Jump to content

Crashes on Server 2003


fogus

Recommended Posts

Hi All,

I just installed utorrent on my server 2003 computer and have had terrible "lag" when using the program. I have used it for years on XP (and so I tried a few different versions on 2003, to see if an older version would be better).

Basically after I startup the program, it is responsive for a few moments, and then just cuts in and out between "running" and "not responding" messages in the taskmanager.

Is utorrent supposed to work on server 2003?

Also, I can't seem to forward any ports to utorrent on my server (orange triangle). I am using ISA server 2004 on my gateway and I am able to serve websites off my server, but not torrents.

I'm stumped as to what could cause this, and dissappointed because I was hoping to do all my torrenting off my server (which is always on).

~fogus

Link to comment
Share on other sites

:/ Incompatible Software for the freezing? Could you provide a Process Explorer DLL list of uTorrent.exe and HJT logs as asked for in the How-To please.

I don't know specifically what you need to forward. Wherever you opened up port 80 for web traffic, I'd presume... you need to open the same port as listed in the Speed Guide (Ctrl-G) as that's uT active listening port.

Link to comment
Share on other sites

I couldn't find any incompatible software.

The server runs very little, only the windows client firewall is slightly out of the ordinary (the client for Microsoft ISA server, and I run utorrent from behind that firewall client just fine on other PCs). Perhaps the crashyness of utorrent is stopping it from accepting requests. I do get some strange logs in the ISA server from time to time, something about the IP address for utorrent.com looking like its being spoofed (but again, utorrent works fine on XP in the same environment)

Does utorrent depend on microsoft ICS perhaps?

I have forwarded ports to other computers just fine and I used the same meathod for forwarding the ports to the server (I actualy used the same rules, just changed the IP address)

Logfile of Trend Micro HijackThis v2.0.0 (BETA)

Scan saved at 9:59:40 PM, on 2/24/2008

Platform: Windows 2003 SP2 (WinNT 5.02.3790)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Dfssvc.exe

C:\WINDOWS\System32\dns.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Program Files\Microsoft Firewall Client 2004\FwcAgent.exe

C:\WINDOWS\system32\inetsrv\inetinfo.exe

C:\WINDOWS\System32\ismserv.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

C:\WINDOWS\system32\ntfrs.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\System32\wins.exe

C:\WINDOWS\system32\tcpsvcs.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\WINDOWS\System32\svchost.exe

c:\windows\system32\inetsrv\w3wp.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\rdpclip.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe

C:\Program Files\Microsoft Firewall Client 2004\FwcMgmt.exe

C:\Program Files\Locate\Locate32.exe

C:\Program Files\Process Explorer\procexp.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\rdpclip.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ASUS WiFi-AP Solo\RtWLan.exe

C:\Program Files\Process Explorer\procexp.exe

C:\Program Files\Mozilla Firefox\firefox.exe

F:\install\SECURITY PROGRAMS\Hijack This\HiJackThis_v2.exe

C:\Documents and Settings\utorrent-dsa\Program Files\uTorrent\uTorrent.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://shdoclc.dll/hardUser.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://shdoclc.dll/hardUser.htm

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = res://shdoclc.dll/hardUser.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = gateway:8080

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')

O4 - S-1-5-21-3179034185-2823933552-853962609-500 Startup: Locate32 Autorun.lnk = ? (User 'Administrator')

O4 - S-1-5-21-3179034185-2823933552-853962609-500 User Startup: Locate32 Autorun.lnk = ? (User 'Administrator')

O4 - Global Startup: ASUS WiFi-AP Solo.lnk = ?

O4 - Global Startup: Microsoft Firewall Client Management.lnk = ?

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O15 - ESC Trusted Zone: http://*.windowsupdate.com

O15 - ESC Trusted Zone: http://*.windowsupdate.com (HKLM)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1202364664296

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = dspratt-associates.com

O17 - HKLM\System\CCS\Services\Tcpip\..\{EE133112-E073-4493-B09B-98C5DCBBE2AE}: NameServer = 127.0.0.1

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = dspratt-associates.com

O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = dspratt-associates.com

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe

O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--

End of file - 4957 bytes

Process PID CPU Description Company Name

System Idle Process 0 100.00

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 296 Windows NT Session Manager Microsoft Corporation

csrss.exe 344 Client Server Runtime Process Microsoft Corporation

winlogon.exe 368 Windows NT Logon Application Microsoft Corporation

services.exe 416 Services and Controller app Microsoft Corporation

svchost.exe 636 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 768 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 844 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 880 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 896 Generic Host Process for Win32 Services Microsoft Corporation

spoolsv.exe 1232 Spooler SubSystem App Microsoft Corporation

msdtc.exe 1260 MS DTCconsole program Microsoft Corporation

dfssvc.exe 1332 Windows NT Distributed File System Service Microsoft Corporation

dns.exe 1376 Domain Name System (DNS) Server Microsoft Corporation

svchost.exe 1432 Generic Host Process for Win32 Services Microsoft Corporation

Apache.exe 1476 Apache HTTP Server Apache Software Foundation

Apache.exe 2324 Apache HTTP Server Apache Software Foundation

FwcAgent.exe 1496 Microsoft Firewall Client Agent Microsoft ® Corporation

inetinfo.exe 1556 Internet Information Services Microsoft Corporation

ismserv.exe 1576 Windows NT Intersite Messaging Service Microsoft Corporation

nSvcLog.exe 1612 nSvcLog NVIDIA Corporation

ntfrs.exe 1648 File Replication Service Microsoft Corporation

nvsvc32.exe 1764 NVIDIA Driver Helper Service, Version 169.21 NVIDIA Corporation

svchost.exe 1808 Generic Host Process for Win32 Services Microsoft Corporation

wins.exe 1880 WINS SERVER Microsoft Corporation

tcpsvcs.exe 1904 TCP/IP Services Application Microsoft Corporation

nSvcIp.exe 1940 ActiveArmor Firewall IP Service NVIDIA Corporation

svchost.exe 1988 Generic Host Process for Win32 Services Microsoft Corporation

w3wp.exe 3828 IIS Worker Process Microsoft Corporation

svchost.exe 2504 Generic Host Process for Win32 Services Microsoft Corporation

alg.exe 2712 Application Layer Gateway Service Microsoft Corporation

lsass.exe 428 LSA Shell Microsoft Corporation

logon.scr 2972 Logon Screen Saver Microsoft Corporation

csrss.exe 3128 Client Server Runtime Process Microsoft Corporation

winlogon.exe 2156 Windows NT Logon Application Microsoft Corporation

rdpclip.exe 1128 RDP Clip Monitor Microsoft Corporation

explorer.exe 612 Windows Explorer Microsoft Corporation

RtWLan.exe 3808 RtWLan (ASUS) Application ASUSTek Computer Inc.

FwcMgmt.exe 3524 Microsoft Firewall Client Management Microsoft ® Corporation

procexp.exe 3572 Sysinternals Process Explorer Sysinternals

Process PID CPU Description Company Name

System Idle Process 0 64.06

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4 5.47

smss.exe 296 Windows NT Session Manager Microsoft Corporation

csrss.exe 344 Client Server Runtime Process Microsoft Corporation

winlogon.exe 368 Windows NT Logon Application Microsoft Corporation

services.exe 416 Services and Controller app Microsoft Corporation

svchost.exe 636 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 768 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 844 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 880 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 896 Generic Host Process for Win32 Services Microsoft Corporation

spoolsv.exe 1232 Spooler SubSystem App Microsoft Corporation

msdtc.exe 1260 MS DTCconsole program Microsoft Corporation

dfssvc.exe 1332 Windows NT Distributed File System Service Microsoft Corporation

dns.exe 1376 Domain Name System (DNS) Server Microsoft Corporation

svchost.exe 1432 Generic Host Process for Win32 Services Microsoft Corporation

Apache.exe 1476 Apache HTTP Server Apache Software Foundation

Apache.exe 2324 Apache HTTP Server Apache Software Foundation

FwcAgent.exe 1496 Microsoft Firewall Client Agent Microsoft ® Corporation

inetinfo.exe 1556 Internet Information Services Microsoft Corporation

ismserv.exe 1576 Windows NT Intersite Messaging Service Microsoft Corporation

nSvcLog.exe 1612 nSvcLog NVIDIA Corporation

ntfrs.exe 1648 File Replication Service Microsoft Corporation

nvsvc32.exe 1764 NVIDIA Driver Helper Service, Version 169.21 NVIDIA Corporation

svchost.exe 1808 Generic Host Process for Win32 Services Microsoft Corporation

wins.exe 1880 WINS SERVER Microsoft Corporation

tcpsvcs.exe 1904 TCP/IP Services Application Microsoft Corporation

nSvcIp.exe 1940 ActiveArmor Firewall IP Service NVIDIA Corporation

svchost.exe 1988 Generic Host Process for Win32 Services Microsoft Corporation

w3wp.exe 3828 IIS Worker Process Microsoft Corporation

svchost.exe 2504 Generic Host Process for Win32 Services Microsoft Corporation

alg.exe 2712 Application Layer Gateway Service Microsoft Corporation

lsass.exe 428 LSA Shell Microsoft Corporation

logon.scr 2972 Logon Screen Saver Microsoft Corporation

csrss.exe 2476 Client Server Runtime Process Microsoft Corporation

winlogon.exe 2516 Windows NT Logon Application Microsoft Corporation

rdpclip.exe 3688 RDP Clip Monitor Microsoft Corporation

csrss.exe 960 Client Server Runtime Process Microsoft Corporation

winlogon.exe 2628 Windows NT Logon Application Microsoft Corporation

rdpclip.exe 3256 RDP Clip Monitor Microsoft Corporation

userinit.exe 3616 Userinit Logon Application Microsoft Corporation

explorer.exe 3496 Windows Explorer Microsoft Corporation

RtWLan.exe 2952 RtWLan (ASUS) Application ASUSTek Computer Inc.

FwcMgmt.exe 1864 Microsoft Firewall Client Management Microsoft ® Corporation

Locate32.exe 2536 Locate32

procexp.exe 612 Sysinternals Process Explorer Sysinternals

explorer.exe 2144 Windows Explorer Microsoft Corporation

RtWLan.exe 1688 RtWLan (ASUS) Application ASUSTek Computer Inc.

FwcMgmt.exe 3360 Microsoft Firewall Client Management Microsoft ® Corporation

uTorrent.exe 2236 29.69

procexp.exe 3588 0.78 Sysinternals Process Explorer Sysinternals

Process: uTorrent.exe Pid: 2236

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.02.3790.3959

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.02.3790.3959

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.02.3790.3959

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2283.0000

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.4720.3959

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.3790.3959

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.3790.3959

COMRes.dll COM+ Resources Microsoft Corporation 2001.12.4720.3959

credui.dll Credential Manager User Interface Microsoft Corporation 5.02.3790.3959

cryptdll.dll Cryptography Manager Microsoft Corporation 5.02.3790.3959

ctype.nls

DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.02.3790.3959

FwcWsp.dll Microsoft Firewall Client Windows Sockets 2 Service Provider Microsoft ® Corporation 4.00.2161.0050

GDI32.dll GDI Client DLL Microsoft Corporation 5.02.3790.4033

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.02.3790.3959

iphlpapi.dll IP Helper API Microsoft Corporation 5.02.3790.3959

kerberos.dll Kerberos Security Package Microsoft Corporation 5.02.3790.3959

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.02.3790.4062

locale.nls

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.02.3790.3959

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.02.3790.3959

msv1_0.dll Microsoft Authentication Package v1.0 Microsoft Corporation 5.02.3790.3959

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.3790.3959

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.02.3790.3959

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.02.3790.3959

ntdll.dll NT Layer DLL Microsoft Corporation 5.02.3790.3959

ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.02.3790.3959

oleaut32.dll Microsoft Corporation 5.02.3790.4202

PSAPI.DLL Process Status Helper Microsoft Corporation 5.02.3790.3959

R00000000000a.clb

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.02.3790.3959

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.02.3790.4115

rtutils.dll Routing Utilities Microsoft Corporation 5.02.3790.3959

SAMLIB.dll SAM Library DLL Microsoft Corporation 5.02.3790.3959

Secur32.dll Security Support Provider Interface Microsoft Corporation 5.02.3790.3959

security.dll Security Support Provider Interface Microsoft Corporation 5.02.3790.0000

SETUPAPI.dll Windows Setup API Microsoft Corporation 5.02.3790.3959

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.3790.4184

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.3790.3959

sortkey.nls

sorttbls.nls

unicode.nls

USER32.dll Windows USER API Client DLL Microsoft Corporation 5.02.3790.4033

uTorrent.exe

UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.3790.3959

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.02.3790.3959

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.02.3790.3959

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.02.3790.3959

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.02.3790.3959

WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.02.3790.3959

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.02.3790.3959

Link to comment
Share on other sites

With those NVIDIA processes I was expecting Nvidia firewall ><

The DLL list shows nothing out of the ordinary until you hit FwcWsp.dll Microsoft Firewall Client Windows Sockets 2 Service Provider Microsoft ® Corporation 4.00.2161.0050... Are you sure this is 2004's firewall service? Also do you know why are there multiple instances running?

nSvcIp.exe 1940 ActiveArmor Firewall IP Service NVIDIA Corporation <-- Is this analogous to the Forceware Firewall which causes havoc elsewhere? Why do you need it AND the MS 2004 one? That's all I can comment on. I haven't touched 2K3 since beta2, and as such don't recognize the remainder of MS processes to say if something doesn't belong :/ I do have a feeling some part of this hook is the reason for the unresponsiveness... perhaps the hooked program is trying to resolve, or map all connections? Try turning it off.

Link to comment
Share on other sites

;) Learn something new every day. Good good. I sure hope that removes the extra problems... if not, I'm outta ideas.

Here's a tip to look for... since it says armorip, and nvidia, it says right in the process list "C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe" :/ Like I said I'd see if you can add utorrent.exe to the exceptions for the tunneler you use, and be sure that nvidia program isn't mucking around with programs.. only traffic :(

Link to comment
Share on other sites

No, it eats nearly no CPU when being responsive or unresponsive. It does this with any amount of torrents (including zero) and any amount of connectivity (including being completely blocked outbound as well as inbound by the firewall).

Azureus is amazing. I had no idea.

Link to comment
Share on other sites

This is a high end PC. 2GB ram, Nvidia 7900, AMD 6400+ (dual core 3.21 GHz) with the Asus M2N32-SLI Deluxe Motherboard. I was very surprised to find that disabling DHT seems to solve this problem. What is the problem with DHT on windows server 2003?

Microsoft Firewall Client is necessary for an internet connection (and works just fine with torrent programs).

Link to comment
Share on other sites

This is a high end PC. 2GB ram, Nvidia 7900, AMD 6400+ (dual core 3.21 GHz) with the Asus M2N32-SLI Deluxe Motherboard. I was very surprised to find that disabling DHT seems to solve this problem. What is the problem with DHT on windows server 2003?

Microsoft Firewall Client is necessary for an internet connection (and works just fine with torrent programs).

From the dump, I can see that fwcwsp.dll is blocking in the UDP sendto call, which we set up as non-blocking. That would halt the program when it does not expect, causing the unresponsive behaviour you're seeing.

In fact, just googling that:

http://www.tech-archive.net/Archive/ISA/microsoft.public.isa.clients/2005-11/msg00003.html

Ludvig == ludde

So, this seems to be a bug in Microsoft Firewall Client.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...