I have a Dell Inspiron 1520 laptop which I upgrade from Vista to Windows 7 early in 2010. It has been working OK until recently. Now some applications are slow to start, e.g., firefox and windows media player, and ProEngineer, which formerly ran OK, now has animation issues. I found that sometimes svchost.exe sticks at 50% CPU usage. Process explorer says that there are four services involved: cryptsvc, DNS cache, Nlascv, and lanman workstation. I can stop all the services except cryptsvc. I can recover only by stopping svchost.exe. I tried making cryptsvc manual and disabled but it will always start. If the PC is left alone for awhile, sometimes mcbuilder will run at 50%, and sometimes mcbuilder and svchost will both run at 50%. I can get svchost to stick by either trying to update from microsoft update or trying to setup windows backup. I looked for viruses, rootkits and spyware, but found none. I tried a clean boot and tried renaming the catroot2 folder, as suggested in the "cryptsvc, CPU hog" posting of Saturday, January 12, 2008, in the windows vista security forum, but the problem persists. I have process explorer logs I can post. Does anyone know how to cure this problem?

I have a inspiron 1525 and get this exact same problem and have tried the renaming of the folder, doesn't work for me either...

Please follow m guide here: http://www.msfn.org/board/index.php?showtopic=140264 Zip the etl file and upload it to your SkyDrive, please!"A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Thanks for your reply. I posted latency1.zip which resulted from trying to set up backup. I will post another file when I catch mcbuilder.

Hi, Please also try the following steps. 1. Install Microsoft Security Essentials and upgrade the latest virus definition. Then, restart the machine in Safe Mode and run a complete scanning. 2. Rename Catroot2 folder in Safe Mode. 3. Run SFC a. Click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. b. Type the command: sfc /scannow and press Enter. c. Once completed, restart the machine and check the result. However, if the issue persists, please upload the log file which was mentioned by Andre for research. Thanks, Novak

have you made a new trace?"A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Andre: Yes. I caught mcbuilder also, but the .zip file is large, so I broke it up into 4 files. I am a new user of SkyDrive - have you been able to find the files? If not, how do I make them available to you? -mcs208

Hi Novak, I tried all of your suggestions with the following results: 1 - Microsoft Security Essentials found no problems. 2 - I renamed the catroot2 folder in safe mode - I subsequently saw svchost stick. 3 - I ran sfc in safe mode - It said that it had found and repaired damaged files but that it could not repair some of them. I have posted the .etl files. mcs208 P.S. - the unrepairable file is rpcrt4.dll.mui

Hi, After uploading the file, please share the link here so that we can access uploaded information. Meanwhile, since certain file cannot be repaired, I suggest you perform an In-Place Upgrade to repair the whole system. In-Place upgrade (Repair install) =========== 1. Start the computer by using the current Operating System. 2. Insert the Windows 7 DVD in the computer's DVD drive. 3. Use one of the following procedures, as appropriate: If Windows automatically detects the DVD, the Install now screen appears. Click Install now. If Windows does not automatically detect the DVD, follow these steps: a. Click the Start Button, type Drive:\setup.exe in the start search box and then click OK. Note: Drive is the drive letter of the computer's DVD drive. b. Click Install now. 4. When you reach the "Which type of installation do you want?" screen, click Upgrade to upgrade the current operating system to Windows 7. Thanks, Novak

No, i don't find the files. You must post a link to your SkyDrive! http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65"A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Hi Novak: Thanks for your reply. Here are the links for the .etl files: http://cid-484f2fe66eec0c58.office.live.com/self.aspx/etl/latency1.zip http://cid-484f2fe66eec0c58.office.live.com/self.aspx/etl/latency2.zip http://cid-484f2fe66eec0c58.office.live.com/self.aspx/etl/latency2.z01 http://cid-484f2fe66eec0c58.office.live.com/self.aspx/etl/latency2.z02 http://cid-484f2fe66eec0c58.office.live.com/self.aspx/etl/latency2.z03 Here are the links for the process monitor files: http://cid-484f2fe66eec0c58.office.live.com/self.aspx/mcbuilder/mcbuilder.txt http://cid-484f2fe66eec0c58.office.live.com/self.aspx/svchost/svchost.zip Please let me know if you can download these files. The pc already has windows 7 installed. Perhaps I do not understand what you want me to do. I have found the following instructions for replacing files: http://support.microsoft.com/kb/929833 Would this be a suitable alternative to a repair install? Thanks, MCS208

Hi, the Trend Micro Scan Engine driver (VSApiNt.sys) is causing the high CPU usage. Are you using the latest version of Trend? André"A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Hi Andre': Thanks for your reply. The Trend Micro OfficeScan Client (PccNtMon.exe) is version 10.0 Service Pack 1. The Virus Scan Engine (64-bit) (VSApiNt.sys) is version 9.120.1004 mcs208

If it is the latest versions, remove it and use a freeware tool like Microsoft Security Essentials (MSE) Avira AntiVir Avast André"A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Hi Novak: I did a repair install, as you described, and the laptop seems to be working normally. Prior to the repair install I had some symptoms which may be of interest to other users: I applied the large June update. When the PC restarted, I could not reproduce the svchost problem by trying to set up windows backup. I thought the problem was fixed, but the pc would not start on re-boot until I did a system restore. Installing only the windows office updates worked ok, but the windows security updates did not. I turned off automatic updates to stop the endless cycle of update, won't boot, and system restore. Andre, I found that both Trend Micro Office Scan and Windows Defender were set up for active scanning. I turned off Windows Defender's active scan to avoid any conflict. Thanks to both of you for your help. Is there any other data you would like me to collect for your research? Thanks again, mcs208

The trace file says it was Trend Micro. Is the issue now fixed or why did you marked a reply as "answer"?"A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

Hi Andre: Yes, the laptop seems to be working normally now. Thanks for your help. mcs208

Hi Andre: I forgot to mention: Before the repair install, I was able to get svchost to stick with the Trend Micro application not running. I cannot remove the Trend Micro application. My son's school installed it on his (and everyone else's) laptop. If he does not have it, he is forbidden to connect to the school's network. Thanks again. mcs208