Crazy page file growth! - Help needed!

  • Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Status
Not open for further replies.
kovacsa

kovacsa

PCHF Member
Jun 24, 2019
9
0
47
Hi All, I'm having a strange problem I've never encountered before. When I first boot my Win10 machine, I have about 17-18GB of disk storage space. After about 2 hours (often less), my page file has grown considerably to the point where my storage is out of space and my system crashes. A reset is the only option at this point. I'm not running anything too RAM intensive (Chrome always takes up the most memory and I'm only doing desktop work), so I'm not sure what's happening. I suspect there may be a memory leak, but am not sure how to detect it or what would be causing it. I don't suspect malware or such as I have done scans recently. I have the option, "Automatically manage paging file size for all drives" check in the System properties. This happens everytime I use my machine. I have 8GB of DDR4 RAM and and 240GB SSD. Any help would be appreciated, thanks!
 
Some information about your machine will help things along.


Please download MINITOOLBOX and run it.

Checkmark following boxes:



Flush DNS
Reset FF proxy Settings
Reset Ie Proxy Settings
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go Attach the result.

===========================

Download Scanrapide
Unzip it to your desktop.
Run as Admin
Attach the log created.

===========================


: Speccy Scan.



  • Please go here and download Speccy.
  • Install and run the program.
  • Upon Completion:
  • Hit File
  • Publish Snap Shot
  • A link will appear, post that link.
 
Malnutrition said:
Some information about your machine will help things along.


Please download MINITOOLBOX and run it.

Checkmark following boxes:



Flush DNS
Reset FF proxy Settings
Reset Ie Proxy Settings
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go Attach the result.

===========================

Download Scanrapide
Unzip it to your desktop.
Run as Admin
Attach the log created.

===========================


: Speccy Scan.



  • Please go here and download Speccy.
  • Install and run the program.
  • Upon Completion:
  • Hit File
  • Publish Snap Shot
  • A link will appear, post that link.
Click to expand...
Hey, Thanks for taking a look. Here is result of the utility. Have you heard of a problem like this before? I've worked in net admin and never encountered an issue like this.
 

Attachments

I need the ScanRapide log and the Speccy link as well.

And as far as an issue like this, each machine is different and has its own set of issues. I'll see if I can get to the bottom of it, if not someone here will surely help you solve the issue. :)
 
Uninstall the programs below with Geek uninstaller. ( You can reinstall these later if you wish but bonjour is causing issues with your machine, and the other two are really not needed.)



µTorrent (HKCU\...\uTorrent) (Version: 3.5.5.45231 - BitTorrent Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Norton Security Scan (HKLM-x32\...\NSS) (Version: 4.6.1.179 - Symantec Corporation)

================================================================================================================

You also have a lot of out of date programs running on your machine. Please update them all with Patch My PC.


Once you have removed those programs and updated all of your out of date software, I'd like you to disable your startups with CCleaner.


================================================================================================================

Clean up temp files and reduce startup load with CCleaner.


Note: This tool will clean your browsing history as well.




  • Download CCleaner from here.
  • After install Click Options.
  • Go to monitoring.
  • Uncheck All Monitoring items.
  • Go to advanced -- Click close program after cleaning.
  • Go to settings -- click run ccleaner when the computer starts.
  • Now that you have ccleaner installed and set-up:
  • Open the program.
  • Go to Tools
  • Go to Startup
  • Now double click each item. To Disable.
  • Leave only your antivirus enabled.
  • Then disable All items in your scheduled task as well.
  • Unless they are related to windows defender.Or your antivirus.
  • Reboot the machine.

After you have rebooted the machine once ccleaner is done. I need to take a look and make sure things are updated and the startup is trimmed.

====================================================================

I do not suspect malware but this toll will just remove any crap that may be there, and that is just a part of what I do when helping people. I am a firm believer in checking all aspects when dealing with a problem.


Adware Cleaner Scan.

Please download AdwCleaner by Xplode onto your desktop.






  • Close all open programs and internet browsers.
  • Right Click on adwcleaner.exe and run as admin to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
=====================================================================================

Security Check Scan.




  • Download Security Check to your desktop.
  • Right click it run as administrator.
  • When the program completes, the tool will automatically open a log file.
  • Please post that log here in your next post.
====================================================================================

HijackThis.



1- Please click HERE to download HijackThis.
2- Run the program.
3- Click on the Main Menu button if not already there.
4- Select Do a system scan and save a logfile.
5- Copy paste the log here.

====================================================

From your minitoolbox log, your host file needs to be reset, for sure.

Reset Host File


  • Click here to download RstHosts v2.0
  • Save the file to your desktop.
  • Right Click and Run as Administrator.
  • Click on Restaurer, then click OK at the prompt.
  • This will restore the default host file.
  • Next Click on Creer Un Rapport.
  • This will open a logfile, post that in your next reply.
 
Malnutrition said:
I need the ScanRapide log and the Speccy link as well.

And as far as an issue like this, each machine is different and has its own set of issues. I'll see if I can get to the bottom of it, if not someone here will surely help you solve the issue. :)
Click to expand...
Awesome. I can't find much online about paging file issues. Attaching the logs.
 

Attachments

No need to quote each post, and ill be waiting on the other logs when you have posted those we will take it from there. :)

And actually, if you have the link created by Speccy I'd rather have that.
 
  • Like
Reactions: gus
Yeah, I tried publishing the link, but get the "can not connect to server error", so I sent the text file instead.
 
Hope you don't mind me butting in here, but your OS partition on your hard drive is almost full. Windows needs more free space than you have avialable, so it would be prudent to free some disc space before proceeding.
 
The ScanRapide log is incomplete. And I do see some signs of malware in it.


Here are a couple of the hits for malware, there are a few more that need taken care of. Make sure and get the whole log. Also, you have a large amount of start up items on your machine. I think it needs a general clean up and things will be right again. Just stick with me till the end of this and I am certain the issue will be resolved. :)

[HKU\S-1-5-21-313083479-2202061592-683150413-1001\Software\Conduit]
[HKU\S-1-5-21-313083479-2202061592-683150413-1001\Software\Chromium]
[HKU\S-1-5-21-313083479-2202061592-683150413-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06242019215558011\Software\Tencent]
 
Last edited:
Does ScanRapide have any options, I run it in Admin mode and it opens a window briefly, then closes. I ran it three times and get the same file each time (at least judging by the file size)

Working on the other steps you've put forward...
 
gus said:
Hope you don't mind me butting in here, but your OS partition on your hard drive is almost full. Windows needs more free space than you have avialable, so it would be prudent to free some disc space before proceeding.
Click to expand...
I've never had this issue before, even with low storage space. I'm not sure what's causing the page file to grow as quickly as it does. Again, I suspect a memory leak of some sort, an app/service or process may be chewing up the memory and not releasing it, that's my best guess.
 
Reset Host File log

-|x| RstHosts v2.0 - Rapport créé le 24/06/2019 à 23:09:10
-|x| Système d'exploitation : Windows 10 Home (64 bits)
-|x| Nom d'utilisateur : Alexx - REBOOTFRANCHISE (Administrateur)

-|x|- Informations -|x|-

Emplacement : C:\WINDOWS\System32\drivers\etc\hosts
Attribut(s) : RASH
Propriétaire : Administrators - BUILTIN
Taille : 89 bytes
Date de création : 22/09/2013 - 21:19:03
Date de modification : 24/06/2019 - 23:09:02
Date de dernier accès : 24/06/2019 - 23:09:02

-|x|- Contenu du fichier -|x|-

# Fichier Hosts créé par RstHosts

127.0.0.1 localhost
::1 localhost

-|x|- E.O.F - C:\RstHosts.txt - 610 bytes -|x|-
 

Attachments

Last edited by a moderator:
Again please don't quote previous posts, and irrespective WINDOWS WILL NEVER work correctly with so little free disc space left, but it is your call.

Also suggest you let Malnutrition remove garbage from your machine.

It is also counter productive and impolite to seek help at more than one forum at the same time as conflicting advice could render your machine inoperable. Perhaps you could consider where you wish to continue?
 
Last edited:
Security Check Scan log

SecurityCheck by glax24 & Severnyj v.1.4.0.53 [27.10.17]
WebSite: www.safezone.cc
DateLog: 24.06.2019 23:39:50
Path starting: C:\Users\Alexx\AppData\Local\Temp\SecurityCheck\SecurityCheck.exe
Log directory: C:\SecurityCheck\
IsAdmin: True
User: Alexx
VersionXML: 6.57is-18.06.2019
___________________________________________________________________________

Windows 10(6.3.17134) (x64) Core Release: 1803 Lang: English(0409)
Installation date OS: 20.12.2018 23:54:31
LicenseStatus: Windows(R), Core edition The machine is permanently activated.
LicenseStatus: Office 15, OfficeProPlusVL_KMS_Client edition Windows is in Notification mode
Boot Mode: Normal
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
SystemDrive: C: FS: [NTFS] Capacity: [190.3 Gb] Used: [178.2 Gb] Free: [12.1 Gb]
------------------------------- [ Windows ] -------------------------------
Internet Explorer 11.829.17134.0
User Account Control enabled (Level 2)
Automatically download and schedule installation
Norton WSC Service (nsWscSvc) - The service is running
Remote Registry (RemoteRegistry) - The service has stopped
SSDP Discovery (SSDPSRV) - The service is running
Remote Desktop Services (TermService) - The service has stopped
Windows Remote Management (WS-Management) (WinRM) - The service has stopped
------------------------------ [ MS Office ] ------------------------------
Microsoft Office 2013 x64 v.15.0.4569.1506
---------------------------- [ Antivirus_WMI ] ----------------------------
Norton Security (enabled)
Windows Defender (disabled and up to date)
---------------------------- [ Firewall_WMI ] -----------------------------
Norton Security
--------------------------- [ AntiSpyware_WMI ] ---------------------------
Windows Defender (disabled and up to date)
---------------------- [ AntiVirusFirewallInstall ] -----------------------
Malwarebytes version 3.7.1.2839 v.3.7.1.2839
Norton Security v.22.17.2.47
--------------------------- [ OtherUtilities ] ----------------------------
GIMP 2.10.12 v.2.10.12
TeamViewer 14 v.14.3.4730
VLC media player v.3.0.7.1
TeamViewer 14 (TeamViewer) - The service is running
--------------------------------- [ IM ] ----------------------------------
GoToMeeting 8.45.2.13190 v.8.45.2.13190
WhatsApp v.0.3.3330
Skype version 8.47 v.8.47
--------------------------------- [ P2P ] ---------------------------------
µTorrent v.3.5.5.45271 Warning! P2P-client.
-------------------------------- [ Java ] ---------------------------------
Java 8 Update 201 v.8.0.2010.9 Warning! Download Update
Uninstall old version and install new one (jre-8u211-windows-i586.exe).
--------------------------- [ AdobeProduction ] ---------------------------
Adobe Flash Player 32 NPAPI v.32.0.0.207
Adobe Flash Player 32 PPAPI v.32.0.0.207
Adobe Acrobat Reader DC v.19.012.20035
------------------------------- [ Browser ] -------------------------------
Mozilla Firefox 67.0.4 (x64 en-US) v.67.0.4 [+]
Google Chrome v.75.0.3770.100
------------------ [ AntivirusFirewallProcessServices ] -------------------
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe v.3.1.0.1807
Malwarebytes Service (MBAMService) - The service is running
C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe v.3.2.0.765
Norton Security (NortonSecurity) - The service is running
C:\Program Files\Norton Security\{1FA228D8-C82C-4CE3-9D80-98775AFFED55}\Engine\22.17.2.47\NortonSecurity.exe v.17.1.0.21
C:\Program Files\Windows Defender\MSASCuiL.exe v.4.13.17134.1
Windows Defender Antivirus Service (WinDefend) - The service has stopped
Windows Defender Antivirus Network Inspection Service (WdNisSvc) - The service has stopped
Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - The service has stopped
----------------------------- [ End of Log ] ------------------------------
 

Attachments

kovacsa said:
Does ScanRapide have any options, I run it in Admin mode and it opens a window briefly, then closes. I ran it three times and get the same file each time (at least judging by the file size)
Click to expand...


You just didnt copy the entire log is all. Make sure you copy the entire log and post it here.

At the end of the log you will see this....

¤ EOF : C:\ScanRapide[R0].txt [0.15s] ¤
 
Last edited:
I'll need the adware cleaner log and the Hijack this log then we can get to work. :)
 
Hey guys, I seem to have nailed it, (let's hope)! Thanks for your help, here's the thread

Edit: Link to other forum removed.
 
Last edited by a moderator:
Status
Not open for further replies.
Top Bottom