I had a memory leak and found out it was related to fltmgr.sys

Haoqi Lu 1 Reputation point

My computer used to be a Windows 10 system. The paged pool in the memory will continue to expand, and it will not decrease unless it is restarted. It can write about 10GB every day. This is a memory leak obviously.
Then I used RAMMap to locate the paged pool, and then use poolmon to find that the problem lies in fltmgr.sys.
In order to prevent that the system is not the latest version, I updated the system to the latest windows11 system a few days ago.But it still doesn't work.
How can I find which software caused it?
I would be appreciated if anyone could help me.


Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
8,956 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Limitless Technology 44,096 Reputation points


    Thank you for your question and reaching out.

    I understand that you're having a memory leak problem on your Windows device. To find out which application or service is using most of your memory, kindly check the Processes from Task manager. We mostly resolve this issue by restarting the Background Intelligent Transfer Service as well as the Windows Update services. To do so, kindly follow the steps below:

    Please click on your Start menu and type Command prompt then right-click on it and select Run as administrator.

    Once opened, copy and paste the commands below (one at a time) then hit on Enter each time.

    net stop wuauserv
    net stop cryptSvc
    net stop bits
    net stop msiserver
    Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
    Ren C:\Windows\System32\catroot2 Catroot2.old
    net start wuauserv
    net start cryptSvc
    net start bits
    net start msiserver

    After doing the steps in Command prompt, perform a clean boot process. The steps for it are found on this link https://support.microsoft.com/en-us/topic/how-to-perform-a-clean-boot-in-windows-da2f9573-6eec-00ad-2f8a-a97a1807f3dd


    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments