Need help - suffering from Virtual Memory problem (SP2)

R

red

I have installed WXP SP2 on my new machine - ASUS K8V SE with 512MB
DDR400 and 60G HDD with 50% unused.

While the machine is simply sitting there in idle showing the desktop
only, I quickly get the error-warning bubble saying virtual memory is
too low etc. When I try to cancel things or simply shut down, I
cannot - the system is froze.

Help, please?
 
A

Alex Nichol

I have installed WXP SP2 on my new machine - ASUS K8V SE with 512MB
DDR400 and 60G HDD with 50% unused.

While the machine is simply sitting there in idle showing the desktop
only, I quickly get the error-warning bubble saying virtual memory is
too low etc. When I try to cancel things or simply shut down, I
cannot - the system is froze.

See the Problems section at my page www.aumha.org/win5/a/xpvm.htm
This sounds like the effect of the Intel or Symantec interactions. I
have also recently seen a report that this can be a side effect of some
Copy protection software - PACE - the reference quoted was
http://www.pfarrell.com/prc/pace.html
 
R

red

See the Problems section at my page www.aumha.org/win5/a/xpvm.htm
This sounds like the effect of the Intel or Symantec interactions. I
have also recently seen a report that this can be a side effect of some
Copy protection software - PACE - the reference quoted was
http://www.pfarrell.com/prc/pace.html

Thanks

See my subsequent posts, especially my last one. I just now tried to
use WExplorer to find pagefile.sys to determine its size (because of
what I read on the web site), but as with all other desktop icons, it
did nothing.

Then I went to Start>all programs. Guess what? It says EMPTY!!!!!

Oh Boy - what a mess.
 
R

red

A

Alex Nichol

Hmmm

What does it mean if I have no 'pagefile.sys' file that is mentioned

To see it you need to have Folder Options - View set to show Hidden
files, and *not* Hide Protected mode ones

Look in Explorer for C:\pagefile.sys

But you certainly have something running that is running amok. Run Task
Manager (r-click in Task bar) and on Processes page set View - Select
Columns to show Memory and Memory Delta. Then keep an eye on it to
identify whatever is using a large and increasing amount of memory
(indicated by a constant sizeable Delta).
 
R

red

To see it you need to have Folder Options - View set to show Hidden
files, and *not* Hide Protected mode ones

Look in Explorer for C:\pagefile.sys

But you certainly have something running that is running amok. Run Task
Manager (r-click in Task bar) and on Processes page set View - Select
Columns to show Memory and Memory Delta. Then keep an eye on it to
identify whatever is using a large and increasing amount of memory
(indicated by a constant sizeable Delta).


Dang! I knew someone would say that. That was first place that I
looked. I always have set 'view' to show hidden files in the past,
and sure enough, it is still set thataway. I should have said that up
front. Sorry. Good thought, though.

I have tried watching Task Manager during this scenario. I'll try
again. Biggest thing to me is why my virtual memory usage (so called
'commit charge') increases gradually from 800M / 1400M to 4472M /
4477M (never decreases even though I remove background apps), when it
freezes my system because it says I am out of virtual memory, which I
guess I am.

It seems to me, from what I have read, that my 'commit charge' should
be going up and down dynamically as it frees up space - which
apparently is not happening.

Thank you for your interest and advice.

RSF
 
R

red

To see it you need to have Folder Options - View set to show Hidden
files, and *not* Hide Protected mode ones

Look in Explorer for C:\pagefile.sys

But you certainly have something running that is running amok. Run Task
Manager (r-click in Task bar) and on Processes page set View - Select
Columns to show Memory and Memory Delta. Then keep an eye on it to
identify whatever is using a large and increasing amount of memory
(indicated by a constant sizeable Delta).

I have discovered that a program called LIBUPDATE.EXE may be the
culprit! When I 'end task' in Task Manager, memory usage immediated
returns to a low minimum and stays there. I re-booted twice and
repeated the removal of LIBUPDATE.EXE with same effect. Obviously, I
have stumbled onto something.

Google produces the information that LIBUPDATE.EXE is a TROJAN,
Added by the BIONET series of TROJANS such as BIONET.31 or BIONET.310.
and Remote Access / Keylogger / Steals passwords / ICQ trojan / AOL
trojan / DoS tool It alters Wininit.ini

and to Delete the trojan files libupdate.exe in the windows directory

and more

I found only one IEBUPDATE.EXE when I searched using WEXplorer, namely
under c:\windows\prefetch. However I found 10(!) entries in the
Registry. Many were firewall related.

I deleted the c:\windows\prefetch file, but when I rebooted, it came
right back. So obviously, I should remove some (all?) registry
entries for IEBUPDATE.EXE. I am reluctant to do that since all 10 are
under software\microsoft even though it would appear that at least one
of them is the cause of usurping virtual memory.

This all suggests that WXP is the bad boy here.

What would you do?

Thank you for your interest and advice.

RSF
 
R

red

To see it you need to have Folder Options - View set to show Hidden
files, and *not* Hide Protected mode ones

Look in Explorer for C:\pagefile.sys

But you certainly have something running that is running amok. Run Task
Manager (r-click in Task bar) and on Processes page set View - Select
Columns to show Memory and Memory Delta. Then keep an eye on it to
identify whatever is using a large and increasing amount of memory
(indicated by a constant sizeable Delta).

I redid this post because I forgot I had removed my firewall from the
mix!

I have discovered that a program called LIBUPDATE.EXE may be the
culprit! When I 'end task' in Task Manager, memory usage immediated
returns to a low minimum and stays there. I re-booted twice and
repeated the removal of LIBUPDATE.EXE with same effect. Obviously, I
have stumbled onto something.

Google produces the information that LIBUPDATE.EXE is a TROJAN,
Added by the BIONET series of TROJANS such as BIONET.31 or BIONET.310.
and Remote Access / Keylogger / Steals passwords / ICQ trojan / AOL
trojan / DoS tool It alters Wininit.ini

and to Delete the trojan files libupdate.exe in the windows directory

and more

I found only one IEBUPDATE.EXE when I searched using WEXplorer, namely
under c:\windows\prefetch. However I found 10(!) entries in the
Registry.

I deleted the c:\windows\prefetch file, but when I rebooted, it came
right back. So obviously, I should remove some (all?) registry
entries for IEBUPDATE.EXE. I am reluctant to do that since all 10 are
under software\microsoft even though it would appear that at least one
of them is the cause of usurping virtual memory.

This all suggests that WXP is the bad boy here.

What would you do?

Thank you for your interest and advice.

RSF
 
R

red

To see it you need to have Folder Options - View set to show Hidden
files, and *not* Hide Protected mode ones

Look in Explorer for C:\pagefile.sys

But you certainly have something running that is running amok. Run Task
Manager (r-click in Task bar) and on Processes page set View - Select
Columns to show Memory and Memory Delta. Then keep an eye on it to
identify whatever is using a large and increasing amount of memory
(indicated by a constant sizeable Delta).

I redid this post because I forgot I had removed my firewall from the
mix!

I have discovered that a program called LIBUPDATE.EXE may be the
culprit! When I 'end task' in Task Manager, memory usage immediated
returns to a low minimum and stays there. I re-booted twice and
repeated the removal of LIBUPDATE.EXE with same effect. Obviously, I
have stumbled onto something.

Google produces the information that LIBUPDATE.EXE is a TROJAN,
Added by the BIONET series of TROJANS such as BIONET.31 or BIONET.310.
and Remote Access / Keylogger / Steals passwords / ICQ trojan / AOL
trojan / DoS tool It alters Wininit.ini

and to Delete the trojan files libupdate.exe in the windows directory

and more

I found only one IEBUPDATE.EXE when I searched using WEXplorer, namely
under c:\windows\prefetch. However I found 10(!) entries in the
Registry.

I deleted the c:\windows\prefetch file, but when I rebooted, it came
right back. So obviously, I should remove some (all?) registry
entries for IEBUPDATE.EXE. I am reluctant to do that since all 10 are
under software\microsoft even though it would appear that at least one
of them is the cause of usurping virtual memory.

This all suggests that WXP is the bad boy here.

What would you do?

Thank you for your interest and advice.

RSF
 
A

Alex Nichol

I have discovered that a program called LIBUPDATE.EXE may be the
culprit! When I 'end task' in Task Manager, memory usage immediated
returns to a low minimum and stays there. I re-booted twice and
repeated the removal of LIBUPDATE.EXE with same effect. Obviously, I
have stumbled onto something.

Google produces the information that LIBUPDATE.EXE is a TROJAN,
Added by the BIONET series of TROJANS such as BIONET.31 or BIONET.310.
and Remote Access / Keylogger / Steals passwords / ICQ trojan / AOL
trojan / DoS tool It alters Wininit.ini

That is the sort of things I had in mind in suggesting looking at
processes. And if you have one such thing you may have others. So AV
checks with up to date signatures (preferably two different ones) and
then visit http://rgharper.mvps.org/cleanit.htm for good general advice
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top