Unable to create Crash Dump

Dogrobber · April 4, 2009

As of 03/04/2009 for some unknown reason I have not been able to use utorrent as it keeps stating that is has crashed and it is unable to create a crash dump file.

Up until this point I have never had any problems with this program even though I use Nvidea GFX cards.

I have checked out the trouble shooting pages but the info is over 2 years old.

any ideas on what may be causing this.

Virus scan is clean.

Cheers

moogly · April 4, 2009

Post Hijackthis and Process Explorer logs when uT is running.

Guide: http://forum.utorrent.com/viewtopic.php?id=29748

Don't forget to select utorrent.exe and enable DLL mode (ctrl+d) in PE.

Dogrobber · April 4, 2009

Result for Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:59:45, on 04/04/2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

Running processes:

C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe

C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe

C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe

C:\Program Files (x86)\Razer\Copperhead\razerhid.exe

C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe

C:\Program Files (x86)\Java\jre6\bin\jusched.exe

C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe

C:\Program Files (x86)\Razer\Copperhead\razertra.exe

C:\Program Files (x86)\Razer\Copperhead\razerofa.exe

C:\Program Files (x86)\DAEMON Tools Pro\DTProShellHlp.exe

C:\Users\Martin\Downloads\Utorrent\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O1 - Hosts: ::1 localhost

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O4 - HKLM\..\Run: [CPU Power Monitor] "C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"

O4 - HKLM\..\Run: [Cpu Level Up help] C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe

O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe

O4 - HKLM\..\Run: [soundTray] "C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe"

O4 - HKLM\..\Run: [Copperhead] "C:\Program Files (x86)\Razer\Copperhead\razerhid.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"

O4 - HKCU\..\Run: [bullGuard] "C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

O13 - Gopher Prefix:

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: BullGuard LiveUpdate (BgLiveSvc) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)

O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - Unknown owner - C:\Windows\System32\TuneUpDefragService.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 7655 bytes

Result for Process explorer

Process PID CPU Description Company Name

System Idle Process 0 96.15

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 460

csrss.exe 536

wininit.exe 588

services.exe 644

svchost.exe 796

unsecapp.exe 4044 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation

nvvsvc.exe 860

rundll32.exe 2816

svchost.exe 888

svchost.exe 944

svchost.exe 996

audiodg.exe 528

svchost.exe 204

WUDFHost.exe 1124

dwm.exe 2000 Desktop Window Manager Microsoft Corporation

SLsvc.exe 660

svchost.exe 872

svchost.exe 1116

spoolsv.exe 1328

svchost.exe 1356

AppleMobileDeviceService.exe 1544

BullGuardUpdate.exe 1580

svchost.exe 1600

PnkBstrA.exe 1720

svchost.exe 1796

svchost.exe 1852

svchost.exe 1988

SearchIndexer.exe 2016

nSvcAppFlt.exe 1392

nSvcIp.exe 1536

wmpnetwk.exe 1028

svchost.exe 3836

taskeng.exe 3452 Task Scheduler Engine Microsoft Corporation

taskeng.exe 12

taskeng.exe 5024

lsass.exe 656

lsm.exe 664

csrss.exe 608

winlogon.exe 448

explorer.exe 2172 0.77 Windows Explorer Microsoft Corporation

MSASCui.exe 3280 Windows Defender User Interface Microsoft Corporation

LCDMon.exe 3308 Logitech LCD Manager Logitech Inc.

LCDClock.exe 3724 Logitech G-series LCD Clock Logitech Inc.

LCDMedia.exe 3740 Logitech G-series Media Display Logitech Inc.

LGDCore.exe 3336 Logitech G-series Profiler Logitech Inc.

rundll32.exe 3368 Windows host process (Rundll32) Microsoft Corporation

BullGuard.exe 3384 BullGuard BullGuard Ltd.

wmpnscfg.exe 3912 Windows Media Player Network Sharing Service Configuration Application Microsoft Corporation

firefox.exe 2860 Firefox Mozilla Corporation

WINZIP32.EXE 3700 WinZip WinZip Computing, S.L.

procexp.exe 4692 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

procexp64.exe 1888 3.08 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

utorrent.exe 4068 µTorrent BitTorrent, Inc.

CpuPowerMonitor.exe 3424

smax4pnp.exe 3464 SMax4PNP Analog Devices, Inc.

SoundTray.exe 3480 SoundTray.exe Sonic Focus, Inc.

razerhid.exe 3500 razerhid MFC Application

razertra.exe 3648 razertra MFC Application

razerofa.exe 3656 Razer OFA - On-the-Fly Sensitivity Adjustment Razer Inc.

realsched.exe 3536 RealNetworks Scheduler RealNetworks, Inc.

jusched.exe 3544 Java Platform SE binary Sun Microsystems, Inc.

Process: utorrent.exe Pid: 4068

Name Description Company Name Version

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.0.6001.18000

apphelp.dll Application Compatibility Client Library Microsoft Corporation 6.0.6001.18000

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.0

BCRYPT.dll Windows Cryptographic Primitives Library (Wow64) Microsoft Corporation 6.0.6001.18000

bglsp.dll BGLsp BullGuard Ltd. 8.5.0.1

Cabinet.dll Microsoft® Cabinet File API Microsoft Corporation 6.0.6001.18000

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.6931.18000

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.10.6001.18000

comctl32.dll.mui User Experience Controls Library Microsoft Corporation 6.10.6001.18000

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.0.6001.18000

CRYPT32.dll Crypto API32 Microsoft Corporation 6.0.6001.18000

crypt32.dll.mui Crypto API32 Microsoft Corporation 6.0.6000.16386

cryptnet.dll Crypto Network Related API Microsoft Corporation 6.0.6001.18000

dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.0.6001.18000

dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.0.6001.18000

DnsApi.dll DNS Client API DLL Microsoft Corporation 6.0.6001.18000

DUser.dll Windows DirectUser Engine Microsoft Corporation 6.0.6001.18000

duser.dll.mui Windows DirectUser Engine Microsoft Corporation 6.0.6000.16386

FirewallAPI.dll Windows Firewall API Microsoft Corporation 6.0.6001.18000

GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6001.18159

GPAPI.dll Group Policy Client API Microsoft Corporation 6.0.6001.18000

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 6.0.6001.18000

hnetcfg.dll.mui Home Networking Configuration Manager Microsoft Corporation 6.0.6000.16386

iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.0.6001.18203

imagehlp.dll Windows NT Image Helper Microsoft Corporation 6.0.6001.18000

imageres.dll Windows Image Resource Microsoft Corporation 6.0.6000.16386

imageres.dll.mui Windows Image Resource Microsoft Corporation 6.0.6000.16386

IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6001.18000

Iphlpapi.dll IP Helper API Microsoft Corporation 6.0.6001.18000

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.0.6001.18000

kernel32.dll.mui Windows NT BASE API Client DLL Microsoft Corporation 6.0.6001.18000

locale.nls

LPK.DLL Language Pack Microsoft Corporation 6.0.6001.18000

MPR.dll Multiple Provider Router DLL Microsoft Corporation 6.0.6001.18000

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.0.6000.16386

MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.0.6001.18000

msctf.dll.mui MSCTF Server DLL Microsoft Corporation 6.0.6000.16386

MSVCR80.dll Microsoft® C Runtime Library Microsoft Corporation 8.0.50727.1434

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6001.18000

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.0.6001.18000

msxml3.dll MSXML 3.0 SP10 Microsoft Corporation 8.100.1048.0

msxml3r.dll XML Resources Microsoft Corporation 8.20.8730.1

napinsp.dll E-mail Naming Shim Provider Microsoft Corporation 6.0.6001.18000

ncrypt.dll Windows cryptographic library Microsoft Corporation 6.0.6001.18000

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 6.0.6001.18157

netshell.dll Network Connections Shell Microsoft Corporation 6.0.6001.18000

NLAapi.dll Network Location Awareness 2 Microsoft Corporation 6.0.6001.18000

npmproxy.dll Network List Manager Proxy Microsoft Corporation 6.0.6000.16386

NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6001.18000

ntdll.dll NT Layer DLL Microsoft Corporation 6.0.6001.18000

NTMARTA.DLL Windows NT MARTA provider Microsoft Corporation 6.0.6001.18000

nvappfilter.dll NVIDIA IAM LSP NVIDIA 2.2.0.465

ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.0.6001.18000

oleaut32.dll Microsoft Corporation 6.0.6001.18000

pnrpnsp.dll PNRP Name Space Provider Microsoft Corporation 6.0.6001.18000

PROPSYS.dll Microsoft Property System Microsoft Corporation 7.0.6001.16503

psapi.dll Process Status Helper Microsoft Corporation 6.0.6000.16386

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.0.6000.16386

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.0.6001.18051

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.0.6001.18000

SAMLIB.dll SAM Library DLL Microsoft Corporation 6.0.6001.18000

Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6001.18000

SensApi.dll SENS Connectivity API DLL Microsoft Corporation 6.0.6000.16386

SETUPAPI.dll Windows Setup API Microsoft Corporation 6.0.6001.18000

setupapi.dll.mui Windows Setup API Microsoft Corporation 6.0.6001.18000

SHDOCVW.dll Shell Doc Object and Control Library Microsoft Corporation 6.0.6001.18000

shdocvw.dll.mui Shell Doc Object and Control Library Microsoft Corporation 6.0.6000.16386

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.6001.18167

shell32.dll.mui Windows Shell Common Dll Microsoft Corporation 6.0.6001.18000

shfolder.dll Shell Folder Service Microsoft Corporation 6.0.6000.16386

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.6001.18000

slc.dll Software Licensing Client Dll Microsoft Corporation 6.0.6001.18000

SSDPAPI.dll SSDP Client API DLL Microsoft Corporation 6.0.6000.16386

SXS.DLL Fusion 2.5 Microsoft Corporation 6.0.6001.18000

upnp.dll UPnP Control Point API Microsoft Corporation 6.0.6001.18000

urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.0.6001.18203

USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6001.18000

USERENV.dll Userenv Microsoft Corporation 6.0.6001.18000

USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6001.18000

utorrent.exe µTorrent BitTorrent, Inc. 1.8.2.14458

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.0.6001.18000

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.0.6001.18000

WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation 6.0.6001.18131

WINHTTP.dll Windows HTTP Services Microsoft Corporation 6.0.6001.18000

WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6001.18000

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.0.6000.16386

WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 6.0.6001.18000

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6001.18000

wow64.dll Win32 Emulation on NT64 Microsoft Corporation 6.0.6001.18000

wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation 6.0.6001.18000

wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation 6.0.6001.18000

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.0.6001.18000

wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.0.6001.18000

wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.0.6001.18000

And here is the dump file:

http://www.zshare.net/download/5817927758187e9b/

moogly · April 4, 2009

O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe

Nvidia Forceware, buggy firewall and classic issue with uT. Remove it completely.

Dogrobber · April 4, 2009

Firstly, thank you for the very prompt reply.

Being very new to this, It states that i cannot delete them as access is denied.

I ahve looked on add/remove and there is nothing on there relating to them.

How do i safely get rid of them please.

DreadWingKnight · April 4, 2009

O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

Whatever this is probably needs to go too.

nVidia's Forceware Network Access Manager is the software package you need to look for in your add/remove programs. It may have been integrated into motherboard chipset driver install.

Dogrobber · April 4, 2009

Big thanks for all the info and help....Was missing the network access manager in the add/remove bit, but once removed so far so good.

Big thanks

Sign In

Unable to create Crash Dump

Recommended Posts

Dogrobber

Link to comment

Share on other sites

moogly

Link to comment

Share on other sites

Dogrobber

Link to comment

Share on other sites

moogly

Link to comment

Share on other sites

Dogrobber

Link to comment

Share on other sites

DreadWingKnight

Link to comment

Share on other sites

Dogrobber

Link to comment

Share on other sites

Archived

Browse

Activity