what the shit...something is eating my ram....

Discussion in 'OT Technology' started by Man Bear Pig, Jul 4, 2008.

  1. Man Bear Pig

    Man Bear Pig Banned

    Joined:
    Nov 24, 2006
    Messages:
    37,301
    Likes Received:
    0
    Location:
    imagination land
    The past couple days I have been experiencing something strange. I have 2 gigs of ram in my machine but keep on getting virtual memory warnings. Something is slowly occupying all of the ram on my machine. It increases by 1 MB every second or so. Nothing in TasK Manager is using 2 gigs of ram. Is my comp infected with something? AV w/SpyDoctor is coming up negative. Any ideas?
     
  2. Hate Crime

    Hate Crime Don't Hate OT Supporter

    Joined:
    Mar 12, 2006
    Messages:
    5,255
    Likes Received:
    0
    Location:
    Minnesota
    download avast and scan
     
  3. Man Bear Pig

    Man Bear Pig Banned

    Joined:
    Nov 24, 2006
    Messages:
    37,301
    Likes Received:
    0
    Location:
    imagination land
    AVG says I have the crss.exe trojan... but it will not remove it. SpyDoctor with AV is not coming up with anything.
     
  4. tragicher0

    tragicher0 Before I couldn't even spell DBA, now I are one OT Supporter

    Joined:
    Nov 19, 2005
    Messages:
    16,027
    Likes Received:
    7
    Location:
    Anthem, AZ
    At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
    Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
    Locate the HKEY_LOCAL_MACHINE entries:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
    and remove any reference to any file you deleted.
    Each user has a registry area named HKEY_USERS\[code number indicating user]\. For each user locate the entry:
    HKU\[code number]\Software\Microsoft\Windows\
    CurrentVersion\Run\
    and remove any reference to any file you deleted.
    Close the registry editor.
    Check the following items
    • To renable DCOM you can edit the registry, but it's better to use Dcomcnfg.exe. See Microsoft article 825750 for details.
    • The HKLM\SYSTEM\CurrentControlSet\Control\Lsa\restrictanonymous = "1" setting does not allow enumeration of SAM accounts and names. The default is "0". It can be changed in Local Security Policy. See Microsoft article 246261 for details.
    • Check your administrator passwords and review network security.
     

Share This Page