Faulting application wmiprvse.exe, version 6.0.6002.18005 faulting module ntdll.dll
Server: Exchange 2007 on Windows 2008 – 64 Bit, in a VMWare environment. The server has 4 GB of RAM.
Symptom: I run performance counters (scripts) every 15 minutes to collect statistics on usage, resources and local CPU percentages. Recently I have began seeing errors where the WMI service tanks and my counters cease to dump data. There errors is:
This problem may occur if the computer experiences a low-memory condition. When the computer experiences a low-memory condition, memory corruption may occur in the private heap of a dynamic link library (.dll) file. These random heap corruptions may cause programs to crash.
Memory corruption may occur when you run memory-intensive programs on a computer that has the Intel Physical Addressing Extensions (PAE) specification enabled. PAE enables a computer to support more than 4 gigabytes (GB) of installed memory.
We doubled the RAM from 4 GB to 8 GB. I noticed by digging into the perfmon counters, we were paging at higher level than anticipated, which indicated the RAM was insufficient at its current amount.