Crazy page file growth! - Help needed!

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • kovacsa
    PCHF Member
    • Jun 2019
    • 9

    #1

    Crazy page file growth! - Help needed!

    Hi All, I’m having a strange problem I’ve never encountered before. When I first boot my Win10 machine, I have about 17-18GB of disk storage space. After about 2 hours (often less), my page file has grown considerably to the point where my storage is out of space and my system crashes. A reset is the only option at this point. I’m not running anything too RAM intensive (Chrome always takes up the most memory and I’m only doing desktop work), so I’m not sure what’s happening. I suspect there may be a memory leak, but am not sure how to detect it or what would be causing it. I don’t suspect malware or such as I have done scans recently. I have the option, “Automatically manage paging file size for all drives” check in the System properties. This happens everytime I use my machine. I have 8GB of DDR4 RAM and and 240GB SSD. Any help would be appreciated, thanks!
  • Malnutrition
    PCHF Moderator
    • Jul 2016
    • 7041

    #2
    Some information about your machine will help things along.

    Please download MINITOOLBOX and run it.

    Checkmark following boxes:

    Flush DNS
    Reset FF proxy Settings
    Reset Ie Proxy Settings
    Report IE Proxy Settings
    Report FF Proxy Settings
    List content of Hosts
    List IP configuration
    List Winsock Entries
    List last 10 Event Viewer log
    List Installed Programs
    List Users, Partitions and Memory size
    List Devices (problems only)

    Click Go Attach the result.

    ===========================

    Download Scanrapide
    Unzip it to your desktop.
    Run as Admin
    Attach the log created.

    ===========================

    : Speccy Scan.

    [ul]
    [li]Please go here and download Speccy.[/li][li]Install and run the program.[/li][li]Upon Completion:[/li][li]Hit File[/li][li]Publish Snap Shot[/li][li]A link will appear, post that link.[/li][/ul]

    Comment

    • kovacsa
      PCHF Member
      • Jun 2019
      • 9

      #3
      Originally posted by Malnutrition
      Some information about your machine will help things along.

      Please download MINITOOLBOX and run it.

      Checkmark following boxes:

      Flush DNS
      Reset FF proxy Settings
      Reset Ie Proxy Settings
      Report IE Proxy Settings
      Report FF Proxy Settings
      List content of Hosts
      List IP configuration
      List Winsock Entries
      List last 10 Event Viewer log
      List Installed Programs
      List Users, Partitions and Memory size
      List Devices (problems only)

      Click Go Attach the result.

      ===========================

      Download Scanrapide
      Unzip it to your desktop.
      Run as Admin
      Attach the log created.

      ===========================

      : Speccy Scan.

      [ul]
      [li]Please go here and download Speccy.[/li][li]Install and run the program.[/li][li]Upon Completion:[/li][li]Hit File[/li][li]Publish Snap Shot[/li][li]A link will appear, post that link.[/li][/ul]
      Hey, Thanks for taking a look. Here is result of the utility. Have you heard of a problem like this before? I’ve worked in net admin and never encountered an issue like this.

      Comment

      • Malnutrition
        PCHF Moderator
        • Jul 2016
        • 7041

        #4
        I need the ScanRapide log and the Speccy link as well.

        And as far as an issue like this, each machine is different and has its own set of issues. I’ll see if I can get to the bottom of it, if not someone here will surely help you solve the issue.

        Comment

        • Malnutrition
          PCHF Moderator
          • Jul 2016
          • 7041

          #5
          Uninstall the programs below with Geek uninstaller. ( You can reinstall these later if you wish but bonjour is causing issues with your machine, and the other two are really not needed.)

          µTorrent (HKCU...\uTorrent) (Version: 3.5.5.45231 - BitTorrent Inc.)
          Bonjour (HKLM...{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
          Norton Security Scan (HKLM-x32...\NSS) (Version: 4.6.1.179 - Symantec Corporation)

          ================================================== ================================================== ============

          You also have a lot of out of date programs running on your machine. Please update them all with Patch My PC.

          Once you have removed those programs and updated all of your out of date software, I’d like you to disable your startups with CCleaner.

          ================================================== ================================================== ============

          Clean up temp files and reduce startup load with CCleaner.

          Note: This tool will clean your browsing history as well.


          [ul]
          [li]Download CCleaner from here.[/li][li]After install Click Options.[/li][li]Go to monitoring.[/li][li]Uncheck All Monitoring items.[/li][li]Go to advanced – Click close program after cleaning.[/li][li]Go to settings – click run ccleaner when the computer starts.[/li][li]Now that you have ccleaner installed and set-up:[/li][li]Open the program.[/li][li]Go to Tools[/li][li]Go to Startup[/li][li]Now double click each item. To Disable.[/li][li]Leave only your antivirus enabled.[/li][li]Then disable All items in your scheduled task as well.[/li][li]Unless they are related to windows defender.Or your antivirus.[/li][li]Reboot the machine.[/li][/ul]

          After you have rebooted the machine once ccleaner is done. I need to take a look and make sure things are updated and the startup is trimmed.

          ================================================== ==================

          I do not suspect malware but this toll will just remove any crap that may be there, and that is just a part of what I do when helping people. I am a firm believer in checking all aspects when dealing with a problem.

          Adware Cleaner Scan.

          Please download AdwCleaner by Xplode onto your desktop.
          [HEADING=1][ul]
          [li]Close all open programs and internet browsers.[/li][li]Right Click on adwcleaner.exe and run as admin to run the tool.[/li][li]Click on Scan button.[/li][li]When the scan has finished click on Clean button.[/li][li]Your computer will be rebooted automatically. A text file will open after the restart.[/li][li]Please post the contents of that logfile with your next reply.[/li][li]You can find the logfile at C:\AdwCleaner[S1].txt as well.[/li][/ul][/HEADING]
          Security Check Scan.
          [HEADING=1][ul]
          [li]Download Security Check to your desktop.[/li][li]Right click it run as administrator.[/li][li]When the program completes, the tool will automatically open a log file.[/li][li]Please post that log here in your next post.[/li][/ul][/HEADING]
          HijackThis.

          1- Please click HERE to download HijackThis.
          2- Run the program.
          3- Click on the Main Menu button if not already there.
          4- Select Do a system scan and save a logfile.
          5- Copy paste the log here.

          ================================================== ==

          From your minitoolbox log, your host file needs to be reset, for sure.

          Reset Host File

          [ul]
          [li]Click here to download RstHosts v2.0[/li][li]Save the file to your desktop.[/li][li]Right Click and Run as Administrator.[/li][li]Click on Restaurer, then click OK at the prompt.[/li][li]This will restore the default host file.[/li][li]Next Click on Creer Un Rapport.[/li][li]This will open a logfile, post that in your next reply.[/li][/ul]

          Comment

          • kovacsa
            PCHF Member
            • Jun 2019
            • 9

            #6
            Originally posted by Malnutrition
            I need the ScanRapide log and the Speccy link as well.

            And as far as an issue like this, each machine is different and has its own set of issues. I’ll see if I can get to the bottom of it, if not someone here will surely help you solve the issue.
            Awesome. I can’t find much online about paging file issues. Attaching the logs.

            Comment

            • Malnutrition
              PCHF Moderator
              • Jul 2016
              • 7041

              #7
              No need to quote each post, and ill be waiting on the other logs when you have posted those we will take it from there.

              And actually, if you have the link created by Speccy I’d rather have that.

              Comment

              • kovacsa
                PCHF Member
                • Jun 2019
                • 9

                #8
                Yeah, I tried publishing the link, but get the “can not connect to server error”, so I sent the text file instead.

                Comment

                • system
                  PCHF Owner
                  • Jan 2015
                  • 7635

                  #9
                  Hope you don’t mind me butting in here, but your OS partition on your hard drive is almost full. Windows needs more free space than you have avialable, so it would be prudent to free some disc space before proceeding.

                  Comment

                  • Malnutrition
                    PCHF Moderator
                    • Jul 2016
                    • 7041

                    #10
                    The ScanRapide log is incomplete. And I do see some signs of malware in it.

                    Here are a couple of the hits for malware, there are a few more that need taken care of. Make sure and get the whole log. Also, you have a large amount of start up items on your machine. I think it needs a general clean up and things will be right again. Just stick with me till the end of this and I am certain the issue will be resolved.

                    [HKU\S-1-5-21-313083479-2202061592-683150413-1001\Software\Conduit]
                    [HKU\S-1-5-21-313083479-2202061592-683150413-1001\Software\Chromium]
                    [HKU\S-1-5-21-313083479-2202061592-683150413-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06242019215558011\Software\Tencent]

                    Comment

                    • kovacsa
                      PCHF Member
                      • Jun 2019
                      • 9

                      #11
                      Does ScanRapide have any options, I run it in Admin mode and it opens a window briefly, then closes. I ran it three times and get the same file each time (at least judging by the file size)

                      Working on the other steps you’ve put forward…

                      Comment

                      • kovacsa
                        PCHF Member
                        • Jun 2019
                        • 9

                        #12
                        Originally posted by gus
                        Hope you don’t mind me butting in here, but your OS partition on your hard drive is almost full. Windows needs more free space than you have avialable, so it would be prudent to free some disc space before proceeding.
                        I’ve never had this issue before, even with low storage space. I’m not sure what’s causing the page file to grow as quickly as it does. Again, I suspect a memory leak of some sort, an app/service or process may be chewing up the memory and not releasing it, that’s my best guess.

                        Comment

                        • kovacsa
                          PCHF Member
                          • Jun 2019
                          • 9

                          #13
                          Reset Host File log

                          -|x| RstHosts v2.0 - Rapport créé le 24/06/2019 à 23:09:10
                          -|x| Système d’exploitation : Windows 10 Home (64 bits)
                          -|x| Nom d’utilisateur : Alexx - REBOOTFRANCHISE (Administrateur)

                          -|x|- Informations -|x|-

                          Emplacement : C:\WINDOWS\System32\drivers\etc\hosts
                          Attribut(s) : RASH
                          Propriétaire : Administrators - BUILTIN
                          Taille : 89 bytes
                          Date de création : 22/09/2013 - 21:19:03
                          Date de modification : 24/06/2019 - 23:09:02
                          Date de dernier accès : 24/06/2019 - 23:09:02

                          -|x|- Contenu du fichier -|x|-
                          [HEADING=1]Fichier Hosts créé par RstHosts[/HEADING]
                          127.0.0.1 localhost
                          ::1 localhost

                          -|x|- E.O.F - C:\RstHosts.txt - 610 bytes -|x|-

                          Comment

                          • system
                            PCHF Owner
                            • Jan 2015
                            • 7635

                            #14
                            Again please don’t quote previous posts, and irrespective WINDOWS WILL NEVER work correctly with so little free disc space left, but it is your call.

                            Also suggest you let Malnutrition remove garbage from your machine.

                            It is also counter productive and impolite to seek help at more than one forum at the same time as conflicting advice could render your machine inoperable. Perhaps you could consider where you wish to continue?

                            Comment

                            • kovacsa
                              PCHF Member
                              • Jun 2019
                              • 9

                              #15
                              Security Check Scan log

                              SecurityCheck by glax24 & Severnyj v.1.4.0.53 [27.10.17]
                              WebSite: www.safezone.cc
                              DateLog: 24.06.2019 23:39:50
                              Path starting: C:\Users\Alexx\AppData\Local\Temp\SecurityCheck\Se curityCheck.exe
                              Log directory: C:\SecurityCheck
                              IsAdmin: True
                              User: Alexx
                              VersionXML: 6.57is-18.06.2019


                              Windows 10(6.3.17134) (x64) Core Release: 1803 Lang: English(0409)
                              Installation date OS: 20.12.2018 23:54:31
                              LicenseStatus: Windows(R), Core edition The machine is permanently activated.
                              LicenseStatus: Office 15, OfficeProPlusVL_KMS_Client edition Windows is in Notification mode
                              Boot Mode: Normal
                              Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
                              SystemDrive: C: FS: [NTFS] Capacity: [190.3 Gb] Used: [178.2 Gb] Free: [12.1 Gb]
                              ------------------------------- [ Windows ] -------------------------------
                              Internet Explorer 11.829.17134.0
                              User Account Control enabled (Level 2)
                              Automatically download and schedule installation
                              Norton WSC Service (nsWscSvc) - The service is running
                              Remote Registry (RemoteRegistry) - The service has stopped
                              SSDP Discovery (SSDPSRV) - The service is running
                              Remote Desktop Services (TermService) - The service has stopped
                              Windows Remote Management (WS-Management) (WinRM) - The service has stopped
                              ------------------------------ [ MS Office ] ------------------------------
                              Microsoft Office 2013 x64 v.15.0.4569.1506
                              ---------------------------- [ Antivirus_WMI ] ----------------------------
                              Norton Security (enabled)
                              Windows Defender (disabled and up to date)
                              ---------------------------- [ Firewall_WMI ] -----------------------------
                              Norton Security
                              --------------------------- [ AntiSpyware_WMI ] ---------------------------
                              Windows Defender (disabled and up to date)
                              ---------------------- [ AntiVirusFirewallInstall ] -----------------------
                              Malwarebytes version 3.7.1.2839 v.3.7.1.2839
                              Norton Security v.22.17.2.47
                              --------------------------- [ OtherUtilities ] ----------------------------
                              GIMP 2.10.12 v.2.10.12
                              TeamViewer 14 v.14.3.4730
                              VLC media player v.3.0.7.1
                              TeamViewer 14 (TeamViewer) - The service is running
                              --------------------------------- [ IM ] ----------------------------------
                              GoToMeeting 8.45.2.13190 v.8.45.2.13190
                              WhatsApp v.0.3.3330
                              Skype version 8.47 v.8.47
                              --------------------------------- [ P2P ] ---------------------------------
                              µTorrent v.3.5.5.45271 Warning! P2P-client.
                              -------------------------------- [ Java ] ---------------------------------
                              Java 8 Update 201 v.8.0.2010.9 Warning! Download Update
                              Uninstall old version and install new one (jre-8u211-windows-i586.exe).
                              --------------------------- [ AdobeProduction ] ---------------------------
                              Adobe Flash Player 32 NPAPI v.32.0.0.207
                              Adobe Flash Player 32 PPAPI v.32.0.0.207
                              Adobe Acrobat Reader DC v.19.012.20035
                              ------------------------------- [ Browser ] -------------------------------
                              Mozilla Firefox 67.0.4 (x64 en-US) v.67.0.4 [+]
                              Google Chrome v.75.0.3770.100
                              ------------------ [ AntivirusFirewallProcessServices ] -------------------
                              C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe v.3.1.0.1807
                              Malwarebytes Service (MBAMService) - The service is running
                              C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe v.3.2.0.765
                              Norton Security (NortonSecurity) - The service is running
                              C:\Program Files\Norton Security{1FA228D8-C82C-4CE3-9D80-98775AFFED55}\Engine\22.17.2.47\NortonSecurity.exe v.17.1.0.21
                              C:\Program Files\Windows Defender\MSASCuiL.exe v.4.13.17134.1
                              Windows Defender Antivirus Service (WinDefend) - The service has stopped
                              Windows Defender Antivirus Network Inspection Service (WdNisSvc) - The service has stopped
                              Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - The service has stopped
                              ----------------------------- [ End of Log ] ------------------------------

                              Comment

                              Working...