Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Windows Vista Svchost.exe Memory Leak exceeding 500k


  • Please log in to reply

#1
Itachirumon

Itachirumon

    Member

  • Member
  • PipPip
  • 77 posts
Hello again everybody - I finally solved my previous BSOD issues and managed to get the computer back into working order. Unfortunately, coupled with that is the discovery of why my computer seems so much slower since I came to my university. It seems I have a memory leak in svchost.exe which will randoml start eating my RAM for anywhere between 5-15 minutes. It only happens when I reboot the computer initially or once every 48 hours. Problem is it ends up slowly eating up to 500,000KB of Memory/RAM and causes the computer to become unusable during that time period. My school's ACMS group sent me a link about this particular issue but it doesn't seem to provide the assistance I need. It makes it next-to-impossible to run anything here.

Going into "Services" for this particular svchost.exe, the applications it governs are: wuauserv; Winmgmt; Themes; SessionEnv; SENS; seclogon; Schedule; RasMan; ProvSvc; MMCSS; LanmanServer; iphlpsvc; IKEEXT; EapHost; CertPropSvc; Browers; BITS; Appinfo; AeLookupSvc. I'm hoping some of the brilliant minds here could help me find which Service is creating such enormous memory leaks and how to reduce/stop them entirely.

--> And as one final request, I know I'm already asking the world, but... if there's a way to check if my Wireless card is still functioning? I haven't been able to use it since I replaced the fan on my laptop, I'm a little concerned Best Buy might have accidentally disconnected it or caused it to malfunction when they installed the new fan.

Laptop is an HP Pavillion DV9208nr, I'm running Vista Home Premium. Thank you guys again for all your help, you've been wonderful.
  • 0

Advertisements


#2
Itachirumon

Itachirumon

    Member

  • Topic Starter
  • Member
  • PipPip
  • 77 posts
bumping back to the top after 96 hours.
  • 0

#3
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
S couple of things to try....

Download Autoruns from the link in my signature below:

1: Extract the Autoruns Zip file contents to a folder.
2: Double-click the "Autoruns.exe".
3: Click on the "Everything" tab
4: Remove any entries that mention "File Not Found" by right-clicking the entry and select Delete.
5: Go to File then to Export As or Save in some versions.
6: Save AutoRuns.txt file to known location like your Desktop.
7: Attach to your next reply.








Tutorial for running chkdsk in Vista\Win 7 located HERE.





If you have more than one RAM module installed, try starting computer with one RAM stick at a time.

NOTE Keep in mind, the manual check listed above is always superior to the software check, listed below. DO NOT proceed with memtest, if you can go with option A

B. If you have only one RAM stick installed...
...run memtest...


1. Download - Pre-Compiled Bootable ISO (.zip). If you prefer to use the USB version then use this link USB KEY
2. Unzip downloaded /memtest86+-4.20.iso.zip file.
3. Inside, you'll find /memtest86+-4.20.iso file.
4. Download, and install ImgBurn: http://www.imgburn.com/
5. Insert blank CD into your CD drive.
6. Open ImgBurn, and click on Write image file to disc
7. Click on Browse for a file... icon:

Posted Image

8. Locate memtest86+-4.20.iso file, and click Open button.
9. Click on ImgBurn green arrow to start burning bootable memtest86 CD:

Posted Image

10. Once the CD is created, boot from it, and memtest will automatically start to run. You may have to change the boot sequence in your BIOS to make it work right.

To change Boot Sequence in your BIOS

Reboot the system and at the first post screen (where it is counting up memory) start tapping the DEL button
This will enter you into the Bios\Cmos area.
Find the Advanced area and click Enter
Look for Boot Sequence or Boot Options and highlight that click Enter
Now highlight the first drive and follow the directions on the bottom of the screen on how to modify it and change it to CDrom.
Change the second drive to the C or Main Drive
Once that is done then click F10 to Save and Exit
You will prompted to enter Y to verify Save and Exit. Click Y and the system will now reboot with the new settings.


The running program will look something like this depending on the size and number of ram modules installed:


Posted Image

It's recommended to run 5-6 passes. Each pass contains very same 8 tests.

This will show the progress of the test. It can take a while. Be patient, or leave it running overnight.

Posted Image

The following image is the test results area:

Posted Image

The most important item here is the “errors” line. If you see ANY errors, even one, most likely, you have bad RAM.
  • 0

#4
Itachirumon

Itachirumon

    Member

  • Topic Starter
  • Member
  • PipPip
  • 77 posts
Hey Rshaffer - thanks again for all the help last run through. I noticed a few files that had the pink highlighting like the 3 reading "File Not Found" but were still showing a directory path, they were safe to leave alone right?

Attached Files


  • 0

#5
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Anything that says File Not Found please remove by right-clicking the entry and select Delete.
I see entries that look like they are not running but still showing up. Please redo the instructions and attach a new autoruns log if you can.
  • 0

#6
Itachirumon

Itachirumon

    Member

  • Topic Starter
  • Member
  • PipPip
  • 77 posts
Alrighty, I apologize about that, I took care of all the pink-tinted entries this run-through, and I'll run Memtest as soon as I track down a blank disc

Attached Files


Edited by Itachirumon, 07 April 2012 - 03:01 PM.

  • 0

#7
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Open Autoruns, click on "Logon" tab, and UN-check:


X "Adobe ARM"
X "Adobe Reader Speed Launcher"
X "iTunesHelper"
X "QuickTime Task"
X "SunJavaUpdateSched"
X "Windows Defender"

X "Messenger (Yahoo!)"
+ "FlashPlayerUpdate"



When done restart computer and then:



Download TFC by OldTimer to your desktop
  • Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • It will close all programs when run, so make sure you have saved all your work before you begin.
  • Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
  • Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.


Download Auslogics Defrag from the link in my signature below. Auslogics Defrag in my opinion is better because:

It does a more comprehensive job at Defragging
It will actually show you what it is doing
At the end of working it will show you how much speed you picked up
You can view a online log of the files that Auslogics defragged
Please do not run any other Auslogics programs other then this one as they may cause unwanted results.


I see you have both MSE and Windows Defender installed. My suggestion is to disable Windows Defender because running two real time AV programs will result in false positive readings and will slow your system down. :thumbsup:
  • 0

#8
Itachirumon

Itachirumon

    Member

  • Topic Starter
  • Member
  • PipPip
  • 77 posts
Performed all the tasks, when I ran autoruns again it said all the programs I was supposed to un-click were already unclicked though.
  • 0

#9
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
OK after completing everything how is the system running now?
  • 0

#10
Itachirumon

Itachirumon

    Member

  • Topic Starter
  • Member
  • PipPip
  • 77 posts
It was a little laggy at first but it seems alright now, more or less. It may take a day or two though to see if the svchost.exe issue arises again.
  • 0

Advertisements


#11
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
While we wait to see about that please do the following for me.

Please Run the PCPitstop.com OverDrive Full Tests

Here's how:

You must use your Internet Explorer for this procedure. (doesn't work so well in Firefox or others). If your machine is running Vista or Windows 7, you must Select IE to “Run as Administrator”. After completing PCPitstop OverDrive you can close your IE browser and re-open it Normally so that you are no longer running as administrator.

Go to: http://www.pcpitstop.com
Click on "Free Computer Check-up" listed below PC Pitstop OverDrive
In the User Login - Click on "Sign up FREE!"
You'll need to submit a valid email address and create your own password, then click - Create Account(button)

Now enter your email address and password to Log in, Select - Scan this system Now!(button)
You will then be asked to download an ActiveX component and allow it to install.
It is safe and does not compromise your privacy.
Follow the on-screen prompts to install the ActiveX and to allow the Full Tests to be run on your machine.

The Full Tests take about 2 1/2 - 3 minutes on most machines.
When complete, a Results - Summary - Recommended Fixes will be displayed.

Please post the URL internet address, from your Results, back here into this Topic Thread so that we can review the configuration and present performance levels of your machine.

Note: During the graphics 2D and graphics 3D testing, your screen will display some rapidly moving objects.
If you are sensitive to visual flashing, it may cause dizziness. Therefore, look away from the screen during that portion of the testing.

After reviewing the results we will be more informed and may be able to provide better recommendations for you to work towards improving your machine's performance.

While PCPitstop does offer a variety of Paid Products, the PCPitstop OverDrive testing is FREE. Please ignore the references to Paid Products. We prefer to provide manual solution instructions that you can apply directly to your machine.

Best Regards
  • 0

#12
Itachirumon

Itachirumon

    Member

  • Topic Starter
  • Member
  • PipPip
  • 77 posts
Well in what may be a bit of serendipity for ID-ing the problem, it started up again today after about 5 minutes of computer run time. In fact it only just went back down to 159K as I was writing this from ~430K. I'm not sure if it still exceeded 500K or not because I was setting up the PC Pitstop.

http://www.pcpitstop...?conid=24867819

I suddenly have the urge to sign my laptop up for counseling, bottom 34% probably meets the computer definition of clinical depression.
  • 0

#13
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
OK your hard drive is still showing 25% fragmented.
That is a big no no with the OS. That will slow everything down just because the system has to look all over for parts of programs or data.
Another thing I noticed is your Java is out of date.
Please download JavaRa from the link in my signature below to your desktop and unzip it to its own folder
  • * Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
    * Accept any prompts.
    * Open JavaRa.exe again and select Search For Updates.
    * Select Update Using Sun Java's Website then click Search and click on the Open Webpage button.
  • Download and install the latest Java Runtime Environment (JRE) version for your computer.



http://sourceforge.n...ft&words=javara


Java Download Link
http://www.java.com/...load/manual.jsp


Your Adobe Flash is also out of date and needs to be updated to version 11
You also have MSE and Eset installed which could be a issue with slowing things down. You should never have more then one real time AV going on your system as it can cause not only slowing down but also false positive readings.



I see you have Firefox installed and is that your default browser? According to your pc pitstop log it is out of date also. Can you verify the version you are running?
  • 0

#14
Itachirumon

Itachirumon

    Member

  • Topic Starter
  • Member
  • PipPip
  • 77 posts
Okay I defragmented a second time, updated Java, Firefox, and Adobe Flash. I use IE as my primary browser because it's usually the one the California schools require, I had Firefox primarily to use when IE fails, even though I'm aware it's significantly better and doesn't have the same memory leak issues IE experiences.
  • 0

#15
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
The new IE is a lot more secure then past versions. I believe you should be able to update yours to 9 now if you so chose to do so. How is the system running now with all the updates?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP