Re: memory used for inetinfo.exe
From: joe (firstname.lastname@example.org)
From: "joe" <email@example.com> Date: Fri, 14 Mar 2003 03:55:57 GMT
I have hardened the server(as much as I know how and from experience). I
check the logs everyday. I think it may be a bad scipt that a customer has.
CPU is very low, about 4%. I just noticed the memory was up to 300 megs
today. Its usually only up to about 120 megs. Half of the sites are stopped
on it. I will have tio investigate further. I like to post these weird
things with IIS here since there have been so many different variety of
things that people have seen with IIS. Thank you very much for the links.
"Karl Levinson [x y] mvp" <firstname.lastname@example.org> wrote in message
> Either your computer has been compromised, or you've got poorly written
> script somewhere that is leaking memory. That's the first thing to deal
> with. [You could have a software or hardware problem, I suppose, but
> not the first thing I would suspect.]
> How to tell if your computer has been hacked:
> www.agnitum.com is free antivirus
> http://housecall.antivirus.com is a free one-time antivirus scanner
> [offers no protection, just detection, but no software is installed with
> [note that nothing shows up in the IIS web log if a worm uses an IIS
> overflow exploit]
> http://securityadmin.info/faq.htm#re-secure [if you find evidence of
> If that turns up nothing, then go to www.iisfaq.com or
> www.microsoft.com/support or www.google.com/advanced_group_search or
> www.google.com and search for a way to troubleshoot IIS memory leaks.
> I've never heard of anyone clearing IIS memory... and am not aware of a
> to do it without restarting the service. It's certainly not the usual way
> to deal with this sort of problem.
> As you may know, just installing patches alone does NOT secure your
> computer. If that's all you do, you can still be compromised. You also
> should consider doing this to close other holes:
> "Telepacific Test Email Account" <email@example.com> wrote in message
> > I need to know what the memory threshold is for the inetinfo.exe service
> > and how to clear the memory used without having to stop and restart
> > its possible to do this). The version is IIS 5.0 sp2 with all hotfixes
> > IE 6SP1 with all service packs.The memory is up to 320megs used right
> > There are over 400 virtual sites on this one server. It has Dual PIII
> > GHZ processors and over 1gig of RAM.
> > Is there also a 3rd party site to force the memory to reuse itself
> > having to restart this service or other services.
> > Thanks
> > Joe