• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Page File Issues *LONG Post*

X

xdivenx

[H]ard|Gawd
Joined
Mar 4, 2008
Messages
1,941
Mods: Feel Free To Move This To a More Apporpreite Section, I was split in my decision of where to post.

Lately, over the past week, I have been getting popups saying that I am running out of virtual memory and that windows is increasing the size of the page file. The wierd thing is, I am not doing anything that in the slightest bit should even use 1/4 of my memory (I have 2 gigs). Then sometimes after windows increases the size of the page file, my system will lockup, and applications I have up will give me errors saying Instructions at referenced memory cannot be read, and the applications crash.

Here is the sequence of events from start to finish as taken from Event Viewer.

1. Application popup: Windows - Virtual Memory Minimum Too Low : Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications may be denied. For more information, see Help.

2. Application popup: Windows - Out of Virtual Memory : Your system is low on virtual memory. To ensure that Windows runs properly, increase the size of your virtual memory paging file. For more information, see Help.

3. Application popup: 1. My Chemical Romance - Teenagers - Winamp [Paused]: winamp.exe - Application Error : The instruction at "0x12402bea" referenced memory at "0x00000000". The memory could not be "read".

Click on OK to terminate the program
Click on CANCEL to debug the program

4. Application popup: rundll32.exe - Application Error : The application failed to initialize properly (0xc0000142). Click on OK to terminate the application.

5. I beleive this error had something to do with the failure of my applications.
The server {73E709EA-5D93-4B2E-BBB0-99B7938DA9E4} did not register with DCOM within the required timeout.

6. I am aware that photo editing can consume vast amounts of memory, but I wasn't editing anything.
Application popup: GIMP: gimp-2.4.exe - Application Error : The exception unknown software exception (0xc00000fd) occurred in the application at location 0x7c915321.

Click on OK to terminate the program

7. Application popup: firefox.exe - Application Error : The instruction at "0x6001285f" referenced memory at "0x05f5c000". The memory could not be "written".

Click on OK to terminate the program
Click on CANCEL to debug the program

8. Application popup: firefox.exe - Application Error : The instruction at "0x605833b5" referenced memory at "0x05f70000". The memory could not be "written".

Click on OK to terminate the program
Click on CANCEL to debug the program

9. At this time I did a hard shutdown.

I can't think of anything I did in the past week to cause this.

Is this a bad stick of memory? During bootup, it recognizes both sticks of 1gig each.

I occasionally do some not so legal software downloading over peer to peer networks, so I suppose there is a slight possibility that this is some kind of malware that is using my computer's resources as a zombie, however I don't notice any slowdown prior to the actual crashing and errors.

Here are the processes running.

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\VentSrv\ventrilo_svc.exe
C:\Program Files\VentSrv\ventrilo_srv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\wltray.exe
C:\Program Files\Creative\Shared Files\CTSched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe
C:\Program Files\Dynex G Desktop Card Adapter\DynexWCUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\mmc.exe
C:\Program Files\Steam\Steam.exe
C:\Documents and Settings\Super\Desktop\Life\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\csrss.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Broadcom Wireless Manager] C:\WINDOWS\system32\wltray.exe
O4 - HKLM\..\RunServices: [Task manager] taskmngr.exe
O4 - HKCU\..\Run: [CreativeTaskScheduler] "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - Startup: LimeWire On Startup.lnk = F:\1337aps\LimeWire\LimeWire.exe
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: ASUS WiFi-AP Solo.lnk = ?
O4 - Global Startup: Dynex Wireless Networking Utility.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP Premium\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP Premium\dapextie2.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Ventrilo - Unknown owner - C:\Program Files\VentSrv\ventrilo_svc.exe
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

Nothing comes up in NOD32, and I am installing xoftspy right now.

Thanks for reading this far and all help is appreciated.
 
How much memory do you have free when this happens.
Does taskmanager show anything using excessive memory?
 
Didn't think to check.

But right now, I only have firefox and steam open and My pagefile usage is at 1.2 Gigs.

pfusage-1.jpg


Edit, just in the few minutes it took to get this uploaded on photbucket, it went up to 1.5
 
Download Process Explorer and on the main window, right click the columns header and select "Select Columns".
On the Process Information tab, tick "Working Set Size", "Peak Working Set Size" and "Virtual Size" (so you can see what is going on and what has happened already).
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

You should be able to see from the Virtual Size which application is using the swapfile most as it is likely to be the process with the largest memory use (assuming only one process is the problem).

You can also tick the I/O reads or Writes to see which process has the most activity while the swapfile size is increasing.
 
internals.jpg


The processes with the most IO are

Steam.exe 1,014,310
lsass.exe 19k
ekrn.exe 15k
system 5k
firefox.exe 4k
svchost.exe 1k

I am worried about "system" from what i here, it is something not necessarily harmful, but something similar to logmein, which lets somone control your computer.
 
Your 2 main problems are caused by the Catalyst drivers and Steam.
The Catalyst are responsible for CCC and MOM.
Steam or Catalyst are probably responsible for inflating svchost as well so that will hopefully drop if the problem is fixed.
I would normally recommend you increase the swapfile size but given that it can increase of its own accord, it shouldnt run out of space unless on FAT32, the hard drive is nearly full or it gets truly massive.
Can you confirm any of the above?

To find how much each process is using when it runs out of VM, can you run an application which makes it run out of VM, alt tab to Process Explorer and post another screenshot?

edit:
System is part of Windows
 
I can try, I just got an error saying its low again, so im gonna edit some photos, play css, and rainbowsix vegas 2, and cod4 all at once.
 
Im up to 4gb on the page file usage.
Should i try to replicate it by running what i normally would to crash it, or just go crazy?

Normally when it crashes, its not insanely busy like im trying to make it now, its just CSS, firefox, winamp, and maybe gimp. It seems to me the issue is there when i am running for long periods of time.

Im thinking maybe it is a coding error where my primary storage isn't being told to dump itself, and when it fills it all goes to the page file?
 
Il look those 2 up.

I'm having a hard time making myself crash. I am up to 5gb usage and 90-95% on both cores. I really am unsure if I can do anything else simultaneously. Plus, i don't see if this will even help because its not what i would normally be doing.
 
Well taskmngr is going to hell then.

Ok, i fixed that, and im rebooting now. After I'm going to see if all my page file is being used.
 
xdivenx said:
Il look those 2 up.

I'm having a hard time making myself crash. I am up to 5gb usage and 90-95% on both cores. I really am unsure if I can do anything else simultaneously. Plus, i don't see if this will even help because its not what i would normally be doing.
Click to expand...

Why dont you do what you would normally be doing then?

Can you answer my question from post #6
I would normally recommend you increase the swapfile size but given that it can increase of its own accord, it shouldnt run out of space unless on FAT32, the hard drive is nearly full or it gets truly massive.
Can you confirm any of the above?
Click to expand...
 
Becase, it takes hours or a whole day for me to crash. I have 108 gigs of used space and 126 of free space on my fat32 partition. I would try to increase it manually, but it is able to do so on its own, as you pointed out. Also, I have been fine almost problem free on this build since November, but all the sudden I am having problems.
 
I took off both csrss in the config folder and also taskmngr.
Things seem to be fine now, im going to game for a few minutes and see if the problem reoccurs.
 
xdivenx said:
Becase, it takes hours or a whole day for me to crash. I have 108 gigs of used space and 126 of free space on my fat32 partition. I would try to increase it manually, but it is able to do so on its own, as you pointed out. Also, I have been fine almost problem free on this build since November, but all the sudden I am having problems.
Click to expand...

Ah gotcha.
You cannot create any file larger than 4GB on a FAT32 partition.

It seems that you do need a large swapfile just to run the basics on your PC.
If the problem persists, move the swapfile to an NTFS partition.
Also consider changing the ATI driver, that one has a bad memory leak !!
 
Im sorry, but i am getting tired, it is NTFS not FAT32... but the problem is now fixed anyway. After fixing both of those entries, my page file hovers around 400-600megs. Thanks for all your help tonight guys.
 
OldMX gets the Kudos for this.
I only kept the thread bumped lol.
 
See, even us old fellas come in handy sometimes... good job, OldMX... and yeah, I noted that as I just read this thread for the first time. Windows system files better be in \system or \system32 and that just one jumped right out even before I got to his post. Excellent detective work, regardless... I caught taskmngr.exe though, that one stands out like a sore thumb. :D

As for the OP being a "long post" shit, go look at some of my answers to people's problems - they're much longer. ;)
 
You must log in or register to reply here.
Back
Top