The 'SYSTEM' process is taking up all my cpu usage!!!

[woody]

Ok,

This is happening on my main server which mainly controls active directory and group policy.

The 'SYSTEM' process in task manager is eating up all of the cpu usage and is regularly at 99%.

I have tried using a tool from microsoft called qslice but when I double click on the SYSTEM process, there is no scroll bar to look through the threads and I can't fit them all in the window due to lack of screen size. AARRRHHH.

As you can image, this is slowing down access to the server. It is not good. Any suggestions?

[Ric_]

What's the box running?

Virus scan and apply patches, etc.

[Geoff]

Spyware comes to mind too. Check you hardware and drivers out too.

[ajbritton]

Would Process Explorer from SysInternals be of any use?

[Geoff]

Does that break down the system process? I presume it would..

What I wouldn't give for a windows equivelent of slabtop!!

[woody]

Thanks for all your comments guys. I have tried Process Explorer and it certainly tells me a lot more than Task Manager. I can see all of the DLLs that run under the system process, but how do I know which one if any are causing the problems?

Plus you can look at the threads under system and these do tell you what amount of the cPU they are taking up. All the cpu usage is being taken up by srv.sys although Process Explorer splits it up into smaller parts. I'm not sure how to interprit this. I have attached a screenshot of what is happening.

If anyone can interprit the handwriting on the wall, I will be very glad!

[Geoff]

Looks like a virus to me. Srv.sys handles netbios. There's been several security problems with it over the years. Maybe you picked up something nasty somehow?

[woody]

There's another thing. The cpu does seem to calm down inbetween lessons. But it picks up again as soon as everyone starts to log on. And while the CPU is working flat out, so is the GB network connection.

[StewartKnight]

was this screen dump taken when the CPU was at full belt?

Perhaps you have a machine spamming the server!

[Geoff]

yes. what does netstat think?

[woody]

I've just realised (DOH, it was over two years ago that I bought it) that the server has two processors. Does anyone know where I can set priorities for these processors. I've found a simple setting under advanced in the SYSTEM control panel for performance but there must be something more detailed. Both processors are xeon 2.5gb

[Geoff]

Get a better operating system. Windows Server (Standard at any rate) does not allow you to set processor afinity.

[woody]

What system would you recommend? We currently have MS server 2003 enterprise

[Ric_]

@mark_wood: Linux of course

Enterprise should allow you to set process affinity though.

[woody]

Does linux have an alternative to group policy settings? We moved from linux to windows server so we could lock down the clients!