Unexplainable very high memory usage

Something is very wrong with what is displayed on the resource monitor.
The graphs only show %21 usage, but the totals for Modified exceed what an idle system should have. What size is your swap file?
Have you tried disabling Forefront Client Security Assessment Service?
Try running mpcmdrun –trace and see if it is getting stuck on any files.
Do you have ICS enabled / firewall enabled on your pc?

Also check and see if there are there are any antivirus programs that might be causing conflicts.

Here is what I have gathered:

MpCMDRUn -trace returns "Tracing could not be started: error 0x80070005" (damn...turns out I was running it as my unprivelaged user I normally use (for web browsing, etc.) I'll try this again from the Administrator account next time the error pops up)

Page file is 12251 MB. After reboot it's 4081 MB. Computer manages it. Hmm..

No ICS.

No Forefront.

Running Microsoft Security Essentials only.


Now, a couple suspicions I have:

I've began using Google Chrome recently. However, I didn't use it this time and the problem presented itself again.

I use TrueCrypt. But it has been on my laptop since late March when I purchased the laptop. However, this problem is new for the past two weeks.

The behavior may or may not be related to the laptop being hibernated at night.

Thanks for your help so far. Really appreciated. : )

This is more of a nuisance than anything, but as a computer tech I would love to get to the bottom of it if you will continue to work with me on it.

-Nick

What power plan are you running?
What files are encrypted?

Hi Everyone,

I nailed it down today. It was a result of processes running as part of iBackup.com that I use for online backup. As soon as I ended the three processes associated with iBackup, the modified memory fell from 2200 MB to 61 MB this morning.

yeah ,modified should not get that high. I believe this is an example of poorly written software = memory leaks. wltray.exe is one I just ran in to.

try openin gup task manager and adding the memory faults column. look for something that's extremely high after one day of being on. e.g, wltray was 500k+. it grew since boot up until machine crashed never releasing the memory.