Loki3000 Posted November 24, 2007 Report Posted November 24, 2007 It's crashes without visible reason.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 14:39:05, on 24.11.2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\hkcmd.exeC:\PROGRA~1\A4Tech\Mouse\Amoumain.exeC:\Program Files\Motherboard Monitor 5\MBM5.EXEC:\Program Files\CpuIdle\cpuidle.exeC:\Program Files\Thomson\Thomson Wireless Music Link Manager\Thomson Wireless Music Link Manager.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Punto Switcher\ps.exeC:\Program Files\uTorrent\uTorrent.exeD:\program files\FlylinkDC++\FlylinkDC.exeC:\WINDOWS\system32\oodag.exeC:\Program Files\Agnitum\Outpost Firewall\outpost.exeC:\WINDOWS\system32\rserver30\RServer3.exeC:\WINDOWS\system32\rserver30\FamItrfc.ExeC:\WINDOWS\system32\rserver30\FamItrf2.ExeC:\WINDOWS\System32\svchost.exeC:\Program Files\MYIE2\MYIE.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeO2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dllO2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dllO3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\System32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exeO4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"O4 - HKLM\..\Run: [CpuIdle] C:\Program Files\CpuIdle\cpuidle.exeO4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgentO4 - HKLM\..\Run: [Thomson] C:\Program Files\Thomson\Thomson Wireless Music Link Manager\Thomson Wireless Music Link Manager.exeO4 - HKLM\..\Run: [Outpost Firewall] C:\Program Files\Agnitum\Outpost Firewall\outpost.exe /waitserviceO4 - HKLM\..\Run: [OutpostFeedBack] C:\Program Files\Agnitum\Outpost Firewall\feedback.exe /dump:os_startupO4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /minO4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Punto Switcher] C:\Program Files\Punto Switcher\ps.exeO4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')O4 - Startup: Ярлык для FlylinkDC.lnk = D:\program files\FlylinkDC++\FlylinkDC.exeO8 - Extra context menu item: &Закачать все при помощи FlashGet - C:\Program Files\FlashGet\jc_all.htmO8 - Extra context menu item: &Закачать при помощи FlashGet - C:\Program Files\FlashGet\jc_link.htmO8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: Быстрая настройка Outpost Firewall Pro - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Agnitum\Outpost Firewall\Plugins\BrowserBar\ie_bar.dllO9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exeO9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO20 - AppInit_DLLs: ,C:\WINDOWS\system32\rserver30\r3god.dllO23 - Service: ANIWZCSd Service (ANIWZCSdService) - Unknown owner - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (file missing)O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exeO23 - Service: Cpus10uq - Unknown owner - (no file)O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exeO23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exeO23 - Service: Radmin Server V3 (RServer3) - Famatech International Corp. - C:\WINDOWS\system32\rserver30\RServer3.exe--End of file - 4798 byteshttp://xlam.alna.spb.ru/utorrent/4602-utorrent.89e4.dmp
Firon Posted November 25, 2007 Report Posted November 25, 2007 What is this service called 'Cpus10uq'? Sounds like malware to me.
Loki3000 Posted November 25, 2007 Author Report Posted November 25, 2007 I dont know what is that, but AVP, Dr.Web and Outpost found nothing. So i think that PC is clean.
Greg Hazel Posted November 29, 2007 Report Posted November 29, 2007 It's crashes without visible reason.http://xlam.alna.spb.ru/utorrent/4602-utorrent.89e4.dmpThis link is dead. Can you re-post on http://www.zshare.net/ ?
Juno Posted November 29, 2007 Report Posted November 29, 2007 FIX IN HJT:O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)O23 - Service: Cpus10uq - Unknown owner - (no file)Log is clear.
Loki3000 Posted November 29, 2007 Author Report Posted November 29, 2007 Can you re-post on http://www.zshare.net/ ?Its fresh dump.http://www.zshare.net/download/524474206e951a/I have more dumps if it's needeble.
Greg Hazel Posted November 30, 2007 Report Posted November 30, 2007 Hm. This could be related to the torrent you are on. Can you send it to me?
Loki3000 Posted November 30, 2007 Author Report Posted November 30, 2007 You mean *.torrent file or torrent-tracker that i'm using?I have about 60 active torrent files. You need all of them?
Firon Posted December 1, 2007 Report Posted December 1, 2007 Go ahead and rar them up. If they're private, e-mail them to greg@bittorrent.com
Greg Hazel Posted December 2, 2007 Report Posted December 2, 2007 Hm. Can't reproduce with those torrents. Can you try stopping / removing some of them, to narrow down which one(s) cause(s) it?
Loki3000 Posted December 2, 2007 Author Report Posted December 2, 2007 Program crashes at arbitrary moment of time. It's might work 1-2 days normally. In this reason computer restarts every 24 hours. Its impossible to test torrents one by one.Maybe program crashes then one of torrents become active? It's possible to write that information in log?
Recommended Posts
Archived
This topic is now archived and is closed to further replies.