csrss.exe 100% spike in CPU

  1. #1
    RonTheRipper is offline Newbie

    csrss.exe 100% spike in CPU

    I have a problem with my computer locking up after about 10 to 12 hours,and not running any programs,allthough running programs does speed up the process a bit. I ran it in safe mode and it still did it. I left the Windows Task Manager on the desktop and noticed that csrss.exe had spiked at 100% at the time of the locK. I checked for spyware, adaware and Viruses and nothing shows up. I've done every hardware test you can think of for the Hard drives, memory,cpu,video card, motherboard etc etc. This still happened after a reformat. Its not a video card problem because I've tried another. I'm usally pretty good at fixing stuff like this,but I can't figure this out for the life of me.

    CPU Temp-40 deg C
    WinXP
    DirectX 9
    QDI Mainboard
    Pent 3 733
    NVidia TNT Video Card also tried NVidia 3800
    Creative Sound Blaster Card
    512 mem ram
    Maxtor 40 gig and a Seagate 80 gig
    D-Link DFE-530TSX

    Any help would be appreciated.


  2. #2
    spud is offline D-A-L Team Member (UK)
    welcome to dal the online computer help forum

    have you got kaazar installed by any chance if you have this might help

    i think this might help
    navigate to the following keys using regedit
    hkey_local_machine>software>microsoft>windows>curr ent version>run
    hkey_local_machine>software>microsoft>windows>curr ent version>run once
    hkey_local_machine>software>microsoft>windows>curr ent version>run services
    and delete any entries for kazaa

    i would also do a full system scan also follow owens help on the link under my signature and then posta fresh hijack this log

    hope this helps

  3. #3
    RonTheRipper is offline Newbie
    No I do not have Kazza. I have Kazza Lite??
    Here is my log File

    Logfile of HijackThis v1.97.7
    Scan saved at 5:14:06 PM, on 08/01/2005
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\taskmgr.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\Ron\Desktop\My Briefcase\HijackThis.exe

    O3 - Toolbar: PopUpCop - {DB43E4E6-FF8A-4018-8C8E-F68587A44A73} - C:\PROGRA~1\PopUpCop\PopUpCop.dll
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab

  4. #4
    spud is offline D-A-L Team Member (UK)
    first of all you need to update your hjt then uninstall all kazza products then reinstall them

  5. #5
    RonTheRipper is offline Newbie
    Quote Originally Posted by spud
    first of all you need to update your hjt then uninstall all kazza products then reinstall them
    I uninstalled Kazza and I'll see what happens. I didnt know there was any known issues with Kazaa Lite. There no spyware bundled with it so whats up??


    Heres another log of highjack this. Not much diferent than the last one. Thx Again

    Logfile of HijackThis v1.99.0
    Scan saved at 7:40:17 PM, on 08/01/2005
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\logonui.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Ron\Desktop\New Folder (3)\HijackThis.exe

    O3 - Toolbar: PopUpCop - {DB43E4E6-FF8A-4018-8C8E-F68587A44A73} - C:\PROGRA~1\PopUpCop\PopUpCop.dll
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O23 - Service: NProtectService - Unknown - (no file)
    O23 - Service: Remote Task Manager service - Unknown - C:\Program Files\Remote Task Manager\RTMService.exe

  6. #6
    RonTheRipper is offline Newbie
    Ok ran Process Explorer and found out that winsrv.dll is the culprit causing the 100% spike in Csrss.exe. What would cause this??

    Thx Again-awaiting Response
    Last edited by RonTheRipper; 09-01-2005 at 04:12 AM.

  7. #7
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    winsrv - winsrv.dll - DLL Information

    DLL File: winsrv or winsrv.dll
    DLL Name: Windows Server DLL

    Description:
    File that contains the server side version of the 32-bit user and GDI routines (graphics engine).

    Have you looked thru your Device Manager & or Event Viewer?

    You should post your hijack this log into the spyware section. Is that the full log? It seems to be missing alot.

  8. #8
    RonTheRipper is offline Newbie
    Thx For Responding

    At the time of lock-up there is nothing showing in Device Manager & or Event Viewer.

    And yes this is a full Highjack this. I don't keep alot of junk running in the background if I dont have to. Any other ideas??

    Thx again-awaiting reply

  9. #9
    RonTheRipper is offline Newbie
    Hi all and thankyou for trying to help me out with this very tough problem
    Heres what I've done to try to correct this problem and other things I've learned

    1. I had a fan blowing straight into the computer .
    2. I installed SP1
    3. I ran memtest and no problems with memory
    4. I created a new account
    5. Tried pci slotted video card

    Results. Computer still freezes. NO Change.

    Interesting Point: Memtest ran for 48 hours in dos and my computer never froze.

    Thx again for trying to help.
    Awaiting reply.

  10. #10
    RonTheRipper is offline Newbie
    Ok heres what I've done now:

    I just did a new install of WinXP on a Brand new Seagate Hard Drive without installing any other programs or software and the problem still persists.

    I also ran Memtest for 48 hours and no errors

    Also unplugged anything in USB ports


    Now What

    Thx again- awaiting reply
    Last edited by RonTheRipper; 16-01-2005 at 01:48 AM.

+ Reply to Thread
Page 1 of 2 1 2 LastLast