Lately (in the last 1-2 weeks) we have been getting CPU alerts on Windows RDS servers (until now W2K16).
Upon inspecting we find a number of AcroRd32.exe processes (typical 1-4) using a full CPU (fx 25% in a 4 CPU server).
Looking at CPU Time we find those processes to be top consumers, yesterday a process had used 4h30m of CPU time when we got the alert, see below.
When asking users, they seem to have a PDF open in IE but nothing out of the ordinary.
When we kill the AcroRd32.exe process IE report a crash and the tab that have Adobe Reader loaded closes.
I made a Process Dump and loaded into WinDbg and got this - none the wiser but maybe you know what to do with it:
---
Loading Dump File
User Mini Dump File with Full Memory: Only application data is available
WARNING: Minidump contains unknown stream type 0x15
WARNING: Minidump contains unknown stream type 0x16
Symbol search path is: symsrv*symsrv.dll*C:\Debuggers\DbgTools\sym*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Version 14393 MP (4 procs) Free x64
Product: Server, suite: TerminalServer DataCenter
Machine Name:
Debug session time: Thu May 23 17:14:31.000 2019 (UTC + 2:00)
System Uptime: 0 days 13:03:07.719
Process Uptime: 0 days 5:07:08.000
............................................................
wow64win!ZwUserGetMessage+0x14:
0:000> ~*kc
. 0 Id: ac7c.963c Suspend: 0 Teb: 00000000`0081d000 Unfrozen
Call Site
wow64win!ZwUserGetMessage
wow64win!whNtUserGetMessage
wow64!Wow64SystemServiceEx
wow64cpu!TurboDispatchJumpAddressEnd
wow64!RunCpuSimulation
wow64!Wow64LdrpInitialize
ntdll!LdrpInitializeProcess
ntdll!_LdrpInitialize
ntdll!LdrInitializeThunk
1 Id: ac7c.ceb8 Suspend: 0 Teb: 00000000`00823000 Unfrozen
Call Site
wow64cpu!CpupSyscallStub
wow64cpu!WaitForMultipleObjects32
wow64!RunCpuSimulation
wow64!Wow64LdrpInitialize
ntdll!_LdrpInitialize
ntdll!LdrInitializeThunk
2 Id: ac7c.7d68 Suspend: 0 Teb: 00000000`00826000 Unfrozen
Call Site
wow64cpu!CpupSyscallStub
wow64cpu!WaitForMultipleObjects32
wow64!RunCpuSimulation
wow64!Wow64LdrpInitialize
ntdll!_LdrpInitialize
ntdll!LdrInitializeThunk
3 Id: ac7c.c9dc Suspend: 0 Teb: 00000000`00829000 Unfrozen
Call Site
wow64cpu!CpupSyscallStub
wow64cpu!WaitForMultipleObjects32
wow64!RunCpuSimulation
wow64!Wow64LdrpInitialize
ntdll!_LdrpInitialize
ntdll!LdrInitializeThunk
4 Id: ac7c.b8a4 Suspend: 0 Teb: 00000000`0082c000 Unfrozen
Call Site
wow64cpu!CpupSyscallStub
wow64cpu!DeviceIoctlFileFault
wow64!RunCpuSimulation
wow64!Wow64LdrpInitialize
ntdll!_LdrpInitialize
ntdll!LdrInitializeThunk
0:000> .logclose
---
The above process had used 4h:30m of CPU time.
Anyone else experience these problems - or anyone know how to troubleshoot it?
Any help will be highly appreciated.
/Nicolaj
AdChoices