Users may sometimes experience a situation where the CPU for the system process is nearly 100% long. The traditional way to analyze this problem is to add CPU counters for all the threads in the system to the Performance Monitor, then find the highest CPU thread, and then parse the thread's memory address with the process Viewer and the PStat tool. In order to identify the most suspicious problem module. This method is very complex and is not suitable for ordinary users.
Process Explorer makes it easy to resolve some of the driver-related system process issues. For example, when the USB flash is plugged into the Wndows7 system and the Readboost feature is enabled. The CPU usage of the SYSTEM process increases, at which point the process Explorer can be used to locate the root cause of the problem.
In the Process Explorer main window, double-click the Properties dialog box for the system process and switch to the Threads card, then the ' CPU ' column to arrange all Chan Cheng according to CPU usage.
It is easy to see that the highlighted thread takes up the highest CPU and shows the module whose starting address is the Ecache.sys driver, and click the "module" icon to view its details.
As you can see from the Open dialog box, the Ecache.sys device driver is ReadyBoost and is used to populate the USB flash memory, which causes the system process to increase CPU share.