groundedsky Posted March 9, 2008 Report Share Posted March 9, 2008 Hello yee gods of code!I have greatly enjoyed uTorrent for a couple of years. Never had a problem before that wasn't due to my own inability to set things up correctly. But this time, I've hit a wall and need help.uTorrent v1.7.6 and v1.7.7 have been consistently crashing on me. Usually, it take an hour or so of running when I am not using my pc for anything else. It reboots my system, and once logged back in, all downloading files need re-checking. I have consistently been running AVG, Zone Alarm and Spybot. Only in the past two weeks have I added PC Tools (Threat Fire etc) to be sure its not virus/malware related.System info reports as requested are below except dumps - for some reason I have no dump files on my system (full hard drive search) except for windows\minidump\mini####.dmp and a Dr Watson user.dmp. Must have set an auto-cleanup somewhere that U'm not aware of anymore! Any assistance greatly appreciated - as currently, I can't download without also using the machine for something else (which makes downloading over night very difficult!Thank you in advance for your help! I'm looking forward to returning to uTorrent's usual stability! Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:50:25 AM, on 10/03/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\ThreatFire\TFService.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\ThreatFire\TFTray.exeC:\Program Files\Desktop Sidebar\dsidebar.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\Program Files\Grisoft\AVG Free\avgcc.exeC:\Program Files\Microsoft Office\Office10\OUTLOOK.EXEC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Microsoft Office\Office10\WINWORD.EXEC:\Program Files\uTorrent\uTorrent.exeC:\Documents and Settings\Owner\Desktop\HiJackThis.exeC:\WINDOWS\system32\wbem\wmiprvse.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.iinet.net.au/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dllO2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (file missing)O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (file missing)O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXEO4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXEO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exeO4 - HKLM\..\Run: [PCTAVApp] "C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCANO4 - HKCU\..\Run: [sTYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -HideO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [sIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.htmlO8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.htmlO8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dllO9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLLO9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missingO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1203034658281O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1203042278421O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} - https://192.168.0.1/Remote/msrdp.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLLO23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeO23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exeO23 - Service: REW - Sysinternals - www.sysinternals.com - C:\DOCUME~1\Owner\LOCALS~1\Temp\REW.exeO23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exeO23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exeO23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe--End of file - 9563 bytesProcess PID CPU Description Company NameSystem Idle Process 0 88.06 Interrupts n/a Hardware Interrupts DPCs n/a Deferred Procedure Calls System 4 smss.exe 856 Windows NT Session Manager Microsoft Corporation csrss.exe 936 Client Server Runtime Process Microsoft Corporation winlogon.exe 960 Windows NT Logon Application Microsoft Corporation services.exe 1004 2.99 Services and Controller app Microsoft Corporation svchost.exe 1184 Generic Host Process for Win32 Services Microsoft Corporation WINWORD.EXE 1872 Microsoft Word Microsoft Corporation svchost.exe 1280 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1448 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1532 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1716 Generic Host Process for Win32 Services Microsoft Corporation vsmon.exe 1732 4.48 TrueVector Service Zone Labs, LLC spoolsv.exe 752 Spooler SubSystem App Microsoft Corporation guard.exe 1848 AVG Anti-Spyware guard Anti-Malware Development a.s. avgupsvc.exe 1936 AVG Update Service GRISOFT, s.r.o. nvsvc32.exe 136 NVIDIA Driver Helper Service, Version 72.50 NVIDIA Corporation svchost.exe 524 Generic Host Process for Win32 Services Microsoft Corporation TFService.exe 572 PC Tools ThreatFire Service PC Tools avgamsvr.exe 3312 AVG Alert Manager GRISOFT, s.r.o. lsass.exe 1016 LSA Shell (Export Version) Microsoft Corporationexplorer.exe 2044 Windows Explorer Microsoft Corporation zlclient.exe 3248 ZoneAlarm Client Zone Labs, LLC ctfmon.exe 3408 CTF Loader Microsoft Corporation TFTray.exe 1940 PC Tools ThreatFire Tray App PC Tools dsidebar.exe 2500 Desktop Sidebar Idea2 OUTLOOK.EXE 424 Microsoft Outlook Microsoft Corporation firefox.exe 1104 1.49 Firefox Mozilla Corporation procexp.exe 2504 1.49 Sysinternals Process Explorer Sysinternals - www.sysinternals.com uTorrent.exe 3972 1.49 avgcc.exe 1364 AVG Control Center GRISOFT, s.r.o.Process: uTorrent.exe Pid: 3972Name Description Company Name VersionACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.2180adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.2180ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.2180ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0000c_936.nls CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0308COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.2982comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.2900.2180COMRes.dll Microsoft Corporation 2001.12.4414.0258ctype.nls DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.01.2600.2938GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.2180IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation 5.01.2600.2180Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.2912kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.3119locale.nls MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.2180MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.2180msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.01.2600.2180msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.01.2600.2180NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.2976ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2726OLEAUT32.dll Microsoft Corporation 5.01.2600.3266PCTLsp.dll PC Tools Layered Service Provider PC Tools Research Pty Ltd. 1.00.0088.0000rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.2938RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.3173rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.2180SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.2180SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.2180SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3241SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.2995sortkey.nls sorttbls.nls TFWAH.dll File Description PC Tools 3.08.0002.0015unicode.nls USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.3099uTorrent.exe uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.2180winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.01.2600.2180WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.2180WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.2180WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.2180wshbth.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.2180wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.2180 Link to comment Share on other sites More sharing options...
Ultima Posted March 9, 2008 Report Share Posted March 9, 2008 PC Tools... Try uninstalling it. Their softwares have been known to cause problems with µTorrent. Link to comment Share on other sites More sharing options...
groundedsky Posted March 16, 2008 Author Report Share Posted March 16, 2008 Thanks Ultima.As noted, I installed it PC Tools only after uTorrent started crashing - part of my troubleshooting. Got rid of it, cleaned it out of the registry etc... still had the problem. So tried a few other things. My sense is that I downloaded Windows updates and a uTorrent update around the same time. (rarely do windows updates, so had a backlog). Without uTorrent running, leaving the pc on, not using it, without auto hard disk shut down or hibernation = no crashes after 3+ hours. With uTorrent on, crashes within 2 hours. So strange idea, tried it and it worked: turned off the auto screen turn off as well, left it running 8+ hours no crash.So, conclusion: something in the power saving, auto-turn-off for the screen when uTorrent is running is mysteriously - and I know, it makes NO sense to me at all - is crashing my system into a reboot.So, happy with this work around for now... but gotta say, would love to hear if anyone can identify the problem. EG I may not be addressing the problem just a symptom here... I suspect something weird in the windows downloads... Link to comment Share on other sites More sharing options...
jewelisheaven Posted March 16, 2008 Report Share Posted March 16, 2008 A better procedure for that would be to stop all programs but uT and do your power saving. I'm not saying 1.7 isn't broken in places-- one can only imagine the leaks fixed in 1.8, but I'd make sure it's not pc tools, that addon threatfire, zone alarm, or this.... fake sysinternals proggie?O23 - Service: REW - Sysinternals - www.sysinternals.com - C:\DOCUME~1\Owner\LOCALS~1\Temp\REW.exe <-- You don't happen to know what it is do you? Nothing on the site is called REW... I downloaded the whole 9 meg "suite" :/ Link to comment Share on other sites More sharing options...
groundedsky Posted March 17, 2008 Author Report Share Posted March 17, 2008 Thanks jewelisheaven.Hadn't spotted the rew.exe before. Searched, not found. cleared all temp etc. Suspect it was part of a running process at the time or part of setup for the host of programs in the mega suite;) Most which are waaaaay too far into coder land for my competence, or lack thereof;) ZA hasn't changed except for signature updates for over a year... got rid of the other PCtools stuff (threatfire included). Had also tried shutting down all programs and processes that weren't core and running uTorrent - still crashed. Although what I could figure out to close down v's a coder, well, not the best quality guarantee on the approach right there. Still up for any other suggestions! Link to comment Share on other sites More sharing options...
jewelisheaven Posted March 17, 2008 Report Share Posted March 17, 2008 After "getting rid of" or uninstalling be sure that Process Explorer doesn't show those extra DLLs inside uTorrent.exeIf so, it's still in there and COULD be causing crashing As far as the other steps, nice procedure. For other ideas I'm sorry I don't know heh. So to be clear, if you enable "disable standby with active torrents" in Ctrl-P -> Downloads , your machine does not go into standby and the computer is happy? Link to comment Share on other sites More sharing options...
psishock Posted April 5, 2008 Report Share Posted April 5, 2008 Hello,i had a similar (same?) problem with crashing and as u said, nothing helped, no matter what process i wiped out.Recently i gave the new beta (utorrent-1.8-beta-9363) a try. The client is up for several hours for now, it seems the problem is magicaly solved in the new version.If you haven't solved your problem yet, this could be a nice alternative to try. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.