Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

"insufficient system resources + no task manager = malware?


  • Please log in to reply
11 replies to this topic

#1 Andrew_F

Andrew_F

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:07:06 PM

Posted 25 January 2010 - 03:16 PM

For the past few weeks I've noticed that my system performance deteriorates after a few days, to the point where I can't open a new application or window without receiving the error message "insufficient system resources exist to complete the requested service." Ctrl + Alt + Del does not work for pulling up the task manager to check which process(es) are hogging CPU/memory. About the only thing I can do is reboot, after which system performance is initially fine, but the process eventually repeats itself. It seems like something is causing a memory leak, I just don't know what.

I have booted in safe mode and ran AVG virus scan and IObit security for virus/spyware detection. A few pieces of spyware were removed, but this hasn't solved the problem. I've also run registry cleaning tools, though this also hasn't fixed anything. I've already tried reducing some of my startup programs and uninstalling old, unused programs.

I am using a Dell Dimension E510, running Windows XP (Media Center Edition), Service Pack 3. 2.8 GHz, 1 GB RAM.

Below is my HiJackThis log (ran in safe mode), any help or insights would be greatly appreciated!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IObit\IObit Security 360\is360.exe
C:\Program Files\IObit\IObit Security 360\IS360tray.exe
C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

{EDIT Removed HJT log to continue here~~boopme}

Edited by boopme, 25 January 2010 - 04:15 PM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,299 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:06 PM

Posted 25 January 2010 - 04:13 PM

FWIW: Slow Computer, It May Not Be Malware (Quietman) - http://www.theeldergeek.com/forum/index.php?showtopic=38264

If you do not have a clear idea that malware is involved...I suggest editing your original post and removing the HJT data. Leaving it in will merely result in this thread eventually be moved to our HJT forum, which has more than enough of a backlog already.

Louis

#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,492 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:06 PM

Posted 25 January 2010 - 04:17 PM

I removed log ... if needed we can use it later in the proper place.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,299 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:06 PM

Posted 25 January 2010 - 04:46 PM

Thank you, sir...appreciated :thumbsup:.

To the OP: Take a look at the first five paragraphs at http://computer.howstuffworks.com/question466.htm AND http://www.wisegeek.com/what-are-system-resources.htm.

You have 1GB of RAM...what programs are installed that use that RAM needlessly?

How large is C:? How much free space on C:?

Last time you ran chkdsk /r on this system? Ditto for defrag?

Do Control/Alt/Delete...and list all processes currently running.

Thanks.

Louis

#5 Andrew_F

Andrew_F
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:07:06 PM

Posted 25 January 2010 - 09:11 PM

Apologies for including the HJT log in this thread, my mistake. Thanks for editing that.

hamluis: C: is 75 GB, 47 of which is still free. I don't know if chkdsk /r had ever been run before, so I just did that. I did a defrag about 2 weeks ago (right before this issue started, actually). It was also defragged 2 days ago as part of the Auslogics BoostSpeed cleanup routine.

I'm not sure which programs might be using RAM needlessly. Often the only programs running are firefox or safari and outlook express, maybe ms word. We have AVG running, and a few hardware utilities (printer, wireless keyboard/mouse, webcam).

As for running processes, I'm pasting the list from the HJT process manager, hope that's OK:

[pid] [full path to filename] [file version] [company name]
608 C:\WINDOWS\System32\smss.exe 5.1.2600.5512 Microsoft Corporation
668 C:\WINDOWS\system32\csrss.exe 5.1.2600.5512 Microsoft Corporation
700 C:\WINDOWS\system32\winlogon.exe 5.1.2600.5512 Microsoft Corporation
748 C:\WINDOWS\system32\services.exe 5.1.2600.5755 Microsoft Corporation
760 C:\WINDOWS\system32\lsass.exe 5.1.2600.5512 Microsoft Corporation
960 C:\WINDOWS\system32\Ati2evxx.exe 6.14.10.4118 ATI Technologies Inc.
980 C:\WINDOWS\system32\svchost.exe 5.1.2600.5512 Microsoft Corporation
1100 C:\WINDOWS\system32\svchost.exe 5.1.2600.5512 Microsoft Corporation
1216 C:\WINDOWS\System32\svchost.exe 5.1.2600.5512 Microsoft Corporation
1260 C:\WINDOWS\system32\svchost.exe 5.1.2600.5512 Microsoft Corporation
1364 C:\WINDOWS\system32\svchost.exe 5.1.2600.5512 Microsoft Corporation
1512 C:\WINDOWS\system32\svchost.exe 5.1.2600.5512 Microsoft Corporation
1736 C:\WINDOWS\system32\spoolsv.exe 5.1.2600.5512 Microsoft Corporation
156 C:\WINDOWS\Explorer.EXE 6.0.2900.5512 Microsoft Corporation
916 C:\WINDOWS\system32\svchost.exe 5.1.2600.5512 Microsoft Corporation
1024 C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 1.14.0.0 Apple, Inc.
1072 C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe 8.5.0.401 AVG Technologies CZ, s.r.o.
1196 C:\WINDOWS\eHome\ehRecvr.exe 5.1.2715.3011 Microsoft Corporation
1352 C:\WINDOWS\eHome\ehSched.exe 5.1.2710.2732 Microsoft Corporation
1500 C:\Program Files\IObit\IObit Security 360\IS360srv.exe 1.1.0.116 IObit
316 C:\WINDOWS\stsystra.exe 1.0.4450.0 SigmaTel, Inc.
1820 C:\WINDOWS\System32\DLA\DLACTRLW.EXE 5.20.8.0 Sonic Solutions
1888 C:\Program Files\iTunes\iTunesHelper.exe 7.5.0.20 Apple Inc.
1912 C:\Program Files\Java\jre6\bin\jqs.exe 6.0.170.4 Sun Microsystems, Inc.
1980 C:\PROGRA~1\AVG\AVG8\avgrsx.exe 8.5.0.401 AVG Technologies CZ, s.r.o.
1988 C:\PROGRA~1\AVG\AVG8\avgnsx.exe 8.5.0.401 AVG Technologies CZ, s.r.o.
216 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 7.0.9466.0 Microsoft Corporation
456 C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 2.0.39.0 Hewlett-Packard Company
1160 C:\Program Files\HP\hpcoretech\hpcmpmgr.exe 2.1.1.0 Hewlett-Packard Company
1076 C:\WINDOWS\Philips\SPC230NC\Monitor.exe 1.6.2007.1210 PixArt Imaging Incorporation
520 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe 8.0.0.0 Adobe Systems Incorporated
376 C:\WINDOWS\system32\svchost.exe 5.1.2600.5512 Microsoft Corporation
548 C:\WINDOWS\system32\svchost.exe 5.1.2600.5512 Microsoft Corporation
624 C:\PROGRA~1\AVG\AVG8\avgtray.exe 8.5.0.427 AVG Technologies CZ, s.r.o.
1004 C:\PROGRA~1\AVG\AVG8\avgemc.exe 8.5.0.401 AVG Technologies CZ, s.r.o.
1168 C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe 2.245.1.0 HP
2056 C:\WINDOWS\system32\hphmon05.exe 5.3.5.0 Hewlett-Packard
2144 C:\Program Files\Java\jre6\bin\jusched.exe 6.0.170.4 Sun Microsystems, Inc.
2216 C:\WINDOWS\ehome\mcrdsvc.exe 4.1.2710.2732 Microsoft Corporation
2376 C:\Program Files\IObit\IObit Security 360\IS360tray.exe 1.3.0.99 IObit
2448 C:\Program Files\Microsoft IntelliType Pro\itype.exe 6.30.192.0 Microsoft Corporation
2472 C:\WINDOWS\system32\ctfmon.exe 5.1.2600.5512 Microsoft Corporation
2488 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 2.0.301.1654 Google Inc.
2660 C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 43.1.5.0 Hewlett-Packard Co.
2828 C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe 6.30.192.0 Microsoft Corporation
2876 C:\Program Files\AVG\AVG8\avgcsrvx.exe 8.5.0.401 AVG Technologies CZ, s.r.o.
3044 C:\Program Files\Logitech\SetPoint\SetPoint.exe 4.80.103.0 Logitech, Inc.
3100 C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe 43.1.5.0 Hewlett-Packard Co.
3120 C:\Program Files\Philips\Philips SPC230NC Webcam\TrayMin230.exe 1.0.0.4
3140 C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe 2.1.5.0 Hewlett-Packard Company
3432 C:\WINDOWS\system32\wuauclt.exe 7.4.7600.226 Microsoft Corporation
3612 C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE 4.82.11.0 Logitech, Inc.
4048 C:\WINDOWS\system32\HPZipm12.exe 8.0.0.0 HP
452 C:\WINDOWS\system32\dllhost.exe 5.1.2600.5512 Microsoft Corporation
2092 C:\WINDOWS\System32\alg.exe 5.1.2600.5512 Microsoft Corporation
2808 C:\WINDOWS\System32\svchost.exe 5.1.2600.5512 Microsoft Corporation
2844 C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe 2.0.0.3 Trend Micro Inc.
3208 C:\Program Files\iPod\bin\iPodService.exe 7.5.0.20 Apple Inc.
2920 C:\Program Files\Safari\Safari.exe 4.531.9.1 Apple Inc.
1792 C:\WINDOWS\system32\taskmgr.exe 5.1.2600.5512 Microsoft Corporation

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,299 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:06 PM

Posted 25 January 2010 - 10:20 PM

http://forums.logitech.com/t5/Mice-Trackba...f-CPU/m-p/86636

I would also set my pagefile to be managed by XP, rather than set minimum/maximum.

http://serverfault.com/questions/27568/wha...indows-pagefile

I see an iTunes Helper, but no iTunes. Is iTunes installed?

Adobe Reader is a system hog, I would replace it with Foxit Reader.

I don't think particularly highly of AVG, since it seems to have turned into a problematical AV program for many. I would try something lighter (but that's a personal bias).

You have an HP system, which means that it came with software you didn't need to take up some system resources. But the only way to get rid of such would be to do a clean install, using a MS Genuine XP CD.

Nothing major that I can see...just little things that will make your resources more efficient.

Louis

#7 Andrew_F

Andrew_F
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:07:06 PM

Posted 26 January 2010 - 01:26 AM

Yes, iTunes is installed, but not used frequently. I suppose the iTunes Helper could be disabled, then.

Any suggested alternatives to AVG?

The system is a Dell, I believe the HP stuff is related to our printer.

Like you said, I didn't think there was anything major running in that list. Doesn't seem like enough to completely exhaust all system resources. The last occurrence of this problem was this morning, and the only programs that had been left running (and the only ones that had been actively used in the previous 48 hours) were Safari and Outlook Express. I'll see how it behaves after cleaning out some of those unnecessary processes.

Would it be worth it to add more memory to the system?

#8 hamluis

hamluis

    Moderator


  • Moderator
  • 56,299 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:06 PM

Posted 26 January 2010 - 10:14 AM

I can't answer that...value is determined by the user/owner of a system. I can tell myself how to spend my money and what practices to implement...I can share that with others...but the user must make the key decisions re her/his system.

Resource problems were quite common with Windows 9x, probably due to the much smaller size of hard drives and less RAM availability, as well as technology which was inferior to that of today.

I'm not technically qualified to suggest a way to cure something like this, since it's unfamiliar territory for me with XP. I will say that I would certainly increase my RAM installed if I received such message on XP, since RAM is the workhorse for the O/S.

Louis

#9 hamluis

hamluis

    Moderator


  • Moderator
  • 56,299 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:06 PM

Posted 26 January 2010 - 10:14 AM

Duplicate post.
Louis

Edited by hamluis, 26 January 2010 - 10:18 AM.


#10 Andrew_F

Andrew_F
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:07:06 PM

Posted 26 January 2010 - 02:51 PM

This morning when I came to the computer I noticed something new - the system had gone into hibernation. It has been set to hibernate after 3 hours of inactivity, but it hasn't been doing this. Often the monitor wouldn't even turn off after the appropriate amount of time. I had basically just gotten used to this "quirk" and practically ignored it. Hence my surprise and confusion this morning when the monitor and desktop power light were off. When I pressed the power button, the computer woke back up and worked as normal.

Since the problem described in the OP started, it always seems to occur after being away from the computer for a while. I now wonder if there was a connection between the computer not going into hibernate and the "insufficient system resources" error? Not sure what fixed the hibernating issue, or if it solved the original problem, but I'll keep an eye on it.

And yes, I think I'll try adding more memory. Can't hurt.

#11 hamluis

hamluis

    Moderator


  • Moderator
  • 56,299 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:07:06 PM

Posted 26 January 2010 - 02:55 PM

http://support.microsoft.com/kb/909095

Louis

#12 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:12:06 AM

Posted 26 January 2010 - 03:22 PM

THe issue is your hibernation and the amount of RAM you have. Upgrade to 2gigs of RAM or 3.25Gigs or lower the amount of things running at boot up. All those things get cached to RAM, and if they all total more then 1Gig it gets placed into SWAP aka pagefile.sys and that can slow down a computer and cause your error. On a system running 1Gig of RAM I highly recommend getting rid of all the above mentioned boot up options but those critical to system security.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users