MSMPENG.EXE, TrustedInstaller.exe, SearchIndexer and SLSVC.EXE at 100% CPU on my Vista Machines
UPDATE: Looks like this bug has been fixed in Vista Service Pack 1 (SP1). I've upgraded and I've not seen this issue again.
I give Microsoft a lot of credit for the work all their bloggers do to increase the transparency of their business. Specifically the developers and folks in the developer division (devdiv) do a great job of letting us know what's up, especially when things are wrong.
However, when I have a problem, and I Google and Google...
(and sometimes find myself - that's always disheartening when you Google for a problem, find yourself, then at that moment realize that not only have you had this problem before, but you're still screwed.)
and find a huge number of folks "suffering" on blogs, on Usenet, in Forums with some similar problem, and nary a Microsoft blogger or MVP in sight.
Try Googling for any subset of these words "MSMPENG.EXE, TrustedInstaller.exe and SLSVC.EXE at 100% CPU on Vista Machines" and you'll discover a mass of pained and screaming Vista users, yearning for a HotFix.
When I see things like this, I think "If I worked for Microsoft, fixing this problem could be a HUGE opportunity." This isn't a small problem, if Google has anything to say about it, but rather something is really sick somewhere.
I've had a pretty decent Vista experience, recognizing that I'm an Early Adopter. Early Betas hurt me, and an RC1 or two destroyed a machine or two, but after release (RTM) including installation and day to day use, my experience has been nice. My wife, my mom, and myself all run Vista. I also got OneCare for the whole family, having had nice experiences as a Beta Tester.
Now, in the last month, on EVERY Vista Machine I have, from a slow AMD K5 my wife runs, to a Toshiba m200 Tablet, an IBM T60, and a home-built monster, has suffered with these issues. All of them, every machine and every issue:
- MSMPENG.EXE - Some say this is Windows Defender, others say it's the OneCare AntiVirus. SysInternals ProcMon says it's constantly going over totally innocuous files over and over again. Note that I've turned off both OneCare and Defender on these machines. (Not sure why there's two apps?) This process just won't stop sucking the life from my machines. Things are SO slow, especially when the process hits a 4 gig ISO or 12 gig VM Disk Image.
- TrustedInstaller.exe - This application has such a suspicious name I immediately started Googling around thinking I was infected with some evil Trojan. I mean, "TrustedInstaller.exe"? Seriously, like I'm going to see this in Taskman and say to myself, "oh, as long as it's TRUSTED." This process starts up seemingly randomly, even when I'm not installing things. It runs for 10 minutes or so, then disappears. I fear it. I fear iTunes on Vista more, but this one is pretty bad also.
- SLSVC.EXE - The Software Licensing Service. I guess it licenses software, or hands out licenses, but there's no telling when it'll pop up, churn for an hour, then leave.
- SearchIndexer.exe and friends - These guys just won't stop. There's usually 3 or 4 of them going all at once, but I still have to wait for a count of one-one-thousand, two-one-thousand, three-one-thousand, four-one-thousand before Search Results come back.
I don't like having to run my Operating System with Taskman constantly open because I no longer trust background processes. I'd like someone at Microsoft who works on one of these apps, help me understand what crazy edge case I've hit on every machine I own and how I can make it stop. I mean this not as a troll, and if you read my blog, you know I never blog bile, but I'm really interested in figuring out what's up.
What process is currently sucking up YOUR CPU? (Mac and Linux folks are welcome to join in, as I run TOP in a Terminal constantly on my Macs also.)
About Scott
Scott Hanselman is a former professor, former Chief Architect in finance, now speaker, consultant, father, diabetic, and Microsoft employee. He is a failed stand-up comic, a cornrower, and a book author.
About Newsletter
But Vista is tons better if you disable all the background crap (Defender, System Restore, etc.). Personally I think we need anti-anti-virus software, it's the #1 destroyer of system performance on the planet.
http://www.codinghorror.com/blog/archives/000803.html
Turned out it was a bug in the Windows Updates service. Just delete its cache dir (%windir%\SoftwareDistribution) and you're solved (Quick! It's gonna freeze soon! Or boot in Safe Mode).
Oh, and about Jeff's note regarding anti-virus: When neighbours and friends complain that their computer is soooo slooow, the first thing I do is uninstall their Norton AntiVirus (and replace it by something else). That's how I've become known as The Living God in my neighbourhood :-D
In response to Scott:
Until recently, I used to install AVG Free Edition on their computers.
But I'll have to find something else (unless they are ready to pay) since GriSoft recently discontinued their Free Edition :-(
(As far as I'm concerned, I purchased an AVG license for each computer in the house. The discount on 2-years license + small quantity makes it a good deal IMO).
When I was an AVG Free user, I've received lots of warnings (during daily AGV updates) that the product was about to be discontinued on Feb 15, 2007 (IIRC). On one of the home computers that we use less, I even had a "Product discontinued. No more updates." kind of message the 1st time I switched it on after that date.
Wait, I just checked http://free.grisoft.com. It does indeed look like the product is still there. WTF!?
http://www.digitalmediathoughts.com/forums/viewtopic.php?p=69090
http://free.grisoft.com/doc/avg-anti-virus-free/lng/us/tpl/v5
On your Mac, have you used GeekTool? Among other things, you can use it to show the output from top on your desktop.
http://lifehacker.com/software/plain-text/geek-to-live--monitor-your-mac-and-more-with-geektool-244026.php
Another nice (and unobtrusive) Mac system monitoring tool is MenuMeters.
http://www.ragingmenace.com/software/menumeters/
It was due to some auto-scanning. I changed the settings so it runs once a week (the largest interval) on Sunday when I don't use my work PC. When I open the PC on Monday, the first thing I do will be to open OneCare and cancel the scan.
Seems you cannot avoid it wanting to scan at least a week. Very annoying.
http://www.innerexception.com/2006/11/cause-at-least-for-me-of-runaway.html
http://gallery.live.com/liveItemDetail.aspx?li=681102c2-5dde-44d2-a33a-96dbff32517a&bt=1&pl=1
Sounds like you have some good answers, but next time, try running strings on the unknown exe and see what interesting information you can find.
Seriously though... Norton gets my WTF award. When I did tech support for a Web hosting company, there were so many email problems caused by Norton updates.
And also copying files over the network........really slow.
Wessam - Ya, I've noticed that file copying on the network is incredibly slow on Vista. Copying from a removeable media is also very slow. Strange.
I tossed Live OneCare two days after installing: I hated being reminded to backup when I have Acronis TrueImage doing all my backups already (and no way to turn it off). And the CPU cycles when it would go into a scan!!!
And Windows Defender is long gone too. I currently just run ClamWin so that I have antivirus conveniently available for any manual scans I wish to do.
1.) I installed Toshiba's Utilities for Vista on my M200 (not technically supported) and that spawned a whole bunch of different processes and peaked my CPU most of the time.
2.) OneCare. This was on XP but it still was a resource hog.
I'm running Vista on my M200 now and it idles at about 3% CPU usage (with sidebar and all the default apps that start up with Vista).
Hope you can sort it out!
From the reviews I have seen, the Windows built-in anti spyware and anti virus (Defener, OnceCare..etc) get one of the lowest ratings because they catch fewer malware than the commercial ones. If these are also causing stability issues, I would disable them.
A little offtopic:
when I download a suspecious file, I run it in a sandbox first using the free Sandboxie and see what it did. It's more practical than using a virtual machine. In a VM, you're not sure what the thing did to your system and what files were installed. There's also a commercial prodyc called Buffer Zone pro.
I think Outlook 2003 is broken in a serious way when connecting to Exchange Server. When I disconnect the network cable to carry my notebook to a conference room, Outlook 2003 becomes very slow and won't relinquish its connection to Exchange Server (e.g. it attempts to connect, can't find a network connection, and hangs for several minutes). This isn't exactly 100% CPU usage, but the computer becomes sluggish when it happens. I may install Office 2007 after I finish my last college course in a few weeks and get part of my life back.
I haven't been happy with PC-cillin for several reason and my license expires in a few days, so let's just say it's going away soon. Any advice on good antivirus and firewall software? I've already tried Windows Live OneCare and wasn't quite happy with it (notably its inadequate support of limited user accounts on Windows XP).
Windows Explorer is the one oddball in the bunch because when it goes south for the count it takes the entire system with it--desktop and all. The only way I've ever recovered from Windows Explorer using 100% CPU time is by turning off my notebook.
TrustedInstaller is also used by Automatic Updates, if I remember correctly. That might be causing the "bursts" of high CPU usage. I have been having a problem lately on my older machine (an XP box) and Microsoft Update using 100% to the point of absurdity... it's only a 1 GHz P3 CPU, and it brings the computer to it's knees just to check for Windows & Office updates. Yes, I've deleted the update cache like the other commenter says. No joy.
As far as copying files over the network being slow... have you tried disabling Windows Firewall? If you've got a Gigabit network, it can take quite a bit CPU time to process all packets through the firewall. Kind of lame, but whatever. That trick worked for me in XP, at least. Might need some further tweaks with Vista's new networking stack/features. Or it might just be a bug.
This little tool (http://mion.faireal.net/BES/) "solves" the problem. Well, at least it keeps GDS wild behavior under control.
Not sure if it works on Vista.
Its a perpetual cycle and no end in sight.
One small note on antivirus, I recently switched to Kaspersky Internet Security and have had a great experience with it. Just make sure you run it in the "basic" mode rather than the "advanced" mode - just trust me on that :-)
I also wrote an article that describes how ReadyBoost actually slows your machine down substantially on every restart and wake cycle. The short version is that ReadyBoost rewrites your USB drive's entire cache on every restart and wake, causing a big performance penalty while the file is rewritten.
Beach balls of death, anyone?
In no particular order:
iTunes - I have no idea why, in this day and age, it still needs 10-15% CPU, when performing purely decoding/playback, on the 2.33GHz Core 2 Duo I have in my MacBook. I don't like WMP much, but at least on the performance side of things, it feels less like a pig.
Safari/Firefox/IE7 - Does inexplicable waits, and then a sudden barrage of fast loading come part and parcel with "Web 2.0" browsers? I'd love to know what's going on during the "thinking, please wait" delays I with all of these browsers.
I googled AVG Trustedinstaller.exe and this was the first page that came up.
I searched the above combo because I never had a problem with Trustedinstaller.exe UNTIL I put the latest AVG on my system the other day. TrustedInstaller.exe has only been appearing after AVG does an update (and speaking of updates, since when are we required to reboot after a definition updated in AVG? Very annoying...happens everytime).
Anyway....my frustrated 2 cents :)
Oh well now I know at least that I'm not the only guy having this issue and that it's not some kind of virus lol.
Let me know if it works on your machine - so far mine seems a liitle better.
Thank god I use a Mac for my professional work...
Comments are closed.
More info here. http://forums.microsoft.com/msdn/showpost.aspx?postid=1267586&pageid=1&siteid=1
I've turned off the indexing service.