utorrent HUGE memory use, why?!

[Ultima]

The Logger tab is in µTorrent. Press F5 in µTorrent a few times, and you'll notice it.

[gbmolina]

here are the safe mode test results:

normal mode:

safe mode:

I think it's quite obvious that no other software has anything to do with the memory consumption utorrent generates. the question is why...

here is the logger from utorrent (in normal mode)

[17:19:56] Proc heap:

[17:19:56] 229: USED: 32

[17:19:56] 202: USED: 12

[17:19:56] 60: FREE: 120

[17:19:56] 52: FREE: 144

[17:19:56] 51: FREE: 56

[17:19:56] 50: FREE: 152

[17:19:56] 49: FREE: 136

[17:19:56] 43: FREE: 176

[17:19:56] 43: FREE: 128

[17:19:56] 39: FREE: 192

[17:19:56] 38: FREE: 168

[17:19:56] 36: FREE: 200

[17:19:56] 35: FREE: 88

[17:19:56] 35: FREE: 64

[17:19:56] 34: FREE: 208

[17:19:56] 34: FREE: 8

[17:19:56] 32: FREE: 112

[17:19:56] 31: FREE: 216

[17:19:56] 30: USED: 16

[17:19:56] 30: FREE: 512

[17:19:56] 30: FREE: 240

[17:19:56] 29: FREE: 232

[17:19:56] 29: FREE: 80

[17:19:56] 28: FREE: 1088

[17:19:56] 28: FREE: 256

[17:19:56] 28: FREE: 32

[17:19:56] 27: USED: 24

[17:19:56] 27: FREE: 2304

[17:19:56] 26: USED: 904

[17:19:56] 26: FREE: 544

[17:19:56] 25: FREE: 2432

[17:19:56] 24: FREE: 1280

[17:19:56] 24: FREE: 1216

[17:19:56] 24: FREE: 288

[17:19:56] 23: FREE: 2688

[17:19:56] 22: FREE: 576

[17:19:56] 22: FREE: 272

[17:19:56] 22: FREE: 104

[17:19:56] 22: FREE: 96

[17:19:56] 21: FREE: 1472

[17:19:56] 21: FREE: 336

[17:19:56] 21: FREE: 48

[17:19:56] 20: FREE: 304

[17:19:56] 20: FREE: 40

[17:19:56] 18: USED: 96

[17:19:56] 18: USED: 20

[17:19:56] 18: FREE: 800

[17:19:56] 18: FREE: 400

[17:19:56] 17: USED: 4

[17:19:56] 17: FREE: 1600

[17:19:56] 17: FREE: 432

[17:19:56] 16: USED: 128

[17:19:56] 16: USED: 64

[17:19:56] 16: FREE: 14848

[17:19:56] 16: FREE: 608

[17:19:56] 15: FREE: 464

[17:19:56] 15: FREE: 184

[17:19:56] 14: FREE: 704

[17:19:56] 14: FREE: 72

[17:19:56] 13: FREE: 4608

[17:19:56] 13: FREE: 1024

[17:19:56] 12: USED: 28

[17:19:56] 11: USED: 100

[17:19:56] 11: USED: 68

[17:19:56] 11: USED: 48

[17:19:56] 11: USED: 40

[17:19:56] 11: USED: 36

[17:19:56] 10: USED: 596

[17:19:56] 10: USED: 80

[17:19:56] 9: USED: 60

[17:19:56] 9: USED: 18

[17:19:56] 9: FREE: 24

[17:19:56] 8: USED: 56

[17:19:56] 8: USED: 14

[17:19:56] 7: USED: 676

[17:19:56] 7: USED: 132

[17:19:56] 7: USED: 10

[17:19:56] 7: USED: 8

[17:19:56] 7: FREE: 320

[17:19:56] 6: USED: 264

[17:19:56] 6: USED: 164

[17:19:56] 6: USED: 2

[17:19:56] 6: FREE: 928

[17:19:56] 6: FREE: 16

[17:19:56] 5: USED: 216

[17:19:56] 5: USED: 76

[17:19:56] 4: USED: 572

[17:19:56] 4: USED: 228

[17:19:56] 4: USED: 104

[17:19:56] 4: USED: 88

[17:19:56] 3: USED: 1556

[17:19:56] 3: USED: 1152

[17:19:56] 3: USED: 1016

[17:19:56] 3: USED: 296

[17:19:56] 3: USED: 256

[17:19:56] 3: USED: 240

[17:19:56] 3: USED: 208

[17:19:56] 3: USED: 200

[17:19:56] 3: USED: 184

[17:19:56] 3: USED: 180

[17:19:56] 3: USED: 116

[17:19:56] 3: FREE: 0

[17:19:56] 2: USED: 2344

[17:19:56] 2: USED: 788

[17:19:56] 2: USED: 772

[17:19:56] 2: USED: 576

[17:19:56] 2: USED: 464

[17:19:56] 2: USED: 388

[17:19:56] 2: USED: 332

[17:19:56] 2: USED: 308

[17:19:56] 2: USED: 292

[17:19:56] 2: USED: 288

[17:19:56] 2: USED: 224

[17:19:56] 2: USED: 220

[17:19:56] 2: USED: 192

[17:19:56] 2: USED: 84

[17:19:56] 2: USED: 52

[17:19:56] 2: USED: 46

[17:19:56] 2: USED: 44

[17:19:56] 2: USED: 34

[17:19:56] 2: USED: 26

[17:19:56] 2: USED: 22

[17:19:56] 1: USED: 262136

[17:19:56] 1: USED: 65528

[17:19:56] 1: USED: 32760

[17:19:56] 1: USED: 25136

[17:19:56] 1: USED: 22512

[17:19:56] 1: USED: 14720

[17:19:56] 1: USED: 8184

[17:19:56] 1: USED: 6144

[17:19:56] 1: USED: 4600

[17:19:56] 1: USED: 2600

[17:19:56] 1: USED: 2216

[17:19:56] 1: USED: 1436

[17:19:56] 1: USED: 1252

[17:19:56] 1: USED: 1200

[17:19:56] 1: USED: 1172

[17:19:56] 1: USED: 1032

[17:19:56] 1: USED: 1024

[17:19:56] 1: USED: 1000

[17:19:56] 1: USED: 960

[17:19:56] 1: USED: 900

[17:19:56] 1: USED: 816

[17:19:56] 1: USED: 728

[17:19:56] 1: USED: 684

[17:19:56] 1: USED: 528

[17:19:56] 1: USED: 524

[17:19:56] 1: USED: 520

[17:19:56] 1: USED: 504

[17:19:56] 1: USED: 420

[17:19:56] 1: USED: 320

[17:19:56] 1: USED: 316

[17:19:56] 1: USED: 313

[17:19:56] 1: USED: 300

[17:19:56] 1: USED: 284

[17:19:56] 1: USED: 272

[17:19:56] 1: USED: 230

[17:19:56] 1: USED: 176

[17:19:56] 1: USED: 166

[17:19:56] 1: USED: 162

[17:19:56] 1: USED: 152

[17:19:56] 1: USED: 140

[17:19:56] 1: USED: 136

[17:19:56] 1: USED: 124

[17:19:56] 1: USED: 120

[17:19:56] 1: USED: 114

[17:19:56] 1: USED: 112

[17:19:56] 1: USED: 111

[17:19:56] 1: USED: 92

[17:19:56] 1: USED: 86

[17:19:56] 1: USED: 78

[17:19:56] 1: USED: 74

[17:19:56] 1: USED: 72

[17:19:56] 1: USED: 54

[17:19:56] 1: USED: 50

[17:19:56] 1: USED: 42

[17:19:56] 1: USED: 39

[17:19:56] 1: USED: 38

[17:19:56] 1: USED: 30

[17:19:56] 1: USED: 9

[17:19:56] 1: USED: 1

[17:19:56] 1: FREE: 720

[17:19:56] 1: FREE: 664

[17:19:56] 1: FREE: 344

[17:19:56] 924/1448 blocks. 561625/900824 bytes.

[17:19:56] Buffer heap:

[17:19:56] 1: USED: 65536

[17:19:56] 1: USED: 25136

[17:19:56] 1: USED: 6144

[17:19:56] 1: FREE: 3888

[17:19:56] 3/1 blocks. 96816/3888 bytes.

[Switeck]

clipc.exe doesn't seem to be a standard part of windows, yet it's even loading in safe mode.

Are there other things loading while in safe mode?

Probably the only thing that I see might resolve this problem is a thorough check using HijackThis! -- we pretty much need a listing both of all programs loaded in ram from that AND the startup listing. In other words, the LOG file HijackThis! makes. You may even need to go into its advanced settings and turn on the log minor and empty parts.

...Because something about your system isn't quite right.

[gbmolina]

clic.exe is ClipCache, a clipboard utility and was not loaded in safe mode, I turned it on after I verified the memory use in order to make the screenshot because from there I can save it right away and send it, in other words, I turned on ClipCache after I was sure uturrent was sucking up the same amount of memory as in normal mode.

here is the HijackThis! startup log:

StartupList report, 18.9.2007 г., 21:25:00

StartupList version: 1.52.2

Started from : D:\downloads\HijackThis.EXE

Detected: Windows XP SP2 (WinNT 5.01.2600)

Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)

* Using default options

* Including empty and uninteresting sections

* Showing rarely important sections

==================================================

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Eset\nod32kui.exe

C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\inetsrv\inetinfo.exe

C:\Program Files\Eset\nod32krn.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Internet Download Manager\IEMonitor.exe

C:\Program Files\ClipCache\clipc.exe

C:\Program Files\Quintessential Player\QCDPlayer.exe

C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Download Manager\IDMan.exe

D:\downloads\HijackThis.exe

--------------------------------------------------

here is the detailed report:

Logfile of HijackThis v1.99.0

Scan saved at 21:30:02, on 18.9.2007 г.

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Eset\nod32kui.exe

C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\inetsrv\inetinfo.exe

C:\Program Files\Eset\nod32krn.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Internet Download Manager\IEMonitor.exe

C:\Program Files\ClipCache\clipc.exe

C:\Program Files\Quintessential Player\QCDPlayer.exe

C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe

C:\Program Files\Internet Explorer\iexplore.exe

D:\downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.cnn.com

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll

O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE

O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - Startup: ClipCache Pro.lnk = C:\Program Files\ClipCache\clipc.exe

O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm

O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm

O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000

O17 - HKLM\System\CCS\Services\Tcpip\..\{EB97B394-FB23-4552-BF95-0D40A448DA12}: NameServer = 82.199.192.4,82.199.192.2

O23 - Service: NOD32 Kernel Service - Eset - C:\Program Files\Eset\nod32krn.exe

O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

thanks for all the effort, I'll be very curious to find out what is wrong.

PS I was wondering if you need a HijackThis! report wen utorrent is running...?

[Type-R]

I have encountered the same issue starting from 1.7.x

Use case:

1. High speed torrent (up to 10 seeders, intranet, net speed up to 100% of 100Mbit/sec)

2. Task manager reports up to 500Mb memory used by utorrent process but simultaneously reports using up to maximum (2.8G) possible Page File using

3. After pausing or stopping torrents the memory using leaves the same and releases after utorrent exit only.

4. After utorrent restarts it starts checking stopped torrents instead of continuing.

5. I have tried to change utorrent caching settings, disabling firewall and antivirus with no results

The screenshot describes memory releasing on utorrent exit and utorrent torrent file checking on restart

I suppose utorrent extremely increases in-memory cache for some file operation speed delays and does not stops torrent correct on exit for in-memory cache issue

Thanks

P.S.

Sometimes utorrent crashes on Page File maximum size reaching -))

[Switeck]

I am very wary of anything that modifies Internet Explorer.

And Browser Helper Objects are often spyware in disguise.

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.cnn.com

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll

O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm

O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm

O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000

But lastly, have you tried running µTorrent with NOD32 AV completely uninstalled?

[Switeck]

Type-R,

It's probably some cross-program conflicts with firewalls/antivirus software...or viruses!

Post a HijackThis! log and/or Process Explorer log.

[gbmolina]

switeck, I think it's time to start looking for something wrong within utorrent. az for me, I don't have the time and the desire to continue this. thanks for the effort. good luck.

[Type-R]

Switeck

1. The issue is reproduced both with disabled and enabled antivirus and firewall

2. utorrent releases the cache on stop not correct (in case of hude memory jamming) - after restart it is obliged to recheck broken torrents

P.S.

Firewall: ZoneAlarm - about 3 years

Antivirus:

BitDefender about 2 years - the issue is reproduced

Avira (free) last month - the issue is reproduced

virus... I am not sure that all utorrent users with memory issue have a virus http://forum.utorrent.com/viewtopic.php?pid=275632#p275632 -))

And all users report that memory issue starts from 1.7.x version (1.7.2 ?)

P.P.S.

I will try to limit download speed and disable local peer discovering. I suppose it will solve the issue. I'll report the tests results.

Thanks

[DreadWingKnight]

1. The issue is reproduced both with disabled and enabled antivirus and firewall

With many antivirus and firewall apps, just disabling isn't enough because of how deep they hook into the os. You MUST uninstall to properly disable.

[Type-R]

DreadWingKnight

ZoneAlarm cannot be disabled - I made it shutdown

The 1.7.x issue was reproduced both with BitDefender and Avira antiviruses.

1.6 worked correct with ZoneAlarm and BitDefender.

For BitDefender I killed the antivir processes by the task manager. Avira correct disables its activity.

I cannot uninstall firewall and antivirus at all - I like my comp and I value my private info -).

I understand that the firewall and antivirus can provoke uncorrect utoreent behavior but i think utorrent MUST correct work with the first-installation set software

Thank you

[Switeck]

Zone Alarm has proven itself to be hostile towards p2p file-sharing software, µTorrent is almost certainly not to blame for that.

[gbmolina]

ok, I´m not using zonealarm, then why do I have the problem? I´m using the windows native firewall. besides, I have disabled nod32 and still the same thing.

[Firon]

Type-R: do you have local peers? Namely, do you see L: in the status bar?

[Type-R]

Firon:

No, I haven't. L: does not appear in the status bar.

[Firon]

The reason I ask is because there's a bug with local peers. If they're unlimited, they can make the read/write cache increase without limit until µTorrent hits the memory limit and crashes...

Anyway, Zone Alarm is a horrible firewall. It's caused problems for years with tons of applications, and only gets worse with each release. Switch to Outpost or something.

[tomh]

Choose a firewall from here : http://www.matousec.com/projects/windows-personal-firewall-analysis/links.php

The ultimate firewall tests on the same site helps you and shows what Firon talking about : http://www.matousec.com/projects/windows-personal-firewall-analysis/leak-tests-results.php#firewalls-ratings

[gbmolina]

in order to proof my point, I took the trouble to reinstall my computer. i have now a new installation with exactly the same software as before, but utorrent 1.6 installed, instead of 1.7. guess what? right, it works just find. so, my advice to the developers is to look for aproblem in 1.7 version and stop thinking of possibel problems in other programs. here it is:

[Type-R]

Firon wrote:

"The reason I ask is because there's a bug with local peers. If they're unlimited, they can make the read/write cache increase without limit until µTorrent hits the memory limit and crashes..."

In my situation utorrent behavior the same.

May it ignore local peer detection settings and enable L: algorithm?

[DreadWingKnight]

i have now a new installation with exactly the same software as before

That doesn't prove that the problem isn't in the interactions with your existing software.

My advice to you is to actually eliminate all other software as potential causes before blaming uTorrent.

[eeeeh]

Hi, I'm using uTorrent 1.7.5 and vista x64 with 2gb ram, and have this problem too.

Same as Type-R, when downloading at high speed (~1,8 MB/s) the ram usage goes to max, but if i limit the download speed to around 500 KB/s the usage drops and stays there.

uTorrent has like 700 hard faults/min while other processes have 5 at most.

I disabled windows firewall and uninstalled NOD32, rebooted, but still same problem, and I have local peer discovery off and local peer bandwidth limit on.

[louis@steelbytes.com]

seeing same problem here (Vista x64 with uTorrent 1.7.5) - ie, system ram usage goes to hell, and closing uTorrent does recover ram (even though procexp & taskmgr show it's usage as fark all).

no AV, no firewall, no antispyware.

I'll post more sysinfo if you need it - but with the amount of proc lists etc that I can see posted on this forum about this bug (not just this thread), I won't unless you ask :-)

personal suspicion: that uTorrent is not really "leaking" per se, but has is maybe just upsetting windows. why do I think this? cause procexp shows it's handles, threads, virtual mem, working set, etc all stay reasonably constant.

PS, I am a software dev by trade (C/C++ win32), so if you need me to run a debug version in vs2005 or something - sure thing.

[Greg Hazel]

Our current guess is that this has sometihng to do with Windows' internal disk cache. I have an experimental version that bypasses the cache, which I'll make available sooner or later to people that want to test.

In the meantime, you could try fiddling with CacheMan: http://www.outertech.com/index.php?_charisma_page=product&id=2 to see if anything helps.

[llrand]

I am using utorrent 1.7.5 (build 4602) and didn't have any problems with it until I installed a download manager then had nothing but grief with unwarrented memory useage. I uninstalled the download manager, but the problem still existed. Luckly, I had created a restore point prior to installing the download manager and when I restored to that point, all my memory problems disappeared and utorrent shows using barely any memory what-so-ever.

Something to try.

Runnig windows xp pro, athlon dual 5600+, 4 gig memory

Also, after doing the restore, I ran a reg cleaner to make sure that all the unwanted gunk was removed from the registry. Even after running computers for many years, we tend to ignore this simple thing.