Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Memory Leak


  • Please log in to reply
4 replies to this topic

#1 thrillhouse

thrillhouse

  • Members
  • 1,040 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Va
  • Local time:06:11 PM

Posted 01 November 2006 - 05:27 AM

an instance of svchost.exe is eating up my memory which is in short supply. Here is a list of my runing processes. Any idea why this is or what to do about it?

Process PID CPU Description Company Name Virtual Size
System Idle Process 0 80.95 0 K
Interrupts n/a Hardware Interrupts 0 K
DPCs n/a 14.29 Deferred Procedure Calls 0 K
System 4 1,876 K
smss.exe 624 Windows NT Session Manager Microsoft Corporation 3,800 K
csrss.exe 676 Client Server Runtime Process Microsoft Corporation 26,584 K
winlogon.exe 700 Windows NT Logon Application Microsoft Corporation 54,516 K
services.exe 744 1.90 Services and Controller app Microsoft Corporation 37,768 K
svchost.exe 904 Generic Host Process for Win32 Services Microsoft Corporation 61,376 K
1XConfig.exe 1620 8021XConfig Module Intel Corporation 50,944 K
naPrdMgr.exe 1268 NAI Product Manager Network Associates, Inc. 30,140 K
svchost.exe 948 Generic Host Process for Win32 Services Microsoft Corporation 36,492 K
svchost.exe 992 Generic Host Process for Win32 Services Microsoft Corporation 145,380 K
S24EvMon.exe 1036 Event Monitor - Supports driver extensions to NIC Driver for wireless adapters. Intel Corporation 33,436 K
svchost.exe 1112 Generic Host Process for Win32 Services Microsoft Corporation 31,492 K
spoolsv.exe 1192 Spooler SubSystem App Microsoft Corporation 51,660 K
FrameworkService.exe 1052 Framework Service Network Associates, Inc. 52,876 K
Mcshield.exe 796 On-Access Scanner service Network Associates, Inc. 94,668 K
VsTskMgr.exe 1260 Task Manager : scheduling and OAS alerting service Network Associates, Inc. 44,448 K
mdm.exe 1380 Machine Debug Manager Microsoft Corporation 23,104 K
nvsvc32.exe 1680 NVIDIA Driver Helper Service, Version 67.42 NVIDIA Corporation 28,516 K
RegSrvc.exe 1900 RegSrvc Module Intel Corporation 34,636 K
svchost.exe 1492 Generic Host Process for Win32 Services Microsoft Corporation 36,592 K
iPodService.exe 1896 iPodService Module Apple Computer, Inc. 32,728 K
alg.exe 2984 Application Layer Gateway Service Microsoft Corporation 32,308 K
NetSvc.exe 3568 NetSvc Module Intel® Corporation 39,412 K
lsass.exe 756 LSA Shell (Export Version) Microsoft Corporation 41,900 K
ZCfgSvc.exe 1320 ZeroCfgSvc MFC Application Intel Corporation 53,176 K
procexp.exe 1068 0.95 Sysinternals Process Explorer Sysinternals 81,276 K
explorer.exe 3184 0.95 Windows Explorer Microsoft Corporation 96,532 K
carpserv.exe 1704 carpserv Conexant Systems 6,112 K
Apoint.exe 1712 Alps Pointing-device Driver Alps Electric Co., Ltd. 32,948 K
quickset.exe 1720 QuickSet MFC Application 38,180 K
jusched.exe 1752 Java™ 2 Platform Standard Edition binary Sun Microsystems, Inc. 18,340 K
shstat.exe 1780 On-access scanner statistics Network Associates, Inc. 39,740 K
UpdaterUI.exe 1788 Common User Interface Network Associates, Inc. 41,352 K
TBMon.exe 1796 TalkBack Monitor Network Associates, Inc. 27,768 K
iTunesHelper.exe 1868 iTunesHelper Module Apple Computer, Inc. 32,632 K
Directcd.exe 1912 DirectCD Application Roxio 36,968 K
ApntEx.exe 1920 Alps Pointing-device Driver for Windows NT/2000 Alps Electric Co., Ltd. 16,124 K
ctfmon.exe 1940 CTF Loader Microsoft Corporation 37,888 K
PRONoMgr.exe 2968 0.95 PRONotifyMgr Module Intel® Corporation 44,504 K
firefox.exe 464 Firefox Mozilla Corporation 91,340 K


Edited by thrillhouse, 01 November 2006 - 05:29 AM.


BC AdBot (Login to Remove)

 


m

#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,074 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:11 PM

Posted 01 November 2006 - 09:52 AM

Since you've got Process Explorer on your system - use it to identify what processes are running under that particular svchost.exe process (PID 992) Once you find what's running beneath it, let us know and we'll be able to move on with more stuff to do. (the easiest way to get the info is to hover your mouse over the svchost.exe process - then the program will pop up a list of services that are running under that process).

Are you performing any debug routines? I see that mdm.exe is running - this can be a result of a manual debug, or can be the result of an error.

I also notice what may be 2 anti-virus programs running on your system. This can cause major problems as they compete for access to files, and they compete for access to system resources. I'd recommend turning one of them off immediately.

I'd also suggest running this free, online scan (must use IE): http://safety.live.com/ It will scan for malware, clean your registry, delete your Temp files, and defrag your hard drive.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 thrillhouse

thrillhouse
  • Topic Starter

  • Members
  • 1,040 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Va
  • Local time:06:11 PM

Posted 01 November 2006 - 12:48 PM

thanks for the response. I had no idea two virusscans were runing. McAfee is all I have ever had on this machine, and all that appears on the taskbar.

The things that come up when I hover over svchost are:
AudioSrv
CryptSvc
Dhcp
EventSystem
Lanmanserver
Lanmanworkstation
Messenger
Metman
RasMan
Schedule
SENS
SharedAccess
ShellHWDetection
srservice
TapiSrv
Themes
winmgmt
wuauserv

and thats all of it. I will use the link you gave me but it won't work in firefox becuase I don't have active x for it (can't find it for version 2) and have read not to put it on firefox anyway. I just need to find where IE is cuz its not on my desktop.

#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,074 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:11 PM

Posted 02 November 2006 - 07:21 AM

I'm not familiar with these entries, and they're not on the corresponding svchost.exe on my system:

Vaisala MetMan = a virtual weatherman
Schedule
SharedAccess
srservice

I'd start with investigating those entries. Try looking in your Services applet for them (Start...Run...type in "services.msc" (without the quotes) and press Enter). Then Stop/Disable them (one by one) until you find the offending entry.

To use IE, just go to Start...Run...and type in "iexplore.exe" (without the quotes) and press Enter.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 thrillhouse

thrillhouse
  • Topic Starter

  • Members
  • 1,040 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Va
  • Local time:06:11 PM

Posted 02 November 2006 - 07:49 PM

used ie to run that website, it found two viri and defragemented the computer. Here is the info on the two programs: C:\Documents and Settings\Max\Local Settings\Temp\Rar$EX03.510\EvID4226Patch.exe => EvID4226Patch.exe.Vir
. Since deleting the two offending programs and turning the computer off and back on again, the svchost is now only using 100mb of memory. I tried disabling those services but none made any difference. I guess 100mb is ok, maybe the viri were using up resources and draining my computer, because now that they are gone, it seems like the problem has solved itself. Thanks for the help!

Edited by thrillhouse, 02 November 2006 - 08:34 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users