Windows 10: Unexpected Powershell process using high memory, FRST log included

I have an unexpected powershell process that went up to 10 GB of RAM. Previously, I thought I saw a command line windows pop up for a second, so maybe this is malware. I killed the process, then rebooted. After some time it returned. It was at about 500 MB of ram, but it was growing. I looked at the task manager with the command line option, and I did not see any specific script indicated. However, the powershell was running with -WindOwStYle HiDden, written with mixed upper and lower cases like that. Autoruns did not see any mention of powershell except for \Microsoft\Windows\SMB\Uninst

:)

 

System and compressed memory high disk usage during file copy

Thank you Amarjeet_Paul.

I spent many more hours than I had hoped this past week reading and trying others' suggestions from this community on how to reduce high RAM usage due to ntoskrnl.exe. The "System and compressed memory" process remained the top consumer of RAM, using 500-900MB,
among all other processes running. I deemed it to be the likely culprit in making my computer use frustratingly sluggish. After completing your
third step, steps 1. & 2. provided no improvement in my case, the "System and compressed memory" process RAM usage has plummeted from the top of the Task Manager Process list to the bottom, running at a remarkable 0.1MB! That's a whole lot less than
1% of the targeted process' gluttony. You're hired! Ps. I'll be keeping an eye on the process' use as I get back to normal operations, and be back if it floats to high in the list. Or if the registry fix you suggested has compromised use in any way. Please
explain in simple terms what the insertion of your registry modification is doing.

Thanks again.

Geoff

 

System and Compressed Memory Process Uses High CPU or High Memory

Hi,

Thank you for posting your query on Microsoft Community.

I understand that you are facing issues with Windows 10. I apologize for the inconvenience caused to you.

The issue could occur if there is a change in system memory settings.

To assist you better, please provide us the below information:

• Have you made any changes to the computer prior to the issue?
• Have you tried to check for the processes in the Task Manager?

Refer to the below steps and check if it helps.

Step 1: I suggest you to run the Memory diagnostic tool and check the status of the System memory.

1. On the Search bar, type “Windows Memory Diagnostic” without the quotes and click on it.

2. Click on Restart now.

3. Follow the instructions and check for problems.

Step 2: Also I recommend you to try to boot the computer in safe mode and check if the issues occurs or not.

Start your PC in safe mode in Windows 10:

Start your PC in safe mode in Windows - Microsoft Support

Reply to us with the information, so that we can assist you better.

Let us know if you need any further assistance on Windows related issues and we will be glad to help.

 

Powershell high RAM usage

Hello, I had the same problem as this post:

https://answers.microsoft.com/en-us/windows/forum/all/powershell-sudden-high-ram-usage/91ddc805-c89c-49b3-9ec1-8e328a9fab80

I downloaded FRST and got the FRST.txt and Addition.txt ready, but do not know how to proceed.

Thank you!