Another freezing PC...

[Babdef]

PC locks up every once in a while when using uTorrent 1.8.1

I run uTorrent on a Windows 2003 virtual machine.

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:13:11, on 15-10-2008

Platform: Windows 2003 SP2 (WinNT 5.02.3790)

MSIE: Internet Explorer v6.00 SP2 (6.00.3790.3959)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\dllhost.exe

C:\Program Files\VMware\VMware Tools\VMwareService.exe

C:\Program Files\VMware\VMware Tools\vmacthlp.exe

D:\TwonkyMedia\TwonkyMedia.exe

D:\TwonkyMedia\TwonkyMediaServer.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\rdpclip.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\VMware\VMware Tools\VMwareTray.exe

C:\Program Files\VMware\VMware Tools\VMwareUser.exe

D:\Cobian Backup 9\cbInterface.exe

D:\SHOUTcast\sc_serv.exe

d:\uTorrent\uTorrent.exe

D:\Total Commander\TOTALCMD.EXE

E:\Install\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://shdoclc.dll/hardAdmin.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://shdoclc.dll/hardAdmin.htm

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://update.microsoft.com/

O4 - HKLM\..\Run: [VMware Tools] C:\Program Files\VMware\VMware Tools\VMwareTray.exe

O4 - HKLM\..\Run: [VMware User Process] C:\Program Files\VMware\VMware Tools\VMwareUser.exe

O4 - HKLM\..\Run: [WinampAgent] D:\Winamp\winampa.exe

O4 - HKLM\..\Run: [Cobian Backup 9 interface] "D:\Cobian Backup 9\cbInterface.exe" -service

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')

O4 - Startup: SHOUTcast DNAS (GUI).lnk = D:\SHOUTcast\sc_serv.exe

O4 - Global Startup: Bginfo.exe.lnk = C:\Program Files\Bginfo\Bginfo.exe

O15 - ESC Trusted Zone: http://*.windowsupdate.com

O15 - ESC Trusted Zone: http://*.windowsupdate.com (HKLM)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1223583282340

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = babdef.com

O17 - HKLM\System\CCS\Services\Tcpip\..\{E2FE8559-ECC3-49FE-9A6B-F65D10F72D7C}: NameServer = 10.100.1.101

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = babdef.com

O23 - Service: Cobian Backup 9 service (CobianBackupAmanita) - Luis Cobian - D:\Cobian Backup 9\cbService.exe

O23 - Service: TwonkyMedia - PacketVideo - D:\TwonkyMedia\TwonkyMedia.exe

O23 - Service: uTorrent - Unknown owner - c:\Program Files\Windows Resource Kits\Tools\srvany.exe

O23 - Service: VMware Tools Service (VMTools) - VMware, Inc. - C:\Program Files\VMware\VMware Tools\VMwareService.exe

O23 - Service: VMware Physical Disk Helper Service - Unknown owner - C:\Program Files\VMware\VMware Tools\vmacthlp.exe

--

End of file - 3729 bytes

Process PID CPU Description Company Name Private Bytes

cbService.exe 5844 Cobian Backup Amanita Service Luis Cobian 10.560 K

rdpclip.exe 6000 RDP Clip Monitor Microsoft Corporation 972 K

explorer.exe 5988 Windows Explorer Microsoft Corporation 11.396 K

VMwareTray.exe 5360 VMware Tools tray application VMware, Inc. 916 K

VMwareUser.exe 6100 VMware Tools Service VMware, Inc. 1.416 K

cbInterface.exe 6008 Cobian Backup Amanita Interface Luis Cobian 6.332 K

sc_serv.exe 2328 3.408 K

uTorrent.exe 2348 µTorrent BitTorrent, Inc. 6.356 K

TOTALCMD.EXE 988 Total Commander 32 bit international version, file manager replacement for Windows C. Ghisler & Co. 5.240 K

procexp.exe 4580 6 Sysinternals Process Explorer Sysinternals - www.sysinternals.com 7.320 K

Process: uTorrent.exe Pid: 2348

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.02.3790.3959

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.02.3790.3959

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.02.3790.3959

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2283.0000

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.4720.3959

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.3790.3959

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.3790.3959

COMRes.dll COM+ Resources Microsoft Corporation 2001.12.4720.3959

credui.dll Credential Manager User Interface Microsoft Corporation 5.02.3790.3959

ctype.nls

DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.02.3790.4318

GDI32.dll GDI Client DLL Microsoft Corporation 5.02.3790.4237

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.02.3790.3959

Iphlpapi.dll IP Helper API Microsoft Corporation 5.02.3790.3959

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.02.3790.4062

locale.nls

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.02.3790.3959

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.3790.3959

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.02.3790.4318

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.02.3790.3959

ntdll.dll NT Layer DLL Microsoft Corporation 5.02.3790.3959

ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.02.3790.3959

OLEAUT32.dll Microsoft Corporation 5.02.3790.4202

PSAPI.DLL Process Status Helper Microsoft Corporation 5.02.3790.3959

R00000000000c.clb

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.02.3790.3959

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.02.3790.4115

rtutils.dll Routing Utilities Microsoft Corporation 5.02.3790.3959

SAMLIB.dll SAM Library DLL Microsoft Corporation 5.02.3790.3959

Secur32.dll Security Support Provider Interface Microsoft Corporation 5.02.3790.3959

SETUPAPI.dll Windows Setup API Microsoft Corporation 5.02.3790.3959

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.3790.4184

shfolder.dll Shell Folder Service Microsoft Corporation 6.00.3790.3959

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.3790.3959

sortkey.nls

sorttbls.nls

unicode.nls

USER32.dll Windows USER API Client DLL Microsoft Corporation 5.02.3790.4033

uTorrent.exe µTorrent BitTorrent, Inc. 1.08.0000.11813

UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.3790.3959

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.02.3790.3959

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.02.3790.3959

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.02.3790.3959

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.02.3790.3959

WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.02.3790.3959

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.02.3790.3959

[thelittlefire]

What does Cobian backup do? Is it scanning/defragmenting/indexing at automated times?

You're also running an old uTorrent version. Check for updates and you will get the 1.8.1 executable or download it manually from http://utorrent.com/download.php

[Babdef]

Installed the latest version of utorrent but still have lock-ups.

Cobian is a backup program, it is scheduled to make backups, it doesn't do anything else in the background.

[Firon]

VMWare's networking stack may not be that robust, so you might need to treat it like a crummy router and drop down connections / disable DHT.