Our production server (Win2K3 with IIS6) crashes every three or four days due to paged-pool depletion. I located the fault driver: ksecdd.sys with poolmon.exe from Microsoft.
But don't know what to do next, since ksecdd.sys is not some third party driver but Microsoft Windows Kernel Mode Security Support Provider. Here is a KB article about ksecdd.sys leaking paged-pool memory(http://support.microsoft.com/kb/953535):
This problem occurs because the Ksecdd.sys driver does not release the old SSL user context when renegotiation occurs. Each SSL user context uses some paged pool memory. Therefore, the system stops responding after the available paged pool memory is exhausted.
However, our server does not have too many SSL connections(750 established) hanging around. Except this KB, I can't find related information about ksecdd.sys. Does any one have similar experiences with this driver?