2.2.0 23703 - insane lag and memory usage(GB's) while some downloading

[Owyn]

Does it look like a small torrent client?

and after killing uTorrent and trying again it lucky got working fine.

For some downloads (rare i suppose) but this happens not the first time, the whole system starts to lag cuz of uTorrent and almost hangs (Win Xp, Intel Core 2 Duo E6600) and to save the system i have to kill uTorrent and try again every time this happens, no additional .dll's for uTorrent, no antiviruses, no viruses, clean uTorrent works bad and makes system lag to freezing.

Hope everything is seen in the screen, tell if you need more info.

[DreadWingKnight]

http://forum.utorrent.com/viewtopic.php?id=29748

Both logs please.

[Firon]

Can you take a screenshot of the Speed tab? Switch it to the Disk Statistics view first.

[Owyn]

Can you take a screenshot of the Speed tab? Switch it to the Disk Statistics view first.

now there are only zero's, when should i take it? before uT window freezes and stops to update visible data?

If it's something to see about caching, uTorrent caching is off and caching is fully relied on windows disk caching.

http://forum.utorrent.com/viewtopic.php?id=29748

Both logs please.

if you insist:

http://www.mediafire.com/?vhttqh4stzb4yuh

I'd take a dump, but I doubt it gonna be taken fine and fast for few GB's of memory with such system lag

[DreadWingKnight]

Paste both logs in your post please.

[Owyn]

hijack

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 13:04:24, on 11.01.2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Unable to get Internet Explorer version!

Boot mode: Normal

Running processes:

V:\WIN\System32\smss.exe

V:\WIN\system32\winlogon.exe

V:\WIN\system32\services.exe

V:\WIN\system32\lsass.exe

V:\WIN\system32\nvsvc32.exe

V:\WIN\system32\svchost.exe

V:\WIN\System32\svchost.exe

V:\WIN\system32\spoolsv.exe

V:\WIN\Explorer.EXE

V:\WIN\RTHDCPL.EXE

V:\WIN\system32\RUNDLL32.EXE

V:\WIN\system32\ctfmon.exe

C:\CSSRV\HLSM\hlsm.exe

C:\CSSRV\hlr\hlr.exe

V:\Program Files\MiniServX\MiniServX.exe

V:\Program Files\CCProxy\CCProxy.exe

C:\QIP 2010\qip.exe

V:\WIN\system32\svchost.exe

V:\Program Files\Mozilla Firefox\firefox.exe

V:\Program Files\Mozilla Firefox\plugin-container.exe

C:\CSSRV\hlds.exe

C:\kmp\KMPlayer.exe

V:\Program Files\uTorrent\utorrent.exe

V:\Program Files\HiJack\Trend Micro\HiJackThis\HiJackThis.exe

O4 - HKLM\..\Run: [iMJPMIG8.1] "V:\WIN\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [PHIME2002ASync] V:\WIN\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] V:\WIN\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [PSDrvCheck] V:\WIN\system32\PSDrvCheck.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE V:\WIN\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE V:\WIN\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKCU\..\Run: [ctfmon.exe] V:\WIN\system32\ctfmon.exe

O4 - HKUS\S-1-5-21-1708537768-813497703-682003330-1006\..\Run: [CTFMON.EXE] V:\WIN\system32\CTFMON.EXE (User 'HLDS')

O4 - HKUS\S-1-5-21-1708537768-813497703-682003330-1006\..\RunOnce: [Rebuild Icon Cache] REBUILDI.EXE (User 'HLDS')

O4 - HKUS\S-1-5-21-1708537768-813497703-682003330-1006\..\RunOnce: [iE7_012] rundll32 advpack.dll,LaunchINFSectionEx IE7int.inf,AfterUserStart,,4,N (User 'HLDS')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] V:\WIN\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] V:\WIN\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: net_share.bat

O10 - Unknown file in Winsock LSP: v:\win\system32\nwprovau.dll

O17 - HKLM\System\CCS\Services\Tcpip\..\{DA804446-F72C-47E2-B792-E50B4CA606F8}: NameServer = 85.21.192.5 213.234.192.7

O22 - SharedTaskScheduler: Предзагрузчик Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - V:\WIN\system32\browseui.dll

O22 - SharedTaskScheduler: Демон кэша категорий компонентов - {8C7461EF-2B13-11d2-BE35-3078302C2030} - V:\WIN\system32\browseui.dll

O23 - Service: Журнал событий (Eventlog) - Корпорация Майкрософт - V:\WIN\system32\services.exe

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - V:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Freenet background service (freenet) - Tanuki Software, Ltd. - C:\FreeNet\bin\wrapper-windows-x86-32.exe

O23 - Service: Служба COM записи компакт-дисков IMAPI (ImapiService) - Корпорация Майкрософт - V:\WIN\system32\imapi.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - V:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - V:\WIN\system32\nvsvc32.exe

O23 - Service: Plug and Play (PlugPlay) - Корпорация Майкрософт - V:\WIN\system32\services.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - V:\Program Files\WinPcap\rpcapd.exe

O23 - Service: Смарт-карты (SCardSvr) - Корпорация Майкрософт - V:\WIN\System32\SCardSvr.exe

O23 - Service: Журналы и оповещения производительности (SysmonLog) - Корпорация Майкрософт - V:\WIN\system32\smlogsvc.exe

O23 - Service: Теневое копирование тома (VSS) - Корпорация Майкрософт - V:\WIN\System32\vssvc.exe

O23 - Service: Адаптер производительности WMI (WmiApSrv) - Корпорация Майкрософт - V:\WIN\system32\wbem\wmiapsrv.exe

--

End of file - 4035 bytes

proccess explorer

Process PID CPU Description Company Name Path Working Set Private Bytes

System Idle Process 0 94.70 28 K 0 K

Interrupts n/a 0.76 Hardware Interrupts 0 K 0 K

DPCs n/a Deferred Procedure Calls 0 K 0 K

System 4 52 K 0 K

smss.exe 380 Диспетчер сеанса Windows NT Корпорация Майкрософт V:\WIN\system32\smss.exe 56 K 248 K

csrss.exe 436 Client Server Runtime Process Microsoft Corporation V:\WIN\system32\csrss.exe 3 684 K 2 160 K

winlogon.exe 460 Программа входа в систему Windows NT Корпорация Майкрософт V:\WIN\system32\winlogon.exe 4 644 K 13 620 K

services.exe 504 Приложение служб и контроллеров Корпорация Майкрософт V:\WIN\system32\services.exe 1 480 K 3 252 K

nvsvc32.exe 668 NVIDIA Driver Helper Service, Version 197.13 NVIDIA Corporation V:\WIN\system32\nvsvc32.exe 1 928 K 3 464 K

svchost.exe 736 Generic Host Process for Win32 Services Microsoft Corporation V:\WIN\system32\svchost.exe 1 328 K 1 596 K

KMPlayer.exe 5720 The KMPlayer Pandora.TV C:\kmp\KMPlayer.exe 3 412 K 113 572 K

wmiprvse.exe 3408 WMI Microsoft Corporation V:\WIN\system32\wbem\wmiprvse.exe 5 136 K 2 552 K

svchost.exe 792 Generic Host Process for Win32 Services Microsoft Corporation V:\WIN\system32\svchost.exe 1 800 K 2 100 K

svchost.exe 832 Generic Host Process for Win32 Services Microsoft Corporation V:\WIN\system32\svchost.exe 8 896 K 13 432 K

Dropbox.exe 1664 Dropbox Dropbox, Inc. V:\Documents and Settings\HLDS\Application Data\Dropbox\bin\Dropbox.exe 15 064 K 53 088 K

svchost.exe 892 Generic Host Process for Win32 Services Microsoft Corporation V:\WIN\system32\svchost.exe 1 756 K 2 004 K

svchost.exe 956 Generic Host Process for Win32 Services Microsoft Corporation V:\WIN\system32\svchost.exe 84 K 1 244 K

spoolsv.exe 972 Spooler SubSystem App Microsoft Corporation V:\WIN\system32\spoolsv.exe 896 K 3 284 K

svchost.exe 1044 Generic Host Process for Win32 Services Microsoft Corporation V:\WIN\system32\svchost.exe 384 K 1 356 K

svchost.exe 344 Generic Host Process for Win32 Services Microsoft Corporation V:\WIN\system32\svchost.exe 800 K 2 544 K

lsass.exe 516 LSA Shell (Export Version) Microsoft Corporation V:\WIN\system32\lsass.exe 1 384 K 4 016 K

explorer.exe 1640 Проводник Корпорация Майкрософт V:\WIN\explorer.exe 22 388 K 159 320 K

RTHDCPL.EXE 1824 Realtek HD Audio Control Panel Realtek Semiconductor Corp. V:\WIN\RTHDCPL.EXE 1 620 K 23 372 K

rundll32.exe 1840 Запуск библиотеки DLL как приложения Корпорация Майкрософт V:\WIN\system32\rundll32.exe 300 K 3 056 K

ctfmon.exe 1848 CTF Loader Microsoft Corporation V:\WIN\system32\ctfmon.exe 572 K 1 016 K

hlsm.exe 1216 HL Server Monitor China CoVerT Team C:\CSSRV\HLSM\hlsm.exe 2 020 K 1 400 K

hlds.exe 4120 3.03 HLDS Launcher Valve C:\CSSRV\hlds.exe 294 704 K 546 312 K

hlr.exe 1224 Half-Life Reanimator Supasoft C:\CSSRV\hlr\hlr.exe 1 092 K 2 188 K

CCProxy.exe 408 CCProxy Youngzsoft V:\Program Files\CCProxy\CCProxy.exe 6 924 K 8 712 K

qip.exe 4060 QIP 2010 QIP C:\QIP 2010\qip.exe 16 844 K 36 624 K

utorrent.exe 4956 µTorrent BitTorrent, Inc. V:\Program Files\uTorrent\utorrent.exe 17 268 K 52 360 K

procexp.exe 3840 1.52 Sysinternals Process Explorer Sysinternals - www.sysinternals.com C:\procexp\procexp.exe 15 428 K 9 700 K

MiniServX.exe 1340 V:\Program Files\MiniServX\MiniServX.exe 1 192 K 13 952 K

firefox.exe 1884 Firefox Mozilla Corporation V:\Program Files\Mozilla Firefox\firefox.exe 215 764 K 425 876 K

plugin-container.exe 4616 Plugin Container for Firefox Mozilla Corporation V:\Program Files\Mozilla Firefox\plugin-container.exe 13 920 K 29 628 K

Process: utorrent.exe Pid: 4956

Name Description Company Name Version

activeds.dll Библиотека DLL уровня маршрутизатора AD Корпорация Майкрософт 5.1.2600.5512

adsldpc.dll Библиотека DLL поставщика LDAP AD Корпорация Майкрософт 5.1.2600.5512

advapi32.dll Расширенная библиотека API Windows 32 Корпорация Майкрософт 5.1.2600.5755

atl.dll ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.2

c_1251.nls

clbcatq.dll Microsoft Corporation 2001.12.4414.700

comctl32.dll User Experience Controls Library Microsoft Corporation 6.0.2900.6028

comdlg32.dll Библиотека общих диалоговых окон Корпорация Майкрософт 6.0.2900.5512

comres.dll Корпорация Майкрософт 2001.12.4414.700

credui.dll Интерфейс диспетчера учетных данных Корпорация Майкрософт 5.1.2600.5512

crypt32.dll API32 криптографии Корпорация Майкрософт 5.131.2600.5512

ctype.nls

dnsapi.dll DNS Client API DLL Microsoft Corporation 5.1.2600.5625

dot3api.dll 802.3 Autoconfiguration API Microsoft Corporation 5.1.2600.5512

dot3dlg.dll Модуль поддержки UI для 802.3 Microsoft Corporation 5.1.2600.5512

eappcfg.dll Конфигурация узла EAP Microsoft Corporation 5.1.2600.5512

eappprxy.dll Microsoft EAPHost Peer Client DLL Microsoft Corporation 5.1.2600.5512

gdi32.dll GDI Client DLL Microsoft Corporation 5.1.2600.5698

hnetcfg.dll Диспетчер конфигурации домашней сети Корпорация Майкрософт 5.1.2600.5512

iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.0.6000.20861

imm32.dll Windows XP IMM32 API Client DLL Microsoft Corporation 5.1.2600.5512

iphlpapi.dll API модуля поддержки IP Корпорация Майкрософт 5.1.2600.5512

kernel32.dll Библиотека клиента Windows NT BASE API Корпорация Майкрософт 5.1.2600.5781

locale.nls

lpk.dll Language Pack Microsoft Corporation 5.1.2600.5512

mprapi.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.1.2600.5512

msasn1.dll ASN.1 Runtime APIs Microsoft Corporation 5.1.2600.5875

MSCTF.dll Библиотека (DLL) MSCTF-сервера Корпорация Майкрософт 5.1.2600.5512

MSCTFIME.IME Microsoft Text Frame Work Service IME Microsoft Corporation 5.1.2600.5512

msi.dll Установщик Windows Microsoft Corporation 4.5.6001.22299

msimg32.dll GDIEXT Client DLL Microsoft Corporation 5.1.2600.5512

msvcp60.dll Microsoft ® C++ Runtime Library Microsoft Corporation 6.2.3104.0

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.2600.5512

mswsock.dll Расширение поставщика службы API Microsoft Windows Sockets 2.0 Корпорация Майкрософт 5.1.2600.5625

netapi32.dll Net Win32 API DLL Microsoft Corporation 5.1.2600.5694

netshell.dll Оболочка сетевых подключений Корпорация Майкрософт 5.1.2600.5512

ntdll.dll Системная библиотека NT Корпорация Майкрософт 5.1.2600.5755

ole32.dll Microsoft OLE для Windows Корпорация Майкрософт 5.1.2600.6010

oleaut32.dll Microsoft Corporation 5.1.2600.5512

onex.dll Библиотека обращений IEEE 802.1X Microsoft Corporation 5.1.2600.5512

psapi.dll Process Status Helper Microsoft Corporation 5.1.2600.5512

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.1.2600.5512

rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation 5.1.2600.6022

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.1.2600.5507

rtutils.dll Routing Utilities Microsoft Corporation 5.1.2600.5512

samlib.dll SAM Library DLL Microsoft Corporation 5.1.2600.5512

secur32.dll Security Support Provider Interface Microsoft Corporation 5.1.2600.5753

setupapi.dll Windows Setup API Корпорация Майкрософт 5.1.2600.5512

shell32.dll Общая библиотека оболочки Windows Корпорация Майкрософт 6.0.2900.6018

shfolder.dll Shell Folder Service Microsoft Corporation 6.0.2900.5512

shlwapi.dll Библиотека небольших программ оболочки Корпорация Майкрософт 6.0.2900.5912

sortkey.nls

sorttbls.nls

unicode.nls

urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.0.6000.20861

user32.dll Библиотека клиента USER API Windows XP Корпорация Майкрософт 5.1.2600.5512

userenv.dll Userenv Корпорация Майкрософт 5.1.2600.5512

usp10.dll Uniscribe Unicode script processor Microsoft Corporation 1.420.2600.5969

utorrent.exe µTorrent BitTorrent, Inc. 2.2.0.23703

uxtheme.dll Библиотека тем UxTheme (Microsoft) Корпорация Майкрософт 6.0.2900.5512

version.dll Version Checking and File Installation Libraries Microsoft Corporation 5.1.2600.5512

winsta.dll Winstation Library Microsoft Corporation 5.1.2600.5512

wldap32.dll Win32 LDAP API DLL Корпорация Майкрософт 5.1.2600.5512

ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.1.2600.5512

ws2help.dll Модуль поддержки Windows Socket 2.0 для Windows NT Корпорация Майкрософт 5.1.2600.5512

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.1.2600.5512

wtsapi32.dll Windows Terminal Server SDK APIs Microsoft Corporation 5.1.2600.5512

xpsp2res.dll Сообщения пакета обновления 2 Корпорация Майкрософт 5.1.2600.5512

[Firon]

So, if it's not uT's cache (because it's turned off) and you aren't using apps, then it's something that's hooking into uT, probably a firewall. It's hard to tell from the log, though.

Try creating a memory dump for uT before the memory usage gets too insane (<200mb).

[Owyn]

As you could see from the above logs I have no firewalls nor any 3rd party programs that could hook into uT.

Anyway i'll try to take a dump with pmdump if I'd have a possibility to do so, hope a dump would definately help.

Problem takes place for big torrents with high download speeds (6+ MB\s) sometimes but not allways

btw, where would you prefer me to upload that huge dump?

[Firon]

Put it up on mediafire.com and email me the link. You can use ntsd to make dumps on XP.

In the Windows Task Manager or Process Explorer, look for the [PID] of the µTorrent process. From there, File > Run > ntsd.exe -p [PID] -e [PID] -c ".dump c:\jit.dmp;q"

where [PID] needs to be replaced with the PID of the µTorrent process found in the process list viewer (don't include square brackets). The resulting dump can be found as c:\jit.dmp. Do this when µTorrent hangs, and post the dump.

[Owyn]

Firon, emailed you a dump of 250+ mb memory usage uTorrent, hope it'd help.

[Firon]

That dump didn't work for us. It isn't parsable by debugging tools.

Can you try using userdump to generate a dump?

http://support.microsoft.com/kb/241215

Furthermore, can you try booting into safe mode with networking on to see if you see the same behavior?

[Owyn]

Took another one, it should work now, see mail

Hope it'd help to see where the problem is

some more details:

when i stop torrent memory starts to reduce to normal amount, after i start in some random time it expands quickly from 10mb to 1GB+ in few minutes

when i limit my speed to 1,5MB\s it works fine but when it's 6+MB\s this memory leak might appear.

[Firon]

Have you tried doing this in Safe Mode with Networking to see if you have the same problem?

[Owyn]

No, that'd be troublesome cuz i run a server and people would be unhappy if i turn it off

Haven't the dumpfile told anything about why did uT use so much memory?

[Firon]

Try the new 2.2.1, 24512.