VM page file growing by itself.

  • Thread starter Thread starter Carl Jenkins
  • Start date Start date
C

Carl Jenkins

Hello,

I had a crash in Windows XP (SP2) a few days ago.
After I rebooted, chkdsk ran on the Windows drive and saved a few
file fragments that were cross-linked etc. due to the crash.
Now every time I start up Windows and open the Task Manager
to look at the processes list it shows an "Image Name" of
SRVHOST.EXE, one of two running under "User Name" of SYSTEM
with a "PID" of 812 immediately beginning to fill up the page
file "VM Size" up to the maximum page file size I set in the
control panel. This allocation is permanent and therefor no
other programs can get any memory in which to run.
I ran the DOS-based service interrogater and found that about
15 services are running with "PID" of 812. I expanded the files
for these services from my SP2 image and did a file compare with
the ones in the System32 directory and they all matched fine.
Has ne-1 ever come across this type of problem b4?
Let me know if you have so I can avoid re-installing Windows etc.

Many thanks,

Carl
 
"Allocation is permanent" to the page file and you think no other programs
have access ????Get a grip,they sure do have access and will use all they can
if you let them...Youve probably set it to low,if so,xp will often have to
dynamically
increase the size as you work with youre programs.Setting it to another hd is
recomended,setting it to:"let system set" works best.Disabling the
PageExecutive
in regedit helps...More ram the less xp uses virtual memory.
 
Hello,

I had a crash in Windows XP (SP2) a few days ago.
After I rebooted, chkdsk ran on the Windows drive and saved a few
file fragments that were cross-linked etc. due to the crash.
Now every time I start up Windows and open the Task Manager
to look at the processes list it shows an "Image Name" of
SRVHOST.EXE, one of two running under "User Name" of SYSTEM
with a "PID" of 812 immediately beginning to fill up the page
file "VM Size" up to the maximum page file size I set in the
control panel. This allocation is permanent and therefor no
other programs can get any memory in which to run.
I ran the DOS-based service interrogater and found that about
15 services are running with "PID" of 812. I expanded the files
for these services from my SP2 image and did a file compare with
the ones in the System32 directory and they all matched fine.
Has ne-1 ever come across this type of problem b4?
Let me know if you have so I can avoid re-installing Windows etc.
Click to expand...

Sounds like a probable virus/trojan/spyware infestation of some kind.

If your processes are named SRVHOST.EXE and not SVCHOST.EXE then they
are almost certainly malware of some kind and you should use Task
Manager to select and "end process" on them. If they come right back
then that is confirmation that they are likely malware.

Download Stinger (free) from http://vil.nai.com/vil/stinger and run it
to scan your system for the most common of the current crop of baddies
and/or go to one of the following websites and do a free online scan:
Trend Micro http://housecall.trendmicro.com
Kaspersky Online Scanner http://www.kaspersky.com/virusscanner
Panda ActiveScan http://www.pandasoftware.com/activescan
WindowSecurity.com TrojanScan http://windowssecurity.com/trojanscan
Webroot http://www.webroot.com/

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."
 
Back
Top