Kentavr Posted November 5, 2008 Report Share Posted November 5, 2008 uTorrent v1.8.1 work on server 24x7 and sometimes crashes. This cannot be reproduced. This occurs, when on the server there is no other activity whatever. I periodically check his work and sometimes see error message.Here is dumps:http://www.mediafire.com/?sharekey=cf9b4f5983a17fe8ab1eab3e9fa335ca39c181032c0bfb28HijackThis logLogfile of Trend Micro HijackThis v2.0.2Scan saved at 21:58:27, on 05.11.2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\svchost.exeC:\Program Files\Firebird\bin\fbserver.exeC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\Program Files\Jetico Personal Firewall\jpfsrv.exeC:\Program Files\UltraVNC\WinVNC.exeC:\Program Files\Jetico Personal Firewall\jpf.exeC:\Program Files\WinFast\WFDTV\DTVSchdl.exeC:\Program Files\Utils\RMClock\RMClock.exeC:\Program Files\UltraVNC\winvnc.exeC:\Program Files\Internet\Proxomitron\Proxomitron.exeC:\Program Files\BWMeter\BWMeter.exeC:\Program Files\uTorrent\uTorrent.exeC:\Program Files\WinCmd\TOTALCMD.EXEc:\Program Files\Utils\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yandex.ru/O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file)O4 - HKLM\..\Run: [JeticoPFStartup] "C:\Program Files\Jetico Personal Firewall\jpf.exe"O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exeO4 - HKCU\..\Run: [RMClock] "C:\Program Files\Utils\RMClock\RMClock.exe"O4 - HKCU\..\Run: [UltraVNC Server] C:\Program Files\UltraVNC\winvnc.exeO4 - HKCU\..\Run: [Proxomitron] C:\Program Files\Internet\Proxomitron\Proxomitron.exeO4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"O4 - Startup: BWMeter.lnk = C:\Program Files\BWMeter\BWMeter.exeO8 - Extra context menu item: Ǡ꠷಼ ⱥ ﰨ ﮬ FlashGet - C:\Program Files\Internet\FlashGet\jc_all.htmO8 - Extra context menu item: Ǡ꠷಼ ﰨ ﮬ FlashGet - C:\Program Files\Internet\FlashGet\jc_link.htmO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO17 - HKLM\System\CCS\Services\Tcpip\..\{9D197339-D1D1-46DC-B1D5-B58866EA42E2}: NameServer = 192.168.1.1O17 - HKLM\System\CCS\Services\Tcpip\..\{DB5153EA-FD8F-45C7-922E-76EED8D23CF1}: NameServer = 195.42.162.50,213.140.228.252O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\bin\fbserver.exeO23 - Service: Jetico Personal Firewall server - Jetico, Inc. - C:\Program Files\Jetico Personal Firewall\jpfsrv.exeO23 - Service: uvnc_service - UltraVNC - C:\Program Files\UltraVNC\WinVNC.exe--End of file - 2770 bytesProcessExplorer log:Process PID Priority CPU History CPU CPU Time Working Set Peak Working Set Threads Handles Context Switches Methods Jitted % Time in JIT Classes Loaded Total Classes Loaded Assemblies Total Assemblies Heap Bytes % Time in GC Allocated Bytes/s Gen 0 Collections Gen 1 Collections Gen 2 Collections Runtime Checks ContentionsBWMeter.exe 744 8 1.53 0:21:52.562 3 744 K 3 756 K 7 83 15 284 280 csrss.exe 964 13 0:00:02.015 3 576 K 5 872 K 10 304 13 454 984 DPCs n/a 0 0:16:17.375 0 K 0 K 0 0 58 116 087 DTVSchdl.exe 676 8 0:00:00.031 1 580 K 1 580 K 1 17 273 explorer.exe 1600 8 0:00:37.906 16 672 K 16 676 K 11 323 2 048 215 fbserver.exe 1868 8 0:00:00.187 3 304 K 3 304 K 6 81 2 172 845 inetinfo.exe 1952 8 0.76 0:03:24.656 7 240 K 7 492 K 16 256 50 426 Interrupts n/a 0 0:03:25.921 0 K 0 K 0 0 279 535 404 jpf.exe 668 8 0:00:26.046 7 896 K 7 904 K 7 156 4 916 305 jpfsrv.exe 1968 8 0:00:04.250 5 544 K 6 628 K 11 146 10 309 056 lsass.exe 1044 9 0:00:03.828 1 212 K 5 404 K 18 320 942 707 procexp.exe 1664 13 3.82 0:00:01.421 15 380 K 15 692 K 7 238 19 732 Proxomitron.exe 708 8 0:00:00.156 2 836 K 2 836 K 2 31 25 882 RMClock.exe 692 24 0:00:10.140 2 960 K 2 960 K 3 32 3 046 565 services.exe 1032 9 0.76 0:00:09.156 3 788 K 3 856 K 16 258 972 496 smss.exe 868 11 0:00:00.015 396 K 492 K 3 19 183 svchost.exe 1216 8 0:00:00.078 3 116 K 3 152 K 5 116 5 465 svchost.exe 1280 8 0:00:00.281 3 840 K 3 840 K 10 240 8 640 svchost.exe 1404 8 0:00:00.750 2 960 K 2 960 K 6 78 950 138 svchost.exe 1472 8 0:00:00.078 2 664 K 2 664 K 3 75 2 202 svchost.exe 1672 8 0:00:09.031 15 628 K 16 564 K 28 689 32 809 System 4 8 0:02:44.468 248 K 4 424 K 79 437 2 834 408 System Idle Process 0 0 93.13 58:58:20.390 28 K 0 K 1 0 30 329 779 uTorrent.exe 840 8 0:00:33.609 39 248 K 49 600 K 6 279 182 797 winlogon.exe 988 13 0:00:00.890 3 968 K 5 892 K 17 330 10 193 winvnc.exe 2012 8 0:01:39.312 2 244 K 2 248 K 2 44 982 788 winvnc.exe 700 8 0:00:35.703 16 728 K 18 292 K 8 90 2 012 848 Process: uTorrent.exe Pid: 840Name Description Company Name Versionoleaut32.dll Microsoft Corporation 5.01.2600.2180CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0258COMRes.dll Microsoft Corporation 2001.12.4414.0258<Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> unicode.nls locale.nls sortkey.nls sorttbls.nls ctype.nls <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> R00000000005c.clb <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> <Pagefile Backed> uTorrent.exe µTorrent BitTorrent, Inc. 1.08.0001.12639adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.2180ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.2180ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.2180appHelp.dll Application Compatibility Client Library Microsoft Corporation 5.01.2600.2180MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.01.2600.2180ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0000cscui.dll Client Side Caching UI Microsoft Corporation 5.01.2600.2180comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.2900.2180CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.2600.2180DnsApi.dll DNS Client API DLL Microsoft Corporation 5.01.2600.2180GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.2180hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.2180WININET.dll Internet Extensions for Win32 Microsoft Corporation 6.00.2900.2180Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.2180ODBC32.dll Microsoft Data Access - ODBC Driver Manager Microsoft Corporation 3.525.1117.0000odbcint.dll Microsoft Data Access - ODBC Resources Microsoft Corporation 3.525.1117.0000rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.01.2600.2161ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2180drprov.dll Microsoft Terminal Server Network Provider Microsoft Corporation 5.01.2600.2180CRYPTUI.dll Microsoft Trust UI Provider Microsoft Corporation 5.131.2600.2180WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 5.131.2600.2180UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.01.2600.2180ntlanman.dll Microsoft® Lan Manager Microsoft Corporation 5.01.2600.2180MPR.dll Multiple Provider Router DLL Microsoft Corporation 5.01.2600.2180NETRAP.dll Net Remote Admin Protocol DLL Microsoft Corporation 5.01.2600.2180netapi32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.2180ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180NETUI0.dll NT LM UI Common Code - GUI Classes Microsoft Corporation 5.01.2600.2180NETUI1.dll NT LM UI Common Code - Networking classes Microsoft Corporation 5.01.2600.2180CSCDLL.dll Offline Network Agent Microsoft Corporation 5.01.2600.2180rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.2180RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.2180rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.2180SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.2180Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.2180browseui.dll Shell Browser UI Library Microsoft Corporation 6.00.2900.2180shdocvw.dll Shell Doc Object and Control Library Microsoft Corporation 6.00.2900.2180ntshrui.dll Shell extensions for sharing Microsoft Corporation 5.01.2600.2180shfolder.dll Shell Folder Service Microsoft Corporation 6.00.2900.2180SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.2180COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.2180USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.2180davclnt.dll Web DAV Client DLL Microsoft Corporation 5.01.2600.2180WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.2180kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.2180msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180IMAGEHLP.dll Windows NT Image Helper Microsoft Corporation 5.01.2600.2180MSGINA.dll Windows NT Logon GINA DLL Microsoft Corporation 5.01.2600.2180MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.2180SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.2180SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.2180shgina.dll Windows Shell User Logon Microsoft Corporation 6.00.2900.2180WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.2180WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.2180wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.2180USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.2180WINSTA.dll Winstation Library Microsoft Corporation 5.01.2600.2180Any ideas? Link to comment Share on other sites More sharing options...
thelittlefire Posted November 5, 2008 Report Share Posted November 5, 2008 Do you use UPnP or NAT-PMP ? Link to comment Share on other sites More sharing options...
Kentavr Posted November 5, 2008 Author Report Share Posted November 5, 2008 I don't use UPnP or NAT-PMP.At uTorrent "Preferences -> Connections" is indicated only port, there are no other options whatever. Link to comment Share on other sites More sharing options...
thelittlefire Posted November 5, 2008 Report Share Posted November 5, 2008 Well if they're not disabled, disable them.Also, it doesn't appear to be injected but could you try with that Jetico firewall uninstalled? . . If you'd rather wait for someone to look at those .DMP files I would understand though I don't see any other leads Link to comment Share on other sites More sharing options...
Kentavr Posted November 5, 2008 Author Report Share Posted November 5, 2008 All port mapping options are disabled.To leave server without firewall? It's impossible!Perhaps I will roll away back to version 1.7.7 - it works stably, without crashes. Link to comment Share on other sites More sharing options...
DreadWingKnight Posted November 5, 2008 Report Share Posted November 5, 2008 Downgrading isn't troubleshooting. Link to comment Share on other sites More sharing options...
Kentavr Posted November 5, 2008 Author Report Share Posted November 5, 2008 DreadWingKnight there are any ideas? Link to comment Share on other sites More sharing options...
thelittlefire Posted November 5, 2008 Report Share Posted November 5, 2008 You don't have a router? Link to comment Share on other sites More sharing options...
Kentavr Posted November 5, 2008 Author Report Share Posted November 5, 2008 I have ADSL-modem and router in one (Acorp W422G) Link to comment Share on other sites More sharing options...
thelittlefire Posted November 5, 2008 Report Share Posted November 5, 2008 If you have a router you don't gain any security from a software firewall. As long as you have the install EXE you can reinstall it after the next crash (or average timeframe for a crash).It would be nice for a debug of that dump Link to comment Share on other sites More sharing options...
GTHK Posted November 5, 2008 Report Share Posted November 5, 2008 Crash dumps aren't providing any useful information to me I suggest uninstalling the firewall, updating to SP3, and testing µTorrent. If it works, but you still want a firewall after that, switch to Comodo Firewall Pro. Instructions for configuring are in the forum. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.