How can I tell which process is hogging resource

[Chris Mitchell]

I have something running that intermittently interrupts my streamed music
via iTunes Radio, either that or there's something wrong with the feed - Big
R Radio. Does anyone else have problems with this feed or is it just me?

I can see a spike on the Windows Task Manger Performance tab, but I can't
tell what is causing it, and by the time I've restored the TM window and
switched to the Processes tab there is nothing obvious.

I've scanned for issues with both CCleaner and Spybot and fixed all the
problems they find but the problem persists.

Does Task Manager or anything else produce logs that might tell me what's
causing the problem?

Any other suggestions?

TIA

Chris.

 

[1PW]

I have something running that intermittently interrupts my streamed music
via iTunes Radio, either that or there's something wrong with the feed - Big
R Radio. Does anyone else have problems with this feed or is it just me?

I can see a spike on the Windows Task Manger Performance tab, but I can't
tell what is causing it, and by the time I've restored the TM window and
switched to the Processes tab there is nothing obvious.

I've scanned for issues with both CCleaner and Spybot and fixed all the
problems they find but the problem persists.

Does Task Manager or anything else produce logs that might tell me what's
causing the problem?

Any other suggestions?

TIA

Chris.

Hello Chris:

Consider downloading "Process Explorer" from Microsoft's Sysinternals
Suite by Mark Russinovich.

<http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx>

When you see the system slow down, launch Process Explorer and you
should see the source of the trouble immediately. Process Explorer
can be made to replace the dated Task Manager so that when you issue a
"Three Fingered Salute", up pops Process Explorer.

HTH

 

[Chris Mitchell]

The interruptions are very brief and I suspect that by the time I'd launched
ProcessExplorer the interruption would be over.

Does PE produce logs that show what happened a few minutes ago?

 

[Bert Hyman]

In "Chris Mitchell"

I can see a spike on the Windows Task Manger Performance tab, but I
can't tell what is causing it, and by the time I've restored the TM
window and switched to the Processes tab there is nothing obvious.

Instead of restoring and switching tabs, why not just leave task manager
open to the processes list sorted by highest CPU use. When you notice
things stuttering, a quick glance at the window should show you who's on
top.

Of course, assuming that the problem's not on the other end, the
problem's just as likely due to some process briefly using your network
interface, which might be more tricky to track down.

 

[1PW]

The interruptions are very brief and I suspect that by the time I'd launched
ProcessExplorer the interruption would be over.

Does PE produce logs that show what happened a few minutes ago?

It does not produce a log per se. However, if you can launch Process
Explorer a few moments after you notice the slow down, place your
mouse pointer over a peak in CPU activity graphic and it will tell you
what it was.

Try it! You have nothing to loose and you'll windup replacing Task
Manager with Process Explorer anyway.

 

[Chris Mitchell]

Thanks 1PW.

I've installed PE - looks good so far.

I noticed you could see what was do what by hovering over the graph - pretty
damn good.

I think the problem is due to a pop up from iTunes telling me about new
version.

If I wanted to replace TM with PE how would I go about that, presumably I
have to some how map the 3 fingered salute to PE as opposed to TM, but how?

 

[Chris Mitchell]

No it's ccSvcHst.exe 2016 which points to Semantic, aka Norton Internet
Explorer, which I'm loathe to touch because of the security implications.
But at least I now know what it is.

 

[1PW]

Thanks 1PW.

I've installed PE - looks good so far.

I noticed you could see what was do what by hovering over the graph - pretty
damn good.

I think the problem is due to a pop up from iTunes telling me about new
version.

If I wanted to replace TM with PE how would I go about that, presumably I
have to some how map the 3 fingered salute to PE as opposed to TM, but how?

Launch Process Explorer. Then, Options > Replace Task Manager. Easy huh?

If you wish a complete refund under the liberal warranty, Options >
Restore Task Manager. It's a toggle. Nifty stuff.

You might like some of Mark Russinovich and Bryce Cogswell other
utilities. It's easy to remember. Enter sysinternals into your
browser's address bar. The DNS will remap to Microsoft's server where
you'll find that 10MB of a zipped file will get you well over 60
utilities that will occupy your spare moments for years. The suite is
still updated a few times per year too. Have fun.

In the malware newsgroups, where I'm much more tolerated, we also
depend on "Autoruns" from the Sysinternals Suite. It exposes all the
things that have been allowed to sneak into starting with the boot-up
of your system. It's quite informative.

I also like PageDefrag. I haven't tried any on Vista or beyond but
all I've used have worked OK with XP Pro x86-32bit so far.

 

[1PW]

No it's ccSvcHst.exe 2016 which points to Semantic, aka Norton Internet
Explorer, which I'm loathe to touch because of the security implications.
But at least I now know what it is.

If you've Norton'd yourself Chris, you can no longer be helped.

Step up to the malware groups sometime if you'd like to get out from
under that stuff.

 

[C A Upsdell]

Ahhh. I have the same problem, but in my case the 100% utilization
lasts 10-15 minutes. It happens at least 4 times a day. Does Symantec
have a fix for this? I have looked, but failed to find anything.

Don't know if it is relevant, but I have used Norton AV software for
many years, and the problem appeared only this year, when I installed
version Norton Internet Security 2009.

 

[Gerry]

1PW

You can use Task Manager and Process Explorer at will as long you do not
to select the option "Replace Task Manager" in Process Explorer.


--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[1PW]

Ahhh. I have the same problem, but in my case the 100% utilization
lasts 10-15 minutes. It happens at least 4 times a day. Does Symantec
have a fix for this? I have looked, but failed to find anything.

Don't know if it is relevant, but I have used Norton AV software for
many years, and the problem appeared only this year, when I installed
version Norton Internet Security 2009.

Hello:

It's easy to speculate and say - yes. However, since you're using
Mozilla's Thunderbird, follow the thread that Chris and I laid down
and see if Process Explorer can establish hard facts for us.

Post a reply with your progress and we can proceed from there.

Regards,

 

[C A Upsdell]

Hello:

It's easy to speculate and say - yes. However, since you're using
Mozilla's Thunderbird, follow the thread that Chris and I laid down
and see if Process Explorer can establish hard facts for us.

Post a reply with your progress and we can proceed from there.

I determined some time ago, using Process Explorer, that the culprit was
ccSvcHst.exe used by Symantec software.

I had read on another thread that this was a known problem, Symantec
does this every 4 hours ... though I only notice it, of course, if I am
using my PC at the time, which is why I see it no more than 4 times a day.

 

[1PW]

1PW

You can use Task Manager and Process Explorer at will as long you do not
to select the option "Replace Task Manager" in Process Explorer.

Hello Gerry:

Yes - If you return to Task Manager and close, the Ctrl-Alt-Del
sequence will only bring up the last used Task Manager. To bring up
Process Explorer, the procexp.exe application would need to be
launched from its location or use a shortcut if so desired.

Without doubt, Process Explorer is the crown jewel of the Sysinternals
Suite. I have found Process Explorer so valuable to me, that I no
longer need the Task Manager as I once did. Hence, it's what launches
with Ctrl-Alt-Del on all my Windows systems.

Regards,

 

[1PW]

I determined some time ago, using Process Explorer, that the culprit was
ccSvcHst.exe used by Symantec software.

I had read on another thread that this was a known problem, Symantec
does this every 4 hours ... though I only notice it, of course, if I am
using my PC at the time, which is why I see it no more than 4 times a day.

Hello:

This is one of the unfortunate side effects of NIS 2009 I suppose.
Many Norton devotees swear by their products without knowing what
troubles they could be in for. You might try approaching Tech Support
with your experience but I wouldn't be too shocked if you are told to
buy NIS 2010.

Some MS-MVPs will not deal with the invasiveness of Norton products
and will only call for "flatten & rebuild" to deal with Windows/Norton
related problems. This seems to be brought on by the ineffectiveness
or incompleteness of the Norton Removal Tool.

None of the antimalware heavy hitters I know recommend anything with a
Norton name on it. We consistently recommend the piecemeal approach,
finding instead, the best of breed. As an added bonus, the products
we regularly suggest are almost always free with lifetime licenses.
Some of those best of breed products do have paid upgrade paths that
might add greater operability or nice to have options. Do some
lurking in the antimalware newsgroups to watch our bickering, back
biting & software recommendations...

When your NIS 2009 comes up for its $70USD renewal this time, maybe it
will cause you to think this through a bit more. If not, good luck
and best of wishes to you.

Regards,

 

[Chris Mitchell]

I've also used NAV for years but have only had the problem for a few weeks
and haven't knowingly installed or changed anything prior to the problem
appearing.

 

[Gerry]

Chris

Contact Symantec.


--


Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Teflon]

Chris Mitchell wrote:
In the malware newsgroups, where I'm much more tolerated,> --

Would it be possible for you to provide a link to that Malware Group?

I would like to read what is being cussed or discussed there.

Thank you.