High CPU or disk usage by Ntoskrnl.exe on Windows 10

Several users have complained on Reddit and other Windows forums about memory leaks related to ntoskrnl.exe. These users have reported extensive RAM and CPU usage generated by or related to this system file. Those with extreme cases have said they have experienced BSOD (blue screen of death) caused by memory dumps.

This article will tell you how memory management works in Windows and what ntoskrnl.exe is and what it does. Then, we will explain why ntoskrnl.exe consumes a lot of memory space and the remedy.

What is Ntoskrnl.exe and what is it for?

Windows 10 it's a great operating system, but how does it handle memory operations so well? This may be due to the memory driver ntoskrnl.exe. Ntoskrnl.exe (Windows NT operating system kernel abbreviation), aka kernel image, is a system application file that provides the kernel and executive layers of the Windows NT kernel space and is responsible for various services of the Windows NT kernel space. system as hardware virtualization, process and memory management, which makes it a fundamental part of the system. Contains the cache manager, executive, kernel, safety reference monitor, memory manager and programmer.

That is why Ntoskrnl.exe is such a protected system file. System protection means it won't be easily erased or corrupted.

This is how memory management works. A task is loaded into memory (RAM) along with the program that will run it. This is the part of “search”. The CPU decodes it, runs the task and writes the results to memory which could then be written to disk by the loaded program. The execution part will have access to various devices, including GPU, CPU, disc space (ROM o HDD, SSD, etc.), network devices and many more devices, depending on the task that is running. . When the program closes, is downloaded from memory (RAM) along with the data it was processing. The space is now freed up to be used for other tasks.

Reasons why Ntoskrnl.exe consumes a lot of disk space, memory and CPU

If ntoskrnl.exe manages memory, Why does it consume all memory and a lot of CPU? Here are the known reasons why this occurs. Severe cases are usually due to memory leaks caused by hardware and malware.

New compressed memory in Windows 10

What makes Windows 7 be so fast? The answer is in the new function ntoskrnl.exe. Excessive memory consumption was incorporated into Windows 10 unlike other operating systems. Microsoft has explained this separately to Windows users.

After launching Windows 10 Build 10525, Microsoft said the following: In Windows 10, we have added a new concept in Memory Manager called compression store, which is a collection of pages compressed in memory. This means that when Memory Manager feels pressure on memory, will compress unused pages instead of writing them to disk. This reduces the amount of memory used per process, allowing Windows 10 keep more apps in physical memory at the same time. This also helps provide better responsiveness in Windows 10. The compression magazine is in the working set of the system process. Since the system process maintains storage in memory, your working set grows exactly when memory is available to other processes. This is visible in Task Manager and the reason why the system process seems to consume more memory than previous versions.

Therefore, large memory usage is something Windows was built for 10, but sometimes it can be mistaken for a memory leak. Windows 10 sacrifice memory for speed. Instead of writing pages to your hard drive, compress pages in RAM. This makes Windows 10 faster than previous versions because reading compressed data from computer RAM is faster than reading from hard disk and loading it into RAM. This had already been part of the Linux operating system before Windows adopted it.. The more applications you open, more memory will be used. This, at the same time, means it will increase CPU usage.

Defective or outdated device drivers

When communicating with devices such as network cards, keyboards and graphics cards, among others, ntoskrnl.exe sends and receives data through device drivers. Then, received data is written to RAM and awaits execution.

In case of faulty device drivers, drivers may continually send data to memory manager ntoskrnl.exe and manifest as a memory leak. The faulty driver could also be writing data to the memory space owned by ntoskrnl.exe. This data is continuously written to memory, so they pile up and fill up the RAM. This requires higher CPU usage to handle all this data. For older versions of Windows where ntoskrnl.exe used disk space for pages, this means that the disk space will fill up very quickly.

This problem is very common for users who have upgraded their Windows operating system 7 O 8.1 a Windows 10. Drivers may not be compatible with Windows 10, causing memory leaks. It has been reported that “killer network controllers” outdated are a cause of memory leaks in Windows 10.

Malware y virus

Beware of shared and free programs that are distributed online. They could intentionally embed themselves in the ntoskrnl.exe system file or hijack the function of this file, causing memory leaks. It could also alter the registry of the executable. This means that ntoskrnl.exe does not continue to work as expected. Since malware aims to harm your computer, will allow data to go into RAM but will not allow anything to go out. The virus could also be actively writing to the memory space owned by ntoskrnl.exe. This fills up memory and causes high CPU usage. Pages saved on the hard drive could fill up your storage.

When ntoskrnl.exe detects that there is too much memory and nothing else to fit, I know “scares”. In an attempt to save the situation, downloads memory along with all other Windows files. The result is a blue screen of death (BSOD). The same happens when it detects that something is continuously violating its memory space.

A sudden system shutdown could also occur due to CPU overheating caused by excessive activity. To prevent the CPU from getting too cold, computer shuts down so it can cool down.

Corrupted Ntoskrnl.exe system file

Ntoskrnl.exe is a well-protected system file that hardly gets squashed or corrupted. However, if it gets corrupted, ntoskrnl.exe will malfunction and you will not know what and when to write to RAM or what and when to free up RAM space. This can lead to accumulation of data and pages of memory, leaving the CPU working very hard to handle this memory space. Your hard drive could fill up for the same reason.

How to fix excessive memory usage caused by ntoskrnl.exe in Windows 10

If you suddenly start having memory leaks, you may be a victim of malware or viruses. If memory leaks start after a Windows update or installation of a new device, it may be due to faulty or outdated device drivers.

Here are some fixes for ntoskrnl.exe consuming a lot of memory space.

Repair corrupt system files

Download and run Reimage Plus to scan and restore corrupted and lost files from here, once this is done, continue with solutions below. It is important to ensure that all system files are intact and undamaged before proceeding to the next solutions.

Method 1: update your drivers

It should be noted that after upgrading to Windows 10, graphics and network drivers could be the first bet for the cause of memory leak. This is common on PCs that use “Killer network drivers”. To update your drivers:

1. Hold down the Windows key and press R. Type hdwwiz .cpl and press OK

2. Go to the tab “Controllers” and click “Update drivers”

3. Select the automatic option to search for and install updated drivers from the Internet

4. Restart your PC

Method 2: Run antimalware and antispyware applications to scan your system

It is good practice to have malware scanners on your PC. Here is one that works well and is recommended.

1. Download Spybot from here or Malwarebytes from here.

2. Install the software and run a scan

3. Fix all problems that arise

4. Restart your computer

Method 3: disable runtime broker

Recent discussions on Reddit strongly suggest that Runtime Broker is a system process that often consumes a large chunk of CPU cycles., due to poor memory optimization. This causes high CPU usage and memory leaks.

You can disable Runtime Broker as follows:

1. Go to the Start menu and open the Settings app

2. Open system> Notification and actions

3. Deselect the option “Show Windows Tips” u “Get suggestions, tips and tricks when using Windows”.

4. Restart your PC

Alternatively:

1. Open notepad

2. Copy and paste these keys into notepad

Windows Registry Editor, version 5.00

[HKEY_LOCAL_MACHINENSYSTEMN-ServiciosN-TimeBroker] “Start” = Word: 00000003 [HKEY_LOCAL_MACHINEN-SYSTEMN-ServiciosN-SysMain] «DisplayName» = »Superfetch» ​​«Home» = Word: 00000003

1. Go to the file and then Save As

2. Save it as the name you choose .reg

3. Run the file as administrator and accept / commit registry changes

4. Restart your PC

Method 4: change registry settings

There are certain registry settings that can be edited to provide better performance. To adjust registry settings:

1. Press the keys »Windows» + »R» simultaneously.

2. Type »regedit» and press »enter». Scribe “Regedit” at the run prompt and press Enter

3. Navigate to the following address

   HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Control>Session Manager>Memory Management

4. Double click the »Clear Page File Shutdown» registry in the right pane. Click on the log file

5. Change the »Value data» to »1» and click »OK«. Change the value to “1”

6. Restart your computer and check if the problem persists.

Always keep your antimalware and antispyware up to date. Check for device driver updates regularly. Device manufacturers continually update their driver definitions to resolve issues and improve functionality. If none of the above works for you, then it might be worth trying the suggested steps on system and compressed memory.