From: "Hrvoje Mesing" 

Hi,

ok, booting WinXP.
Logging in.
Idle.
Taskmgr.
Music.
Starting OE.
CPU > 100%
Everything halted.
starting Winkey + R > waiting
Ctrl + Shift + Esc > nothing
ctr + alt + del > Windows Sec. dialog > task manager > returned to
desktop, no taskbar, no taskmgr
Strange.

Ok, trying procexp (sysinternals)
waiting
4 minutes after > have taskmgr > sluggish! > seeing svchost.exe {at}
97% CPU. waiting
procexp showing
expanding svchost.exe (under needed PID) waiting
In handles window I see rapid boost of creating/deleting handles to files
(*.tmp), registry keys, whoknowswhat else (better loging is needed)
svchost.exe in question usually hosts: svchost.exe                 1128
AudioSrv, BITS, CryptSvc, Dhcp, dmserver,
                                 EventSystem, helpsvc, lanmanserver,
                                 lanmanworkstation, Netman, Nla, RasMan,
                                 Schedule, seclogon, SENS, SharedAccess,
                                 ShellHWDetection, srservice, TapiSrv,
                                 W32Time, winmgmt, wuauserv
Same svchost.exe got 75 threads, 2500+ handles. There were rapid
creation/deletion of handles starting with:
    - DFMAP, DFROOT, DFSHAREDHEAP
Checking threads found ntdll!RtlAllocateHeap having over 15400 context
switches eating all the porc.
Checking stack found zillions of wuaueng.dll!DllRegisterServer

Now, computer again, rebooted, did same thing.

What would be your next move ?


-+-
M.

--- BBBS/NT v4.01 Flag-5