Memory issue

G

GS

Using XP SP3 with all current updates

I used to only reboot my Dell portable workstation when updates were
done OR once a week to clear memory. For some reason I started getting
notifications about not enough resources for whatever process/task was
trying to run. Once I got the infamous 'blue screen of death'! Seems to
occur within 24 hrs of bootup now. I suspect something is causing
memory to fill up but can't find any evidence as Task Manager shows I
have over half of the total memory (2GB) available.

Is there a utility that I could run to find the culprit?

--
Garry

Free usenet access at http://www.eternal-september.org
ClassicVB Users Regroup!
comp.lang.basic.visual.misc
microsoft.public.vb.general.discussion
 
P

Paul

GS said:
Using XP SP3 with all current updates

I used to only reboot my Dell portable workstation when updates were
done OR once a week to clear memory. For some reason I started getting
notifications about not enough resources for whatever process/task was
trying to run. Once I got the infamous 'blue screen of death'! Seems to
occur within 24 hrs of bootup now. I suspect something is causing memory
to fill up but can't find any evidence as Task Manager shows I have over
half of the total memory (2GB) available.

Is there a utility that I could run to find the culprit?

First, you should be writing down the blue screen info, and
looking up the STOP code here.

http://aumha.org/a/stop.htm

Or, you can use this, if you can find the corresponding .dmp file.
Depending on how your system is configured, you might receive a
small dump file on a crash. If you had done a good job of
mis-configuring the machine (taking it off defaults), then
it's possible to have practically nothing remaining later in
the way of hints. (And that's when it becomes important to
snap a picture of the blue screen.)

http://www.nirsoft.net/utils/blue_screen_view.html

If the STOP error has a driver name, so much the better. It could
be a buggy driver.

If I had to guess, I'd say it was a pool memory leak. Pool memory
appears in the Task Manager resource information. But there are also
tools like Poolmon for monitoring it.

(An intro to Pool memory)

http://blogs.technet.com/b/markrussinovich/archive/2009/03/26/3211216.aspx

I've had an experience here with a Pool problem, with something
called NeatVideo. That's a filter available for various video editing
tools. On my WinXP setup, it exhausted pool in about 2 hours. Due
to a slightly better architecture in Windows 8 (and double the physical memory
available), it took 21 hours to tip over Windows 8. When Windows 8 runs
out of pool, Task Manager becomes useless, and about the only rhing
you can do is power off or press reset. A sad testiment to how WinXP
is still better in some respects (Task Manager tends to work better in XP).

I suspect something you added to the machine lately is leaking
Pool memory. There are other possibilities, and perhaps by using
Task Manager or Process Explorer from Sysinternals, you'll get
some idea of where to look. It's either a driver, or something
that adds low level code to the machine (say, one of those
fancy CD editing or repair tools).

In Poolmon, there are pool tags with a four letter identifier.
And then you need to figure out from that "name", which thing
running on the machine owns it and is the culprit. It's important
for the software design, to pick a "nice" four letter name for
the pool being used.

(Poolmon is mentioned in the list here. I don't know if
there are later versions or not. You can do gigabytes of
downloads for nothing, when it comes to hunting down
tools like this... I think this is where my copy came from.)

http://www.microsoft.com/en-us/download/details.aspx?id=18546

And the "Validation Required" thing has become a PITA. At one
time it worked properly. Now it doesn't (on WinXP). I have to use one
of my other OSes, to get the validation step to work. I thought
I had it fixed, but... apparently not.

Paul
 
G

GS

Thanks, Paul! That's a lot of info but at least it's a good start. I
have a suite of the sysinternals tools and so I'll start there as I was
already looking in procmon but didn't have a clue what to look for...

--
Garry

Free usenet access at http://www.eternal-september.org
ClassicVB Users Regroup!
comp.lang.basic.visual.misc
microsoft.public.vb.general.discussion
 
G

GS

Interestingly, the blue screen just appeared while I was viewing
procmon again after posting my reply. I was able to gather more info
this time...

Stop: 0x000000F4 (0x00000003,0x8A18F1C8,0x8A18F33C,0x805D22DA)

When I rebooted I got a "The system has recovered from a serious error"
'Send Error Report' notification. It shows the following 'Error
signature'...

BCCode:f4 BCP1:00000003 BCP2:8A18F1C8 BCP3:8A18F33C BCP4:805D22DA
OSVer:5_1_2600 SP:3_0 Product:256_1

...which matches the Stop: line on the blue screen. Also, it placed
manifest.txt, Mini092813-01.dmp and sysdata.xml files in my profile
under...

Local Settings\Temp\WER4c51.dir00

--
Garry

Free usenet access at http://www.eternal-september.org
ClassicVB Users Regroup!
comp.lang.basic.visual.misc
microsoft.public.vb.general.discussion
 
J

J. P. Gilliver (John)

Using XP SP3 with all current updates

I used to only reboot my Dell portable workstation when updates were
done OR once a week to clear memory. For some reason I started getting
notifications about not enough resources for whatever process/task was

Did it specifically mention memory, or just "resources"?
trying to run. Once I got the infamous 'blue screen of death'! Seems to
occur within 24 hrs of bootup now. I suspect something is causing
memory to fill up but can't find any evidence as Task Manager shows I
have over half of the total memory (2GB) available.

Is there a utility that I could run to find the culprit?
I take it task manager itself didn't help? (In the Processes tab,
clicking [twice] on the column heading CPU or Mem Usage will continually
show what is hogging CPU or memory.) In my case it's usually Firefox,
though like you I find [PF Usage under the Performance tab] I'm using
well under half of my 2G, so I don't think that _is_ the problem.)

(I find "Process Lasso" a good more powerful alternative - and it
actually has some controlling as well as just monitoring features, too -
but to be honest I usually just use Task Manager.)

As always, Paul's posting is excellent - detailed, easy to follow, and
with lots of good links.
--
J. P. Gilliver. UMRA: 1960/<1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

# 10^-12 boos = 1 picoboo # 2*10^3 mockingbirds = 2 kilo mockingbird
# 10^21 piccolos = 1 gigolo # 10^12 microphones = 1 megaphone
# 10**9 questions = 1 gigawhat
 
G

GS

Thanks, John!

It did not specifically say *memory* and so I suspect my subject is
misleading. Perhaps I should repost using *Blue Screen Issue* as the
topic!

--
Garry

Free usenet access at http://www.eternal-september.org
ClassicVB Users Regroup!
comp.lang.basic.visual.misc
microsoft.public.vb.general.discussion
 
B

Buffalo

"GS" wrote in message news:[email protected]...
Interestingly, the blue screen just appeared while I was viewing procmon
again after posting my reply. I was able to gather more info this time...

Stop: 0x000000F4 (0x00000003,0x8A18F1C8,0x8A18F33C,0x805D22DA)

When I rebooted I got a "The system has recovered from a serious error"
'Send Error Report' notification. It shows the following 'Error
signature'...

BCCode:f4 BCP1:00000003 BCP2:8A18F1C8 BCP3:8A18F33C BCP4:805D22DA
OSVer:5_1_2600 SP:3_0 Product:256_1

..which matches the Stop: line on the blue screen. Also, it placed
manifest.txt, Mini092813-01.dmp and sysdata.xml files in my profile
under...

Local Settings\Temp\WER4c51.dir00

http://wiki-errors.com/rss2.php?wik...F4+(0x00000003</b>+-+Blue+Screen+-+Windows+XP

May or may not help but there is quite a bit on the "Stop:0X000000f4" error
is you need a quicker answer.
However Paul's coming answer will probably be the one you want.
 
P

Paul

Buffalo said:
"GS" wrote in message news:[email protected]...

http://wiki-errors.com/rss2.php?wik...F4+(0x00000003</b>+-+Blue+Screen+-+Windows+XP


May or may not help but there is quite a bit on the "Stop:0X000000f4"
error is you need a quicker answer.
However Paul's coming answer will probably be the one you want.

Do you trust the executable offered on that page ?

I pumped a copy up to virustotal, and it has something RPC related in it.
Curious. Why would a "local repair" utility have "remote procedure call"
capability ?

Someone wanted to remove it here, and we can't be sure one of
the respondents isn't from the company (Seven Servos Software).

http://forums.cnet.com/7723-12546_102-534813/how-do-we-remove-error-end/

Paul
 
B

Buffalo

"Paul" wrote in message news:[email protected]...
Do you trust the executable offered on that page ?

I pumped a copy up to virustotal, and it has something RPC related in it.
Curious. Why would a "local repair" utility have "remote procedure call"
capability ?

Someone wanted to remove it here, and we can't be sure one of
the respondents isn't from the company (Seven Servos Software).

http://forums.cnet.com/7723-12546_102-534813/how-do-we-remove-error-end/

Paul
I didn't recommend the auto repair, just the link which also provided the
suggestion just to do a 'restore' manually.
I should have spelled it out.
Sorry.
No, I didn't dl and check the 'auto fix'.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top