revnice Posted January 21, 2009 Report Share Posted January 21, 2009 Gentlemen:What's the explanation for that message. The torrent hasn't been moved or deleted because if I Force Start it, it continues downloading. So access isn't really denied either. It goes fine for a while, then the error occurs again.Anyone?Thanks - rev Link to comment Share on other sites More sharing options...
moogly Posted January 21, 2009 Report Share Posted January 21, 2009 Because another processu tries to access to your data and blocks uT.Post here an Hijackthis log. Guide: http://forum.utorrent.com/viewtopic.php?id=29748 Link to comment Share on other sites More sharing options...
revnice Posted January 21, 2009 Author Report Share Posted January 21, 2009 Moogly:Thanks - here's the HJT log followed by Process Explorer log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:06:36 AM, on 1/21/2002Platform: Windows XP SP3, v.3264 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0013)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeG:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\Unlocker\UnlockerAssistant.exeC:\Program Files\Java\jre1.5.0_11\bin\jusched.exeC:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exeC:\WINDOWS\System32\DeltaIITray.exeC:\Program Files\SyncroSoft\Pos\H2O\cledx.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\FREEDO~1\fdm.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\oodag.exeC:\Program Files\Spyware Terminator\sp_rsser.exeG:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Memeo\AutoSync\MemeoAutoSync.exeG:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files\Java\jre1.5.0_11\bin\jucheck.exeC:\Program Files\utorrent\utorrent.exeC:\Program Files\Cakewalk\SONAR 7 Producer Edition\SONARPDR.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - G:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dllO2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dllO4 - HKLM\..\Run: [PRONoMgrWired] "c:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe"O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hideO4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [QuickTime Task] "G:\Program Files\QuickTime\QTTask.exe" -atboottimeO4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"O4 - HKLM\..\Run: [spywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"O4 - HKLM\..\Run: [DeltTray] DeltTray.exeO4 - HKLM\..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\System32\DeltaIITray.exeO4 - HKLM\..\Run: [DeltaIITaskbarApp] C:\WINDOWS\system32\DeltaIITray.exeO4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [TClockEx] "C:\Program Files\TClockEx\TCLOCKEX.EXE"O4 - HKCU\..\Run: [sUPERAntiSpyware] G:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeO4 - HKCU\..\Run: [Free Download Manager] C:\PROGRA~1\FREEDO~1\fdm.exe -autorunO4 - Global Startup: Memeo AutoSync Launcher.lnk = C:\Program Files\Memeo\AutoSync\MemeoLauncher.exeO8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htmO8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htmO8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htmO8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htmO8 - Extra context menu item: E&xport to Microsoft Excel - res://G:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLLO9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - G:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - G:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO15 - Trusted Zone: *.line6.netO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO20 - Winlogon Notify: !SASWinLogon - G:\Program Files\SUPERAntiSpyware\SASWINLO.DLLO23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - G:\Program Files\Lavasoft\Ad-Aware\aawservice.exeO23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - c:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exeO23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exeO23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exeO23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exeO23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - G:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeEnd of file - 6889 bytes--Begin Process Explorer fileProcess PID CPU Description Company NameSystem Idle Process 0 97.39 Interrupts n/a Hardware Interrupts DPCs n/a Deferred Procedure Calls System 4 smss.exe 652 Windows NT Session Manager Microsoft Corporation csrss.exe 744 Client Server Runtime Process Microsoft Corporation winlogon.exe 768 Windows NT Logon Application Microsoft Corporation services.exe 812 0.37 Services and Controller app Microsoft Corporation svchost.exe 992 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1100 Generic Host Process for Win32 Services Microsoft Corporation MsMpEng.exe 1196 Service Executable Microsoft Corporation svchost.exe 1312 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1356 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1428 Generic Host Process for Win32 Services Microsoft Corporation aawservice.exe 1600 Ad-Aware Service Lavasoft spoolsv.exe 480 Spooler SubSystem App Microsoft Corporation oodag.exe 728 O&O Defrag Agent (Win32) O&O Software GmbH locator.exe 1036 Rpc Locator Microsoft Corporation sp_rsser.exe 1016 Spyware Terminator Realtime Shield Service Crawler.com SpySweeper.exe 1652 Spy Sweeper Engine Webroot Software, Inc. alg.exe 2780 Application Layer Gateway Service Microsoft Corporation svchost.exe 3216 Generic Host Process for Win32 Services Microsoft Corporation lsass.exe 824 LSA Shell (Export Version) Microsoft Corporationexplorer.exe 1744 Windows Explorer Microsoft Corporation PRONoMgr.exe 1896 PRONotifyMgr Module Intel® Corporation MSASCui.exe 1904 Windows Defender User Interface Microsoft Corporation UnlockerAssistant.exe 1916 jusched.exe 1980 Java 2 Platform Standard Edition binary Sun Microsystems, Inc. jucheck.exe 2684 Java Update Checker Sun Microsystems, Inc. SpywareTerminatorShield.Exe 1992 Spyware Terminator Realtime Shield Crawler.com DeltaIITray.exe 2004 M-Audio Delta Tray Application cledx.exe 2020 Team H2O CLEDX Team H2O ctfmon.exe 2028 CTF Loader Microsoft Corporation fdm.exe 140 Free Download Manager FreeDownloadManager.ORG utorrent.exe 2208 SONARPDR.exe 3452 1.12 Twelve Tone Systems, Inc. iexplore.exe 3584 Internet Explorer Microsoft Corporation HijackThis.exe 1212 0.37 HijackThis Trend Micro Inc. notepad.exe 3084 Notepad Microsoft Corporation procexp.exe 3656 0.37 Sysinternals Process Explorer Sysinternals - www.sysinternals.comMemeoAutoSync.exe 3680 0.37 Memeo AutoSync Memeo Inc.SUPERANTISPYWARE.EXE 2200 SUPERAntiSpyware Application SUPERAntiSpyware.comProcess: HijackThis.exe Pid: 1212Name Description Company Name Version~DFE1A3.tmp ~DFE1A3.tmp ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.3264Apphelp.dll Application Compatibility Client Library Microsoft Corporation 5.01.2600.3264asycfilt.dll Microsoft Corporation 5.01.2600.3264CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0700comctl32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.3264comctl32.dll Common Controls Library Microsoft Corporation 5.82.2900.3264COMRes.dll Microsoft Corporation 2001.12.4414.0700ctype.nls DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.01.2600.3264fastprox.dll WMI Microsoft Corporation 5.01.2600.3264GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3264HijackThis.exe HijackThis Trend Micro Inc. 2.00.0000.0002IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation 5.01.2600.3264kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.3264locale.nls MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.3264msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.01.2600.3264MSVBVM60.DLL Visual Basic Virtual Machine Microsoft Corporation 6.00.0098.0002msvbvm60.dll Visual Basic Virtual Machine Microsoft Corporation 6.00.0098.0002MSVCP60.dll Microsoft ® C++ Runtime Library Microsoft Corporation 6.02.3104.0000msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.3264NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.3264ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.3264NTDSAPI.dll NT5DS Microsoft Corporation 5.01.2600.3264ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.3264OLEAUT32.dll Microsoft Corporation 5.01.2600.3264PSAPI.DLL Process Status Helper Microsoft Corporation 5.01.2600.3264RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.3264Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.3264SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.3264SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3264SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.3264sortkey.nls sorttbls.nls stdole2.tlb Microsoft Corporation 5.01.2600.3264SXS.DLL Fusion 2.5 Microsoft Corporation 5.01.2600.3264unicode.nls UnlockerHook.dll USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.3264VERSION.DLL Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.3264wbemcomn.dll WMI Microsoft Corporation 5.01.2600.3264wbemdisp.dll WMI Scripting Microsoft Corporation 5.01.2600.3264wbemprox.dll WMI Microsoft Corporation 5.01.2600.3264wbemsvc.dll WMI Microsoft Corporation 5.01.2600.3264WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.3264wmiutils.dll WMI Microsoft Corporation 5.01.2600.3264WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.3264WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.3264xpsp2res.dll Service Pack 2 Messages Microsoft Corporation 5.01.2600.3264 Link to comment Share on other sites More sharing options...
moogly Posted January 21, 2009 Report Share Posted January 21, 2009 lol you posted all the logs! For Process Explorer, it's utorrent.exe to select. But it's not important here.O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exeClassic media indexer and source of issues with uT. Unsinstall it. Link to comment Share on other sites More sharing options...
revnice Posted January 21, 2009 Author Report Share Posted January 21, 2009 What are the consequences of killing NMIndexingService.exe? If it's just indexing, I don't care.BTW: I think I spotted a systray msg from one of the spywares saying 'utorrent blocked.' Not certain because it vanished before I could read it. I Exited all the spywares in the systray and so far so good.Thanks for your help! Link to comment Share on other sites More sharing options...
moogly Posted January 21, 2009 Report Share Posted January 21, 2009 Yes antispywares can be the culprits too. If that's the case maybe look at if you can set your antispyware or change it for another one. Link to comment Share on other sites More sharing options...
revnice Posted January 21, 2009 Author Report Share Posted January 21, 2009 Thanks! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.