Solved

Find out which process consumes memory

Posted on 2010-11-18
15
579 Views
Last Modified: 2012-05-10
My computer (Windows XP SP3) has a severe problem. I leave it running over night and in the morning it is not possible to log in again. There are error message boxes that say that there is not enough memory. Sometimes the screen resolution has changed to very low. And sometimes I get the error message "Error connecting to existing session for <user> (Id 0). A device attached to the system is not functioning." I cannot even shut down my computer; I have to pull the plug. It's worth mentioning that during the day I have no problems like that at all. It is only over night.

I already cleared all energy options so that the computer doesn't go to sleep. But it didn't help. Also the event logs don't contain any entries.

I suspect that some process consumes a lot of memory but I have no idea how to find out which because in the morning my computer is not usable. Is there any tool that helps me logging memory consumption of running processes? Or do you have other ideas how I could find out what the problem is?

Regards,
Dirk.
0
Comment
Question by:dirkil2
  • 4
  • 3
  • 3
  • +2
15 Comments
 
LVL 47

Expert Comment

by:dbrunton
Comment Utility
0
 
LVL 18

Expert Comment

by:awawada
Comment Utility
Did you try Task Manager or Process Monitor.
0
 
LVL 47

Expert Comment

by:dbrunton
Comment Utility
Oh and Google

process explorer tutorial
0
 
LVL 18

Assisted Solution

by:awawada
awawada earned 250 total points
Comment Utility
Use Process Explorer, Filemon, Regmon & Task Manager to identify performance issues:
http://www.youtube.com/watch?v=IgmVDMDtAKY
http://www.youtube.com/watch?v=hmN8usQy_QU
0
 

Author Comment

by:dirkil2
Comment Utility
Process Explorer looks interesting but is there a way that it logs to a file? This is necessary because in the morning my machine is unusable so I cannot have a look at process explorer.
0
 
LVL 18

Expert Comment

by:awawada
Comment Utility
As i know you can't:
http://forum.sysinternals.com/topic17457.html

@dbrunton
do you know a possibility?
0
 
LVL 47

Expert Comment

by:dbrunton
Comment Utility
@awawada
Following your links the following two apps are recommended for logging.  Have never tried them.

Process Viewer http://www.teamcti.com/pview/prcview.htm
Process Monitor http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

I've never tried any of those so can't comment.

Process Explorer does allow you to save a file but it is a snapshot at the time taken and recreates the file from scratch when you save again.  So it is no good as a log file.

Someone could possibly cobble together a script which starts Process Explorer, gets it to save a file and then exits and then appends the saved file to a log file and have the script run through Task Scheduler.  Interesting project but not for me.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 18

Expert Comment

by:awawada
Comment Utility
@dirkil2

i to don't have a knowledge in scripting. You can open a new question in the scripting Zones. They can help you to creat a new script or some maybe already having one. I would also post a link to this question.
0
 
LVL 68

Accepted Solution

by:
Qlemo earned 250 total points
Comment Utility
In such cases you usually let the integrated Performance Monitor create a log for particular sources (processes, system objects, aso.), starting and ending at a given period of time. It is even able to trigger actions on events, like "if available memory is below x, ...".
0
 

Author Comment

by:dirkil2
Comment Utility
@Qlemo

What is the "Integrated Performance Monitor"?
0
 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
call PerfMon, and you will see ;-).
0
 
LVL 20

Expert Comment

by:viki2000
Comment Utility
Try also Process Lasso
http://www.bitsum.com/prolasso.php
0
 
LVL 20

Expert Comment

by:viki2000
Comment Utility
Or try Microsoft support
http://support.microsoft.com/kb/248345
0
 

Author Comment

by:dirkil2
Comment Utility
perfmon looks interesting. I know by now how to use it. But can somebody recommend a set of performance indicators that help me track down my problem?

I suspect a process to eat up all available memory over time when my computer is idle. So I don't know which process it is and when this process is started. Any idea which indicators would you use to find the offending process?
0
 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
I would choose the following indicators:
Processes - All instances
   Working Set
   Private Bytes
   VIrtual Size
   Non-Paged Pool Size (or similar)
That records all processes. Schedule it to run in the tightmost time frame you are certain the issue arises.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

It is only natural that we all want our PCs to be in good working order, improved system performance, so that is exactly how programs are advertised to entice. They say things like:            •      PC crashes? Get registry cleaner to repair it!    …
The viewer will learn how to successfully download and install the SARDU utility on Windows 8, without downloading adware.
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now