locked
How to identify the root cause of memory leak in Windows 7 machine RRS feed

  • Question

  • Dear Friends,

    We are facing a problem of RAM utilization increase(memory leak) on our system with 14 PCs.

    4 PCs are working with Windows server 2008 R2 SP1 and 10 with Windows 7.

    We released that the RAM rise is due the antivirus recent version ie. Symantec 12.1.5.

    But when we searched on net we found similar problem being faced by other people please see the link:

    https://www.symantec.com/connect/forums/does-sep-12-use-windows-wfp  

    Solution for the same is given as a patch for Windows https://support.microsoft.com/en-us/kb/2885980 .

    We have installed the patch on one of the Windows servers machine for trial purpose and found that the patch really worked in our case. RAM increase has stopped.

    Then we installed the patch on Windows7 machine but the RAM is still increasing in these machines. The tag name we got from server machine is Fwpk.

    But for Windows 7 machines we are unable to identify the exact file or drivers which is causing the RAM rise.

    Could you help us on how to find out the exact root cause for this rise?

    Thank you,

    Shailendra.


    Thanks and Regards, Shailendra:- Keep Smiling

    Monday, November 28, 2016 4:55 AM

All replies

  • HI Shailendra,

    i'd say most important make sure your environment is having latest windows updates.

    you can simply run perfmon and poolmon to monitor machine performance. you can run it during memory spike and perfmon will point you to the process and poolmon will point you to the pool tag as well.

    but if you are sure it's Symantec why don't you try to uninstall it on one or 2 machines and see how it goes?

    Thanks


    Thanks Mahmoud

    • Proposed as answer by mahelsay Monday, November 28, 2016 8:06 AM
    Monday, November 28, 2016 8:06 AM
  • We have even uninstalled the Symantec Antivirus product from couple of PCs. The result is the rate of rise in memory has reduced. But it is still increasing.

    I have placed the screenshots for 2 PCs on one drive. 1 PC with SEP AV and one without. The screenshot contains both process screens from task manager and poolmon screen.

    Few process seems to have increased but very little.

    https://1drv.ms/u/s!AhjW5GkgEa-obZQ23EVz4KdcwPk

    Please suggest is there any other method.

    Thank you.


    Thanks and Regards, Shailendra:- Keep Smiling

    Tuesday, November 29, 2016 7:09 AM
  • HI Shailendra,

    i'd say most important make sure your environment is having latest windows updates.

    you can simply run perfmon and poolmon to monitor machine performance. you can run it during memory spike and perfmon will point you to the process and poolmon will point you to the pool tag as well.

    Thanks


    Thanks Mahmoud

    • Proposed as answer by mahelsay Tuesday, November 29, 2016 1:13 PM
    Tuesday, November 29, 2016 7:22 AM