Recommended Posts

I wonder if anyone else has come across this: When copying all my flacs from Win8 to my Win7, I notice my Win8 computer memory usage spiked to 97% and slowed to a crawl. The Win7 is ok. Both have 16GB of ram.

poolmon.exe shows the tag wfpn is the culprit. Doing a findstr shows that netio.sys is causing the problem. I restarted all the network services but the ram usage is still 97%. Only a reboot will solve this problem.

The Realtek driver is update for Win8. It's consistently reproducible.

Link to comment
https://www.neowin.net/forum/topic/1117499-windows-8-high-memory-usage/
Share on other sites

I found W8 to be unstable, especially the networking code which takes about 100x longer to connect.

Welcome to W8 is buggy club. :)

Just to check...is it the networking code, or the way the drivers work on Windows 8 for your device?

I ask since one of the things they really focused on was making the network connections come on faster. It's actually one of their huge talking points.

I know on my older machine my connection is always on the instant I bring my machine out of sleep. In Windows 7 slow resume of networks was why I never left sleep on. I just set the monitor to turn off...now I can save power and be ready within about 3 seconds from hitting my spacebar.

I wonder if anyone else has come across this: When copying all my flacs from Win8 to my Win7, I notice my Win8 computer memory usage spiked to 97% and slowed to a crawl. The Win7 is ok. Both have 16GB of ram.

poolmon.exe shows the tag wfpn is the culprit. Doing a findstr shows that netio.sys is causing the problem. I restarted all the network services but the ram usage is still 97%. Only a reboot will solve this problem.

The Realtek driver is update for Win8. It's consistently reproducible.

Hi sspj,

I have exact the same issue - when copying big files around LAN, torrents,.. Win8 memory usage constantly grows to 3.8GB (total ram is 4GB) and machine starts to crawl. Only restart helps. I used the same technique with poolmon.exe (http://msdn.microsoft.com/en-us/library/windows/hardware/ff560135%28v=vs.85%29.aspx). The problem is with non-paged pool that grows all the time. The driver tag find by poolmon is "Wfpn", findstr finds "netio.sys"... this is the part of Win8 core (MS actually wrote the [bad] code..) :cry:

My machine is HP Pavilion dv7 laptop. With Win7 it worked like a charm..no memory leaks. I'll probably switch back to Win7...Win8 disappointed me.. :s

Anyone knows how to inform MS about that issue?

Hi sspj,

I have exact the same issue - when copying big files around LAN, torrents,.. Win8 memory usage constantly grows to 3.8GB (total ram is 4GB) and machine starts to crawl. Only restart helps. I used the same technique with poolmon.exe (http://msdn.microsof...v=vs.85%29.aspx). The problem is with non-paged pool that grows all the time. The driver tag find by poolmon is "Wfpn", findstr finds "netio.sys"... this is the part of Win8 core (MS actually wrote the [bad] code..) :cry:

My machine is HP Pavilion dv7 laptop. With Win7 it worked like a charm..no memory leaks. I'll probably switch back to Win7...Win8 disappointed me.. :s

Anyone knows how to inform MS about that issue?

Might be better to get HP to push out decently coded Win8 drivers, because in all likeliness it will be your driver, not Windows

Might be better to get HP to push out decently coded Win8 drivers, because in all likeliness it will be your driver, not Windows

I've tried two options with updating Realtek Gigabit Ethernet LAN drivers:

1. install Win7 drivers (Win8 still not supported) from HP official support site --> memory leak remains

2. install Win8 Realtek latest drivers --> memory leak remains

I've also disabled LAN interface and tried Wlan only --> still memory leak :(

What else can I do?

I found W8 to be unstable, especially the networking code which takes about 100x longer to connect.

Welcome to W8 is buggy club. :)

really? On my pc im connected before I even log in.

I've tried two options with updating Realtek Gigabit Ethernet LAN drivers:

1. install Win7 drivers (Win8 still not supported) from HP official support site --> memory leak remains

2. install Win8 Realtek latest drivers --> memory leak remains

I've also disabled LAN interface and tried Wlan only --> still memory leak :(

What else can I do?

Who makes your wireless card? did you do a clean install? what additional drivers did you install? the reason why I ask it might have something to do with something unrelated with the network card driver itself.

I'd agree it's driver related.

I moved a couple of very large ISOs (my dev environment, office etc etc) in a single hit and didn't have any issues whatsoever.

Try running robocopy to move the files and see if the leak persists. It might give you a functioning work around (although it seems unlikely).

I made a fresh Win8 install on HP Pavilion DV7 (not upgrade), it has integrated Realtek gigabit NIC (RTL8168).

After a lot of investigation I think I found the real culprint of my memory leaks. I booted up machine in "safe mode with networking" - and suddenly memory leak has gone :) So I made a list of loaded network drivers (using DriverView from NirSoft) and compared it with the list of drivers in normal boot. Safe mode did not load the following kernel drivers: lltdio.sys, mslldp.sys, Ndu.sys, rspndr.sys, srv.sys, srv2.sys, srvnet.sys, wanarp.sys.

After disabling Ndu.sys (Windows Network Data Usage Monitoring Driver) with Autoruns and normal boot - voila no more memory leaks!!!! :D

Ndu driver was introduced with Win8 (http://batcmd.com/windows/8/services/ndu/) and is actually quite buggy in combination with Realtek NIC. Microsoft should fix that...let's hope soon. :cool:

  • Like 2
  • 1 month later...

Hi damkov - you nailed it. Big thanks for you research. I'm surprised that MS hasn't fix this problem yet.

I changed the registry value instead of using Autoruns:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ndu

change the Start value to 4 (for disable).

I'm copy over 100GB of data now, memory usage stays at 14%. Normally, it would be 99% by now.

  • 4 months later...

Might be better to get HP to push out decently coded Win8 drivers, because in all likeliness it will be your driver, not Windows

Now I have to wonder "which" Realtek gigabit adapter you actually have.

There are three known versions of the Realtek gigabit adapter - an OEM/semi-generic version (supplied to several OEMs, including nVidia and HP), the RTL8111D/E (also semi-generic, but supplied to several OEMs and IHVs, including ASUS) and the current RTL8111F. (The RTL8111D, E, and F are supported by Windows 8 directly - they all use the same driver, in fact - the earlier version uses a Windows 7-type driver.)

Also, you may want to grab Realtek's own drivers (yes - they actually DO write drivers themselves) as opposed to HP's drivers. (The rather amusing thing about Realtek's driver is that it is a generic, but WHQL-certified, Windows 7/8 driver for the RTL8111D and later - and it works with at least one NVidia LAN controller that I know of; the one included as part of the 630i nForce chipset.)

That issue is not one I've had (RTL8111E PHY), and I didn't have it with the nForce chipset after switching from nForce LAN drivers to Realtek's own drivers with Windows 7. However, if you are used to Intel PHYs and Intel Ethernet drivers (especially gigabit) you may likely be spoiled - I can admit to feeling that way (Intel PRO1000CT was the precedent to in terms of gigabit to the two Realtek PHYs I referred to).

Old thread but seems like a driver issue as was mentioned... I don't get that with my Thinkpad (Intel 82577LM Gigabit) network card.

I'm guessing this should have been solved by HP/Realtek by now. :)

btw good job figuring out where the problem was occurring,but i wouldn't be so quick to blame this on a windows problem. yes you disabled a windows driver to remedy the problem, but it could have been the network card driver not playing nice with the windows driver. seems SHoTTa35 doesn't have that problem,and countless other people with different cards don't have that problem.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Carol, Windows XP is still being used today only in a small capacity. It is still the best OS there is due to its backwards compatibility with other older software, the customization features, and friendly UI, and people often feel that upgrading to newer OSes is cost prohibitive in specialized Industries or developing countries, so the market share as of now is around 0.2%-0.3%
    • If I could, I would commemorate it the best way possible: Replacing old machines that are still running Windows XP with something more modern, stable and better.     Noone and nothing should be running Windows XP in 2026.
    • Google's new hand-wave reCAPTCHA can be bypassed with a stock photo by Ivan Jenic Image: Screenshot Google is testing a new reCAPTCHA method that asks you to wave at your camera to prove you're human. So, besides solving puzzles and reading distorted text, you can now use your computer’s camera to pass the verification test. When the hand gesture verification is triggered, your browser asks for camera access and prompts you to perform a simple gesture, like a wave or an open palm. Google says it records a short video of the movement and uses AI to extract 21 hand-knuckle coordinates to complete the verification process. The video is then immediately deleted, and Google swears it doesn't keep it. The process alone can be uncomfortable for people who wouldn’t want their biometric data, which hand scans technically qualify as, recorded. But it gets even more nuanced, as early testers discovered that the new hand-waving reCAPTCHA can be passed with a simple stock image. A user on X tested the new challenge using a stock image of a hand fed through OBS Virtual Camera, and it passed. I wanted to verify it, so I tried the same thing. It took me a few tries and a few stock images, but in the end, I was also able to pass the test. I simply had to readjust the stock image of a generic person waving inside OBS, and Google’s mechanism registered it as a legitimate hand gesture. Once again, it didn’t even have to be a video or an AI-generated hand animation. Given the simplicity of the process, the entire action can be automated in minutes. All it takes is a simple Python script to render the new reCAPTCHA method obsolete. And it doesn’t even have to be an AI bot, which is usually used for solving puzzles and other verification methods. The new reCAPTCHA method is still in its early phase, and Google will, hopefully, update its AI to at least reject still images. However, this incident, combined with users’ initial skepticism about Google’s practices regarding user data, likely won’t make too many people wave at the camera anytime soon.
  • Recent Achievements

    • First Post
      KMilenkoski1202 earned a badge
      First Post
    • First Post
      carols23 earned a badge
      First Post
    • One Month Later
      Tom Willson earned a badge
      One Month Later
    • Apprentice
      Asgardi went up a rank
      Apprentice
    • One Month Later
      sunrisea2milk earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      495
    2. 2
      +Edouard
      262
    3. 3
      PsYcHoKiLLa
      151
    4. 4
      Steven P.
      90
    5. 5
      macoman
      67
  • Tell a friend

    Love Neowin? Tell a friend!