Solved

Windows out of Memory

Posted on 2004-10-12
5
141 Views
Last Modified: 2010-04-13
Hi,
    I been having this strange problem with my windows 2000 Advance Server for few months. After some time it starts to run out of RAM. I have Pentimum 4 Processor and 785MB RAM.
I tried to view the running process and noticed SQL Server was taking 128M of RAM. I stoped SQL Server from running. but that did not help.
if I restart my computer it works fine for some time then again starts acting crazy if i run applications such as Query Analyzer, Front Page, photoshop etc.
Title bar lose their color and Transperancy and any new application would complain system is low on memory can not create a image.
So far thats what i have in my running processess
(Order by RAM usage)
LSASS.EXE 31MB
IEXPLORER 19M
inetinfo 14 M (I dont use this machine as a web Server or database Server)
and so on...

Please advise

Thanks
0
Comment
Question by:khansoul
  • 3
  • 2
5 Comments
 

Author Comment

by:khansoul
ID: 12290227
Performance was set to APPLICATIONS, I just switched to BACKGROUND Services. But I dont think its a issue.
Total Paging size for all drives = 1536MB
Initial and max size for paginf file is 769 MB.

Thanks
0
 
LVL 8

Expert Comment

by:RevelationCS
ID: 12290689
you may have one of the virus variants (there are about 45) that affect the LSASS.... By default, I believe the LSASS.exe should only be using about 1MB.

Try the following resources:

Adaware - http://www.lavasoftusa.com/software/adaware/
Spybot S&D - http://www.safer-networking.org/en/download/index.html
Trend Antivirus Online Scanner - http://housecall.trendmicro.com
Stinger - http://vil.nai.com/vil/stinger

Also, see the following for more information:

http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/
http://www.trendmicro.com/vinfo/virusencyclo/default2.asp?m=q&virus=sasser&alt=sasser
http://www.microsoft.com/security/incident/sasser_print2000.mspx

Removal tool for variants A-F:
http://www.microsoft.com/downloads/details.aspx?familyid=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en

If you do a scan using the Trend Scanner as listed above, you should be able to determine which variant you are infected with along with cleaning directions.
0
 

Author Comment

by:khansoul
ID: 12290788
> Adaware - http://www.lavasoftusa.com/software/adaware/

Ran it already, nothing found

 > Trend Antivirus Online Scanner

Ran it once before, did not find anything. anyway i am running it again.

 > http://www.microsoft.com/downloads/details.aspx?familyid=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en

did not find any infection

I do northorn antiVirus schedule everynight, that did not find anything as well.

Please advise


0
 
LVL 8

Accepted Solution

by:
RevelationCS earned 125 total points
ID: 12293023
remember, the MS link ONLY finds a select number of the variants... also, remember that some viruses can bypass the local antiviruses and even some of the online scanners. Try taking a close look at http://www.trendmicro.com/vinfo/virusencyclo/default2.asp?m=q&virus=sasser&alt=sasser and see if any registry settings or other noticable indicators of an infection exist... I am not on my W2kAS machine and I've noticed the LSASS.exe is using more memory, but no where near what you have (5mb)
0
 

Author Comment

by:khansoul
ID: 12308570
ok, I ran trendmicro Software Then I Ran houseCall Software but no luck.
Nothing is helping me, I dont know whats making my Ram to leak.
any ideas?

Thanks
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In  today’s increasingly digital world, managed service providers (MSPs) fight for their customers’ attention, looking for ways to make them stay and purchase more services. One way to encourage that behavior is to develop a dependable brand of prod…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now