C:\Users\eziots>reg query
"\\ricarevuec01\HKLM\SYSTEM\Currentcontrolset\Control\
Session Manager\Memory Management" /V PagingFiles
HKEY_LOCAL_MACHINE\SYSTEM\Currentcontrolset\Control\Session
Manager\Memory Manag
ement
PagingFiles REG_MULTI_SZ d:\pagefile.sys 9214 9214
So it looks like the one on the c:\ drive is really phantom and can be
deleted.
The other thing I looked at is a Kernel Memory Dump was set, but if
there is no Paging File on C:\ specified then this isn't going to be a
viable option accordingly to my recollection.
Thanks for the heads up about the registry location accordingly. It
looks like after the disk cleanup is finished I should be set for disk
space.
Z
Edward Ziots
CISSP,MCSA,MCP+I,Security +,Network +,CCA
Network Engineer
Lifespan Organization
401-639-3505
[email protected]
From: Jonathan Link [mailto:[email protected]]
Sent: Thursday, July 01, 2010 9:36 AM
To: NT System Admin Issues
Subject: Re: Issue with Phantom Pagefile.sys
+1
When I image a system, I regularly delete pagefile.sys. It is recreated
at boot.
On Thu, Jul 1, 2010 at 9:03 AM, Ben Scott <[email protected]> wrote:
On Thu, Jul 1, 2010 at 8:28 AM, Ziots, Edward <[email protected]>
wrote:
> I see the pagefile on the D:\ drive and after a server reboot I
> see the updated timestamp on the d:\pagefile.sys file but I don't see
it on
> the reminant c:\pagefile.sys, and this was 6GB in size, but a little
worried
> about deleting the file accordingly from the system and not having it
boot
> accordingly.
In my experience:
(1) If a page file is configured but does not exist at boot, it will be
created.
(2) The page file is locked when in use, so you can't delete an active
page file, so if the system lets you delete c:\pagefile.sys, it is not
active.
> Any idea if there is another place in the registry I can look that
might be
> set to keep this pagefile.sys drive on the c:\ drive
I believe all the page files should be enumerated at:
Key:
HKLM\System\CurrentControlSet\Control\SessionManager\MemoryManagement\
Value: PagingFiles
-- Ben
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
