utorrent 1.7.7 keeps crashing

[alwin007]

Hi I am using 1.7.7 stable version and lately its been crashing pretty often, I leave my computer on for downloading and when I come back I see a msg saying that the Utorrent has crashed and a log has been created in (location) and gives three options like send the infomation to developer .. relaunch the application... Ah i am wondering whats happening. Because I been using 1.6 versions and none crashed ever. is there Any bug ? any fix? Please help.

If u need the DMP file please let me know how to open it.. ( I am not sure which application has to be used to view the DMp file)

Thanks a lot

[Ultima]

a) get HijackThis from trendsecure.com, run it, view the log, and post the contents here

get Process Explorer from sysinternals.com, run it, Ctrl+D (to show the lower DLL pane), select the µTorrent process from the list, Ctrl+S (and save the list somewhere you'll find easily -- like the Desktop), then post the contents of the saved process list in the .txt file here

Also, try reconfiguring µTorrent from scratch (remove settings.dat and settings.dat.old from %appdata%\uTorrent). Dumps can be uploaded to mediafire.com and links posted here.

[alwin007]

Hi,

The links to the Dumps are :

http://www.mediafire.com/?gt2zmhkx9yf

http://www.mediafire.com/?nd099bet5gz

--------------------------------------------------------------------------

HIJACKTHIS results :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 7:30:34 PM, on 3/31/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\hkcmd.exe

C:\Program Files\PowerISO\PWRISOVM.EXE

C:\Program Files\SiteAdvisor\6253\SiteAdv.exe

C:\Program Files\McAfee.com\Agent\mcagent.exe

C:\WINDOWS\system32\ctfmon.exe

C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

c:\program files\common files\mcafee\mna\mcnasvc.exe

c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe

C:\Program Files\McAfee\MPF\MPFSrv.exe

C:\Program Files\McAfee\MSK\MskSrver.exe

C:\Program Files\SiteAdvisor\6253\SAService.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Internet Download Manager\IEMonitor.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe

C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe

C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\mIRC\mirc.exe

C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe

C:\Program Files\Windows Media Player\wmplayer.exe

C:\Program Files\Internet Download Manager\IDMan.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll

O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll

O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll

O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE

O4 - HKLM\..\Run: [siteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe

O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide

O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey

O4 - HKCU\..\Run: [iDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm

O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm

O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm

O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1205717606000

O17 - HKLM\System\CCS\Services\Tcpip\..\{81494131-AB1A-47AB-833F-6BE80E38205B}: NameServer = 125.22.47.125,202.56.250.5

O23 - Service: McAfee Application Installer Cleanup (0101131206614897) (0101131206614897mcinstcleanup) - McAfee, Inc. - C:\WINDOWS\TEMP\010113~1.EXE

O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe

O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe

O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe

O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe

O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe

O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe

O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe

O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe

--

End of file - 6444 bytes

-----------------------------------------------------------------------------

Results from PROCESS EXPLORER are :

Process PID CPU Description Company Name

System Idle Process 0 74.24

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 644 Windows NT Session Manager Microsoft Corporation

csrss.exe 708 Client Server Runtime Process Microsoft Corporation

winlogon.exe 732 Windows NT Logon Application Microsoft Corporation

services.exe 776 3.03 Services and Controller app Microsoft Corporation

svchost.exe 944 Generic Host Process for Win32 Services Microsoft Corporation

IDMan.exe 2372 Internet Download Manager (IDM) Tonec Inc.

WinRAR.exe 1756

svchost.exe 1020 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1104 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1156 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1304 Generic Host Process for Win32 Services Microsoft Corporation

spoolsv.exe 1584 Spooler SubSystem App Microsoft Corporation

mcmscsvc.exe 472 McAfee Services McAfee, Inc.

McNASvc.exe 528 McAfee Network Agent McAfee, Inc.

McProxy.exe 592 McAfee Proxy Service Module McAfee, Inc.

Mcshield.exe 704 On-Access Scanner service McAfee, Inc.

MpfSrv.exe 904 McAfee Personal Firewall Service McAfee, Inc.

msksrver.exe 1204 McAfee Anti-Spam Server McAfee, Inc.

SAService.exe 1360 SiteAdvisor McAfee, Inc.

svchost.exe 1268 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1740 Generic Host Process for Win32 Services Microsoft Corporation

alg.exe 3080 Application Layer Gateway Service Microsoft Corporation

mcsysmon.exe 2876 McAfee SystemGuards Service McAfee, Inc.

lsass.exe 788 LSA Shell (Export Version) Microsoft Corporation

explorer.exe 1556 12.12 Windows Explorer Microsoft Corporation

hkcmd.exe 1788 hkcmd Module Intel Corporation

PWRISOVM.EXE 1796 PowerISO Virtual Drive Manager PowerISO Computing, Inc.

SiteAdv.exe 1808 SiteAdvisor McAfee, Inc.

mcagent.exe 1840 McAfee Integrated Security Platform McAfee, Inc.

ctfmon.exe 1860 CTF Loader Microsoft Corporation

SpeedUpMyPC.exe 2544 SpeedUpMyPC Uniblue Software

iexplore.exe 3400 7.58 Internet Explorer Microsoft Corporation

YahooMessenger.exe 1332 Yahoo! Messenger Yahoo! Inc.

firefox.exe 3792 Firefox Mozilla Corporation

uTorrent.exe 1976

mirc.exe 2552 mIRC mIRC Co. Ltd.

wmplayer.exe 3800 1.52 Windows Media Player Microsoft Corporation

procexp.exe 1656 1.52 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

IEMonitor.exe 3928 Internet Download Manager agent for click monitoring in IE-based browsers Tonec Inc.

mplayerc.exe 1984 Media Player Classic Gabest

Process: uTorrent.exe Pid: 1976

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.2180

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.2180

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.2180

appHelp.dll Application Compatibility Client Library Microsoft Corporation 5.01.2600.2180

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0000

browseui.dll Shell Browser UI Library Microsoft Corporation 6.00.2900.2995

CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0308

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.2180

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.2900.2180

COMRes.dll Microsoft Corporation 2001.12.4414.0258

CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.2600.2180

CRYPTUI.dll Microsoft Trust UI Provider Microsoft Corporation 5.131.2600.2180

ctype.nls

DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.01.2600.2938

GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.2180

idle.dll Idle Module Yahoo! Inc. 1.00.0000.0002

idmmkb.dll Internet Download Manager module Tonec Inc. 4.00.0000.0001

ieframe.dll Internet Explorer Microsoft Corporation 7.00.6000.16608

iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.00.6000.16608

IMAGEHLP.dll Windows NT Image Helper Microsoft Corporation 5.01.2600.2180

IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation 5.01.2600.2180

Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.2912

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.3119

locale.nls

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.2180

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.01.2600.2180

MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.2180

msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.01.2600.2180

MSVCR71.dll Microsoft® C Runtime Library Microsoft Corporation 7.10.3052.0004

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.01.2600.2180

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.2976

Normaliz.dll Unicode Normalization DLL Microsoft Corporation 6.00.5441.0000

ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180

ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2726

oleaut32.dll Microsoft Corporation 5.01.2600.3266

PSAPI.DLL Process Status Helper Microsoft Corporation 5.01.2600.2180

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.2938

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.3173

rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.2180

saHook.dll SiteAdvisor McAfee, Inc. 2.06.0000.6253

SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.2180

Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.2180

SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.2180

SHDOCVW.dll Shell Doc Object and Control Library Microsoft Corporation 6.00.2900.2987

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3241

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.2995

sortkey.nls

sorttbls.nls

unicode.nls

urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.00.6000.16608

USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.3099

uTorrent.exe

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.2180

WININET.dll Internet Extensions for Win32 Microsoft Corporation 7.00.6000.16608

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.01.2600.2180

WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 5.131.2600.2180

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.2180

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.2180

WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.2180

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.2180

Like you said i did delete the settings.Dat and Settings.Dat.old and reconfigured utorrent from scratch.

[jewelisheaven]

Can you try removing O4 - HKLM\..\Run: [siteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe :/ Site Advisor is from Mcafee but doesn't install itself under the root :?

[alwin007]

ok i removed that. Well i have to wait and see if it works cos it crashes like once in 2 or 3 days

[jewelisheaven]

Hmm, k. Well from the initial description it sounded like it was crashing more often than that.

idle.dll Idle Module Yahoo! Inc. 1.00.0000.0002

idmmkb.dll Internet Download Manager module Tonec Inc. 4.00.0000.0001

are also injected, but I don't believe you'd need to uninstall them. IDM can just be closed, and it looks like the Yahoo Toolbar is responsible for the idle hook. If the Yahoo toolbar is doing any sort of "scanning" for antivirus, spyware, or malware however ... it should be disabled.

[alwin007]

Well yahoo toolbar is disabled.

[jewelisheaven]

if it's disabled and the idle.dll is still in there you can close the hook yourself with process explorer. You see the red "X" in the toolbar? Click utorrent.exe up top, click idle.dll in the DLL pane at the bottom, click the red x and process explorer closes the hook from idle.dll into utorrent.exe

[jonax00]

well, what do u know..... alwin007 & i have the exact same problem! not to mention the exact same situation 'bout leaving our computers & coming back... i've also disabled the yahoo toolbar, i dont have mcafee... i've also done what ultima advised earlier... so i'm waiting for the next posts...

thanx in advance!

[alwin007]

It crashed again today. i reinstalled utorrent.. and removed Mcafee site advisor.

[crhj19]

Me three with the same problem. WFIW, I've never had Yahoo! toolbar or anything McAfee on this box. I do have NAV '04 and Google Desktop. The problem only started after I installed the 1.7.7 update and it is random-ish. I've only seen it after being away... it has never popped up when I've been at the keys.

[Firon]

Try turning off UPnP.

[crhj19]

UPnP service is not running on my box. Already wasn't, that is.

I got a wild hair & temporarily excluded my Torrend Download and Torrent Completed directories from NAV Auto-Protect scanning. I doubt it will help, but it is worth a try.

[Firon]

I meant in µTorrent... SSDP isn't the only way to do UPnP.

[AlicanC]

I have the same problem. It really annoys me because I leave uTorrent open when I am sleeping and when I wake up I see that it crashed. I close everything including Kaspersky, Daemon Tools, Pidgin, iTunes and it's services, Nokia PC Suite, Xfire, FRAPS, WampServer, RocketDock, Launchy, ...

I will try turning off UPnP today.

You can't find my old dumps here: http://alicanc.890m.com/utorrent/

[crhj19]

Ok, I've turned off UPnP in uTorrent, too.

Not surprisingly, the directory exclusion thing didn't help. (It crashed again this morning.)

<fixed typo>

[Firon]

Try 1.8 then.

[elm4r]

Yes I have the same problem 2 nights in the row... No Mcafee, Yahoo or anything like that. The only two things I can think of, was Windows update, and recently installed ICQ, but with out any add ons, shall I go back to 1.6, since I don't know where 1.8 is?

[Firon]

Check the Announcements subforum.

[jewelisheaven]

It's never recommended to downgrade when you have a problem.

I don't see your log files anywhere...

1.8 beta can be found in the Announcements forum and it's recommended to run it self-contained if you're unsure you want to run beta software.

[AlicanC]

It would be better if you could say "We fixed that in 1.8." instead of "Try 1.8. It will work maybe.". I hope it fixes my problem.

[jewelisheaven]

If they knew what the problem was from the dumps they usually say that

The point is that since they don't have your system, they're asking for your assistance in making sure the problem is fixed.

[AlicanC]

Well, it could display a call stack so I could solve the problem easily without spending hours with IDA.

[Firon]

Look at the dump files with windbg.

[AlicanC]

I will not, because my problem is solved. (I think.) I will look at the change logs to see what was the change that fixed by problem.