Tooget Posted August 22, 2010 Report Posted August 22, 2010 My version is 2.0.3, this also happens on the new Beta version. After about 3-4 hours it starts eating my ram but taskmgr only show's it using 160mb. My Advanced>Disk Cache settings are : Override automatic cache is set to '128', Reduce Memory usage is un-ticked, also Increase automatic cache size when cache thrashing is un-ticked. I am on a Windows XP 64Bit System with 4GB ram. Below i have included my Hijackthis, and process explorer logs. Any help is appreciated.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 5:37:22 PM, on 8/22/2010Platform: Windows 2003 SP2 (WinNT 5.02.3790)MSIE: Internet Explorer v7.00 (7.00.6000.17080)Boot mode: NormalRunning processes:C:\PROGRA~2\AVG\AVG8\avgwdsvc.exeC:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS\SysWOW64\srvany.exeC:\WINDOWS\SysWOW64\srvany.exeC:\PROGRA~2\AVG\AVG8\avgtray.exeC:\WINDOWS\system32\ctfmon.exeC:\Fen\FirefoxPortable\FirefoxPortable.exeC:\Fen\FirefoxPortable\App\firefox\firefox.exeC:\Fen\utorrent.exeC:\Documents and Settings\Administrator\Desktop\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://netstorage.id.rug.nl/NetStorage/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157F2 - REG:system.ini: UserInit=userinitO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG8\avgssie.dllO4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~2\AVG\AVG8\avgtray.exeO4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-21-3239690792-1186245234-1347368163-1004\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'remote2')O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO15 - ESC Trusted Zone: http://runonce.msn.comO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG8\avgpp.dllO22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\SysWOW64\browseui.dllO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\SysWOW64\browseui.dllO23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exeO23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~2\AVG\AVG8\avgwdsvc.exeO23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe (file missing)O23 - Service: Event Log (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing)O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe (file missing)O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\WINDOWS\system32\msdtc.exe (file missing)O23 - Service: Net Logon (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)O23 - Service: netsvcs - Unknown owner - C:\WINDOWS\system32\srvany.exeO23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc64.exe (file missing)O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing)O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe (file missing)O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)O23 - Service: secure32 - Unknown owner - c:\recycler\secure32\secure32.exe (file missing)O23 - Service: spoolnt - Unknown owner - C:\WINDOWS\system32\srvany.exeO23 - Service: Thinstuff XP/VS Server for Windows (ThinRDPSrv) - Thinstuff s.r.o. - C:\Program Files\Thinstuff\XPVS Server\thinrdpsrv.exeO23 - Service: Thinstuff TSX-USB Redirector Service (TSXUsbSrv) - Thinstuff - C:\Program Files\Thinstuff\XPVS Server\tsxusbredirectorsrv.exeO23 - Service: Virtual Disk Service (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe (file missing)O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)--End of file - 6235 bytes--------------------------------------------------------------------------------------------------------------------Process PID CPU Private Bytes Working Set Description Company NameSystem Idle Process 0 98.05 0 K 24 K Interrupts n/a 0 K 0 K Hardware Interrupts DPCs n/a 0 K 0 K Deferred Procedure Calls System 4 44 K 115,140 K smss.exe 272 224 K 312 K Windows NT Session Manager Microsoft Corporation csrss.exe 324 1,540 K 1,692 K Client Server Runtime Process Microsoft Corporation winlogon.exe 364 10,312 K 4,520 K Windows NT Logon Application Microsoft Corporation services.exe 412 2,584 K 2,468 K Services and Controller app Microsoft Corporation svchost.exe 616 1,640 K 1,308 K Generic Host Process for Win32 Services Microsoft Corporation wmiprvse.exe 932 2,988 K 2,944 K WMI Microsoft Corporation wmiprvse.exe 2148 5,372 K 5,424 K WMI Microsoft Corporation svchost.exe 668 2,224 K 2,164 K Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 712 25,528 K 27,260 K Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 760 6,544 K 2,688 K Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 808 2,976 K 2,636 K Generic Host Process for Win32 Services Microsoft Corporation spoolsv.exe 896 5,184 K 2,984 K Spooler SubSystem App Microsoft Corporation svchost.exe 1020 1,668 K 932 K Generic Host Process for Win32 Services Microsoft Corporation ATKKBService.exe 1060 1,560 K 204 K ASUS Keyboard Service ASUSTeK COMPUTER INC. avgwdsvc.exe 1072 6,136 K 2,188 K AVG Watchdog Service AVG Technologies CZ, s.r.o. avgrsa.exe 1372 15,736 K 208 K AVG Resident Shield Service AVG Technologies CZ, s.r.o. avgnsa.exe 1380 5,880 K 396 K AVG Network scanner Service AVG Technologies CZ, s.r.o. svchost.exe 1128 1,160 K 204 K Generic Host Process for Win32 Services Microsoft Corporation MDM.EXE 1240 2,320 K 808 K Machine Debug Manager Microsoft Corporation srvany.exe 1280 592 K 232 K nvsvc64.exe 1304 2,588 K 316 K NVIDIA Driver Helper Service, Version 91.31 NVIDIA Corporation srvany.exe 1876 592 K 232 K svchost.exe 1912 2,856 K 204 K Generic Host Process for Win32 Services Microsoft Corporation thinrdpsrv.exe 2000 4,188 K 1,900 K Thinstuff XP/VS Service Thinstuff s.r.o. alg.exe 2188 1,472 K 212 K Application Layer Gateway Service Microsoft Corporation tsxusbredirectorsrv.exe 2256 2,828 K 1,508 K Thinstuff TSX-USB Redirector Main module Thinstuff lsass.exe 424 5,460 K 1,948 K LSA Shell Microsoft Corporation logon.scr 3608 1,344 K 340 K Logon Screen Saver Microsoft Corporation csrss.exe 2328 1,968 K 1,928 K Client Server Runtime Process Microsoft Corporation winlogon.exe 2356 5,944 K 4,680 K Windows NT Logon Application Microsoft Corporation rdpclip.exe 2720 2,108 K 2,400 K RDP Clip Monitor Microsoft Corporation csrss.exe 2828 2,196 K 4,176 K Client Server Runtime Process Microsoft Corporation winlogon.exe 3016 5,996 K 2,316 K Windows NT Logon Application Microsoft Corporation rdpclip.exe 3184 2,076 K 256 K RDP Clip Monitor Microsoft Corporationexplorer.exe 2792 18,756 K 12,896 K Windows Explorer Microsoft Corporation FirefoxPortable.exe 2712 36,588 K 264 K Mozilla Firefox, Portable Edition PortableApps.com firefox.exe 2760 86,976 K 68,892 K Firefox Mozilla Corporation utorrent.exe 2508 1.10 156,340 K 155,404 K µTorrent BitTorrent, Inc. procexp.exe 2196 1,752 K 5,024 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com procexp64.exe 3412 0.82 8,848 K 13,824 K Sysinternals Process Explorer Sysinternals - www.sysinternals.comavgtray.exe 3060 6,492 K 708 K AVG Tray Monitor AVG Technologies CZ, s.r.o.ctfmon.exe 1872 800 K 464 K CTF Loader Microsoft Corporationexplorer.exe 3080 15,940 K 2,844 K Windows Explorer Microsoft Corporation ctfmon.exe 4092 1,124 K 392 K CTF Loader Microsoft Corporation ctfmon.exe 3488 780 K 112 K CTF Loader Microsoft Corporationavgtray.exe 2500 6,584 K 2,464 K AVG Tray Monitor AVG Technologies CZ, s.r.o.Process: utorrent.exe Pid: 2508Name Description Company Name VersionACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.2.3790.3959adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.2.3790.3959ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.2.3790.4455apphelp.dll Application Compatibility Client Library Microsoft Corporation 5.2.3790.3959ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.2browseui.dll Shell Browser UI Library Microsoft Corporation 6.0.3790.3959CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.4720.3959CLUSAPI.dll Cluster API Library Microsoft Corporation 5.2.3790.3959COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.0.3790.3959comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.0.3790.3959COMRes.dll COM+ Resources Microsoft Corporation 2001.12.4720.3959credui.dll Credential Manager User Interface Microsoft Corporation 5.2.3790.3959CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.3790.3959cryptdll.dll Cryptography Manager Microsoft Corporation 5.2.3790.3959CSCDLL.dll Offline Network Agent Microsoft Corporation 5.2.3790.3959cscui.dll Client Side Caching UI Microsoft Corporation 5.2.3790.3959ctype.nls DnsApi.dll DNS Client API DLL Microsoft Corporation 5.2.3790.4318GDI32.dll GDI Client DLL Microsoft Corporation 5.2.3790.4396hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.2.3790.3959iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.0.6000.17080IMM32.DLL Windows IMM32 API Client DLL Microsoft Corporation 5.2.3790.3959index.dat index.dat index.dat Iphlpapi.dll IP Helper API Microsoft Corporation 5.2.3790.3959kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.2.3790.4480locale.nls MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.2.3790.3959msapsspc.dll MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.2.3790.4584MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.2.3790.3959msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.2.3790.3959msnsspc.dll msv1_0.DLL Microsoft Authentication Package v1.0 Microsoft Corporation 5.2.3790.4587msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.3790.3959MSVCRT40.dll mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.2.3790.4318netapi32.dll Net Win32 API DLL Microsoft Corporation 5.2.3790.4392netshell.dll Network Connections Shell Microsoft Corporation 5.2.3790.3959Normaliz.dll Unicode Normalization DLL Microsoft Corporation 6.0.5441.0ntdll.dll NT Layer DLL Microsoft Corporation 5.2.3790.4455ntdll.dll NT Layer DLL Microsoft Corporation 5.2.3790.4455ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.2.3790.3959oleaut32.dll Microsoft Corporation 5.2.3790.4202PSAPI.DLL Process Status Helper Microsoft Corporation 5.2.3790.3959R000000000003.clb rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.2.3790.3959RASAPI32.dll Remote Access API Microsoft Corporation 5.2.3790.3959rasman.dll Remote Access Connection Manager Microsoft Corporation 5.2.3790.3959rdpsnd.dll Terminal Server MultiMedia Driver Microsoft Corporation 5.2.3790.1830RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.2.3790.4502rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.2.3790.3959rtutils.dll Routing Utilities Microsoft Corporation 5.2.3790.1830SAMLIB.dll SAM Library DLL Microsoft Corporation 5.2.3790.3959Secur32.dll Security Support Provider Interface Microsoft Corporation 5.2.3790.4530sensapi.dll SENS Connectivity API DLL Microsoft Corporation 5.2.3790.3959SETUPAPI.dll Windows Setup API Microsoft Corporation 5.2.3790.3959SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.3790.4751shfolder.dll Shell Folder Service Microsoft Corporation 6.0.3790.1830SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.3790.4603sortkey.nls sorttbls.nls TAPI32.dll Microsoft® Windows Telephony API Client DLL Microsoft Corporation 5.2.3790.3959unicode.nls urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.0.6000.17080USER32.dll Windows USER API Client DLL Microsoft Corporation 5.2.3790.4033USERENV.dll Userenv Microsoft Corporation 5.2.3790.3959utorrent.exe µTorrent BitTorrent, Inc. 2.0.3.21177uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.0.3790.3959VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.2.3790.1830wininet.dll Internet Extensions for Win32 Microsoft Corporation 7.0.6000.17080WINMM.dll MCI API DLL Microsoft Corporation 5.2.3790.3959winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.2.3790.3959WINSTA.dll Winstation Library Microsoft Corporation 5.2.3790.3959WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.2.3790.3959wow64.dll Win32 Emulation on NT64 Microsoft Corporation 5.2.3790.3959wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation 5.2.3790.1830wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation 5.2.3790.3959WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.2.3790.3959WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.2.3790.1830wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.2.3790.3959xpsp2res.dll Service Pack 2 Messages Microsoft Corporation 5.2.3790.3959
DreadWingKnight Posted August 22, 2010 Report Posted August 22, 2010 Post a screenshot of your disk cache settings please.
Tooget Posted August 22, 2010 Author Report Posted August 22, 2010 screenshotI have tried to tick\untick reduce memory, which didn't help.
DreadWingKnight Posted August 22, 2010 Report Posted August 22, 2010 Does task manager or process explorer show which process is actually eating the ram?
Tooget Posted August 22, 2010 Author Report Posted August 22, 2010 nope, neither process explorer or task manager show what program is actually eating all my ram. Both show utorrent to be eating 150-160mb right now, But i only have 515mb free from a total of 4GB. If i close utorrent i get an instant 4gb free agian.
DreadWingKnight Posted August 22, 2010 Report Posted August 22, 2010 It honestly sounds like the windows disk cache is not actually listening.Either that or an nVidia service (Forceware Network Access Manager is notorious for this) or some other low level driver is actually causing the problem.
Tooget Posted August 22, 2010 Author Report Posted August 22, 2010 I see, anything i can uninstall to help? i guess i will just have to keep closing and re-opening or try 1.8.5 which i did for about an hour with no problems yesterday but my upload speeds are not so great on it.
DreadWingKnight Posted August 22, 2010 Report Posted August 22, 2010 Your task manager screenshot confirms it.It's the windows disk cache being stupid.Uncheck and re-check both of the "disable windows' disk cache" settings, restarting before and after re-enabling the settings.
Tooget Posted August 22, 2010 Author Report Posted August 22, 2010 Just tried it and restarted u-torrent, still the same issue ;(.
paintball9 Posted August 22, 2010 Report Posted August 22, 2010 You probably have to restart windows as well.
Tooget Posted August 23, 2010 Author Report Posted August 23, 2010 same issue even after restarting windows, my memory ram is dropping like crazy.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.