system (ntoskrnl.exe) high cpu usage in Windows 8.1

Sir/Mam,

I'm having this issue since last week, when i checked it is the "system" (ntoskrnl.exe) file which is using upto 18-24% of my CPU and causing all other applications to stutter for a second (incluuding Media player, mouse pointer, everything).

By using a Process Explorer software i found out that it's related to these values running under that file:

" ntoskrnl.exe!RtlSidHashLookup+0x1ffc  "

It slows down my PC for a second and it happens after every 5-6 seconds (approx.).

Using Microsoft Windows 8.1

Lenovo Z50-70

Need help.

October 2nd, 2014 4:36pm

Hi

Similar post here:

http://answers.microsoft.com/en-us/windows/forum/windows8_1-performance/ntoskrnlexertlsidhashlookup0x1ffc-using-constantly/f712cc9d-8dd3-4381-80ed-244cb1012990

Free Windows Admin Tool Kit Click here and download it now
October 2nd, 2014 8:34pm

Hi,

Have you tried the WPT (Windows Performance Toolkit) mentioned by ZigZag3143 in the link above? I suggest you install the tool, collect the trace file created by WPR, then upload the file to OneDrive, paste the download link here for further analysis.

http://windows.microsoft.com/en-in/onedrive/share-file-folder

October 3rd, 2014 6:46am

okay doing :)
Free Windows Admin Tool Kit Click here and download it now
October 5th, 2014 4:42am

Already read that, that guy was talking about faulty RAM, which isn't the issue here.

Because sometimes it doesn't happen after restart, and sometime it starts to happen and keeps on occuring after 5-6Secs.

So i think that it is due to some faulty driver.

October 5th, 2014 4:44am

Here's the compressed Rar File.

I don't have Zip Software. (I can do it as well if you require specifically the Zipped fie only.)

http://1drv.ms/1sV78yN

Free Windows Admin Tool Kit Click here and download it now
October 5th, 2014 5:23am

I tried to analyse the file but didn't understand what to do with the computation graphs hehe :)
October 5th, 2014 5:25am

When am I gonna get replied? :(

I found out that it has something to do with network connectivity..

I think that the wireless or LAN driver is faulty..!?

Free Windows Admin Tool Kit Click here and download it now
October 8th, 2014 7:12pm

Hi,

The WPA shows that it is WmiPrvSE.exe (WMI Provider Host)that occupies up to 20% CPU, and three threads are the causes, 8328\7988\8828. but hard to find deeper information from this, so please use process Explorer or process monitor to find more information about WmiPrvSE.exe and the 3 threads, you can refer to this link

http://social.technet.microsoft.com/Forums/en-US/77f8bc7d-663c-4c33-b732-f362c5585300/service-host-local-system-is-intermittently-using-30-of-my-cpu-windows-81?forum=w8itproperf

Regarding to the wireless or LAN driver, I suggest you update the driver to latest version if it doesn't work fine.

October 9th, 2014 12:32pm

Thanks I'll check those threads as well.

I had seen that too from Analyser but that excessive usage from WmiPrvSE.exe was for that moment only, it's System (ntoskrnl.exe) which uses my CPU.

Because when my PC stutters for a second, it's when System (ntoskrnl.exe)'s CPU usage goes to 18-22% and when WmiPrvSE.exe uses it, my PC doesn't stutter.

ntoskrnl.exe's high CPU usage and my PC's lag is synchronised that's what I'm trying to say.

Even right now WmiPrvSE.exe is the second top CPU (1-2%) using process in my list but my PC isn't stuttering, because System (ntoskrnl.exe) is quiet right now.

And this stuttering activity triggers (starts to happen until i restart my laptop) when my Power Source gets changed (From Batt. to Charger, or form Charger to Batt.) or when my internet goes offline (connectivity problem or if i turn on Airplane Mode).

Can you relate it? Or is it just a coincedence?

And sorry but I can't see any of these TIDs 8328\7988\8828 unfer WmiPrvSE.exe now in process explorer.

Process Explorer Image File: http://1drv.ms/1wlXiD7

Free Windows Admin Tool Kit Click here and download it now
October 12th, 2014 2:36pm

Hi,

I forget to mention that the TID can be different each time, so you should re-collect the trace file, find the TID, then run process monitor or explorer to find the corresponded TID at that time.

Actually the WPA above shows that the WmiPrvSE.exe is the culprit, regarding to the ntoskrnl.exe, if high cpu happens again, you can re-capture trace file adn upload it here for further analysis. 

October 14th, 2014 12:13pm

Sir,

Thanks for constantly helping me :)

The issue had stopped happening, but now it has started again (after 4 days) while i was playing a video game.

So I've uploaded NEW data on the OneDrive folder which contains the following:

1) New trace file

2) Process explorer image for the WmiPrvSE.exe (7172) [As per trace file TID]

3) Process explorer image for System (4).

It's true that WmiPrvSE.exe (7172) is using the CPU resource, but if you'll look at the second top most CPU using process it will "System (4)" and as I have said that my PC stutters repeatedly after every 5 secs so it's ntoskrnl.exe which goes up after every 5 secs.

Link: http://1drv.ms/104bjvM

Free Windows Admin Tool Kit Click here and download it now
October 17th, 2014 6:54pm

Hi,

The second trace file shows that WmiPrvSE.exe takes up 4.72% CPU and system (4)2.45%, much better than the first trace file, I would suggest you keep windows up-to-date, get the latest driver for LAN card, video card, audio card to get a better performance.

October 21st, 2014 4:57am

Sir,

It's System (4) indeed, now it's confirmed!

Here's how...

Restarting the Windows Management Instrumentation service stopped the excessive CPU usage of WmiPrvSE.exe (Network Service).

But my PC is still stuttering and it's because of that System (4) process only because Windows Task manager shows that it's utilising 17-25% of my CPU resource

THE NEW TRACE FILE PROVES IT.

And please take a look at the pic and trace file in my One Drive folder there are various 'similar' sub-processes named as:

ntoskrnl.exe!RtlSidHashLookup+0x1ffc

Each of them uses upto 14-17% of my CPU one by one with the dealy of 5 Secs.

Please help me out, i'm stuck with this issue :(

Here's the new trace file and Pic of thread #4:

http://1drv.ms/1yCfWsb

Waiting for your further assitance :)

Free Windows Admin Tool Kit Click here and download it now
October 26th, 2014 6:36pm

I am having what appears to be the same problem. I notice it because my mouse hangs for some time and then returns. My procexplorer also shows System 4. However, my stutter is not consistent as yours is. I notice no one has answered this last plea. Have you heard some other way? If so, please let me know. I was looking at my notskrnl.exe is Task Manager and it is shown as 6.3.9600.17476 dtd 10/29/2014.
February 3rd, 2015 12:45am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics