Recommended Posts

I wonder if anyone else has come across this: When copying all my flacs from Win8 to my Win7, I notice my Win8 computer memory usage spiked to 97% and slowed to a crawl. The Win7 is ok. Both have 16GB of ram.

poolmon.exe shows the tag wfpn is the culprit. Doing a findstr shows that netio.sys is causing the problem. I restarted all the network services but the ram usage is still 97%. Only a reboot will solve this problem.

The Realtek driver is update for Win8. It's consistently reproducible.

Link to comment
https://www.neowin.net/forum/topic/1117499-windows-8-high-memory-usage/
Share on other sites

I found W8 to be unstable, especially the networking code which takes about 100x longer to connect.

Welcome to W8 is buggy club. :)

Just to check...is it the networking code, or the way the drivers work on Windows 8 for your device?

I ask since one of the things they really focused on was making the network connections come on faster. It's actually one of their huge talking points.

I know on my older machine my connection is always on the instant I bring my machine out of sleep. In Windows 7 slow resume of networks was why I never left sleep on. I just set the monitor to turn off...now I can save power and be ready within about 3 seconds from hitting my spacebar.

I wonder if anyone else has come across this: When copying all my flacs from Win8 to my Win7, I notice my Win8 computer memory usage spiked to 97% and slowed to a crawl. The Win7 is ok. Both have 16GB of ram.

poolmon.exe shows the tag wfpn is the culprit. Doing a findstr shows that netio.sys is causing the problem. I restarted all the network services but the ram usage is still 97%. Only a reboot will solve this problem.

The Realtek driver is update for Win8. It's consistently reproducible.

Hi sspj,

I have exact the same issue - when copying big files around LAN, torrents,.. Win8 memory usage constantly grows to 3.8GB (total ram is 4GB) and machine starts to crawl. Only restart helps. I used the same technique with poolmon.exe (http://msdn.microsoft.com/en-us/library/windows/hardware/ff560135%28v=vs.85%29.aspx). The problem is with non-paged pool that grows all the time. The driver tag find by poolmon is "Wfpn", findstr finds "netio.sys"... this is the part of Win8 core (MS actually wrote the [bad] code..) :cry:

My machine is HP Pavilion dv7 laptop. With Win7 it worked like a charm..no memory leaks. I'll probably switch back to Win7...Win8 disappointed me.. :s

Anyone knows how to inform MS about that issue?

Hi sspj,

I have exact the same issue - when copying big files around LAN, torrents,.. Win8 memory usage constantly grows to 3.8GB (total ram is 4GB) and machine starts to crawl. Only restart helps. I used the same technique with poolmon.exe (http://msdn.microsof...v=vs.85%29.aspx). The problem is with non-paged pool that grows all the time. The driver tag find by poolmon is "Wfpn", findstr finds "netio.sys"... this is the part of Win8 core (MS actually wrote the [bad] code..) :cry:

My machine is HP Pavilion dv7 laptop. With Win7 it worked like a charm..no memory leaks. I'll probably switch back to Win7...Win8 disappointed me.. :s

Anyone knows how to inform MS about that issue?

Might be better to get HP to push out decently coded Win8 drivers, because in all likeliness it will be your driver, not Windows

Might be better to get HP to push out decently coded Win8 drivers, because in all likeliness it will be your driver, not Windows

I've tried two options with updating Realtek Gigabit Ethernet LAN drivers:

1. install Win7 drivers (Win8 still not supported) from HP official support site --> memory leak remains

2. install Win8 Realtek latest drivers --> memory leak remains

I've also disabled LAN interface and tried Wlan only --> still memory leak :(

What else can I do?

I found W8 to be unstable, especially the networking code which takes about 100x longer to connect.

Welcome to W8 is buggy club. :)

really? On my pc im connected before I even log in.

I've tried two options with updating Realtek Gigabit Ethernet LAN drivers:

1. install Win7 drivers (Win8 still not supported) from HP official support site --> memory leak remains

2. install Win8 Realtek latest drivers --> memory leak remains

I've also disabled LAN interface and tried Wlan only --> still memory leak :(

What else can I do?

Who makes your wireless card? did you do a clean install? what additional drivers did you install? the reason why I ask it might have something to do with something unrelated with the network card driver itself.

I'd agree it's driver related.

I moved a couple of very large ISOs (my dev environment, office etc etc) in a single hit and didn't have any issues whatsoever.

Try running robocopy to move the files and see if the leak persists. It might give you a functioning work around (although it seems unlikely).

I made a fresh Win8 install on HP Pavilion DV7 (not upgrade), it has integrated Realtek gigabit NIC (RTL8168).

After a lot of investigation I think I found the real culprint of my memory leaks. I booted up machine in "safe mode with networking" - and suddenly memory leak has gone :) So I made a list of loaded network drivers (using DriverView from NirSoft) and compared it with the list of drivers in normal boot. Safe mode did not load the following kernel drivers: lltdio.sys, mslldp.sys, Ndu.sys, rspndr.sys, srv.sys, srv2.sys, srvnet.sys, wanarp.sys.

After disabling Ndu.sys (Windows Network Data Usage Monitoring Driver) with Autoruns and normal boot - voila no more memory leaks!!!! :D

Ndu driver was introduced with Win8 (http://batcmd.com/windows/8/services/ndu/) and is actually quite buggy in combination with Realtek NIC. Microsoft should fix that...let's hope soon. :cool:

  • Like 2
  • 1 month later...

Hi damkov - you nailed it. Big thanks for you research. I'm surprised that MS hasn't fix this problem yet.

I changed the registry value instead of using Autoruns:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ndu

change the Start value to 4 (for disable).

I'm copy over 100GB of data now, memory usage stays at 14%. Normally, it would be 99% by now.

  • 4 months later...

Might be better to get HP to push out decently coded Win8 drivers, because in all likeliness it will be your driver, not Windows

Now I have to wonder "which" Realtek gigabit adapter you actually have.

There are three known versions of the Realtek gigabit adapter - an OEM/semi-generic version (supplied to several OEMs, including nVidia and HP), the RTL8111D/E (also semi-generic, but supplied to several OEMs and IHVs, including ASUS) and the current RTL8111F. (The RTL8111D, E, and F are supported by Windows 8 directly - they all use the same driver, in fact - the earlier version uses a Windows 7-type driver.)

Also, you may want to grab Realtek's own drivers (yes - they actually DO write drivers themselves) as opposed to HP's drivers. (The rather amusing thing about Realtek's driver is that it is a generic, but WHQL-certified, Windows 7/8 driver for the RTL8111D and later - and it works with at least one NVidia LAN controller that I know of; the one included as part of the 630i nForce chipset.)

That issue is not one I've had (RTL8111E PHY), and I didn't have it with the nForce chipset after switching from nForce LAN drivers to Realtek's own drivers with Windows 7. However, if you are used to Intel PHYs and Intel Ethernet drivers (especially gigabit) you may likely be spoiled - I can admit to feeling that way (Intel PRO1000CT was the precedent to in terms of gigabit to the two Realtek PHYs I referred to).

Old thread but seems like a driver issue as was mentioned... I don't get that with my Thinkpad (Intel 82577LM Gigabit) network card.

I'm guessing this should have been solved by HP/Realtek by now. :)

btw good job figuring out where the problem was occurring,but i wouldn't be so quick to blame this on a windows problem. yes you disabled a windows driver to remedy the problem, but it could have been the network card driver not playing nice with the windows driver. seems SHoTTa35 doesn't have that problem,and countless other people with different cards don't have that problem.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • The actual download size is ~130–180 MB, not 100 MB.
    • Slight change of pace for me! Gunnar & the Grizzly Boys - Standard American (Official)  
    • draw.io Desktop 30.2.4 by Razvan Serea draw.io desktop is a downloadable security-first diagramming application that runs on Windows, MacOS and Linux. Creating diagrams in the desktop app doesn’t need an internet connection. This is useful when you are disconnected or when you must create diagrams in a highly secure environment, where data protection is of the utmost importance. When you use the draw.io desktop app, your diagrams will be stored on your local device. Because this is a stand-alone application, also designed to run offline, there are no interfaces to cloud storage platforms available. Of course, you can still store your diagrams in folders that are synchronised to your cloud storage if you wish. Easy-to-use diagram editor The draw.io apps work just like the office and drawing tools you are used to using. Drag and drop shapes from the shape libraries and drag to draw connectors between them. Drag connectors to add waypoints and set a precise shape and position, or let them reroute automatically. Double click and start typing to add a label to anything. Create tables and swimlane flows with a familiar tool. Style shapes and connectors with customisable palettes, sketch options, fonts and text formatting tools. Search for shapes, including in open-source icon libraries. Use our vast libraries of shapes and templates, organised into logical categories, to create a range of diagrams and infographics. Generate diagrams from text descriptions using our smart templates. Diagram faster with keyboard shortcuts. draw.io Desktop 30.2.4 changelog: Uses electron 42.4.1 Updates to draw.io core 30.2.4. Download: draw.io 64-bit | Standalone ~100.0 MB (Open Source) Download: draw.io 32-bit | ARM64 | ARM64 Standalone Links: draw.io Home Page | Project page @GitHub | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Microsoft will soon allow some users to block Copilot from analyzing their Office files by Usama Jawad Microsoft Purview is a pretty useful data governance, security, and management service that allows customers to gain enhanced visibility and control over their content. It's meant for commercial customers, such as organizations that are storing data at scale. As AI continues to expand and infiltrate every corner of a firm, many are a bit conscious about the technology gaining access to their confidential data. Microsoft is now making a configuration change that will allow such customers to rest easy. Right now, users within an organization have the option to apply Purview sensitivity labels (when available) to secure certain files and label them as such. For example, if you apply the "Confidential" label on an Excel file, the file will be encrypted, and a "confidential" watermark will be applied to it. So, if this file is shared with anyone, they are aware that its access is supposed to be restricted. Up until now, Microsoft was allowing some connected experiences, like its AI services, to analyze files, regardless of their sensitivity label. This is of major concern to most organizations, as a recent example highlighted how confidential emails with data loss prevention (DLP) policies like privacy labels were being uploaded to Copilot for analysis. As such, Microsoft is updating an existing Purview data label sensitivity setting that prevents "some connected experiences that analyze content", from being blocked completely from doing this. The label isn't changing, but the blocking is now being enforced across all connected services (including Copilot and other AI tools), and now extends to Microsoft Word, Excel, and PowerPoint. Files with the label applied already will get this enhancement automatically too once it becomes available. Microsoft has urged IT admins to inform their respective helpdesk and compliance teams, update internal documentation, and review sensitivity labels to ensure that they meet their respective compliance needs. This change is tagged as MC1297982 in the Message Center. General availability is scheduled to begin in a phased manner soon and will complete by the end of next month. That said, it is important to note that this only applies to commercial customers who have a license that allows them to use Purview.
    • llamas are unruly going haywire in New Guinea.
  • Recent Achievements

    • Week One Done
      Eurosoft10 earned a badge
      Week One Done
    • One Month Later
      Eurosoft10 earned a badge
      One Month Later
    • One Year In
      Skeet Campbell earned a badge
      One Year In
    • One Month Later
      Sharbel earned a badge
      One Month Later
    • First Post
      BizSAR earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      589
    2. 2
      +Edouard
      190
    3. 3
      Michael Scrip
      76
    4. 4
      PsYcHoKiLLa
      75
    5. 5
      neufuse
      72
  • Tell a friend

    Love Neowin? Tell a friend!