wizayne Posted July 11, 2009 Report Share Posted July 11, 2009 It keeps crashing, and here's the thing.. There aren't even ANY torrents loaded.. I figured if I created a dump file when I killed the process it might help develop better software. Here is some info on my system:Win 6 Home premium x864gb ramAMD Athlon QL-62 2ghz (64-bit)so.. here's the file. Hope it helps...err I have no way to offer this file so if a programmer would like the dump file and has a way for me to upload it to them, let me know. simply c&p the file into here would not be useful afaik. Link to comment Share on other sites More sharing options...
moogly Posted July 12, 2009 Report Share Posted July 12, 2009 Post here Hijackthis and Process Explorer logs when uT is running.For Proc. Exp. select utorrent.exe and enable DLL mode (ctrl+d)Guide: http://forum.utorrent.com/viewtopic.php?id=29748 Link to comment Share on other sites More sharing options...
wizayne Posted July 12, 2009 Author Report Share Posted July 12, 2009 Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:15:33 PM, on 7/11/2009Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exeC:\Program Files\Launch Manager\QtZgAcer.EXEC:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exeC:\Program Files\Everything\Everything.exeC:\Program Files\Windows Media Player\wmpnscfg.exeC:\Windows\system32\wbem\unsecapp.exeC:\Program Files\Synaptics\SynTP\SynTPHelper.exeC:\Program Files\Acer\Empowering Technology\NotificationCenter\Framework.NotificationCenter.exeC:\Program Files\Mozilla Software\Firefox\firefox.exeC:\Windows\explorer.exeC:\Program Files\WinRAR\WinRAR.exeC:\Users\wizayne83\Desktop\security debugging\procexp.exeC:\Windows\system32\SearchFilterHost.exeC:\Program Files\uTorrent\uTorrent.exeC:\Users\wizayne83\Desktop\HiJackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&s=2&o=vp32&d=0309&m=aspire_4530R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&s=2&o=vp32&d=0309&m=aspire_4530R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&s=2&o=vp32&d=0309&m=aspire_4530R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhostO2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dllO2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dllO2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dllO4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exeO4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exeO4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXEO4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exeO4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exeO4 - HKLM\..\Run: [Everything] "C:\Program Files\Everything\Everything.exe" -startupO4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exeO4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRunO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exeO4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dllO9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dllO9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLLO13 - Gopher Prefix: O17 - HKLM\System\CCS\Services\Tcpip\..\{47AEBA84-4DCD-4FAB-8156-D4A1D1BF1335}: NameServer = 192.168.1.1O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dllO23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exeO23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exeO23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exeO23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exeO23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exeO23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exeO23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exeO23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exeO23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe--End of file - 7122 bytesand proc explorerProcess PID CPU Description Company NameSystem Idle Process 0 80.19 Interrupts n/a 2.27 Hardware Interrupts DPCs n/a Deferred Procedure Calls System 4 smss.exe 580 Windows Session Manager Microsoft Corporationcsrss.exe 660 Client Server Runtime Process Microsoft Corporationwininit.exe 712 Windows Start-Up Application Microsoft Corporation services.exe 756 Services and Controller app Microsoft Corporation svchost.exe 916 Host Process for Windows Services Microsoft Corporation WmiPrvSE.exe 360 WMI Provider Host Microsoft Corporation unsecapp.exe 376 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation unsecapp.exe 2584 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation svchost.exe 976 Host Process for Windows Services Microsoft Corporation svchost.exe 1012 Host Process for Windows Services Microsoft Corporation audiodg.exe 1148 Windows Audio Device Graph Isolation Microsoft Corporation svchost.exe 1056 Host Process for Windows Services Microsoft Corporation dwm.exe 2080 0.76 Desktop Window Manager Microsoft Corporation svchost.exe 1076 Host Process for Windows Services Microsoft Corporation taskeng.exe 1548 Task Scheduler Engine Microsoft Corporation taskeng.exe 2136 Task Scheduler Engine Microsoft Corporation svchost.exe 1164 Host Process for Windows Services Microsoft Corporation SLsvc.exe 1184 Microsoft Software Licensing Service Microsoft Corporation svchost.exe 1524 Host Process for Windows Services Microsoft Corporation svchost.exe 1604 Host Process for Windows Services Microsoft Corporation eDSService.exe 1632 Acer eDataSecurity Management Service Egis Incorporated ETService.exe 1656 Acer Empowering Technology Framework Service Framework.NotificationCenter.exe 600 Acer Empowering Technology Framework Notification Center acer svchost.exe 1700 Host Process for Windows Services Microsoft Corporation MobilityService.exe 1736 app SearchIndexer.exe 1860 4.54 Microsoft Windows Search Indexer Microsoft Corporation SearchProtocolHost.exe 336 0.76 Microsoft Windows Search Protocol Host Microsoft Corporation SearchFilterHost.exe 1440 7.57 Microsoft Windows Search Filter Host Microsoft Corporation wmpnetwk.exe 2844 Windows Media Player Network Sharing Service Microsoft Corporation WLIDSVC.EXE 748 Microsoft® Windows Live ID Service Microsoft Corporation WLIDSVCM.EXE 3752 Microsoft® Windows Live ID Service Monitor Microsoft Corporation SbieSvc.exe 1968 Sandboxie Service tzuk spoolsv.exe 2156 Spooler SubSystem App Microsoft Corporation svchost.exe 3624 Host Process for Windows Services Microsoft Corporation Locator.exe 2600 Rpc Locator Microsoft Corporation lsass.exe 768 Local Security Authority Process Microsoft Corporation lsm.exe 776 Local Session Manager Service Microsoft Corporationcsrss.exe 724 Client Server Runtime Process Microsoft Corporationwinlogon.exe 1300 Windows Logon Application Microsoft Corporationexplorer.exe 2120 0.76 Windows Explorer Microsoft Corporation SynTPEnh.exe 2256 1.51 Synaptics TouchPad Enhancements Synaptics, Inc. SynTPHelper.exe 3032 Synaptics Pointing Device Helper Synaptics, Inc. eDSLoader.exe 2272 Acer eDataSecurity Management Loader Egis Incorporated QtZgAcer.EXE 2280 Launch Manager Dritek System Inc. ePower_DMC.exe 2308 Acer ePower Management - DMC Acer Inc. Everything.exe 2352 Everything wmpnscfg.exe 2516 Windows Media Player Network Sharing Service Configuration Application Microsoft Corporation uTorrent.exe 3144 µTorrent BitTorrent, Inc.firefox.exe 3536 Firefox Mozilla Corporation explorer.exe 3732 Windows Explorer Microsoft Corporation procexp.exe 2108 1.51 Sysinternals Process Explorer Sysinternals - www.sysinternals.com WinRAR.exe 2320 WinRAR archiver Alexander RoshalProcess: uTorrent.exe Pid: 3144Name Description Company Name VersionADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.0.6002.18005ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.0CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.6931.18000COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.10.6002.18005comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.0.6002.18005dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.0.6002.18005dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.0.6002.18005DnsApi.dll DNS Client API DLL Microsoft Corporation 6.0.6002.18005GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6002.18005GPAPI.dll Group Policy Client API Microsoft Corporation 6.0.6002.18005hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 6.0.6001.18000iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 8.0.6001.18783IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6002.18005Iphlpapi.dll IP Helper API Microsoft Corporation 6.0.6002.18005kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.0.6002.18005kernel32.dll.mui Windows NT BASE API Client DLL Microsoft Corporation 6.0.6001.18000locale.nls locale.nls LPK.DLL Language Pack Microsoft Corporation 6.0.6001.18000mdnsNSP.dll Bonjour Namespace Provider Apple Computer, Inc. 1.0.3.1MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.0.6002.18005msctf.dll.mui MSCTF Server DLL Microsoft Corporation 6.0.6000.16386msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6002.18005mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.0.6002.18005msxml3.dll MSXML 3.0 SP10 Microsoft Corporation 8.100.5000.0msxml3r.dll XML Resources Microsoft Corporation 8.20.8730.1napinsp.dll E-mail Naming Shim Provider Microsoft Corporation 6.0.6001.18000netshell.dll Network Connections Shell Microsoft Corporation 6.0.6002.18005NLAapi.dll Network Location Awareness 2 Microsoft Corporation 6.0.6001.18000npmproxy.dll Network List Manager Proxy Microsoft Corporation 6.0.6000.16386NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6001.18000ntdll.dll NT Layer DLL Microsoft Corporation 6.0.6002.18005NTMARTA.DLL Windows NT MARTA provider Microsoft Corporation 6.0.6002.18005ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.0.6002.18005oleaut32.dll Microsoft Corporation 6.0.6002.18005pnrpnsp.dll PNRP Name Space Provider Microsoft Corporation 6.0.6001.18000PSAPI.DLL Process Status Helper Microsoft Corporation 6.0.6000.16386rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.0.6000.16386RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.0.6002.18024rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.0.6002.18005SAMLIB.dll SAM Library DLL Microsoft Corporation 6.0.6002.18005Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6002.18005SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.6002.18005shfolder.dll Shell Folder Service Microsoft Corporation 6.0.6000.16386SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.6002.18005slc.dll Software Licensing Client Dll Microsoft Corporation 6.0.6002.18005SSDPAPI.dll SSDP Client API DLL Microsoft Corporation 6.0.6000.16386SXS.DLL Fusion 2.5 Microsoft Corporation 6.0.6001.18000SysHook.dll Acer ePower Management - SysHook Dynamic Link Library 3.0.3000.0upnp.dll UPnP Control Point API Microsoft Corporation 6.0.6001.18000urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 8.0.6001.18783urlmon.dll.mui OLE32 Extensions for Win32 Microsoft Corporation 8.0.6001.18702USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6002.18005USERENV.dll Userenv Microsoft Corporation 6.0.6002.18005USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6002.18005uTorrent.exe µTorrent BitTorrent, Inc. 1.9.0.15380uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.0.6001.18000VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.0.6002.18005WINHTTP.dll Windows HTTP Services Microsoft Corporation 6.0.6002.18005WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6001.18000winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.0.6002.18005WINSPOOL.DRV Windows Spooler Driver Microsoft Corporation 6.0.6002.18005WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6002.18005WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.0.6001.18000wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.0.6001.18000wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.0.6001.18000--- worked for a few minutes and I added a new torrent, then it took a nose dive and froze up again! i'll try and post the dump file using one of those upload links on the thread you posted above. Link to comment Share on other sites More sharing options...
GTHK Posted July 12, 2009 Report Share Posted July 12, 2009 Place crash dump on mediafire.com, post link here. Link to comment Share on other sites More sharing options...
wizayne Posted July 12, 2009 Author Report Share Posted July 12, 2009 http://www.mediafire.com/?sharekey=0e2c6477db4b3762d0d290dca69ceb5ce04e75f6e8ebb871the complete dump is huge, something like 65m/bytes. Link to comment Share on other sites More sharing options...
GTHK Posted July 12, 2009 Report Share Posted July 12, 2009 Next time you can ZIP/RAR/7zip it XDDump doesn't really seem to help, unless you have hacked version of WIndows or something (maybe). Got anymore? Anyway, what's this? SysHook.dll Acer ePower Management - SysHook Dynamic Link Library 3.0.3000.0Maybe you can close whatever program that it's related to? What build of 1.9? Maybe try 1.8.3? Link to comment Share on other sites More sharing options...
wizayne Posted July 12, 2009 Author Report Share Posted July 12, 2009 it's for an automated power management program that came with my [acer] laptop. pretty handy, i use it on my other two acer laptops as well.. also with utorrent .. 1.9alpha WAS working on this laptop for a day (that's when i installed it).. it is still working, however, clicking on the tray icon and getting the menu are delayed by quite a bit.. as far as hacked windows, the only things that has been hacked is the theme.dll libraries so i can install cool themes, did that b4 i installed uT on here, even prior to using 1.8.3 (which has worked since the 24th of last month.. if i had hacked windows vista i sure as hell wouldn't have gone with home premium since it has some missing features that i dont need but would prefer. damn microsoft/oem partnerships!didn't think of rarring it.. i'll keep that in mind for next time. guess i should just roll back to 1.8.3 and wait for a beta to come out, or for a few bug fixes to come out in 1.9alpha? uT just finished a download that i queued up when i first started this thread (about average considering i uploaded the dump file) and it's halfway thru another and both are 700mb so speed seems to be unaffected. once uT is displayed on screen it works normally. i just have to be patient for the user interface to come up and i'm not very patient.do you see any other anomalous dll files? stopping the epower management did nada.. uT seems to stop responding and then come back very odd.. i suppose i can deal with the delay as long as the files still download/seed and do not become corrupt.. Link to comment Share on other sites More sharing options...
GTHK Posted July 12, 2009 Report Share Posted July 12, 2009 Acer could still cause problems later/under certain conditions | Only other thing is Apple's crap but I haven't heard of that causing problems, ever, so...Also, 1.8.3 releases came after for a while instead of 1.9, dunno if that means anything :|I don't see anything else, although HJT/PE logs aren't exactly my forte. When you stop power management, make sure that file actually disappears from the PE list. Link to comment Share on other sites More sharing options...
wizayne Posted July 12, 2009 Author Report Share Posted July 12, 2009 yep it does, it runs as a few seperate services. it's still nearly completed two files but at times the window title bar says "Not Responding" it's weird. i'll be downgrading to 1.8.3 once this last torrent is done. i'm sure that'll correct the problem but it's a shame because 1.9 is faster... ;\ Link to comment Share on other sites More sharing options...
GTHK Posted July 12, 2009 Report Share Posted July 12, 2009 See if you can get Acer stopped completely/removed temporarily. If that power manager has an option to save and close active programs it's even more likely to be causing issues. Link to comment Share on other sites More sharing options...
wizayne Posted July 12, 2009 Author Report Share Posted July 12, 2009 It doesn't have any option to close program. it merely regulates power settings depending on profiles and automatically switches profiles as soon as the ac is plugged or unplugged Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.