[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs

NeitanDoreiku · 14 May 2014

Hello all,
I built this PC a few months back, and reinstalled Windows 7 on 05-13-14 due to weirdness going on. The problems seem to be happening again, even hours after running.

Everything was great on this system, up until I installed my Samsung SSD's drivers, and it changed to AHCI, as well as changed some services to "Maximum Performance" settings.

My CPU seems to be being used by something. Kaspersky used 25% of the CPU during the install of my Asus drivers, for example. But at most other times, the fan just runs loud and alternates speeds. Secondly, when I open my Task Manager, I find about 40-50% of it used, but a second later it drops to below 10%... but my CPU fan is unaffected.

50% of my RAM is filled by the Mapped File cache, Kaspersky is having constant hard faults, harddisk drivers are failing.... I don't know where to start. Any help would be appreciated. Even a pointer to something that could help would be nice... Thank you.

Here is a complete system log:
GetSystemInfo Parser 2.96
(Click on the expert link to view my system information, processes, event viewer logs, and the like.)

Computer0304 · 15 May 2014

Do a threat scan with https://www.malwarebytes.org/getmbam and if it finds something, do a custom scan on all hard drives too to double check.

Layback Bear · 15 May 2014

Could you post these?

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-new-ram-picture.png

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-boot-advanced-options..png

NeitanDoreiku · 15 May 2014

Layback Bear said:

Could you post these?

Sure.

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-resource_monitor_2014-05-15_09-52-35.png

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-boot_advanced_options_2014-05-15_14-48-53.png

Also, hard faults on the Malwarebytes scan.

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-resource_monitor_2014-05-15_14-54-27.png

Seems to me that the HardDisk driver errors in the Event Logs might be related to this...

Computer0304 said:

Do a threat scan with https://www.malwarebytes.org/getmbam and if it finds something, do a custom scan on all hard drives too to double check.

Nothing found. I figured as much. Installed Kaspersky immediately after reinstall. Plus I rarely get viruses, because I know where to go on the internet. (And Adblock)

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-malwarebytes_anti-malware_-free-_2.0.1.1004_2014-05-15_14-58-31.png

Layback Bear · 17 May 2014

I would suggest using Windows 7 built in defrag tool and see what happens.

I found that Windows 7 defrag worked as good as 3rd party defrag tool just without all the little lines and squares jumping around.
Some 3rd party defrag tool have also been reported to remove your restore points.

derekimo · 17 May 2014

Why is disk defrag being run on an SSD anyway?

Layback Bear · 17 May 2014

Good catch Derek. I didn't notice that.

NeitanDoreiku no manufacture of a ssd recommends defragging a ssd that I'm aware of.

NeitanDoreiku · 18 May 2014

I don't run defrags on my SSD. I have 4 other drives plugged into this computer. One of them is used for all my user files. I like them to be defragged. Also, Auslogics is smart...very smart... and fast.

Could some of my problems be related to Microsoft incorrectly using generic drivers for some of my custom build hardware?

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-auslogics_disk_defrag_professional_2014-05-18_13-46-42.png

NeitanDoreiku · 20 May 2014

So I just found this...

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-rammap_-_sysinternals_www.sysinternals.com_2014-05-20_17-34-15.png

My drivers DO seem to be out of whack. I found the video below, and I'm currently working on debugging this.

http://channel9.msdn.com/Shows/Defra...-Analysis-Pool

Edit: On a freshly rebooted system with everything resource-heavy closed:

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-rammap_-_sysinternals_www.sysinternals.com_2014-05-20_17-41-25.png

NeitanDoreiku · 20 May 2014

So I believe I may have found the problem, and it was my SSD driver as suspected, among many other things. Proof:

[Help] Mapped File using half my 8GB RAM, CPU usage by unknown progs-2014-05-20_18-29-02.png

I found how to do this, with instructions, here.

You'd need the WDK (Windows Driver Kit) in order to obtain the poolmon executable. This is sad because the poolmon executable doesn't have any dependencies, so you can copy it to any computer, by itself, and it will work.

Details on what the "SamsungRapidDiskFilter.sys" driver is can be found here. (Most noteably page 5) It is not a leak, but rather related to the "RAPID Mode" option that can be enabled/disabled in the Samsung Magician software. (Samsung's SSD management interface)

Also, the Broadcom wireless driver has a memory leak, which it is reported to have often, based on what I'm finding.