHolder is Leeching my CPU Usage...

See screenshot:

I think this is a hardware problem. Can anyone confirm this?

http://208.53.131.142/2.jpg

[Mark]

Hijackthis LOG:

Logfile of HijackThis v1.98.2
Scan saved at 1:50:06 PM, on 12/15/2004
Platform: Unknown Windows (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 (6.00.3790.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\PROGRA~1\Serv-U\ServUDaemon.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\rdpclip.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Serv-U\SERVUT~1.EXE
C:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
C:\Program Files\WinBar\WinBar.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrator\Local Settings\Temp\2\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://shdoclc.dll/hardAdmin.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://shdoclc.dll/hardAdmin.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://microsoft.com/
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKCU\..\Run: [ServUTrayIcon] C:\PROGRA~1\Serv-U\SERVUT~1.EXE
O4 - Startup: WinBar.lnk = C:\Program Files\WinBar\WinBar.exe
O4 - Global Startup: Monitor Apache Servers.lnk = C:\Program Files\Apache Group\Apache2\bin\ApacheMonitor.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C7412D42-126F-4174-BCB4-945AC1DBD37B}: NameServer = 66.90.66.137,66.28.0.45
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC721FA4-709F-4E41-9BFB-0E8E93DB82AA}: NameServer = 66.90.68.25,66.90.68.26

[Mark]

BUMB!

I tryed to find something about the Interrupts Time PlaceHolder. As you can see in the previous posts. It's causing high CPU usage.. I couldn't find anything helpfull.

[Soul]

BUMB!

I tryed to find something about the Interrupts Time PlaceHolder. As you can see in the previous posts. It's causing high CPU usage.. I couldn't find anything helpfull.

http://www.dansdata.com/danletters053.htm

There is a section on the page that says...

This is something to do with ACPI interrupts happening when none should. It's fairly well known. You can fix it on some boards with a BIOS update, but the latest BIOS for your board is getting on for three years old, and may or may not make any difference. Alternatively, you can turn off ACPI in the BIOS setup and reinstall Windows.

As you say, this is a real problem; the CPU really is doing work that it shouldn't have to do, and has less time for other tasks as a result.

i don't know if this helps or not...

[psyxakias]

I think I found the problem!

I downloaded a trail of TaskInfo2003 and it seems the Interrupts Time PlaceHolder is Leeching my CPU Usage...After seeing your screenshot, I have to say that TaskInfo2003 seems extremely useful program.. I'll download it as well.

[mikron15]

Same here, i been always looking for this kinda program and my friend recently suggested HijackThis.. TaskInfo definetly seems good and worth the try.

For those who are lazy to google it:
http://www.iarsn.com/taskinfo.html

[Mark]

Ok but it seems its a hardware problem... (It's Driving me nuts)
Should I contact FDC about this?

[Mark]

BUMB

I still got this problem...

I am thinking about contacting FDC about this...
I looked the Interrupts Time PlaceHolder up and it seems to be a hardware problem...

[Mark]

CPU sucker
I have a huge problem. I detected it when in Windows Task Manager I saw the CPU was idle, but usage was stuck at 60%! I tried new software and finally found where the problem is - it's on two processes, "Interrupts Time Placeholder" and "DPC Time Placeholder".

Usually, it sits at a CPU usage of about 20%; sometimes, it sticks at 60%. It stays at that value from power on to power off.

I don't know what to do, or, what those processes are, but they really slow down the computer!

The computer is a Athlon 1.3GHz using a Biostar M7VKA Board, version VKA0521H, running Windows XP with 576Mb RAM. Reinstalling WinXP didn't help.

Paulo

Answer:
This is something to do with ACPI interrupts happening when none should. It's fairly well known. You can fix it on some boards with a BIOS update, but the latest BIOS for your board is getting on for three years old, and may or may not make any difference. Alternatively, you can turn off ACPI in the BIOS setup and reinstall Windows.

As you say, this is a real problem; the CPU really is doing work that it shouldn't have to do, and has less time for other tasks as a result.


I found the above on the net...
Like you al can all read it has something to do with a bios settings (ACPI )...
I dislike that they are talking about a windows reinstall :(

[Soul]

I found the above on the net...
Like you al can all read it has something to do with a bios settings (ACPI )...
I dislike that they are talking about a windows reinstall :(

That looks like the same link I pointed out to you above in my post :D

[Mark]

Yep, But your all pretty sure its a hardware(bios) problem? So I should contact fdc about it?

[Mark]

[Happy-mode]
OMG FDC is great!!!
I contacted them and they set-up a new server and switched the hdd.. And Its all working fine now!!!

I've been with other dedicated server companys but I never had this type of service!

FDC is just the best!
[/Happy-mode]

[Soul]

[Happy-mode]
OMG FDC is great!!!
I contacted them and they set-up a new server and switched the hdd.. And Its all working fine now!!!

I've been with other dedicated server companys but I never had this type of service!

FDC is just the best!
[/Happy-mode]

That is great!

I have been very happy with support so far as well.

[MQ-James]

the support at FDC is phonominal. I presume the server problem rate is low, as I notice mainly people with experiance use FDC (I may be wrong) where as SM/TP and ev1 are well known so anyone who wants a server goes to them. I may be wrong ofcourse

[Metaldrgn]

Well I am using Windows XP and I'm getting the same problem. I was already using taskinfo so I found those 2 processes right away. Anyhow I also came across a post blaming it on ACPI like you've already noted. My computer was working fine prior to letting my friend use it (never again when I'm not around...) and now I've got this problem. I'm going to keep trying a few different things to see if I can get my computer back to normal, just incase this comes up again. I've tried stopping services and closing all tasks that I could and none of that did any good.

"Interrupts Place Holder" sounds like it's for IRQs or whatever it is Windows CP uses (2003 is built from the same thing) so maybe it's a problem with IRQs or IRQLs? Maybe a card has a request stuck on or something. Anyhow I'll let you know if I make any progress.

[Metaldrgn]

Well I think I've figured it out... I did the wrong thing first though which was to reinstall windows because that ended up locking me out of my now old user folder ("access is denied" message when I try and get into it even as admin) and didn't solve the problem.

I thought it would be to simple if removing and changing the slots of the PCI cards (also disconnected the DVD burner, but I'm guessing that wasn't the problem). I tried it and it worked. Now I have to worry about recovering some files from that one folder and I should be good. Also, to note, I swapped my network card out with another one I had laying around, but I don't believe that was the problem either, but if swapping PCI cards doesn't work for you, maybe just try removing them all together except for the ones you need.

By the way, you can do a windows reinstall and just have it remove the windows directory and reinstall it there. That is if you have the actual XP cd and not a restore disk. It won't hurt any data you have saved (unless it's in your windows folder and if it's on the desktop you might want to move it to the c: or another folder so it doesn't lock you out like it did me). You would however need to install some of the program you were using because some of the system files are kept in the windows directory or registry.

[mikron15]

In order to recover those files..restart into safe mode..log in as admin...goto that folder which you wanna recover ..rigkt click that folder...choose properties...Goto Security tab..Click Full controll in the permission list below..click on ADVANCE tab...In advance, under permissions tab..make sure Administrator is listed in permission entries ( check scren2.jpg) and then make sure ur Owner section looks like scren3.jpg . Hit apply where needed and reboot to windows normally..and you should be able to access those folders when you login into an acct who has admin privileges

Good luck !

[StarlightNo1]

I had the same problem as described here on Windows 2003 server. A constant 20-30 % CPU usage. After installing "Process Explorer" i saw the "Interrupts" process was the consumer.

Changing the NIC to another PCI slot nor disabling ACPI did help. After deinstalling some software i found out DAEMON tools was the cause of the problem!

Cheers!