Windows – Why half of the RAM of 8GB is missing

memoryswap-filewindows 7

Have been sitting with 8GBs of RAM for 2 years still thinking I needed another 4GBs and never questioning why so often I get message about low physical memory that would close all open programs (Firefox mostly since it is mainly what I use) if not paid attention to immediately. I would then have to restart programs using most memory (Firefox is one of them) to continue working normally and not losing any unsaved changes.

Anyway, II have noticed that although system sees 8GBs of RAM, it still uses half of it and I will demonstrate this with screenshots further.

Combined screenshots of System Information and Task Manager:

enter image description here

Resource Monitor screenshot:

enter image description here
enter image description here

RAMMap screenshot:

enter image description here

And finally my swapfile condition at one time and another. The point is that it is big all the time:

enter image description here

Notice "Available" and "Free" memory from above screenshot. This is what I see in Task Manager most of the time and opening another 5-7 tabs in Firefox causes "Low Memory" warning to appear.

Currently used primary videocard:

enter image description here

Any thoughts?

WLTRAY.EXE has not been mentioned here but look at this:

enter image description here

System specs

  • Dell Latitude E6420
  • 8GB of RAM, 120GB Intel SSD
  • Intel HD Graphics, nVidia NVS4200M
  • Windows Enterprise 64-bit

UPDATE 3rd May, 2014 – I don't think problem was in wireless adapter process. I still think it has to do with Firefox. Here's screenshot of Task Manager:

enter image description here
RamMap:

enter image description here

VMMap:

enter image description here

UPDATE: 01/04/15

Looks like my whole system has memory leak. I tried using Chrome and eventually like with Firefox, it crashes with either message seen here or results in BSOD or blank screen where restart is the only way to work again.

Here's my Chrome browser running after several hours of last it's restart, with 29 tabs:

Windows Task Manager

enter image description here

Resource Monitor

enter image description here

Chrome Task Manager

enter image description here

I have restarted Chrome and here are stats:

Windows Task Manager

enter image description here

Resource Monitor

enter image description here

Chrome Task Manager

enter image description here

Best Answer

"Why is half my RAM of 8GB is missing?"

It is not missing, nor is it even unused. Approximately 4GiB are in active use, and an additional 3.3GiB is inactive, but also in use. The 3.3GiB is ready to be paged to disk, but you have no space allocated for it, so it remains in physical RAM. "Modified" memory is effectively no different than "In Use" if starved of disk pages.

Neither a 64-bit OS nor PAE enables any 32-bit process to use more than 4GiB (2 user/2 kernel on 32-bit/PAE, 4GiB user on x64. See: Pushing the Limits of Windows: Virtual Memory) of memory whether that memory is currently paged into physical RAM or onto disk.

So, for Firefox, which does not have a 64-bit version, this means that Firefox is ultimately limited to 2GiB (PAE) or 4GiB (x64) of user space memory regardless of installed RAM. Even if you had 64GiB physical RAM installed, if Firefox exceeds usage, it will exhaust its memory limit.

This looks excessive and possibly indicative of a memory or handle leak. Worse, in your case, the pagefile is not large enough to move any of the leaking process to disk, so you have essentially forced it to leak exclusively into physical RAM.

In TechNet article Having a problem with Excessive "modified" memory usage in Win7 x64, upwards of 3.6GB, any suggestions?, a user with similar symptoms (large shared/modified block) finds:

Modified memory is memory that was allocated by some application and then removed from the application's working set, usually because it hasn't been used for a long time. The fact that most of your memory is in this state means two things:

  1. Some app (or multiple apps) allocated a lot of memory, and is not actively using most of it. Often (but not always) this is due to a memory leak in the app.
  2. The pagefile is not large enough for the system to move all this unused memory to disk.

In the end, as suggested by magicandre1981, the issue was the Dell Wireless (Broadcom) LAN tray app:

Thanks everyone, I was having the same issue and added handles and GDI and saw BCMWLTRY.EXE, the Dell wireless tray util, is creating handles nonstop. Thanks for the advice. Update: So I disabled the service that started BCMWLTRY.EXE + rebooted and I'm now not seeing the handle leaks. WLTRAY.EXE is still running but it's not leaking handles.

Likewise, in Excessive modified memory in shared memory,

Dell wlan utility was the reason. Killing the bcmwltry.exe process in task manager released memory. But this process initiated again after few sec.. It was kinda crappy - i couldnt uninstall it. Luckily this notebook needed OS change anyway so i`m not even trying to fix this. ... Same exact problem here. Killing and disabling DW WLAN (bcmwltry.exe) freed up 5 GB of memory. It leaks.

The tray app BCMWLTRY.EXE is likewise implicated in Pagefile keeps growing until I run out of memory

Additional references for BCMWLTRY.EXE/Dell Wireless Tray problems (WLTRAY.EXE), diagnostics, and resolutions:

So, it's not actually the driver in these cases, it's the tray app that comes with the driver. I would agree that given the OEM of your wireless card, that BCMWLTRY.EXE is running, and the rather large number of nearly identical problems, this is part one of the problem.

You can also add the "Handles" and "Page Faults" columns to Task Manager to check for excessive usage of either, in the case that there are more errant programs. You can use SysInternals VMMap to view allocation of virtual memory from the point of view of each process. Handle leaks are insidious because they are also likely leaking Windows objects. Microsoft makes available a tool called Application Verifier that, among other things, will help track down leaking handles.

So the answer is: You likely have a memory leak, it is likely in BCMWLTRY.EXE (or some other app leaking handles or similar shared resources), and the OS has been starved of disk backed pages to more "gracefully"* handle such a condition.


* There's nothing particularly "graceful" about a memory leak, but a ~4GiB pagefile would have allowed the process to run up to its inherit limit (acting as a quota) and then crash, creating a obvious pattern in the event log of a specific process crashing followed by a release of all the resources and, if restarted, repeat. Without the inherent 32-bit limit address space limit, it could have chewed through a lot of disk space first. As it is, all the processes are now resource constrained, so it's less clear if it's being closed due to its own leak (Firefox), or because another app (BCMWLTRY).

Related Question