• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

SAV upgrade spikes spoolsv.exe to 100% CPU usage

S

Steve

Lifer
Our network staff recently upgraded our whole office building from SAV 8 to 10. A handful of people were affected such that spoolsv.exe was spiking the CPU to 100% use. The system log recorded an error with the following parameters:

Text

I also got a 64KB dump file from an affected computer (which has since been re-imaged) if anyone could take a look at it. I'm trying to get all our computers set to dump kernel memory, I think I'll set that in our next image.

Thanks for any help you can offer.
 
Almost forgot, we did antivirus and antispyware scans but that didn't fix it, we removed SAV with both symnrt and NoNav and the spooler still had the same problem, and we emptied the spool folder, and replaced the executable. Nothing has fixed this so far.
 
Originally posted by: sm8000
Almost forgot, we did antivirus and antispyware scans but that didn't fix it, we removed SAV with both symnrt and NoNav and the spooler still had the same problem, and we emptied the spool folder, and replaced the executable. Nothing has fixed this so far.
Click to expand...

Exclude the spooler directory from the AV scan by adding that directory as an exclusion in the main SAV console.
 
Would that fix it even when there is no AV installed whatsoever? It was behaving the same way then. I will give it a shot though.
 
I'm only reporting one issue: Upgrade to SAV 10 causes spoolsv.exe to spike. Spoolsv.exe continues to spike despite removal of SAV. Typical spoolsv remedies do not work, and this does not appear to be a malware infection.

I did get a suggestion from a consultant here who did the SAV rollout, he found it on a newsgroup where the person reporting found it does happen in a mixed Netware/Windows environment (like ours), and that was to move the spoolsv.exe executable into the Startup folder. I will also try that one.
 
Well, I did set that folder and the exe to be excluded from file system scan but the same symptom recurs. Ditto for the moving of the exe to the startup folder (it wouldn't start up) and placing a shortcut to it there.
 
If SAV is completely uninstalled from the machine, including the removal of all Symantec products, then it's probably not the culprit.

Does this still happen in safe mode on a machine with all Symantec products uninstalled?
 
Spoolsv.exe does not normally start in Safe Mode, IIRC. I can check though.

It was only affected after the upgrade to SAV 10, and continued despite its removal.

Did the dump I emailed you help any?
 
The dump is corrupt; send others, plus MPS Reports.

We're now t-shooting two issues - one is spoolsv.exe 100% CPU, and the other is a BSOD, apparently. We need to be sure and clarify exactly what is happening, when, on which machine(s). Can you provide some background information on each of the two issues? For example, when does the BSOD happen? When does the 100% CPU issue happen?

http://torque.oncloud8.com/archives/000384.html might be helpful on the spoolsv.exe CPU issue.
http://www.jsifaq.com/SF/Tips/Tip.aspx?id=10551 is another interesting bit of info on same.


 
I had forgotten about the BSOD; it may as well be a non-issue now. I tried the first link's suggestion already, however the second one looks interesting. I'll give it a shot tomorrow if I can; otherwise I have to re-image that laptop as it belongs to a department's executive director and he's been waiting to print all week. Plus I'm in California Fri-Tues.
 
Can you provide basic details on when the 100% cpu issue happens?

Is it all printers with a certain printer type?

Some background information would be useful.
 
The symptom was first noticed after the first reboot upon completion of the upgrade. Any time the print spooler service is launched (automatically on startup) it either jumps to 99% immediately, or if no printers are installed it does if I open the (empty) list of printers in the Start menu. The printers are all HP Laserjets, networked and connected either by NDPS or Novell iPrint (in some cases local connections too). I tried deleting all printers but this didn't help either. Ages ago there were cases of people's spoolsv.exe spiking the CPU to max but this was solved with an upgrade/reinstall of CutePDF Writer. Here that was the first thing I tried but no dice. I've tried deleting all printers and print emulators (like PDF makers) and that didn't fix it.
 
All XP SP1 machines. I have been home for several hours now but I will try to get a .cab for you when I am back at work in the morning. Maybe what I'll do is make an image of the affected install, re-image the guy's machine so he can get back to work, and put the affected image on another machine so this research can continue. I am really curious to find the root of this issue.
 
I did add all 67 updates short of SP2, but we haven't deployed SP2 in our office yet save for a handful of users. Nonetheless I will try that.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top