A
Ayende Rahien
Recently I noticed the my computer is using more and more memory (currently
435MB, last night it was ~350MB)
I'm usually stable on the 200 - 300 MB, I tried rebooting after my memory
usage upped the 650MB, and it reverted to ~180MB and started climbing from
there.
I wasn't worried at first, because I thought it was a normal applications
taking the memories, but it's not. I summed the used memory in TaskMgr and
it does *not* reach that high.
I'm not using any application that takes that much memory, below is the
printout from pslist.exe, running as administrator:
Any help would be appriciated,
Thanks in advance,
Ayende Rahien
F:\Pstools>pslist
PsList 1.23 - Process Information Lister
Copyright (C) 1999-2002 Mark Russinovich
Sysinternals - www.sysinternals.com
Process information for MEDAR:
Name Pid Pri Thd Hnd Mem User Time Kernel Time Elapsed
Time
Idle 0 0 1 0 20 0:00:00.000 24:37:45.715
0:00:00.000
System 4 8 54 1341 56 0:00:00.000 5:45:44.008
0:00:00.000
smss 320 11 3 20 52 0:00:00.180 0:00:00.540
47:53:21.411
csrss 368 13 12 628 3416 0:00:25.947 0:01:11.302
47:53:16.413
winlogon 404 13 21 564 4516 0:00:01.552 0:00:12.818
47:53:10.775
services 448 9 19 349 2024 0:00:15.111 0:00:21.861
47:53:09.754
lsass 460 9 15 299 740 0:00:04.005 0:00:05.537
47:53:09.714
svchost 632 8 10 417 2280 0:00:13.609 0:00:10.344
47:53:06.479
svchost 656 8 82 1538 10852 0:04:04.381 0:02:16.946
47:53:06.349
StyleXPServ 688 8 3 50 528 0:00:02.103 0:00:02.143
47:53:05.918
svchost 800 8 4 68 1236 0:00:00.480 0:00:00.711
47:53:05.007
svchost 824 8 23 315 3476 0:00:39.677 0:00:28.831
47:53:04.606
ccSetMgr 860 8 7 180 180 0:00:00.130 0:00:00.220
47:53:03.975
ccEvtMgr 880 8 22 257 872 0:00:00.200 0:00:00.340
47:53:02.994
spoolsv 1036 8 11 135 1776 0:00:00.110 0:00:00.530
47:53:01.031
explorer 1304 8 14 538 25344 0:01:16.359 0:04:20.995
47:52:55.513
alg 1460 8 8 140 1400 0:00:01.231 0:00:02.563
47:52:51.648
cisvc 1520 8 16 382 540 0:04:34.725 0:05:06.070
47:52:47.181
gearsec 1552 8 2 26 60 0:00:00.010 0:00:00.000
47:52:46.971
mdm 1568 8 8 118 2284 0:00:00.200 0:00:00.701
47:52:46.841
navapsvc 1588 8 11 218 6948 0:00:02.884 0:00:05.638
47:52:46.721
nvsvc32 1628 8 3 53 304 0:00:00.030 0:00:00.060
47:52:46.570
SAVScan 1672 8 7 62 188 0:01:01.848 0:00:12.027
47:52:46.410
ccApp 1824 8 19 343 8804 0:00:08.362 0:00:06.178
47:52:44.878
type32 1832 8 3 103 2088 0:00:01.812 0:00:02.433
47:52:44.668
point32 1840 8 5 142 4620 0:00:02.163 0:00:10.154
47:52:44.457
babylon 1848 8 7 218 5068 0:00:00.871 0:00:01.652
47:52:44.167
ctfmon 1864 8 1 153 2928 0:00:05.537 0:00:10.975
47:52:44.087
LUCOMS~1 1876 8 3 87 576 0:00:00.140 0:00:00.180
47:52:43.706
tcpsvcs 176 8 2 54 200 0:00:00.020 0:00:00.040
47:52:39.961
svchost 212 8 5 100 1252 0:00:01.161 0:00:00.901
47:52:39.941
symlcsvc 236 8 4 74 540 0:00:00.260 0:00:00.250
47:52:39.801
cidaemon 1232 4 3 107 464 0:00:00.050 0:00:00.090
47:45:25.226
cidaemon 3644 4 6 198 1360 0:05:56.292 0:30:11.244
34:13:07.054
ggviewer64- 3864 8 9 347 420 0:00:07.130 0:00:08.051
18:39:14.593
emule 3068 4 2 1560 63596 5:07:28.407 1:33:52.739
18:38:30.219
RSSBandit 3360 8 20 605 25036 0:02:51.536 0:00:26.598
4:39:47.609
devenv 2000 8 24 758 60996 0:01:04.933 0:01:53.483
4:18:58.443
msimn 3432 8 8 256 20416 0:00:27.369 0:02:08.915
2:38:28.122
iexplore 3656 8 9 612 36208 0:00:27.779 0:00:48.840
2:37:37.248
wbloggar 1396 8 5 288 17104 0:00:03.635 0:00:16.784
2:18:51.149
iexplore 3856 8 6 248 17424 0:00:01.642 0:00:03.645
1:22:39.801
mirc 2824 8 5 119 6472 0:00:00.180 0:00:00.911
0:08:13.459
cmd 560 8 1 20 1708 0:00:00.010 0:00:00.090
0:01:58.941
wmiprvse 3188 8 8 134 4652 0:00:00.120 0:00:00.180
0:01:44.109
wmiprvse 3256 8 7 104 3344 0:00:00.040 0:00:00.170
0:01:39.282
pslist 360 13 2 86 1900 0:00:00.030 0:00:00.040
0:00:00.040
F:\Pstools>pslist -m
PsList 1.23 - Process Information Lister
Copyright (C) 1999-2002 Mark Russinovich
Sysinternals - www.sysinternals.com
Process memory detail for MEDAR:
Name Pid VM WS WS Pk Priv Faults NonP Page
PageFile
Idle 0 0 20 20 0 1 0 0
0
System 4 1840 56 4036 32 9650 0 0
0
smss 320 3760 52 756 180 282 0 5
180
csrss 368 26708 3436 5536 1756 22842 6 54
1756
winlogon 404 51804 4516 15420 7320 11516 59 59
7320
services 448 21392 2024 3392 1680 1646 10 31
1680
lsass 460 32960 732 5644 2008 274524 5 33
2008
svchost 632 20012 2280 3844 1632 5194 6 23
1632
svchost 656 113068 10852 25480 13212 316238 68 113
13212
StyleXPServ 688 18968 528 2536 704 665 1 19
704
svchost 800 16644 1236 2760 1076 3103 3 17
1076
svchost 824 44104 3476 7588 3248 51295 11 42
3248
ccSetMgr 860 29900 180 3860 2548 3384 5 27
2548
ccEvtMgr 880 45608 872 5520 2804 2857 6 32
2804
spoolsv 1036 42916 1776 5152 3216 1933 4 36
3216
explorer 1304 115548 25344 29948 20312 108181 17 101
20312
alg 1460 31004 1400 4164 1392 2439 6 33
1392
cisvc 1520 43572 540 9396 3720 2726715 6 35
3720
gearsec 1552 12432 60 1332 384 333 1 12
384
mdm 1568 38228 2284 3536 1544 1750 3 34
1544
navapsvc 1588 43196 6948 9348 6720 44854 5 28
6720
nvsvc32 1628 18844 304 3668 568 1514 1 19
568
SAVScan 1672 48548 188 8776 6808 296821 4 30
6808
ccApp 1824 78920 8804 17124 8012 28066 11 56
8012
type32 1832 43968 2088 6112 2844 2131 4 38
2844
point32 1840 55572 4620 6640 2592 5479 4 41
2592
babylon 1848 69900 5068 12200 6640 24892 6 52
6640
ctfmon 1864 24356 2928 3236 708 40912 5 33
708
LUCOMS~1 1876 36468 576 5676 1832 1635 3 35
1832
tcpsvcs 176 7444 200 1640 452 449 8 12
452
svchost 212 16900 1252 3116 960 1473 2 19
960
symlcsvc 236 20984 540 2948 916 13640 2 21
916
cidaemon 1232 33816 464 3108 976 2515 2 36
976
cidaemon 3644 151216 1360 21172 17160 1900698 8 73
17160
ggviewer64- 3864 82180 420 13432 5936 723708 10 65
5936
emule 3068 191664 63628 67636 58776 1143687 273 200
58776
RSSBandit 3360 378652 25036 42264 34516 85959 19 245
34516
devenv 2000 499744 60996 68856 48280 105446 31 311
48280
msimn 3432 82092 20416 35852 8532 80362 10 87
8532
iexplore 3656 116532 36208 38436 22004 29484 21 88
22004
wbloggar 1396 84828 17104 17780 6808 6886 9 68
6808
iexplore 3856 76772 17424 17512 8000 6291 9 62
8000
mirc 2824 48632 6472 6472 1964 2271 6 38
1964
cmd 560 13784 1708 1720 1544 488 1 15
1544
wmiprvse 3188 23116 4652 4816 1568 1502 4 23
1568
wmiprvse 3256 19232 3344 3344 1820 844 3 19
1820
pslist 3352 17772 1900 1924 864 551 1 15
864
435MB, last night it was ~350MB)
I'm usually stable on the 200 - 300 MB, I tried rebooting after my memory
usage upped the 650MB, and it reverted to ~180MB and started climbing from
there.
I wasn't worried at first, because I thought it was a normal applications
taking the memories, but it's not. I summed the used memory in TaskMgr and
it does *not* reach that high.
I'm not using any application that takes that much memory, below is the
printout from pslist.exe, running as administrator:
Any help would be appriciated,
Thanks in advance,
Ayende Rahien
F:\Pstools>pslist
PsList 1.23 - Process Information Lister
Copyright (C) 1999-2002 Mark Russinovich
Sysinternals - www.sysinternals.com
Process information for MEDAR:
Name Pid Pri Thd Hnd Mem User Time Kernel Time Elapsed
Time
Idle 0 0 1 0 20 0:00:00.000 24:37:45.715
0:00:00.000
System 4 8 54 1341 56 0:00:00.000 5:45:44.008
0:00:00.000
smss 320 11 3 20 52 0:00:00.180 0:00:00.540
47:53:21.411
csrss 368 13 12 628 3416 0:00:25.947 0:01:11.302
47:53:16.413
winlogon 404 13 21 564 4516 0:00:01.552 0:00:12.818
47:53:10.775
services 448 9 19 349 2024 0:00:15.111 0:00:21.861
47:53:09.754
lsass 460 9 15 299 740 0:00:04.005 0:00:05.537
47:53:09.714
svchost 632 8 10 417 2280 0:00:13.609 0:00:10.344
47:53:06.479
svchost 656 8 82 1538 10852 0:04:04.381 0:02:16.946
47:53:06.349
StyleXPServ 688 8 3 50 528 0:00:02.103 0:00:02.143
47:53:05.918
svchost 800 8 4 68 1236 0:00:00.480 0:00:00.711
47:53:05.007
svchost 824 8 23 315 3476 0:00:39.677 0:00:28.831
47:53:04.606
ccSetMgr 860 8 7 180 180 0:00:00.130 0:00:00.220
47:53:03.975
ccEvtMgr 880 8 22 257 872 0:00:00.200 0:00:00.340
47:53:02.994
spoolsv 1036 8 11 135 1776 0:00:00.110 0:00:00.530
47:53:01.031
explorer 1304 8 14 538 25344 0:01:16.359 0:04:20.995
47:52:55.513
alg 1460 8 8 140 1400 0:00:01.231 0:00:02.563
47:52:51.648
cisvc 1520 8 16 382 540 0:04:34.725 0:05:06.070
47:52:47.181
gearsec 1552 8 2 26 60 0:00:00.010 0:00:00.000
47:52:46.971
mdm 1568 8 8 118 2284 0:00:00.200 0:00:00.701
47:52:46.841
navapsvc 1588 8 11 218 6948 0:00:02.884 0:00:05.638
47:52:46.721
nvsvc32 1628 8 3 53 304 0:00:00.030 0:00:00.060
47:52:46.570
SAVScan 1672 8 7 62 188 0:01:01.848 0:00:12.027
47:52:46.410
ccApp 1824 8 19 343 8804 0:00:08.362 0:00:06.178
47:52:44.878
type32 1832 8 3 103 2088 0:00:01.812 0:00:02.433
47:52:44.668
point32 1840 8 5 142 4620 0:00:02.163 0:00:10.154
47:52:44.457
babylon 1848 8 7 218 5068 0:00:00.871 0:00:01.652
47:52:44.167
ctfmon 1864 8 1 153 2928 0:00:05.537 0:00:10.975
47:52:44.087
LUCOMS~1 1876 8 3 87 576 0:00:00.140 0:00:00.180
47:52:43.706
tcpsvcs 176 8 2 54 200 0:00:00.020 0:00:00.040
47:52:39.961
svchost 212 8 5 100 1252 0:00:01.161 0:00:00.901
47:52:39.941
symlcsvc 236 8 4 74 540 0:00:00.260 0:00:00.250
47:52:39.801
cidaemon 1232 4 3 107 464 0:00:00.050 0:00:00.090
47:45:25.226
cidaemon 3644 4 6 198 1360 0:05:56.292 0:30:11.244
34:13:07.054
ggviewer64- 3864 8 9 347 420 0:00:07.130 0:00:08.051
18:39:14.593
emule 3068 4 2 1560 63596 5:07:28.407 1:33:52.739
18:38:30.219
RSSBandit 3360 8 20 605 25036 0:02:51.536 0:00:26.598
4:39:47.609
devenv 2000 8 24 758 60996 0:01:04.933 0:01:53.483
4:18:58.443
msimn 3432 8 8 256 20416 0:00:27.369 0:02:08.915
2:38:28.122
iexplore 3656 8 9 612 36208 0:00:27.779 0:00:48.840
2:37:37.248
wbloggar 1396 8 5 288 17104 0:00:03.635 0:00:16.784
2:18:51.149
iexplore 3856 8 6 248 17424 0:00:01.642 0:00:03.645
1:22:39.801
mirc 2824 8 5 119 6472 0:00:00.180 0:00:00.911
0:08:13.459
cmd 560 8 1 20 1708 0:00:00.010 0:00:00.090
0:01:58.941
wmiprvse 3188 8 8 134 4652 0:00:00.120 0:00:00.180
0:01:44.109
wmiprvse 3256 8 7 104 3344 0:00:00.040 0:00:00.170
0:01:39.282
pslist 360 13 2 86 1900 0:00:00.030 0:00:00.040
0:00:00.040
F:\Pstools>pslist -m
PsList 1.23 - Process Information Lister
Copyright (C) 1999-2002 Mark Russinovich
Sysinternals - www.sysinternals.com
Process memory detail for MEDAR:
Name Pid VM WS WS Pk Priv Faults NonP Page
PageFile
Idle 0 0 20 20 0 1 0 0
0
System 4 1840 56 4036 32 9650 0 0
0
smss 320 3760 52 756 180 282 0 5
180
csrss 368 26708 3436 5536 1756 22842 6 54
1756
winlogon 404 51804 4516 15420 7320 11516 59 59
7320
services 448 21392 2024 3392 1680 1646 10 31
1680
lsass 460 32960 732 5644 2008 274524 5 33
2008
svchost 632 20012 2280 3844 1632 5194 6 23
1632
svchost 656 113068 10852 25480 13212 316238 68 113
13212
StyleXPServ 688 18968 528 2536 704 665 1 19
704
svchost 800 16644 1236 2760 1076 3103 3 17
1076
svchost 824 44104 3476 7588 3248 51295 11 42
3248
ccSetMgr 860 29900 180 3860 2548 3384 5 27
2548
ccEvtMgr 880 45608 872 5520 2804 2857 6 32
2804
spoolsv 1036 42916 1776 5152 3216 1933 4 36
3216
explorer 1304 115548 25344 29948 20312 108181 17 101
20312
alg 1460 31004 1400 4164 1392 2439 6 33
1392
cisvc 1520 43572 540 9396 3720 2726715 6 35
3720
gearsec 1552 12432 60 1332 384 333 1 12
384
mdm 1568 38228 2284 3536 1544 1750 3 34
1544
navapsvc 1588 43196 6948 9348 6720 44854 5 28
6720
nvsvc32 1628 18844 304 3668 568 1514 1 19
568
SAVScan 1672 48548 188 8776 6808 296821 4 30
6808
ccApp 1824 78920 8804 17124 8012 28066 11 56
8012
type32 1832 43968 2088 6112 2844 2131 4 38
2844
point32 1840 55572 4620 6640 2592 5479 4 41
2592
babylon 1848 69900 5068 12200 6640 24892 6 52
6640
ctfmon 1864 24356 2928 3236 708 40912 5 33
708
LUCOMS~1 1876 36468 576 5676 1832 1635 3 35
1832
tcpsvcs 176 7444 200 1640 452 449 8 12
452
svchost 212 16900 1252 3116 960 1473 2 19
960
symlcsvc 236 20984 540 2948 916 13640 2 21
916
cidaemon 1232 33816 464 3108 976 2515 2 36
976
cidaemon 3644 151216 1360 21172 17160 1900698 8 73
17160
ggviewer64- 3864 82180 420 13432 5936 723708 10 65
5936
emule 3068 191664 63628 67636 58776 1143687 273 200
58776
RSSBandit 3360 378652 25036 42264 34516 85959 19 245
34516
devenv 2000 499744 60996 68856 48280 105446 31 311
48280
msimn 3432 82092 20416 35852 8532 80362 10 87
8532
iexplore 3656 116532 36208 38436 22004 29484 21 88
22004
wbloggar 1396 84828 17104 17780 6808 6886 9 68
6808
iexplore 3856 76772 17424 17512 8000 6291 9 62
8000
mirc 2824 48632 6472 6472 1964 2271 6 38
1964
cmd 560 13784 1708 1720 1544 488 1 15
1544
wmiprvse 3188 23116 4652 4816 1568 1502 4 23
1568
wmiprvse 3256 19232 3344 3344 1820 844 3 19
1820
pslist 3352 17772 1900 1924 864 551 1 15
864