nagesh2020 Posted December 14, 2008 Report Share Posted December 14, 2008 my utorrent version: utorrent 1.8.1 (build 12639)my laptop: hp pavillion dv2025tuxp pro sp3centrino duo 1.73 ghz1.49 gb ramsometimes my utorrent hangs, causing whole system to hang,when this happens and i press start>shutdown nothing happens, even if i am able to "end now" utorrent.so i thought of trying "shutdown" commandtried start>run>cmd but error "windows cant find file specified or path doesnt exist"ctrl+alt+del doesnt give anything and when i try "start>run>taskmgr" the same errori have to press the power button which forcefully poweroffs the pcand just to add one thing (dont know if its of any relevance)this problem hasnt ever happened when the utorrent is on in sys trayand i am doing some other work on laptopoccurs only when i am away leaving downloading onand when i return to see if it was over, i get to know about the error Link to comment Share on other sites More sharing options...
DreadWingKnight Posted December 14, 2008 Report Share Posted December 14, 2008 Hijackthis log and process explorer process list please. Link to comment Share on other sites More sharing options...
nagesh2020 Posted December 14, 2008 Author Report Share Posted December 14, 2008 sorry i havnt heard abt the apps u have mentionedbut will search and download themand i guess u r asking for status logs from them when the actual problem occurs Link to comment Share on other sites More sharing options...
DreadWingKnight Posted December 14, 2008 Report Share Posted December 14, 2008 http://forum.utorrent.com/viewtopic.php?id=29748 Link to comment Share on other sites More sharing options...
nagesh2020 Posted December 20, 2008 Author Report Share Posted December 20, 2008 procexp.txt========Process PID CPU Description Company NameSystem Idle Process 0 95.38 Interrupts n/a 1.54 Hardware Interrupts DPCs n/a 0.77 Deferred Procedure Calls System 4 SMSS.EXE 484 Windows NT Session Manager Microsoft Corporation CSRSS.EXE 740 Client Server Runtime Process Microsoft Corporation WINLOGON.EXE 764 Windows NT Logon Application Microsoft Corporation SERVICES.EXE 808 0.77 Services and Controller app Microsoft Corporation SVCHOST.EXE 980 Generic Host Process for Win32 Services Microsoft Corporation SVCHOST.EXE 1040 Generic Host Process for Win32 Services Microsoft Corporation SVCHOST.EXE 1128 Generic Host Process for Win32 Services Microsoft Corporation SVCHOST.EXE 1248 Generic Host Process for Win32 Services Microsoft Corporation SVCHOST.EXE 1284 Generic Host Process for Win32 Services Microsoft Corporation VSMON.EXE 1336 TrueVector Service Zone Labs, LLC ScanningProcess.exe 1796 ScanningProcess.exe 1992 SPOOLSV.EXE 1888 Spooler SubSystem App Microsoft Corporation BTWDINS.EXE 1240 Bluetooth Support Server Broadcom Corporation. MDM.EXE 1408 Machine Debug Manager Microsoft Corporation SVCHOST.EXE 1860 Generic Host Process for Win32 Services Microsoft Corporation hpqWmiEx.exe 500 hpqwmiex Module Hewlett-Packard Development Company, L.P. ALG.EXE 648 Application Layer Gateway Service Microsoft Corporation LSASS.EXE 820 LSA Shell (Export Version) Microsoft CorporationEXPLORER.EXE 1556 Windows Explorer Microsoft Corporation HKCMD.EXE 2736 hkcmd Module Intel Corporation IGFXPERS.EXE 2840 persistence Module Intel Corporation UnlockerAssistant.exe 2940 JUSCHED.EXE 3004 Java Platform SE binary Sun Microsystems, Inc. FPASSIST.EXE 3244 FreePDF Assistent für FreePDF3 shbox.de ZLCLIENT.EXE 3340 ZoneAlarm Client Zone Labs, LLC mantispm.exe 3608 Spam Filter CTFMON.EXE 3464 CTF Loader Microsoft Corporation uTorrent.exe 3476 µTorrent BitTorrent, Inc. BTTray.exe 3952 Bluetooth Tray Application Broadcom Corporation. procexp.exe 2664 1.54 Sysinternals Process Explorer Sysinternals - www.sysinternals.com HijackThis.exe 2676 HijackThis Trend Micro Inc.==========================================================hijackthis.log=========Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:28:37 AM, on 20/Dec/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZONELABS\vsmon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exeC:\WINDOWS\System32\hkcmd.exeC:\WINDOWS\System32\igfxpers.exeC:\Program Files\Unlocker\UnlockerAssistant.exeC:\Program Files\Java\jre1.6.0_07\bin\jusched.exeC:\Program Files\FreePDF_XP\fpassist.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\uTorrent\uTorrent.exeC:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exeC:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exeC:\Documents and Settings\nagesh\Desktop\ProcessExplorer\procexp.exeC:\Documents and Settings\nagesh\Desktop\HiJackThis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dllO2 - BHO: torrents.to Toolbar - {b7f907ee-0a1b-43b8-a611-b429a184ad6b} - C:\Program Files\torrents.to\tbtorr.dllO3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)O3 - Toolbar: torrents.to Toolbar - {b7f907ee-0a1b-43b8-a611-b429a184ad6b} - C:\Program Files\torrents.to\tbtorr.dllO4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exeO4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\System32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [Persistence] C:\WINDOWS\System32\igfxpers.exeO4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"O4 - HKLM\..\Run: [Resume copy] copyfstq.exe /startupO4 - HKLM\..\Run: [FreePDF Assistant] C:\Program Files\FreePDF_XP\fpassist.exeO4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"O4 - HKCU\..\Run: [µTorrent] "C:\Program Files\uTorrent\uTorrent.exe"O4 - HKCU\..\Run: [HijackThis startup scan] C:\Documents and Settings\nagesh\Desktop\HiJackThis\HijackThis.exe /startupscanO4 - HKUS\S-1-5-21-1715567821-1563985344-839522115-1003\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')O4 - HKUS\S-1-5-21-1715567821-1563985344-839522115-1003\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" (User '?')O4 - HKUS\S-1-5-21-1715567821-1563985344-839522115-1003\..\Run: [µTorrent] "C:\Program Files\uTorrent\uTorrent.exe" (User '?')O4 - HKUS\S-1-5-21-1715567821-1563985344-839522115-1003\..\Run: [HijackThis startup scan] C:\Documents and Settings\nagesh\Desktop\HiJackThis\HijackThis.exe /startupscan (User '?')O4 - S-1-5-21-1715567821-1563985344-839522115-1003 Startup: s.bat (User '?')O4 - Startup: s.batO4 - Global Startup: Bluetooth.lnk = ?O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dllO9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{5A817E0C-8DA2-49C8-AB81-C07E1D90EA85}: NameServer = 203.187.192.12,203.187.192.15O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeO23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exeO23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe--End of file - 6046 bytes Link to comment Share on other sites More sharing options...
moogly Posted December 20, 2008 Report Share Posted December 20, 2008 You don't select utorrent.exe in Process Explorer with DLL mode enabled (ctrl+d). Do it and repost it.But ZA with uT is very buggy, pretty sure it's the pbm.Uninstall ZA and choose another FW like Comodo.http://www.matousec.com/projects/firewall-challenge/results.php#firewalls-ratings Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.