Memory leaks- high memory usage svchost.exe
hello!
im having a kind of a similar problem. Im using a Q6600 with 4Gb of RAM running on Windows 7 x64. My physical memory usage history is 1.75GB idle but my CPU usage looks good ~ 0%.
In Windows Task Manager when i arranged the memory column, the process with the highest memory usge is svchost.exe with 116,572K. And i have 14 svchost.exe in my computer! I opened process exporer and check the legitimate of all those svchost.exe
and they are all legit. When i look at the properties of the highest svchost.exe in process explorer, the services which is running under it is as follows
AudioEndPointBuilder c:\Windows\System32\Audiosrv.dll
CscService c:\Windows\System32\cscsvc.dll
hidserv c:\Windows\System32\hidserv.dll
Netman c:\Windows\System32\netman.dll
PcaSvc c:\Windows\System32\pcasvc.dll
SysMain c:\Windows\System32\sysmail.dll
TrkWks c:\Windows\System32\trkwks.dll
UxSms c:\Windows\System32\uxsms.dll
wudfsvc c:\Windows\System32\WUDFSvc.dll
All are legit DLLS.
Is it normal to have 14 svchost.exe running at the same time(system, local service, network service in Task Manager)
and how can i reduce the memory usage of the svchost.exe?
Hi,
There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can
be run depending on how and where Svchost.exe is started.
If you would like to reduce the usage of this service, I could share the following article with you:
Getting Started with SVCHOST.EXE Troubleshooting
PRF: High CPU (SVCHOST.EXE)
Hope it helps.
Alex Zhao
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Similar Messages
-
Memory leak when creating new thread.
Hi,
Each time i create a thread, it causes 8 bytes memory leak. The testing code is as below and you can see mem usage increasing in Windows Task Manager. But if i don't call ::OCIEnvCreate(), no memory leak.
Memory validator shows the following call stack information:
........largest allocation 8 bytes at .......
=>OraOCIEI10.dll ss_mem_thread_attach
=>OraOCIEI10.dll sscoresetserverflag
=>OraOCIEI10.dll slzgetevar
=>ntdll.dll LdrInitializeThunk
Anyone knows what is goiing on?
/Yue
#include <stdio.h>
#include <windows.h>
#include <process.h>
#include <oci.h>
static OCIEnv *env;
static unsigned int counter = 0;
unsigned __stdcall ThreadFunc(void* pArg)
counter++;
printf( "In %uth thread...\n", counter );
Sleep(100);
_endthreadex( 0 );
return 0;
int main( int argc, const char* argv[] )
sword rc = ::OCIEnvCreate(&env, OCI_DEFAULT, NULL, NULL, NULL, NULL, 0, NULL );
for(;;)
HANDLE hThread;
unsigned threadID;
// Create the second thread.
hThread = (HANDLE)_beginthreadex( NULL, 0, &ThreadFunc, NULL, 0, &threadID );
WaitForSingleObject( hThread, INFINITE );
// Destroy the thread object.
CloseHandle( hThread );
return 0;
}Hi,
I'm not suprised.
OCI offers the feature OCIThreadKey that allow you to store a pointer within a thread context (without using OCIThread, just using natives threads).
So OCI needs to catch thread creation to be able to register storage for its OCIThread key value and be able, once the thread is finished to call a callback with the pointer value associated with the thread.... -
these are the chunks from the file I made through valgrind a memory check software.
these are the kind of leak or error you could say; that were reported by the software or a library to check memory leaks if u want i could send you the whole file please help
==22982== Memcheck, a memory error detector for x86-linux.
==22982== Copyright (C) 2002-2004, and GNU GPL'd, by Julian Seward et al.
==22982== Using valgrind-2.2.0, a program supervision framework for x86-linux.
==22982== Copyright (C) 2000-2004, and GNU GPL'd, by Julian Seward et al.
==22982== For more details, rerun with: -v
==22982==
==22982== Syscall param times(buf) contains unaddressable byte(s)
==22982== at 0x1E4522: times (in /lib/tls/libc-2.3.4.so)
==22982== by 0x1BF22146: kghinp (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BB6FBA6: kpuinit0 (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BB6EED9: kpuenvcr (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== Address 0x0 is not stack'd, malloc'd or (recently) free'd
==22982==
==22982== Invalid read of size 16
==22982== at 0x1C8E9B18: (within /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
==22982== Address 0x1CA35F60 is 112 bytes inside a block of size 127 alloc'd
==22982== at 0x1B904984: malloc (vg_replace_malloc.c:131)
==22982== by 0x1BE1E6B5: nlpainzert (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BE1D3B7: nlpaparse (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BE1E513: nlpardfile (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982==
==22982== Use of uninitialised value of size 16
==22982== at 0x1C8E988E: (within /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
==22982== by 0x1BDC2593: ztchn (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BDC24C1: ztch (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BDC57D5: ztcrsgstk (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982==
==22982== Use of uninitialised value of size 4
==22982== at 0x1BD79DA0: ztced_einit (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD79EC5: ztcedgks (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD79497: ztcedi (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD785F7: ztcebi (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982==
==22982== Conditional jump or move depends on uninitialised value(s)
==22982== at 0x1C83BE39: CMP_OctetStringToCMPInt (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
==22982== by 0x1C82E155: Alg_ComputeModQ_GHash (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
==22982== by 0x1C837582: A_X931RandomGenerateBytes (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libnnz10.so)
==22982== by 0x1BDC4DF9: ztcr2rnd (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982==
==22982== Conditional jump or move depends on uninitialised value(s)
==22982== at 0x1BEE0BDF: kzsrepw (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BBB38B5: kpu8lgn (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BBADA00: kpuauthxa (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BBAD53E: kpuauth (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982==
==22982== Use of uninitialised value of size 4
==22982== at 0x1BD7A382: ztceai (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD785F7: ztcebi (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD77EC5: ztcei (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BDC65B1: ztvo5pe (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD77F64: ztcen (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982==
==22982== Conditional jump or move depends on uninitialised value(s)
==22982== at 0x1BD79022: ztceb_unpadding (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD788D4: ztcebf (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD78010: ztcef (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982== by 0x1BD77D07: ztcedec (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libclntsh.so.10.1)
==22982==
==22982== Mismatched free() / delete / delete []
==22982== at 0x1B905043: operator delete(void*) (vg_replace_malloc.c:156)
==22982== by 0x1B95C23C: oracle::occi::ConnectionImpl::~ConnectionImpl() (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
==22982== by 0x1B95A094: oracle::occi::EnvironmentImpl::terminateConnection(oracle::occi::Connection*) (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
==22982== by 0x8050DE4: DBConnection::CloseEnv(DBError*) (in /home/jaka/IRIS/EXE/test.exe)
==22982== Address 0x1CA59618 is 0 bytes inside a block of size 5 alloc'd
==22982== at 0x1B904D39: operator new[](unsigned) (vg_replace_malloc.c:139)
==22982== by 0x1B95A86E: oracle::occi::ConnectionImpl::setUserName(void*, unsigned, bool) (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
==22982== by 0x1B95B14D: oracle::occi::ConnectionImpl::openConnection(OCIEnv*, OCIError*, void*, unsigned, void*, unsigned, void*, unsigned, void*, unsigned, unsigned) (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
==22982== by 0x1B95EFB5: oracle::occi::ConnectionImpl::ConnectionImpl(oracle::occi::EnvironmentImpl*, std::string const&, std::string const&, std::string const&) (in /usr/app/oracle/oracle/product/10.2.0/db_1/lib/libocci.so.10.1)
==22982==
==22982== ERROR SUMMARY: 1524 errors from 165 contexts (suppressed: 27 from 2)
==22982== malloc/free: in use at exit: 960761 bytes in 309 blocks.
==22982== malloc/free: 2699 allocs, 2390 frees, 1313176 bytes allocated.
==22982== For counts of detected errors, rerun with: -v
==22982== searching for pointers to 309 not-freed blocks.
==22982== checked 20880568 bytes.
==22982==
==22982== LEAK SUMMARY:
==22982== definitely lost: 0 bytes in 0 blocks.
==22982== possibly lost: 0 bytes in 0 blocks.
==22982== still reachable: 960561 bytes in 308 blocks.
==22982== suppressed: 200 bytes in 1 blocks.
==22982== Reachable blocks (those to which a pointer was found) are not shown.
==22982== To see them, rerun with: --show-reachable=yes
now if any body can help me removing this memory leak or is this the problem of OCCI
apparently it seems to be OCCI's library issue but i could be wrong please help
hoping to see a response
Message was edited by:
kjaka=============================================
#include <iostream>
#include <string>
#include <vector>
#include <occi.h>
using namespace std;
using namespace oracle::occi;
int main()
Environment* env;
env = Environment::createEnvironment(Environment::OBJECT);
cout << "Enviorment created " << endl;
Connection* conn;
Statement *stmt;
ResultSet *rs;
vector<MetaData> vMD;
vector<MetaData> vArgMD;
int dataType;
char tmpChar[1024];
Statement::Status status;
try
conn = env->createConnection("iris","tpstps", "iris10gr1");
cout << "connection created " << endl;
stmt = conn->createStatement();
string sStmt = "begin :1 := PKGNETWORK.spGetNetworkInfoByIP(:2, :3); end;";
// 1st sp
stmt->setSQL(sStmt);
stmt->registerOutParam(1, OCCIINT);
stmt->setString(2,"192.168.6.12");
stmt->setMaxParamSize(2,20);
stmt->registerOutParam(3,OCCICURSOR);
status = stmt->execute();
int retVal = stmt->getInt(1);
rs = stmt->getCursor(3);//use ResultSet to fetch rows
vMD = rs->getColumnListMetaData();
dataType = vMD[0].getInt(MetaData::ATTR_DATA_TYPE);
cout << "Attribute count : " << vMD[0].getAttributeCount() << endl;
dataType=vMD[0].getInt(MetaData::ATTR_DATA_TYPE);
cout << "Attribute type : " << dataType << endl;
cout << "Attribute name : " << vMD[0].getString(MetaData::ATTR_NAME)<< endl;
cout << "Size : " << vMD.size() << endl;
while (rs->next())
cout << "next row";
cout << "NetID : " << rs->getString(1).c_str() << endl;
cout << " vector filled for SP1" << endl;
cin >> tmpChar;
vMD.clear();
stmt->closeResultSet(rs);
conn->terminateStatement(stmt);
cout << "1st sp executed" << endl;
// 2nd sp
string sStmt1 = "begin :1 := PKGJUNK.SpGetTblAccount(:2); end;";
stmt = conn->createStatement();
stmt->setSQL(sStmt1);
stmt->registerOutParam(1, OCCIINT);
stmt->registerOutParam(2,OCCICURSOR);
status = stmt->execute();
retVal = stmt->getInt(1);
rs = stmt->getCursor(2);//use ResultSet to fetch rows
int loop = 1;
vMD = rs->getColumnListMetaData();
dataType = vMD[0].getInt(MetaData::ATTR_DATA_TYPE);
cout << "Attribute count : " << vMD[0].getAttributeCount() << endl;
dataType=vMD[0].getInt(MetaData::ATTR_DATA_TYPE);
cout << "Attribute type : " << dataType << endl;
cout << "Attribute name : " << vMD[0].getString(MetaData::ATTR_NAME)<< endl;
cout << "Size : " << vMD.size() << endl;
while (rs->next())
cout << "next row";
cout << "NetID : " << rs->getString(1).c_str() << endl;
stmt->closeResultSet(rs);
cout << "2nd sp executed" << endl;
conn->terminateStatement(stmt);
// sp-3
string sStmt2 = "begin :1 := PKGONELINK.spValidateAccount(:2,:3,:4,:5,:6); end;";
stmt = conn->createStatement();
stmt->setSQL(sStmt2);
stmt->registerOutParam(1, OCCIINT);
stmt->setString(2,"37863 ");
stmt->setMaxParamSize(2,100);
stmt->registerOutParam(3,OCCISTRING, 20);
stmt->registerOutParam(4,OCCISTRING, 2);
stmt->registerOutParam(5,OCCISTRING, 3);
stmt->registerOutParam(6,OCCISTRING, 3);
status = stmt->execute();
cout << "3rd sp executed" << endl;
conn->terminateStatement(stmt);
conn->flushCache();
env->terminateConnection(conn);
vMD.clear();
cout << "Demo completed...data deleted" << endl;
cin >> tmpChar;
catch (SQLException &ex)
{//cleanup
cout << "Error, cleaning up..." << ex.getMessage() << endl;
conn->terminateStatement(stmt);
env->terminateConnection(conn);
cout << "terminating env" << endl;
Environment::terminateEnvironment(env);
// throw;//will be caught by outer handler
Environment::terminateEnvironment(env);
return 0;
===================================================
this is not the same program but still this program gives the same amount of memory leak, this memory leak is reported in each program that uses OCCI
this program was made with the help of the sample program posted at the OTN website
"Calling PLSQL functions/procedures";
hoping for a reply soon -
Good day folks,
I'm looking for some advice regarding my Macbook and what is an apparent memory leak I'm experiencing. I've been getting a lot of 'beachball' activity in the last couple of months and after weeks of phone calls with Apple and a visit to the Genius bar, Diskwarrior, archive and install with Time Machine, etc., etc. it is now apparent that something is sucking memory on the machine even when I don't see any application running. Activity monitor doesn't show the CPU being taxed, but the available memory drops to almost 'zero green' in the pie chart.
Prior to me doing a clean wipe of my hard drive and a selective re-install of data, does anyone have a tip as to what might be causing this? I really don't use a lot of apps. Most common would be iPhoto, Safari, Adobe, Mail, Numbers. My iPhoto library is about 6 GBs. I have tons of available HD space.
Two items in Activity Monitor which appear to be using a lot of 'virtual memory' are 'Dashboard Client' (which I don't appear to be able to 'quit') and Apple80211Agent. I'm not very tech savvy so any tips you could offer would be appreciated. Thanks all.What evidence to you actually have of this so-called memory leak? Memory leaks happen in software, so you would have to examine individually running applications to determine if a leak actually occurs (and you would need to know how to discern one.) If you are running out of RAM as possibly evidenced by beachballing, it may be due to the fact that you are trying to run iPhoto, Safari, Adobe, Mail, Numbers. My iPhoto library, which is more than your 2 GBs of RAM can support. What you need is more RAM.
Virtual memory usage in Activity Monitor has no meaning to you and has nothing to do with RAM usage or memory leaks.
About OS X Memory Management and Usage
Reading system memory usage in Activity Monitor
Memory Management in Mac OS X
Performance Guidelines- Memory Management in Mac OS X
A detailed look at memory usage in OS X
Understanding top output in the Terminal
The amount of available RAM for applications is the sum of Free RAM and Inactive RAM. This will change as applications are opened and closed or change from active to inactive status. The Swap figure represents an estimate of the total amount of swap space required for VM if used, but does not necessarily indicate the actual size of the existing swap file. If you are really in need of more RAM that would be indicated by how frequently the system uses VM. If you open the Terminal and run the top command at the prompt you will find information reported on Pageins () and Pageouts (). Pageouts () is the important figure. If the value in the parentheses is 0 (zero) then OS X is not making instantaneous use of VM which means you have adequate physical RAM for the system with the applications you have loaded. If the figure in parentheses is running positive and your hard drive is constantly being used (thrashing) then you need more physical RAM. -
Memory leak when browsing through records
Hello,
I have a problem with any page containing the component related to each other on three or more levels. (1st level ADF Table, 2nd level ADF Table and 3rd level ADF Form)
By navigating through the records of the first level, there is refreshment at other levels (using partial triggers), but suddenly there is loss of memory (memory leak) for components of type Select One Choice.
Precisely, the problem appears when browsing another Show Detail Item in the same page.
Screenshot showing the Data Control in my page: [http://www.infotun.net/usersimages/1/adf/structure.jpg]
Capture screen representing the initial state where all is well: [http://www.infotun.net/usersimages/1/adf/initial.jpg]
Capture screen representing the final state after memory loss: [http://www.infotun.net/usersimages/1/adf/final.jpg]
I'm using JDeveloper Studio 11.1.1.2.0
JDK: 1.6.0_14
Operating System: Windows 7.
Any help/advice is highly appreciated !
Thanks
Edited by: InfoTun on 10 juin 2012 16:22
Edited by: InfoTun on 10 juin 2012 16:26Hi,
the screenshot does not indicate a memory leak. Memory leaks show by the server memory consumption that leads to slow performance or stale applications. Your issue seems to be different from that and doesn't really explain in the screen shots. If you have a support contract then customer support is the recommendation I like to give
Frank -
Memory leak playing podcasts in iTunes 11.2, Windows 8.1 x64
I've already uninstalled and reinstalled iTunes 11.2 64 bit.
When I play a podcast it plays for a few minutes then iTunes freezes. Watching it in task manager its obvious there's a memory leak. Memory climbs steadily until about 1.6Gb when it dies.
Any suggestions?
Can we download earlier versions?Was hoping 11.2.2 would fix it. Nope, the memory leak is still there in the podcasts tab. The workaround is to refresh podcasts and jump to the music tab.
-
How can memory leaks occur?
Hi,
I was just wondering how a memory leak can occur in Java. The garbage collector is supposed to free up all unused variables, so under what circumstances can it happen?This is not technically a "memory leak". I've seen
this called "loitering objects", which conjures upa
vivid picture: objects hanging around with nothingto
do...I think it's the classic java memory leak. A bug in
a program that prevents the freeing up of memory that
it no longer needs.Yes, but it's not what is traditionally termed a memory leak.
A real memory leak is memory that's claimed by the program but no longer accessible to the program for freeing up.
That can in Java (where what we call a program isn't a complete program but runs inside a virtual machine which handles memory allocation and deallocation) only happen if there's a flaw in the JVM itself which causes errors in memory deallocation (so most likely a flaw in the garbage collector).
In Java the objects you create are always out there somewhere where something can reach them so as to prevent them from being available to the garbage collector.
Different cause, same effect in that in both cases memory isn't getting freed for reuse. -
Can Java program cause memory leak?
Can Java program cause memory leak or memory crash? I don't mean any memory overflow related exceptions. I mean something like core dump in UNIX or error reports in Windows XP.
If it can really happen, in what circumstances? I raise such a question because our J2EE based system had really caused memory leak in Windows XP systems, but so far we still fail to troubleshoot the problem.Your code may leak memory. There are many, many, many reasons this could be. All of them represent bugs in your code.
You should get a profiler to identify the problem spots of your code.
You spoke of a memory crash as well. The VM may crash with some bug in the VM, or a bug in native code but that is not relevent to your problem. A memory leak is a problem in your code. -
svchost.exe, is consuming 200-600mb of memory on start up and does not stop until i kill the process then does it again x2, then the display settings go from the sleek design to a windows 98 look then svchost.exe stops leaking but
why is svchost.exe leaking in the first place after not doing it for 2-3 years of owning this computer running the same os.
os: Windows 7 64 bit - fully up-to-date
thanks in advanceHi Huzaifa,
Please make sure the svchost.exe file is located in the folder C:\Windows\System32. In other cases, svchost.exe is a virus, spyware, trojan or worm. Also check the user name of the process, it should be SYSTEM、LOCAL
SERVICE or NETWORK SERVICE.
This process manages system services that run from dynamic link libraries (files with extension .dll). Examples for such system services are: "Automatic Updates", "Windows Firewall", "Plug and Play", "Fax Service",
"Windows Themes".
First you need to know what service/dll sys is running by SVCHOST.exe.
Download Process Explorer from this website
https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx?f=255&MSPPError=-2147217396
Information about pool monitor
https://msdn.microsoft.com/en-us/library/windows/hardware/ff550442%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396
Open Process Explorer and find the problem SVCHOST.exe and check which service is taking resources.
Regards
D. Wu
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected] -
Windows Server 2012R2 - svchost.exe 60-100% load!
We are using RDS collection with two Windows Server 2012R2 session hosts. Both hosts are virtual servers (clean installation) and are used as session hosts (terminals) with 10 to 25 users each. RDS Connection Broker is also virtual machine with Windows
Server 2012 R2. Our users are using Windows 7 Embedded thin clients with MSTSC RDP 8.0.
There is problem with high cpu load on these servers. Sometimes Svchost.exe starts to cause 60-100% load. Our virtual machines have 10 virtual processor cores. Load is caused by LSM (Local Session Manager) Service from DCOM Launcher group. Svchost
creates many thread as you can see on picture attached. Sometimes this load disappears after 12-24 hours, sometimes it needs restarting whole server.
We still cannot find cause of this problem, although we managed to reproduce this issue one time by logging two admin accounts to server console and force disconnecting one of these accounts by third admin account connecting to server console by RDP
mstsc.exe with -admin parameter.
Our users are very unsatisfied :-(
This is screenshot of Process Explorer - svchost.exe - Threads:Hi,
Thank you for posting in Windows Server Forum.
Do you have any recent updates, might happens due to automatic updates which also can cause high cpu through svchost.exe. Please check as suggested by “Larry” by turning off Windows update service. In addition go through beneath articles for more information.
1. Automatic Update causes SVCHOST.exe high CPU
2. Getting Started with SVCHOST.EXE Troubleshooting
Hope it helps!
Thanks,
Dharmesh -
Windows Server 2008 R2 - When svchost.exe memory-leaks Outlook does not load properly
Hi all,
We have a server which runs Windows Server 2008 R2, fully updated, and acts as a Terminal Server (Citrix XenApp 6.5).
In the past couple months we have had problems with svchost.exe leaking memory, growing to 2-3GB of RAM usage. Sometimes is occurs with weeks between the incidents, sometimes days. To solve the issue we have to reboot the server.
When this occurs, Outlook (fully updated) doesn't start for any users at all. Outlook doesn't continue from the "Loading profile.."-stage. The users who already has Outlook started doesn't have any problems, unless they close Outlook ;) .
The svchost.exe is the one which runs the services:
NSI
WinHttpAutoProxySvc
W32Time
Netprofm
FontCache
EventSystem
We've patched the server with KB2847346 but with no result. Patch KB2950358 is not applicable..
Any ideas?svchost is hosting multiple services. when the issue occurs you can use sysinternals procmon (or enable the command line column in task manager process tab) to view to determine which service is using that much memory.
MCP/MCSA/MCTS/MCITP
Did you read my whole post, or did you just misunderstand the part were I wrote:
The svchost.exe is the one which runs the services:
NSI
WinHttpAutoProxySvc
W32Time
Netprofm
FontCache
EventSystem"
I know that svchost.exe runs ALOT of services, so when the problem occurred I checked which services the specific svchost.exe runs. Everytime it happens the svchost.exe (which leaks and has 2-3GB mem usage) runs this specific services. -
2008 R2 - Memory Leak from svchost.exe - Module "rpcrt4" is the culprit
Hi All
Over the past week or so (after a set of Windows updates and restart) svchost.exe has increasingly used more and more memory. It probably gobbles up an extra 1GB per day and doesn't relent.
After running various diagnostics, the debug diagnostic tool finally provided me this information after a memory leak test:
rpcrt4.dll is responsible for 1.76 GBytes worth of outstanding allocations. The following are the top 2 memory consuming functions:
rpcrt4!AllocWrapper+2b: 1.76 GBytes worth of outstanding allocations.
rpcrt4!Ndr64ClientInitialize+964: 1.36 MBytes worth of outstanding allocations.
Detailed module report(Memory)
Module details for rpcrt4
Module Name rpcrt4
Allocation Count 946941 allocation(s)
Allocation Size 1.76 GBytes
Module Information
Image Name: C:\Windows\System32\rpcrt4.dll Symbol Type: PDB
Base address: 0x00000003`00905a4d Time Stamp: Sat Nov 20 13:13:18 2010
Checksum: 0x00000000`00000000 Comments:
COM DLL: True Company Name: Microsoft Corporation
ISAPIExtension: False File Description: Remote Procedure Call Runtime
ISAPIFilter: False File Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
Managed DLL: False Internal Name: rpcrt4.dll
VB DLL: False Legal Copyright: © Microsoft Corporation. All rights reserved.
Loaded Image Name: rpcrt4.dll Legal Trademarks:
Mapped Image Name: Original filename: rpcrt4.dll
Module name: rpcrt4 Private Build:
Single Threaded: False Product Name: Microsoft® Windows® Operating System
Module Size: 1.18 MBytes Product Version: 6.1.7601.17514
Symbol File Name: c:\symcache\rpcrt4.pdb\7D748DA6D7454C9EA38C8CEF1C9E75F22\rpcrt4.pdb Special Build: &
rpcrt4!AllocWrapper+2b has 944,468 allocations!
I'm running 2008 R2 64bit with anywhere up to 80/100 simultaneous RDP connections at any one time.
Can anyone help or advise as I cannot find any hotfixes for this issue.
Thanks
RyanHi Ryan,
Please narrow it down to the specific service that is having the issue. That way you will know where to focus on.
For the specific svchost.exe that is showing the large memory usage, use task manager/process explorer/etc. to determine which service(s) are running within it. If there are multiple services running within it, I recommend you isolate them and then
restart your server. For example, say you determined that the following services are running in the "problem" svchost.exe: AudioEndpointBuilder, Netman, TrkWks, UmRdpService, Uxsms. You would open an admin command prompt and enter the following
commands:
sc config AudioEndpointBuilder type= own
sc config Netman type= own
sc config TrkWks type= own
sc config UmRdpService type= own
sc config Uxsms type= own
After entering the above commands you would restart your server for the changes to take effect. Over time you would monitor memory usage of the suspect services, and eventually it will become apparent which one is using too much memory.
Thanks.
-TP -
Alerts from Norton re high memory usage by plugin-container.exe
Running Firefox 3.6.13 on Windows XP Pro Service Pack 3. The details from Norton are as follows:
1. Program Path C:\program files\Mozilla firefox\plugin-container.exe
2. Program Description - Plugin Container for Firefox
3. Memory - 1,676 MB used
4. Disk Write Activity - 10 MB (total for this process)
5. File Origin - Source File = updater.exe, File Created: firefox.exe,updater.exe,plugin-container.exeProbably the alerts are nothing to worry about, and you may wish to suppress that particular alert.
On a couple of old spec legacy machines I recently switched. <br>Partly because of economics, and partly because , of the two, <br> Norton can perform better (in my opinion) on legacy machines.
The first thing I did notice was that Norton does pulse updates and background tasks very frequently (configurations can be changed) by default, and flags up quite a number of alerts.
The Norton (NIS) 'Insight' facility will be flagging up firefox plugin container.exe. It can be configured to suppress the alerts from firefox plugin container, but unless disabled will probably just flag up another busy process or application. It is not flagging it up because it is a known security problem, merely because of the amount of activity.
I imagine the alerts are when you are playing videos, probably with FlashPlayer, and may well depend on the resolution/quality of the videos.
If you think the results are unusual or unexpected see:
*[[High memory usage]]
*[[Firefox consumes a lot of CPU resources]]
PS not sure what is happening with this post are some phrases unacceptable eg alternative expressions about economics; one paragraph was behaving oddly in preview resorted to manually adding break tags to keep it within the container. -
Fileserver.exe high memory usage
Hi all,
I am using BOXI3.0 installed on Tomcat & Windows Server 2003. I discover there is a high memory usage of fileserver.exe, always over 50%. After reboot the SIA, the memory usage drops back to 0. I have a regular reboot every weekend but still got that error. Anything I can check?
And in the log, AAMetrics_xxxxxxxxx.log, I found there is an error
assert failure: (d:/Titan_RTM/src/Common/export/iface\cxlib/refcount.h:89). (SNonInterlockedRead(&m_lRefCount) == 0 : no message).
Anyone knows what it is and how to solve it?
Thanks you in advanced.
GraceI am using BOXI 3.0. Do you have any recommendation on which version of fix pack? or simply upgrade to 3.1 is better?
Some people said we cannot upgrade from 3.0 to 3.1 directly, instead, we need to uninstall the BOXI 3.0 and reinstall the 3.1. Do you have any experience on it?
Many thanks. -
Very high memory usage..possible memory leak? Solaris 10 8/07 x64
Hi,
I noticed yesterday that my machine was becoming increasingly slow, where once it was pretty snappy. It's a Compaq SR5250NX with 1GB of RAM. Upon checking vmstat, I noticed that the "Free" column was ~191MB. Now, the only applications I had open were FireFox 2.0.11, GAIM, and StarOffice. I closed all of them, and the number reported in the "Free" column became approximately 195MB. "Pagefile" was about 5.5x that size. There were no other applications running and it's a single user machine, so I was the only one logged in. System uptime: 9 days.
I logged out, logged back in, to see if that had an affect. It did not. Rebooted and obviously, that fixed it. Now with only FireFox, GAIM, and a terminal open, vmstat reports "Free" as ~450MB. I've noticed if I run vmstat every few seconds, the "Free" total keeps going down. Example:
unknown% vmstat
kthr memory page disk faults cpu
r b w swap free re mf pi po fr de sr cd s0 s1 s2 in sy cs us sy id
0 0 0 870888 450220 9 27 10 0 1 0 8 2 -0 -0 -0 595 1193 569 72 1 28
unknown% vmstat
kthr memory page disk faults cpu
r b w swap free re mf pi po fr de sr cd s0 s1 s2 in sy cs us sy id
0 0 0 870880 450204 9 27 10 0 1 0 8 2 -0 -0 -0 596 1193 569 72 1 28
unknown% vmstat
kthr memory page disk faults cpu
r b w swap free re mf pi po fr de sr cd s0 s1 s2 in sy cs us sy id
0 0 0 870828 450092 9 27 10 0 1 0 8 2 -0 -0 -0 596 1193 570 71 1 28
unknown%Output of prstat -u Kendall (my username ) is as follows:
PID USERNAME SIZE RSS STATE PRI NICE TIME CPU PROCESS/NLWP
2026 Kendall 124M 70M sleep 59 0 0:01:47 1.4% firefox-bin/7
1093 Kendall 85M 77M sleep 59 0 0:07:15 1.1% Xsun/1
1802 Kendall 60M 15M sleep 59 0 0:00:08 0.1% gnome-terminal/2
1301 Kendall 93M 23M sleep 49 0 0:00:30 0.1% java/14
1259 Kendall 53M 15M sleep 49 0 0:00:32 0.1% gaim/1
2133 Kendall 3312K 2740K cpu1 59 0 0:00:00 0.0% prstat/1
1276 Kendall 51M 12M sleep 59 0 0:00:11 0.0% gnome-netstatus/1
1247 Kendall 46M 10M sleep 59 0 0:00:06 0.0% metacity/1
1274 Kendall 51M 13M sleep 59 0 0:00:05 0.0% wnck-applet/1
1249 Kendall 56M 17M sleep 59 0 0:00:07 0.0% gnome-panel/1
1278 Kendall 48M 9240K sleep 59 0 0:00:05 0.0% mixer_applet2/1
1245 Kendall 9092K 3844K sleep 59 0 0:00:00 0.0% gnome-smproxy/1
1227 Kendall 8244K 4444K sleep 59 0 0:00:01 0.0% xscreensaver/1
1201 Kendall 4252K 1664K sleep 59 0 0:00:00 0.0% sdt_shell/1
1217 Kendall 55M 16M sleep 59 0 0:00:00 0.0% gnome-session/1
779 Kendall 47M 2208K sleep 59 0 0:00:00 0.0% gnome-volcheck/1
746 Kendall 5660K 3660K sleep 59 0 0:00:00 0.0% bonobo-activati/1
1270 Kendall 49M 10M sleep 49 0 0:00:00 0.0% clock-applet/1
1280 Kendall 47M 8904K sleep 59 0 0:00:00 0.0% notification-ar/1
1199 Kendall 2928K 884K sleep 59 0 0:00:00 0.0% dsdm/1
1262 Kendall 47M 2268K sleep 59 0 0:00:00 0.0% gnome-volcheck/1
Total: 37 processes, 62 lwps, load averages: 0.11, 0.98, 1.63System uptime is 9 hours, 48 minutes. I'm just wondering why the memory usage seems so high to do...nothing. It's obviously a real problem as the machine turned very slow when vmstat was showing 195MB free.
Any tips, tricks, advice, on which way to go with this?
Thanks!Apologies for the delayed reply. School has been keeping me nice and busy.
Anyway, here is the output of prstat -Z:
PID USERNAME SIZE RSS STATE PRI NICE TIME CPU PROCESS/NLWP
2040 Kendall 144M 76M sleep 59 0 0:04:26 2.0% firefox-bin/10
28809 Kendall 201M 193M sleep 59 0 0:42:30 1.9% Xsun/1
2083 Kendall 186M 89M sleep 49 0 0:02:31 1.2% java/58
2260 Kendall 59M 14M sleep 59 0 0:00:00 1.0% gnome-terminal/2
2050 Kendall 63M 21M sleep 49 0 0:01:35 0.6% realplay.bin/4
2265 Kendall 3344K 2780K cpu1 59 0 0:00:00 0.2% prstat/1
29513 Kendall 71M 33M sleep 39 0 0:07:25 0.2% gaim/1
28967 Kendall 56M 18M sleep 59 0 0:00:24 0.1% gnome-panel/1
29060 Kendall 93M 24M sleep 49 0 0:02:58 0.1% java/14
28994 Kendall 51M 13M sleep 59 0 0:00:23 0.1% wnck-applet/1
28965 Kendall 49M 14M sleep 59 0 0:00:33 0.0% metacity/1
649 noaccess 164M 46M sleep 59 0 0:09:54 0.0% java/23
28996 Kendall 51M 12M sleep 59 0 0:00:50 0.0% gnome-netstatus/1
2264 Kendall 1352K 972K sleep 59 0 0:00:00 0.0% csh/1
28963 Kendall 9100K 3792K sleep 59 0 0:00:03 0.0% gnome-smproxy/1
ZONEID NPROC SWAP RSS MEMORY TIME CPU ZONE
0 80 655M 738M 73% 1:18:40 7.7% global
Total: 80 processes, 322 lwps, load averages: 0.27, 0.27, 0.22Sorry about the bad formatting, it's copied from the terminal.
In any event, we can see that FireFox is sucking up 145MB (??!?!!? crazy...) XSun, 200MB, and java 190MB. I'm running Java Desktop System (Release 3) so I assume that is what accounts for the the high memory usage RE: java process. But, XSun, 200MB?
Is this normal and I just need to toss another gig in, or what?
Thanks
Maybe you are looking for
-
[Success] Dual Booting Arch and Windows 7 [Advice / Confirmation]
So I have been trying to get Starcraft II to work with wine and no luck. I have decided to install windows back on my computer, besides it might come in handy since I'm heading back to school soon. Anyways I have tried dual booting arch and windows i
-
Wecam and USB mic input not working after upgrade to Lion
The audio inputs (micraphones) all show up in Syetem Preferences but if I talk into the microfones (on USB soundcard/Trust Webcam) no levels are being shown, I have tried clicking on eatch input it turh but n luck. I am getting the impresion Lion br
-
Hi, Does anyone know how can I customize the QBE? I want to remove the format mask textbox, the align combo box and the case sensitive check box? any help would very appreciated... thanks in advance, Miguel
-
hi all, I have output an outbound IDOC by ME9F and do an inbound by WE14 The outbound status changes from 30 to 03 as normal but the inbound IDOC is lost (Can't find in table EDIDC) Could anyone tell me what happen?
-
Simple JPA prog weblogic 10.3, struggling with java.lang.NoClassDef s
Hi, Trying to run a basic JPA program using createEntityManagerFactory, EntityManager and persistence.xml.....Everything compiling fine. I'm running it as a standalone Java application on Weblogic 10.3. First I got this error on running. Exception in