Various BSOD when uTorrent 1.8.2 running

aloznogrog · May 16, 2009

hi everyone!

I have an Acer Apire Notebook with the following configuration:

MS VIsta Home Premium (SP1), Intel Core 2 Duo T5800 (2000 Mhz/2 Mb/FSB 800), 3 Gb of 1066 Mhz DDR3 RAM and nVidia GeForce 9600M GT (512 Mb), connected to the Internet via an Intel WiFI 5100 ABG card (driver ver. 12.4.0.21, the newest one). Connected to the notebook I have a USB box with a Seagate ST31500341AS 1,5 Tb drive (FW ver. CC1H) I use for file sharing.

almost everytime I start uTorrent to download something (as far as I can see, upload is not causing it), i get a BSOD. Sometimes there is no error message, sometimes it says BAD_POOL_CALLER 0x000000C2 (0x00000007, 0x0000110B, 0x002C4208, 0x08832A094) or PAGE_FAULT_IN_NONPAGED_AREA 0x00000050 (0xDE23B63E, 0x00000000, 0x81EA4884, 0x00000002).

sometimes it lists afd.sys as a faulty component.

here's tech info as requested.

HJT log:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:09:04, on 22.04.2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\System32\WerFault.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe

C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Windows\PLFSetI.exe

C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe

C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe

C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe

C:\Program Files\DrWeb AV-Desk\drwagnui.exe

C:\Program Files\DrWeb AV-Desk\SPIDERML.EXE

C:\Program Files\DrWeb AV-Desk\SPIDERUI.EXE

C:\Windows\RtHDVCpl.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Users\1\AppData\Local\Temp\RtkBtMnt.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\mmc.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0419&s=2&o=vp32&d=1008&m=aspire_8930

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0419&s=2&o=vp32&d=1008&m=aspire_8930

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ru.intl.acer.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0419&s=2&o=vp32&d=1008&m=aspire_8930

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll

O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll

O2 - BHO: Помощник по входу в Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll

O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll

O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe

O4 - HKLM\..\Run: [bkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"

O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] "C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe" show

O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe

O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe

O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"

O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe

O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe

O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"

O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"

O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"

O4 - HKLM\..\Run: [DrWebAgentUI] "C:\Program Files\DrWeb AV-Desk\drwagnui.exe"

O4 - HKLM\..\Run: [spIDerMail] "C:\Program Files\DrWeb AV-Desk\spiderml.exe"

O4 - HKLM\..\Run: [spIDerNT] C:\PROGRA~1\DRWEBA~1\spiderui.exe /agent

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O4 - Startup: Вырезка экрана и программа запуска для OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Global Startup: Acer VCM.lnk = ?

O4 - Global Startup: BTTray.lnk = ?

O8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe

O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe

O9 - Extra button: Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Отправить в OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O13 - Gopher Prefix:

O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\Windows\System32\appdrvrem01.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe

O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Корпорация Майкрософт - C:\Windows\system32\DFSR.exe

O23 - Service: Dr.Web® AV-Desk Agent (drwagntd) - Doctor Web, Ltd. - C:\Program Files\DrWeb AV-Desk\drwagntd.exe

O23 - Service: Dr.Web® AV-Desk Upgrade Service (drwupgrade) - Doctor Web, Ltd. - C:\Program Files\DrWeb AV-Desk\1\drwupgrade.exe

O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe

O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe

O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe

O23 - Service: SpIDer Guard for Windows (SPIDERNT) - Doctor Web, Ltd. - C:\PROGRA~1\DRWEBA~1\spidernt.exe

O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe

--

End of file - 11155 bytes

Process Explorer data:

Process PID CPU Description Company Name

System Idle Process 0 89.80

Interrupts n/a 0.76 Hardware Interrupts

DPCs n/a 3.04 Deferred Procedure Calls

System 4

smss.exe 552

csrss.exe 628

wininit.exe 684

services.exe 728

svchost.exe 892

WmiPrvSE.exe 3848

unsecapp.exe 3048 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation

ehmsas.exe 4208 Media Center Media Status Aggregator Service Microsoft Corporation

nvvsvc.exe 1024

nvvsvc.exe 1528

svchost.exe 1052

svchost.exe 1096

svchost.exe 1168

audiodg.exe 1364

svchost.exe 1228

wlanext.exe 1872

dwm.exe 764 2.28 Диспетчер рабочего стола Microsoft Corporation

svchost.exe 1248

taskeng.exe 1356 Обработчик планировщика заданий Microsoft Corporation

taskeng.exe 2292

svchost.exe 1388

SLsvc.exe 1404

svchost.exe 1468

vfsFPService.exe 1600

svchost.exe 1652

spoolsv.exe 1944

svchost.exe 2012

agrsmsvc.exe 2256

btwdins.exe 2352

Agentsvc.exe 2396

CLHNService.exe 2424

eDSService.exe 2556

ETService.exe 2596

EvtEng.exe 2656

IAANTmon.exe 2700

BASVC.exe 2784

MobilityService.exe 2948

BackupSvc.exe 2984

SchedulerSvc.exe 3072

PnkBstrA.exe 3108

svchost.exe 3120

RegSrvc.exe 3140

RichVideo.exe 3204

RS_Service.exe 3228

SPIDERNT.EXE 3256

svchost.exe 3284

svchost.exe 3312

SearchIndexer.exe 3372

drwagntd.exe 3560

wmpnetwk.exe 4128

lsass.exe 760

lsm.exe 768

csrss.exe 696 2.28

winlogon.exe 976

CompPtcVUI.exe 1616

explorer.exe 1192 Проводник Microsoft Corporation

IAAnotif.exe 3772 Event Monitor User Notification Tool Intel Corporation

SynTPEnh.exe 3796 Synaptics TouchPad Enhancements Synaptics, Inc.

SynTPHelper.exe 5420

eDSLoader.exe 3924 Acer eDataSecurity Management Loader Egis Incorporated

BkupTray.exe 4040 NTI Backup Now 5 Tray Module

PdtWzd.exe 4068 0.76 PdtWzd.exe Arachnoid Biometrics Identification Group Corp.

PLFSetI.exe 2376 DefaultSettingEXE MFC Application

eAudio.exe 3684 Notification tool for RealTek audio chip Acer Incorporated

ePower_DMC.exe 1304 Acer ePower Management - DMC Acer Inc.

ArcadeDeluxeAgent.exe 1140 Acer Arcade Deluxe Resident Program CyberLink Corp.

CLMLSvc.exe 3668 CyberLink MediaLibray Service CyberLink

PMVService.exe 3660 Acer Arcade Deluxe PlayMovie Resident Program Acer Corp.

drwagnui.exe 752 Dr.Web® AV-Desk Agent UI Doctor Web, Ltd.

SPIDERML.EXE 12 SpIDer Mail ® for Windows Workstation Doctor Web, Ltd.

SPIDERUI.EXE 2576 SpIDer Guard UI Agent Doctor Web, Ltd.

RtHDVCpl.exe 3812 HD Audio Control Panel Realtek Semiconductor

RtkBtMnt.exe 4788 Realtek HD Audio Data Rerouter Realtek Semiconductor Corp.

wmpnscfg.exe 2088 Приложение конфигурации службы общих сетевых ресурсов проигрывателя Windows Media Microsoft Corporation

GoogleToolbarNotifier.exe 384 GoogleToolbarNotifier Google Inc.

ehtray.exe 3988 Media Center Tray Applet Microsoft Corporation

DTProAgent.exe 3188 DAEMON Tools Pro Agent DT Soft Ltd

BTTray.exe 3940 Bluetooth Tray Application Broadcom Corporation.

firefox.exe 5696 Firefox Mozilla Corporation

HijackThis.exe 5452 HijackThis Trend Micro Inc.

notepad.exe 5912 Блокнот Microsoft Corporation

DTProShellHlp.exe 5560 DAEMON Tools Pro Shell Extensions Helper DT Soft Ltd

procexp.exe 1520 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

conime.exe 4860

there are no crashdumps created bu uTorrent, but several recently created minidumps are uploaded here: http://www.zshare.net/download/6008747735123a1b/

any help will be appreciated. thank you!

jewelisheaven · May 16, 2009

Can you try without the 3rd party wireless controller/app/manager loaded?

Also, if it's uT the PE logfile does not include useful information, could you update/post a new logfile with utorrent.exe running and selected?

aloznogrog · May 16, 2009

Can you try without the 3rd party wireless controller/app/manager loaded?

you'll have to excuse me, but I can't understand what controller are you taking about. I use generic Vista Wi-Fi tools to manage the network.

as of PE logs with uTorrent, I'll post them in a few moments.

jewelisheaven · May 16, 2009

There's a broadcom wireless app running, but the tool I saw as an Intel manager appears to be "event log". So you're not using the Intel provided WLAN manager, that was the main concern.

aloznogrog · May 16, 2009

There's a broadcom wireless app running, but the tool I saw as an Intel manager appears to be "event log". So you're not using the Intel provided WLAN manager, that was the main concern.

Broadcom seems to be bluetooth-related software. I don't use any BT equipment anyway. as of Intel, I have only the driver and various statistics gathering and diagnostic tools. no WLAN manager whatsoever.

BTW, here's the PE log with uTorrent, as you requested:

Process PID CPU Description Company Name

System Idle Process 0 55.45

Interrupts n/a 2.25 Hardware Interrupts

DPCs n/a 10.49 Deferred Procedure Calls

System 4

smss.exe 568

csrss.exe 640

wininit.exe 692

services.exe 736

svchost.exe 916

WmiPrvSE.exe 1248

unsecapp.exe 1940 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation

ehmsas.exe 4316 Media Center Media Status Aggregator Service Microsoft Corporation

nvvsvc.exe 1032

nvvsvc.exe 1516

svchost.exe 1060

svchost.exe 1104

svchost.exe 1176

audiodg.exe 1368 17.23

svchost.exe 1232

wlanext.exe 1976

dwm.exe 1604 0.75 Диспетчер рабочего стола Microsoft Corporation

svchost.exe 1268

taskeng.exe 1776 Обработчик планировщика заданий Microsoft Corporation

taskeng.exe 2136

svchost.exe 1392

SLsvc.exe 1420

svchost.exe 1472

vfsFPService.exe 1672

svchost.exe 1732

svchost.exe 400

agrsmsvc.exe 2296

btwdins.exe 2496

Agentsvc.exe 2548

CLHNService.exe 2688

eDSService.exe 2896

ETService.exe 2936

EvtEng.exe 2980

IAANTmon.exe 3064 0.75

BASVC.exe 3192

MobilityService.exe 3292

BackupSvc.exe 3352

SchedulerSvc.exe 3436

PnkBstrA.exe 3512

svchost.exe 3548

RegSrvc.exe 3596

RichVideo.exe 3660

RS_Service.exe 3676

SPIDERNT.EXE 3704

svchost.exe 3720

svchost.exe 3772

SearchIndexer.exe 3840

SearchProtocolHost.exe 5152

SearchFilterHost.exe 1532

drwagntd.exe 3996

wmpnetwk.exe 4196

spoolsv.exe 5412

lsass.exe 752

lsm.exe 760

csrss.exe 704 0.75

winlogon.exe 984

CompPtcVUI.exe 1576

explorer.exe 368 Проводник Microsoft Corporation

IAAnotif.exe 2264 Event Monitor User Notification Tool Intel Corporation

SynTPEnh.exe 2360 Synaptics TouchPad Enhancements Synaptics, Inc.

SynTPHelper.exe 5396

eDSLoader.exe 2400 Acer eDataSecurity Management Loader Egis Incorporated

BkupTray.exe 2420 NTI Backup Now 5 Tray Module

PdtWzd.exe 2464 PdtWzd.exe Arachnoid Biometrics Identification Group Corp.

PLFSetI.exe 2536 DefaultSettingEXE MFC Application

eAudio.exe 2748 Notification tool for RealTek audio chip Acer Incorporated

ePower_DMC.exe 2636 0.75 Acer ePower Management - DMC Acer Inc.

ArcadeDeluxeAgent.exe 3176 Acer Arcade Deluxe Resident Program CyberLink Corp.

CLMLSvc.exe 3476 CyberLink MediaLibray Service CyberLink

PMVService.exe 3360 Acer Arcade Deluxe PlayMovie Resident Program Acer Corp.

drwagnui.exe 3860 Dr.Web® AV-Desk Agent UI Doctor Web, Ltd.

SPIDERML.EXE 2352 SpIDer Mail ® for Windows Workstation Doctor Web, Ltd.

SPIDERUI.EXE 3164 SpIDer Guard UI Agent Doctor Web, Ltd.

RtHDVCpl.exe 2236 HD Audio Control Panel Realtek Semiconductor

RtkBtMnt.exe 4700 Realtek HD Audio Data Rerouter Realtek Semiconductor Corp.

wmpnscfg.exe 2756 Приложение конфигурации службы общих сетевых ресурсов проигрывателя Windows Media Microsoft Corporation

GoogleToolbarNotifier.exe 372 GoogleToolbarNotifier Google Inc.

ehtray.exe 800 Media Center Tray Applet Microsoft Corporation

DTProAgent.exe 2760 DAEMON Tools Pro Agent DT Soft Ltd

BTTray.exe 4124 Bluetooth Tray Application Broadcom Corporation.

DTProShellHlp.exe 4620 DAEMON Tools Pro Shell Extensions Helper DT Soft Ltd

firefox.exe 2148 5.99 Firefox Mozilla Corporation

uTorrent.exe 2116 2.25 µTorrent BitTorrent, Inc.

procexp.exe 1620 2.25 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

Process: uTorrent.exe Pid: 2116

Name Description Company Name Version

ADVAPI32.dll Расширенная библиотека API Windows 32 Microsoft Corporation 6.0.6001.18000

btmmhook.dll Multimedia Keys Hook DLL Broadcom Corporation. 6.0.1.5000

C_1252.NLS

COMCTL32.dll Библиотека элементов управления взаимодействия с пользователем Microsoft Corporation 6.10.6001.18000

comdlg32.dll Библиотека общих диалоговых окон Microsoft Corporation 6.0.6001.18000

dhcpcsvc.DLL Служба DHCP-клиента Microsoft Corporation 6.0.6001.18000

dhcpcsvc6.DLL Клиент DHCPv6 Microsoft Corporation 6.0.6001.18000

DnsApi.dll Динамическая библиотека API DNS-клиента Microsoft Corporation 6.0.6001.18000

DRWEBSP.DLL Dr.Web Winsock Provider Hook Doctor Web, Ltd. 4.44.0.12180

GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6001.18159

IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6001.18000

IPHLPAPI.DLL IP Helper API Microsoft Corporation 6.0.6001.18000

kernel32.dll Библиотека клиента Windows NT BASE API Microsoft Corporation 6.0.6001.18215

locale.nls

LPK.DLL Language Pack Microsoft Corporation 6.0.6001.18000

MSCTF.dll Серверная библиотека MSCTF Microsoft Corporation 6.0.6001.18000

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6001.18000

mswsock.dll Расширение поставщика службы API Microsoft Windows Sockets 2.0 Microsoft Corporation 6.0.6001.18000

napinsp.dll Поставщик оболочки совместимости для имен электронной почты Microsoft Corporation 6.0.6001.18000

NLAapi.dll Network Location Awareness 2 Microsoft Corporation 6.0.6001.18000

NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6001.18000

ntdll.dll Системная библиотека NT Microsoft Corporation 6.0.6001.18000

NTMARTA.DLL Поставщик Windows NT MARTA Microsoft Corporation 6.0.6001.18000

ole32.dll Microsoft OLE для Windows Microsoft Corporation 6.0.6001.18000

oleaut32.dll Microsoft Corporation 6.0.6001.18000

pnrpnsp.dll Поставщик пространства имен PNRP Microsoft Corporation 6.0.6001.18000

PSAPI.DLL Process Status Helper Microsoft Corporation 6.0.6000.16386

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.0.6000.16386

RPCRT4.dll Библиотека удаленного вызова процедур Microsoft Corporation 6.0.6001.18051

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.0.6001.18000

SAMLIB.dll SAM Library DLL Microsoft Corporation 6.0.6001.18000

Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6001.18215

SHELL32.dll Общая библиотека оболочки Windows Microsoft Corporation 6.0.6001.18167

shfolder.dll Shell Folder Service Microsoft Corporation 6.0.6000.16386

SHLWAPI.dll Библиотека небольших программ оболочки Microsoft Corporation 6.0.6001.18000

SysHook.dll Acer ePower Management - SysHook Dynamic Link Library 3.0.3000.0

USER32.dll Многопользовательская библиотека клиента USER API Windows Microsoft Corporation 6.0.6001.18000

USERENV.dll Userenv Microsoft Corporation 6.0.6001.18000

USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6001.18000

uTorrent.exe µTorrent BitTorrent, Inc. 1.8.2.14458

uxtheme.dll Библиотека тем UxTheme (Microsoft) Microsoft Corporation 6.0.6001.18000

WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6001.18000

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.0.6000.16386

WINSPOOL.DRV Драйвер диспетчера очереди Windows Microsoft Corporation 6.0.6001.18000

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6001.18000

WS2_32.dll 32-разрядная библиотека Windows Socket 2.0 Microsoft Corporation 6.0.6001.18000

wship6.dll Библиотека DLL помощника Winsock2 (TL/IPv6) Microsoft Corporation 6.0.6001.18000

wshtcpip.dll Библиотека DLL помощника службы Winsock2 (TL/IPv4) Microsoft Corporation 6.0.6001.18000

jewelisheaven · May 16, 2009

Unfortunately if it's related to afd.sys it's something core :/ The utorrent DLLs still aren't in it. When you click utorrent.exe do the DLLs show up in the lower pane? If not, press Ctrl-D to switch from handle mode. Saw the edit

btmmhook.dll Multimedia Keys Hook DLL Broadcom Corporation. 6.0.1.5000
DRWEBSP.DLL Dr.Web Winsock Provider Hook Doctor Web, Ltd. 4.44.0.12180
SysHook.dll Acer ePower Management - SysHook Dynamic Link Library 3.0.3000.0

Could you stop those programs temporarily to see that they won't appear in utorrent's process?

Thanks for a fast response and information. Now I have to ask/find out what other information would be useful. A search with Intel didn't provide much. And yeah, thank you too for checking out the driver situation < 1 mo. is good system maintenence

Edit: Alternate situation/question. Are you reading/writing to the external or only reading from it? Though not directly a USB indicative problem... you never know :/

aloznogrog · May 16, 2009

Could you stop those programs temporarily to see that they won't appear in utorrent's process?
Thanks for a fast response and information. Now I have to ask/find out what other information would be useful. A search with Intel didn't provide much. And yeah, thank you too for checking out the driver situation < 1 mo. is good system maintenence big_smile
Edit: Alternate situation/question. Are you reading/writing to the external or only reading from it? Though not directly a USB indicative problem... you never know hmm

thanks for the reply!

killed everything you mentioned. that's how it looks now:

Process PID CPU Description Company Name

System Idle Process 0 56.91

Interrupts n/a Hardware Interrupts

DPCs n/a 4.69 Deferred Procedure Calls

System 4

smss.exe 568

csrss.exe 640

wininit.exe 692

services.exe 736

svchost.exe 916

WmiPrvSE.exe 1248

unsecapp.exe 1940 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation

ehmsas.exe 4316 Media Center Media Status Aggregator Service Microsoft Corporation

nvvsvc.exe 1032

nvvsvc.exe 1516

svchost.exe 1060

svchost.exe 1104

svchost.exe 1176

audiodg.exe 1368

svchost.exe 1232 20.09

wlanext.exe 1976

dwm.exe 1604 3.35 Диспетчер рабочего стола Microsoft Corporation

svchost.exe 1268

taskeng.exe 1776 Обработчик планировщика заданий Microsoft Corporation

taskeng.exe 2136

svchost.exe 1392

SLsvc.exe 1420

svchost.exe 1472

vfsFPService.exe 1672

svchost.exe 1732

svchost.exe 400

agrsmsvc.exe 2296

btwdins.exe 2496

Agentsvc.exe 2548

CLHNService.exe 2688

eDSService.exe 2896

ETService.exe 2936

EvtEng.exe 2980

IAANTmon.exe 3064

BASVC.exe 3192

MobilityService.exe 3292

BackupSvc.exe 3352

SchedulerSvc.exe 3436

PnkBstrA.exe 3512

svchost.exe 3548

RegSrvc.exe 3596

RichVideo.exe 3660

RS_Service.exe 3676

SPIDERNT.EXE 3704

svchost.exe 3720

svchost.exe 3772

SearchIndexer.exe 3840

drwagntd.exe 3996

wmpnetwk.exe 4196

spoolsv.exe 5412

lsass.exe 752

lsm.exe 760

csrss.exe 704

winlogon.exe 984

CompPtcVUI.exe 1576

explorer.exe 368 Проводник Microsoft Corporation

IAAnotif.exe 2264 Event Monitor User Notification Tool Intel Corporation

SynTPEnh.exe 2360 Synaptics TouchPad Enhancements Synaptics, Inc.

SynTPHelper.exe 5396

eDSLoader.exe 2400 Acer eDataSecurity Management Loader Egis Incorporated

BkupTray.exe 2420 NTI Backup Now 5 Tray Module

PdtWzd.exe 2464 PdtWzd.exe Arachnoid Biometrics Identification Group Corp.

PLFSetI.exe 2536 DefaultSettingEXE MFC Application

eAudio.exe 2748 Notification tool for RealTek audio chip Acer Incorporated

ArcadeDeluxeAgent.exe 3176 Acer Arcade Deluxe Resident Program CyberLink Corp.

CLMLSvc.exe 3476 CyberLink MediaLibray Service CyberLink

PMVService.exe 3360 Acer Arcade Deluxe PlayMovie Resident Program Acer Corp.

RtHDVCpl.exe 2236 HD Audio Control Panel Realtek Semiconductor

RtkBtMnt.exe 4700 Realtek HD Audio Data Rerouter Realtek Semiconductor Corp.

wmpnscfg.exe 2756 Приложение конфигурации службы общих сетевых ресурсов проигрывателя Windows Media Microsoft Corporation

GoogleToolbarNotifier.exe 372 GoogleToolbarNotifier Google Inc.

ehtray.exe 800 Media Center Tray Applet Microsoft Corporation

DTProAgent.exe 2760 DAEMON Tools Pro Agent DT Soft Ltd

DTProShellHlp.exe 4620 DAEMON Tools Pro Shell Extensions Helper DT Soft Ltd

firefox.exe 2148 Firefox Mozilla Corporation

procexp.exe 5468 8.03 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

conime.exe 3520

uTorrent.exe 2964 7.36 µTorrent BitTorrent, Inc.

Process: uTorrent.exe Pid: 2964

Name Description Company Name Version

ADVAPI32.dll Расширенная библиотека API Windows 32 Microsoft Corporation 6.0.6001.18000

C_1252.NLS

COMCTL32.dll Библиотека элементов управления взаимодействия с пользователем Microsoft Corporation 6.10.6001.18000

comctl32.dll.mui Библиотека элементов управления взаимодействия с пользователем Microsoft Corporation 6.10.6000.16386