Solved

Windows out of Memory

Posted on 2004-10-12
5
144 Views
Last Modified: 2010-04-13
Hi,
    I been having this strange problem with my windows 2000 Advance Server for few months. After some time it starts to run out of RAM. I have Pentimum 4 Processor and 785MB RAM.
I tried to view the running process and noticed SQL Server was taking 128M of RAM. I stoped SQL Server from running. but that did not help.
if I restart my computer it works fine for some time then again starts acting crazy if i run applications such as Query Analyzer, Front Page, photoshop etc.
Title bar lose their color and Transperancy and any new application would complain system is low on memory can not create a image.
So far thats what i have in my running processess
(Order by RAM usage)
LSASS.EXE 31MB
IEXPLORER 19M
inetinfo 14 M (I dont use this machine as a web Server or database Server)
and so on...

Please advise

Thanks
0
Comment
Question by:khansoul
  • 3
  • 2
5 Comments
 

Author Comment

by:khansoul
ID: 12290227
Performance was set to APPLICATIONS, I just switched to BACKGROUND Services. But I dont think its a issue.
Total Paging size for all drives = 1536MB
Initial and max size for paginf file is 769 MB.

Thanks
0
 
LVL 8

Expert Comment

by:RevelationCS
ID: 12290689
you may have one of the virus variants (there are about 45) that affect the LSASS.... By default, I believe the LSASS.exe should only be using about 1MB.

Try the following resources:

Adaware - http://www.lavasoftusa.com/software/adaware/
Spybot S&D - http://www.safer-networking.org/en/download/index.html
Trend Antivirus Online Scanner - http://housecall.trendmicro.com
Stinger - http://vil.nai.com/vil/stinger

Also, see the following for more information:

http://www.liutilities.com/products/wintaskspro/processlibrary/lsass/
http://www.trendmicro.com/vinfo/virusencyclo/default2.asp?m=q&virus=sasser&alt=sasser
http://www.microsoft.com/security/incident/sasser_print2000.mspx

Removal tool for variants A-F:
http://www.microsoft.com/downloads/details.aspx?familyid=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en

If you do a scan using the Trend Scanner as listed above, you should be able to determine which variant you are infected with along with cleaning directions.
0
 

Author Comment

by:khansoul
ID: 12290788
> Adaware - http://www.lavasoftusa.com/software/adaware/

Ran it already, nothing found

 > Trend Antivirus Online Scanner

Ran it once before, did not find anything. anyway i am running it again.

 > http://www.microsoft.com/downloads/details.aspx?familyid=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en

did not find any infection

I do northorn antiVirus schedule everynight, that did not find anything as well.

Please advise


0
 
LVL 8

Accepted Solution

by:
RevelationCS earned 125 total points
ID: 12293023
remember, the MS link ONLY finds a select number of the variants... also, remember that some viruses can bypass the local antiviruses and even some of the online scanners. Try taking a close look at http://www.trendmicro.com/vinfo/virusencyclo/default2.asp?m=q&virus=sasser&alt=sasser and see if any registry settings or other noticable indicators of an infection exist... I am not on my W2kAS machine and I've noticed the LSASS.exe is using more memory, but no where near what you have (5mb)
0
 

Author Comment

by:khansoul
ID: 12308570
ok, I ran trendmicro Software Then I Ran houseCall Software but no luck.
Nothing is helping me, I dont know whats making my Ram to leak.
any ideas?

Thanks
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
auto copy 8 617
How to NTBackup if SQL Server running? 6 910
Just changed my 2000 Server DCs IP now what 3 405
Windows 2000 Sever Lab Setup 1 685
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In case you ever have to remove a faulty web part from a page , add the following to the end of the page url ?contents=1
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question