locked
Excessive modified memory in shared memory RRS feed

  • Question

  • Hi,

    I`m having issues with some kind of memory leak (?). After few hours of working on my notebook, there occurs an error saying that there is not enough ram memory avalible. I drilled down into this problem and i found, that massive amount of memory are consumed. With all apps closed modified memory are incresing like 2-3/MB per sec till the end of avalible memory. Than it shows an error and force to turn off the computer. The problem is not leaking application ( i checked task manager -> processes list ( all users ) and there are no process consuming that amount of memory. I runned RamMap to find out more and it shows that shared memory modify 1,5GB of memory and is still increasing. At the same time, when the "crashed" notebook have 1,6GB modified memory, my well working notebook with very similar config uses like 50-10 MB as modified. Any ideas?

    Some info:

    Operating system:Windows 7 Enterprise Edition (x64)
    Model:Latitude E5510
    Manufacturer:Dell Inc.
    Memory:3,00 GB
    CPU0:Intel(R) Core(TM) i3 CPU       M 330  @ 2.13GHz

    Wednesday, February 2, 2011 11:06 AM

Answers

  • Pavel was almost right. Dell wlan utility was the reason. Killing the bcmwltry.exe process in task manager released memory. But this process initiated again after few sec.. It was kinda crappy - i couldnt uninstall it. Luckily this notebook needed OS change anyway so i`m not even trying to fix this.

    Why Pavel was almost right? On another notebook there were no such process as bcmwltry.exe and it had leaks anyway. Uninstalling dell wlan card utility fixed it. It seems that not only this process but whole utility was a reason.

    When you download wlan drivers for dell ( in dell vostro 3500 driver dell wireless 1397 WLAN Mini-card ) install ONLY DRIVER! DO NOT INSTALL UTILITY (dw wlan card utility )! Sometimes (latitude 5510) utility install with driver and u can`t just uninstall utility without uninstalling drivers, in this case go to msconfig and turn off dell wlan utility in services and launching ( seems to work fine, no errors or leaks so far )

    Thank u all for help. I hope it will also help others.

    Greetings

    • Marked as answer by mortibor Thursday, February 17, 2011 2:09 PM
    Thursday, February 17, 2011 2:08 PM

All replies

  • Please download RAMMap [1][2] and run it when you have the high Memory usage. Now save the data as a RMP file. Zip the RMP file and upload the zip to your SkyDrive [3] and post a link here.

    If the modified RAM is too high, male sure the pagefile is huge enough:

    Modified memory is memory that was allocated by some application and then removed from the application's working set, usually because it hasn't been used for a long time. The fact that most of your memory is in this state means two things:

    1. Some app (or multiple apps) allocated a lot of memory, and is not actively using most of it. Often (but not always) this is due to a memory leak in the app.
    2. The pagefile is not large enough for the system to move all this unused memory to disk.

    If you sort the processes by Commit Size do you see any particularly big ones? If yes, do you expect them to be using that much memory?

    Also, have you disabled or reduced the default pagefile size? If yes, you can set it back to "system managed" and that will allow the system to recover physical memory by moving unused pages to the pagefile. (However, if it does turn out to be a memory leak then the pagefile will eventually become full anyway, so you'll need to close the leaking app, or if it's a driver leak, reboot the system).

    Source:
    http://social.technet.microsoft.com/Forums/de-DE/w7itproperf/thread/7cf838b7-2ced-45a4-a348-3490a226c637

    André

    [1] http://technet.microsoft.com/en-us/sysinternals/ff700229.aspx
    [2] http://blogs.technet.com/b/askperf/archive/2010/08/13/introduction-to-the-new-sysinternals-tool-rammap.aspx
    [3] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Wednesday, February 2, 2011 12:26 PM
  • Meanwhile i`ve checked the pagefile size: 6829MB ( for 3GB of ram i think it`s enough? )
    Wednesday, February 2, 2011 1:20 PM
  • yes. Please run RAMMap and provide the file.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Wednesday, February 2, 2011 1:50 PM
  • Well it might be hard to provide the .rmp file. Yesterday i tired to save rmp file when system was close to crush, it failed - couldn`t save it because of error(windows had to close this app). I was sure its caused by insufficient ram, but today i tried to save right after windows start and same problem occured. I reinstaled rammap but it doesnt worked properly...

    I can provide screenshots of use counts, processes, priority summary, physical ranges if that might help anyhow ( im not able to screenshots others because count of informations ). I cant find any other way to provide those information. Maybe you have some similar application?

    Edit: I ran rammap at 2 others computers and i had no problem to save the file..
    Thursday, February 3, 2011 2:32 PM
  • Yes, make some pictures.
    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Thursday, February 3, 2011 2:58 PM
  • 1st

    2nd

    3rd

    4th

    5th

    Hope that will help.

    Friday, February 4, 2011 1:03 PM
  • Can you sort per modified in descending order in picture ?

    You can also create a Kernel dump:

    /////////////////////////////////

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid\Parameters]

    "CrashOnCtrlScroll"=dword:00000001

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]

    "CrashOnCtrlScroll"=dword:00000001

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl]

    "AutoReboot"=dword:00000001

    "CrashDumpEnabled"=dword:00000002

    "Overwrite"=dword:00000001

    "LogEvent"=dword:00000001

    /////////////////////////

    copy the content between the //// into a new textfile and save it as .reg file and make a doubleclick to import the settings. You can generate a memory dump file by holding down the right CTRL key and pressing the SCROLL LOCK key two times.

    Zip the file C:\Windows\Memory.dmp into 50MB parts and upload it to your SkyDrive.


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Marked as answer by Leo Huang Friday, February 11, 2011 8:27 AM
    • Unmarked as answer by mortibor Monday, February 14, 2011 12:34 PM
    Friday, February 4, 2011 2:04 PM
  • I don`t rly know how does this sorting works on RamMap:) I tried on working pc, sort by modified (descending order) and it looks like:

    51632K

    20628K

    0K

    0K

    4K

    0K

    4804K

    12344K

    0K

     

    When i sort by total, standby, private or anything else it looks fine - i mean in proper order.

     

    I`ll upload kernel dump soon

    Monday, February 7, 2011 8:24 AM
  • upload the dump. This makes it easier for me.
    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Monday, February 7, 2011 1:17 PM
  • Might be the same problem as this one:

    http://social.technet.microsoft.com/Forums/en/w7itproperf/thread/15e91a76-31c1-46cd-9aa9-ff018226a7f9

    Try killing bcmwltry.exe process from task manager and see if the memory usage goes down.

    • Proposed as answer by Andre.Ziegler Thursday, February 17, 2011 2:19 PM
    Tuesday, February 8, 2011 7:31 AM
  • @Andre: Sorry for prolonging dump upload but i don`t have access to this notebook at this moment, i hope i could upload it tommorow or some..

    if bcmwltry.exe would be the leaking one, rammap should have shown that, screen and i see here this process with 328K. You think he is so sneaky, to cheat rammap?:)

    Anyway thank you, i`ll try it and if it won`t help next step will be dump upload.

    Tuesday, February 8, 2011 9:03 AM
  • That number means the process has 328K of private pages on the modified list. The leaked memory in your case is shared rather than private so it's not necessarily tied to any particular process from the kernel's point of view. By analyzing a kernel dump it would be possible to determine which process(es) are preventing this memory from being released but rammap has no way to do that.
    Tuesday, February 8, 2011 10:06 AM
  • Ok, i've got really strange situation. I tried to make a kernel dump on 3 notebooks. 2 with modified memory issues and 1 without it.

    I did all u wrote, but it works only on 1 out of 3. On the one without memory problems i did kernel dump easily, no complications, on 2 others when i hit the buttons ( after changing registry ) computer just freeze and i have to shut it down ( mouse, keybord - no response, just freeze ). When i tried to save rammap .rmp on those 2 with issues windows shut down this app.. On "healthy" one i didnt had any problems.

    Scanned with microsoft security essentials - all clear.

    Im out of ideas..

    Ill kill bcmwltry.exe process and if it wont help ill uninstal drivers one by one to find out if thats the problem.

     

    Person who was working on this notebook, says that memory issues comes out everytime after circa 5-5,5 hours of working.

    Friday, February 11, 2011 8:50 AM
  • ok, try the suggestion of Pavel and let use know if the driver was the cause. Maybe Pavel also knows why the laptop freezes instead of creating the dump.

    Here is an hotfix for the latest dump driver:

    http://support.microsoft.com/kb/2495523/en-us

    Maybe you can generate dumps now.


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 11, 2011 3:00 PM
  • Pavel was almost right. Dell wlan utility was the reason. Killing the bcmwltry.exe process in task manager released memory. But this process initiated again after few sec.. It was kinda crappy - i couldnt uninstall it. Luckily this notebook needed OS change anyway so i`m not even trying to fix this.

    Why Pavel was almost right? On another notebook there were no such process as bcmwltry.exe and it had leaks anyway. Uninstalling dell wlan card utility fixed it. It seems that not only this process but whole utility was a reason.

    When you download wlan drivers for dell ( in dell vostro 3500 driver dell wireless 1397 WLAN Mini-card ) install ONLY DRIVER! DO NOT INSTALL UTILITY (dw wlan card utility )! Sometimes (latitude 5510) utility install with driver and u can`t just uninstall utility without uninstalling drivers, in this case go to msconfig and turn off dell wlan utility in services and launching ( seems to work fine, no errors or leaks so far )

    Thank u all for help. I hope it will also help others.

    Greetings

    • Marked as answer by mortibor Thursday, February 17, 2011 2:09 PM
    Thursday, February 17, 2011 2:08 PM
  • thanks for the feedback.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Thursday, February 17, 2011 2:19 PM
  • Same exact problem here.

    Killing and disabling DW WLAN (bcmwltry.exe) freed up 5 GB of memory.   It leaks.

    Monday, December 23, 2013 5:55 PM