aedes Posted September 1, 2008 Report Share Posted September 1, 2008 While using my laptop today, I had the usual Windows XP dialog box thing come up, telling me I was low on disk space on my system partition. I thought this was odd, as there really isn't that much on there, but I didn't really think much of it, as I still had around 100mb of space left... that was, until 5min later, I was told I had only 10mb of disc space left.I didn't really like how this was going, so I closed the only program I had open (utorrent), and did a bit of an expedition to figure out what the hell was going on. I soon discovered that my temp folder, which I usually empty out probably once a month, was 5gb for some reason, as it was filled with several thousand utt***.tmp files.I thought this was very odd, so I ran a virus scan, and did some googling. Apparently, these files are associated with bittorrent applications (such as utorrent). I deleted them all.However, I was kind of curious as to why utorrent, over the course of 2-3weeks, had managed to leave 5gb of crap on my system partition. So, after clearing out my entire temp folder, I started utorrent again.Instantaneously, and much to my 'pleasure,' I found that I now had about 250mb of temp files, in that same utt***.tmp format.These excessively numerous tmp files seem to appear whenever utorrent is opened, but are not removed upon closing the program. I'm using utorrent 1.8What the hell is going on? I don't particularly enjoy having to delete 250mb of files everytime I open utorrent... Link to comment Share on other sites More sharing options...
Switeck Posted September 1, 2008 Report Share Posted September 1, 2008 Partial files are created anytime there's pieces overlapping included and skipped files. Link to comment Share on other sites More sharing options...
aedes Posted September 1, 2008 Author Report Share Posted September 1, 2008 ah... I see. So that's what all these tmp files are then? How come they were cumulating up to 5gb though, and not being cleared? Link to comment Share on other sites More sharing options...
Switeck Posted September 1, 2008 Report Share Posted September 1, 2008 Don't you have lots of torrents with multiple files and many set to "skip"? Link to comment Share on other sites More sharing options...
thelittlefire Posted September 2, 2008 Report Share Posted September 2, 2008 ... partfiles are created in the folder you download the content to. I've never seen a "temp" file in %TEMP% Link to comment Share on other sites More sharing options...
aedes Posted September 2, 2008 Author Report Share Posted September 2, 2008 I do have many torrents with many files; however, I don't think that I have any of them set to 'skip,' as I don't know what this means. I've only started using torrents as a way to download things within the past month, so I'm not too familiar with utorrent yet.At the moment, I'm actively downloading two albums, and seeding about 8 other torrents (more albums, about 3gb of files in total).And these utt****.tmp files are all in:C:>documents and settings>user>local settings>temp Link to comment Share on other sites More sharing options...
Switeck Posted September 2, 2008 Report Share Posted September 2, 2008 When the torrents finish downloading, those temp files should disappear. Link to comment Share on other sites More sharing options...
thelittlefire Posted September 2, 2008 Report Share Posted September 2, 2008 What temp files is it making though? I've yet to have data downloaded anywhere but where I tell it to. Link to comment Share on other sites More sharing options...
aedes Posted September 2, 2008 Author Report Share Posted September 2, 2008 That's the thing though... these utt**.tmp files are not being removed when the torrents are finished downloading. And, on top of that, they're not in the same directory as the target directory where the file itself is being saved.I just deleted another ~520mb of these things from my temp folder today. I'll be defragging once a week at this rate.edit 1: grammaredit 2: It sounds like you're talking about a different type of tmp file than what's showing up in my temp folder. Link to comment Share on other sites More sharing options...
DreadWingKnight Posted September 2, 2008 Report Share Posted September 2, 2008 It honestly sounds like something else is actually making those tmp files.Process monitor or file monitor logs maybe? Link to comment Share on other sites More sharing options...
aedes Posted September 3, 2008 Author Report Share Posted September 3, 2008 I agree that it seems really odd - that's kind of why I did a virus scan at first. I've never used process monitor before, but I just ran it right now, while opening utorrent, to see what happened. And while I really don't know what I should be looking for, I did find something that looks very relevent.utorrent.exe appears to be running tens of thousands of createfile and writefile operations upon starting the program. The path of each one of these is:c:>documents and settings>user>local settings>temp>utt***.tmpSo, it appears, based on my best guess at an interpretation of these results, that utorrent is in fact, responsible for creating these several hundred megabytes of tmp files whenever it starts up.follow-up:I did a screen capture of:emtpy temp folder>open process monitor>open and close utorrent>temp folder now has several mb of utt***.tmp files in it>process monitor shows these files were created by utorrent Because of the low resolution of youtube, you can't read anything. I have the original, higher resolution file on my computer as a 10mb flv file, if anyone wants to see it, or if anyone knows of a hosting site that won't degrade the quality. Link to comment Share on other sites More sharing options...
thelittlefire Posted September 4, 2008 Report Share Posted September 4, 2008 Only uploading the whole file won't degrade quality. What would be more useful, is SAVING that logfile ... in .PML format so they can look at it. CSV also works, but it gives less information. Link to comment Share on other sites More sharing options...
aedes Posted September 4, 2008 Author Report Share Posted September 4, 2008 I have a that log file saved on my computer in pml format. Who should I be sending this to? Link to comment Share on other sites More sharing options...
Ultima Posted September 5, 2008 Report Share Posted September 5, 2008 gregATutorrentDOTcom (with a description and probably link to this thread for context, I suppose)You can also upload it to mediafire.com or savefile.com and just post the link here. Link to comment Share on other sites More sharing options...
aedes Posted September 5, 2008 Author Report Share Posted September 5, 2008 email is sent - thanxHere is a link to the pml file uploaded onto mediafire: http://www.mediafire.com/?sharekey=942e5119c2805617d2db6fb9a8902bdaOn the occasion that this file is a record of, about 9mb of tmp files were made, but not removed from the temp folder. I've come to notice that the more active torrents there are in the session, the larger the volume of tmp files that remain in the temp folder when you close utorrent. On this occasion, there were no active torrents. When I have say 5 or 6 downloading, and 10 uploading, there's often over 300mb of remnant tmp files. Link to comment Share on other sites More sharing options...
bendaniel Posted October 17, 2008 Report Share Posted October 17, 2008 I have this same problem. It seems even though I have no active torrents and the scheduler should stop any downloading/uploading at this time, utorrent is downloading heaps of utt*.tmp / tmp*.tmp / tmp*.exe files! The exe files suggest that something has infected uTorrent. The only reason my wife and I found this was because something on our network was using up all our internet bandwidth. We eventually narrowed it down to uTorrent. When uTorrent is running even though it says that the torrents are queued it says it's downloading (at a very large rate) in the status bar. When I close uTorrent we get our internet speed back.I did some googling and it seems that nasty people have exploited utorrent before by designing and posting corrupted .torrent files which cause a buffer overflow in uTorrent and caused it to execute their nasty code. They said this was fixed but perhaps there's still a similar vulnerablity still in uTorrent.So did you solve this problem on your computer? I hate to say it and I hope it's not but it may be that you have a virus on your pc too? Anyway I'm still investigationing this problem but I'll post what I find and how I resolve it. Of-course I'd love to hear where you got with it too. Link to comment Share on other sites More sharing options...
thelittlefire Posted October 17, 2008 Report Share Posted October 17, 2008 Automated downloading to the %TEMP% folder could be RSS .TORRENT files, the manual or an update. This is persistent download? Where did you get uTorrent from and what build are you using (Alt-H-A)? Link to comment Share on other sites More sharing options...
bendaniel Posted October 18, 2008 Report Share Posted October 18, 2008 I would have downloaded uTorrent from their website over a year ago now and have just been using the Check For Updates to get updates.I do have about 2 dozen RSS feeds setup but I don't think a few xml files explain the huge amount of space it's using. Over the course of 5 to 10 minutes of uTorrent running it had downloaded nearly 100 MB worth of temp files while all my torrents (all 3 of them) were queued. All up, the tmp*.tmp, utt*.tmp & tmp*.exe files take up about 1.5GB!I've downloaded AVG and am in the process of doing a complete virus scan now. Link to comment Share on other sites More sharing options...
thelittlefire Posted October 18, 2008 Report Share Posted October 18, 2008 If this is persistent please follow the steps above and create the same type of Process Monitor Logfile, and as before if you are concerned with personal information and don't wish to upload the file to a public site email it. I must admit I have no experience with this problem.When did this start happening? How did you determine uTorrent was using the bandwidth? Does the bandwidth show up in the Speed tab? going to http://sysinternals.com as with Process Monitor and getting TCPView, does it show the opened sockets in uTorrent.exe process? Where is it connecting to?... I must admit, I too believe it is an infection, unfortunately without additional information, nothing to do. I wish you luck with your scans :/ Link to comment Share on other sites More sharing options...
Firon Posted October 18, 2008 Report Share Posted October 18, 2008 If you give utorrent an RSS feed with actual files instead of torrents, it will happily download those files and complain about not enough storage to load them once it's done. Link to comment Share on other sites More sharing options...
bendaniel Posted October 18, 2008 Report Share Posted October 18, 2008 <Ben slaps face> I am an eeeeediot.Thank you Firon - this is my problem exactly! I was wondering the other day if uTorrent would handle feeds that linked to actual files and not torrents (this would be a great feature imho) because there's a few podcasts I'd like to subscribe to which don't have torrents. After I added the feed I completely forgot about it. I just removed the feed and restarted uTorrent and it stopped downloading like crazy. Thanks heaps!Soooooo, does anyone recommend a good podcast client? I'm after something that lets me specify the output folder for each individual feed. Link to comment Share on other sites More sharing options...
thelittlefire Posted October 18, 2008 Report Share Posted October 18, 2008 Any feed which links EXE files as enclosures should be shot. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.