Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Server slows down to a crawl, but works fine after a restart for a while. Any id


  • Please log in to reply
6 replies to this topic

#1 pcpppp

pcpppp

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 02 May 2018 - 07:14 PM

Long story short, we have a machine with Win Server 2012 that becomes unusably slow after a period of time. Usually about a week. Meaning you can't access shared drives or it takes forever, you can't RDP or teamviewer in, and when I go to the actual server, its not usable either. It will take 10 minutes for the screen to come up for me to enter the user password. Then when I get in, folders and programs say "not responding" often and are basically unusable. Restarting it fixes it and makes it completely normal again for a while.

 

It has a RAID5 and the HP RAID software says the drives are good. I did a memory test (memtest64) from within windows for 1 hour and no issues. I ran sfc /scannow and everything is fine with that too. Not sure what's causing the problem and if its hardware or software related. Any ideas?

 

Xeon E5-2620 v4 @ 2.1GHz, 16 gigs ram, 3x 600GB hard drives in a RAID5. Windows Server 2012, symantec endpoint protection, and malwarebytes premium are on it. We basically have a medical program that doesn't use much resources that run off the server and some basic file sharing with excel, word and pdf files mostly, etc...  Also checked logs and don't see anything weird.



BC AdBot (Login to Remove)

 


#2 JohnnyJammer

JohnnyJammer

  • Members
  • 1,117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:QLD Australia
  • Local time:09:19 AM

Posted 02 May 2018 - 09:51 PM

As soon as i saw "symantec endpoint protection" i thought BANG thats yah problem mate.

That is just pure junk that software and not worth the HDD space.

 

Remove that and i can almost guarantee it will resolve the isue and remember to remove the network driver as well in device manager after removing symantec (Its a symantec driver).

 

Forgot to mention, check out the resource monitor and see what I/O read/writes are being performed and take note of whats consuming memory because im guessing after a  few days your RAM would be all used up.


Edited by JohnnyJammer, 02 May 2018 - 09:52 PM.


#3 pcpppp

pcpppp
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:04:19 PM

Posted 03 May 2018 - 02:26 AM

I'll do that, thanks! What would you consider the best server antivirus?

 

 

As soon as i saw "symantec endpoint protection" i thought BANG thats yah problem mate.

That is just pure junk that software and not worth the HDD space.

 

Remove that and i can almost guarantee it will resolve the isue and remember to remove the network driver as well in device manager after removing symantec (Its a symantec driver).

 

Forgot to mention, check out the resource monitor and see what I/O read/writes are being performed and take note of whats consuming memory because im guessing after a  few days your RAM would be all used up.



#4 JohnnyJammer

JohnnyJammer

  • Members
  • 1,117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:QLD Australia
  • Local time:09:19 AM

Posted 03 May 2018 - 07:08 PM

Personally, none. I dont have or use AV on any of my servers.

I used to on one but that was internet facing but i found too many issues especially with SEP and DFRS replication.

You already have malwarebytes preium, but then again i have my servers so locked down that the only files anyone will be able to over write are the ones i allow.



#5 xrobwx

xrobwx

  • Members
  • 183 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Panama City Beach, FL USA
  • Local time:06:19 PM

Posted 24 May 2018 - 08:01 AM

Having 2 AV programs can cause problems. https://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/#entry2316629 Also, check out your scheduled tasks and make sure there are none that you don't need, running during "working" hours.


Edited by xrobwx, 24 May 2018 - 08:02 AM.

7581204627.png


#6 Sneakycyber

Sneakycyber

    Network Engineer


  • BC Advisor
  • 6,123 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ohio
  • Local time:07:19 PM

Posted 11 June 2018 - 06:14 PM

Besides Antivirus programs fighting each other a memory leak will exhibit these exact symptoms. Rebooting the server will free up the memory that was being held by the application. In Resource manager check if your using All of your available ram resulting in increased read/writes to your pagefile. 


Chad Mockensturm 
Network Engineer
Certified CompTia Network +, A +

#7 MasterNe0

MasterNe0

  • Members
  • 144 posts
  • OFFLINE
  •  
  • Local time:07:19 PM

Posted 15 June 2018 - 08:38 AM

I would check task manager, see if anything hitting 100%. I seen this caused by something using either all my memory or all my CPU causing issues like this. Also are you running any other services besides the medical one like email hosting off the server?






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users