Utorrent losing preferences when closing

[sim21]

Hello.

I am using Utorrent 1.7.5. Sometimes on closing I get the error message 'cannot save resume file data may be lost'. I know to go to the Application Data folder and create a new file resume.dat and settings.dat. this ensures that when I restart Utorrent my torrents are there. However all my preferences are gone. Sometimes when I go to the App data folder the Utorrent folder has disappeared all together and I also have to create a utorrent folder.

I also sometimes get an error while running utorrent, that 'utorrent has experienced a problem and has to close' when this error happens and utorrent is closed all my torrents as well as my preferences are gone and I have to reload all my torrents, using autoload and reset my prefences.

Is there something in the setup or prefernces that I can change to fix these problems?? any ideas appreciated. thankyou.

[Firon]

Can you post a HijackThis log and a DLL list from Process Explorer?

[sim21]

At the risk of sounding stupid.......I have no idea how to do this, but if you can show me how, yes I will. thanks.

[jewelisheaven]

In the How-To in my signature near the bottom

HijackThis is relatively simple.

For Process Explorer, download the zip, unzip, open procexp.exe, Ctrl-L, Ctrl-D, click utorrent.exe, Ctrl-A, open saved logfile, copy-paste below

[sim21]

Thankyou jewelisheaven your assistance is greaty appreciated.

Here are the logs:

Hijack this:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 1:32:21 PM, on 9/01/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe

C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe

C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

C:\WINDOWS\system32\svcprs32.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe

C:\WINDOWS\cfgmng32.exe

C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.28\QOELoader.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe

C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe

C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe

C:\WINDOWS\system32\mdmcls32.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Outlook Express\msimn.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.28\qoeapp.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CAGlobal.exe

C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Light\CAGlobalLight.exe

C:\Program Files\utorrent\utorrent.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL

O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O2 - BHO: CA Toolbar Helper - {FBF2401B-7447-4727-BE5D-C19B2075CA84} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CallingIDIE.dll

O3 - Toolbar: CA Toolbar - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\WebsiteInspector\Toolbar\CallingIDIE.dll

O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"

O4 - HKLM\..\Run: [dvHighMem] C:\WINDOWS\cfgmng32.exe

O4 - HKLM\..\Run: [cafw] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl

O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe

O4 - HKLM\..\Run: [capfupgrade] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.28\QOELoader.exe"

O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S

O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZUxdm080YYAU

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/MyFunCardsFWBInitialSetup1.0.0.15-3.cab

O16 - DPF: {68A2C3BD-7809-11D3-8ACF-0050046F2F9A} (AXELPlayer Class) - http://www.mindavenue.com/Downloads/AXELPlayerAX_Win32.cab

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe

O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe

O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe

O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe

O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe

O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe

O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

O23 - Service: WinSock Svchost Manager (WinSvchostManager) - Unknown owner - C:\WINDOWS\system32\svcprs32.exe

--

End of file - 10023 bytes

Process Explorer:

Process PID CPU Description Company Name

System Idle Process 0

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 400 Windows NT Session Manager Microsoft Corporation

csrss.exe 700 Client Server Runtime Process Microsoft Corporation

winlogon.exe 884 Windows NT Logon Application Microsoft Corporation

services.exe 1020 1.49 Services and Controller app Microsoft Corporation

svchost.exe 1572 Generic Host Process for Win32 Services Microsoft Corporation

mdmcls32.exe 3556 mdmcls32.exe

mdmcls32.exe 1936 mdmcls32.exe

msmsgs.exe 3108 Windows Messenger Microsoft Corporation

WLLoginProxy.exe 1124 WLLoginProxy.exe Microsoft Corporation

CAGlobal.exe 2420 CallingID Ltd.

CAGlobalLight.exe 2072 CallingID Ltd.

IEXPLORE.EXE 3004 Internet Explorer Microsoft Corporation

svchost.exe 1776 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 244 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 740 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1164 Generic Host Process for Win32 Services Microsoft Corporation

spoolsv.exe 1872 Spooler SubSystem App Microsoft Corporation

UmxCfg.exe 2008 HIPS Configuration Engine CA

UmxFwHlp.exe 2020 HIPS Firewall Helper Service CA

UmxPol.exe 420 HIPS Policy Manager Service CA

UmxAgent.exe 500 HIPS Event Manager CA

capfsem.exe 2504 CA Personal Firewall Application CA, Inc.

AppleMobileDeviceService.exe 1056 Apple Mobile Device Service Apple, Inc.

isafe.exe 1128 CA ISafe Service Computer Associates International, Inc.

ITMRTSVC.exe 1336 eTrust PestPatrol Real-time service CA, Inc.

svchost.exe 372 Generic Host Process for Win32 Services Microsoft Corporation

vetmsg.exe 1136 CA Anti-Virus Realtime Messaging Service CA, Inc.

svcprs32.exe 1232 svcprs32.exe

alg.exe 188 Application Layer Gateway Service Microsoft Corporation

ccprovsp.exe 1144 CCProvSP CA, Inc.

ppctlpriv.exe 2340 CA Anti-Spyware Elevation service CA, Inc.

iPodService.exe 2212 iPodService Module Apple Inc.

lsass.exe 1080 1.49 LSA Shell (Export Version) Microsoft Corporation

explorer.exe 2104 16.42 Windows Explorer Microsoft Corporation

SOUNDMAN.EXE 2916 Realtek Sound Manager Realtek Semiconductor Corp.

iTunesHelper.exe 3124 iTunesHelper Module Apple Inc.

cctray.exe 3192 CA Common Tray CA, Inc.

cappactiveprotection.exe 768 CAPPActiveProtection Application CA, Inc.

cfgmng32.exe 3304 cfgmng32.exe

capfasem.exe 3504 77.61 CA Personal Firewall capfasem Module CA, Inc.

QOELoader.exe 3736 QOELoader Application CA

cavrid.exe 3828 CA Anti-Virus Realtime Infection Report CA, Inc.

apdproxy.exe 3900 Adobe Photoshop Album Starter Edition 3.2 component Adobe Systems Incorporated

MWSOEMON.EXE 780 My Web Search Plugin Loader MyWebSearch.com

ctfmon.exe 1584 CTF Loader Microsoft Corporation

GoogleToolbarNotifier.exe 1964 GoogleToolbarNotifier Google Inc.

msnmsgr.exe 2160 Messenger Microsoft Corporation

NMBgMonitor.exe 2332 Nero Home Nero AG

msimn.exe 1600 Outlook Express Microsoft Corporation

QOEApp.exe 3824 QOEApp Application CA

utorrent.exe 3400 1.49

IEXPLORE.EXE 3292 Internet Explorer Microsoft Corporation

WinRAR.exe 3656

procexp.exe 3432 1.49 Sysinternals Process Explorer Sysinternals

Process: utorrent.exe Pid: 3400

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.2180

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.2180

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.2180

appHelp.dll Application Compatibility Client Library Microsoft Corporation 5.01.2600.2180

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0000

browseui.dll Shell Browser UI Library Microsoft Corporation 6.00.2900.3231

CIDLinkAdvisor.dll CallingID Ltd. 1.01.0000.0064

CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0308

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.2982

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.2900.2180

COMRes.dll Microsoft Corporation 2001.12.4414.0258

CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.2600.2180

CRYPTUI.dll Microsoft Trust UI Provider Microsoft Corporation 5.131.2600.2180

CSCDLL.dll Offline Network Agent Microsoft Corporation 5.01.2600.2180

cscui.dll Client Side Caching UI Microsoft Corporation 5.01.2600.2180

ctype.nls

DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.01.2600.2938

GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.2180

IMAGEHLP.dll Windows NT Image Helper Microsoft Corporation 5.01.2600.2180

index.dat

index.dat

index.dat

Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.2912

ISafeIf.dll CA ISafe Interface DLL Computer Associates International, Inc. 8.00.0008.0000

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.3119

LINKINFO.dll Windows Volume Tracking Microsoft Corporation 5.01.2600.2751

locale.nls

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.2180

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.01.2600.2180

MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.2180

msi.dll Windows Installer Microsoft Corporation 3.01.4000.4039

MSVCP60.dll Microsoft ® C++ Runtime Library Microsoft Corporation 6.02.3104.0000

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.01.2600.2180

mwsoestb.dll My Web Search Plugin Loader MyWebSearch.com 1.02.0003.0002

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.2976

ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180

ntshrui.dll Shell extensions for sharing Microsoft Corporation 5.01.2600.2180

ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2726

OLEACC.dll Active Accessibility Core Component Microsoft Corporation 4.02.5406.0000

oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation 4.02.5406.0000

OLEAUT32.dll Microsoft Corporation 5.01.2600.3139

QOEHook.dll QOEHook Dynamic Link Library CA 6.00.0001.0028

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.2938

rnapxs.dat

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.3173

rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.2180

SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.2180

Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.2180

SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.2180

shdocvw.dll Shell Doc Object and Control Library Microsoft Corporation 6.00.2900.3231

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3241

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.3231

sortkey.nls

sorttbls.nls

SXS.DLL Fusion 2.5 Microsoft Corporation 5.01.2600.3019

unicode.nls

USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.3099

USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180

utorrent.exe

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.2180

VetRedir.dll CA ISafe LSP DLL Computer Associates International, Inc. 8.00.0008.0000

WININET.dll Internet Extensions for Win32 Microsoft Corporation 6.00.2900.3231

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.01.2600.2180

winsflt.dll winsflt.dll 5.00.0038.0000

WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 5.131.2600.2180

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.2180

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.2180

WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.2180

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.2180

xpsp2res.dll Service Pack 2 Messages Microsoft Corporation 5.01.2600.2180

I think I did everything properly........thanks in advance.

[jewelisheaven]

Well as a cursory glance, these extra DLLs loaded by programs you're already running may be incompatible:

CIDLinkAdvisor.dll        CallingID Ltd.    1.01.0000.0064
ISafeIf.dll    CA ISafe Interface DLL    Computer Associates International, Inc.    8.00.0008.0000
mwsoestb.dll    My Web Search Plugin Loader    MyWebSearch.com    1.02.0003.0002
QOEHook.dll    QOEHook Dynamic Link Library    CA    6.00.0001.0028
rnapxs.dat           
VetRedir.dll    CA ISafe LSP DLL    Computer Associates International, Inc.    8.00.0008.0000
winsflt.dll    winsflt.dll        5.00.0038.0000

It is possible your AV is keeping uT's settings from saving, could you try adding %APPDATA%\uTorrent to its exception list? :/

Unless you LIKE having your browsing experience being redirected through "My Web Search" I would go through removal procedures in the program or use HiJackThis in fix mode coupled with LSPFix to remove the entries left by taking this (presumed adware) out of your system.

So, you've got a Canon printer, eh?

Did I mention how MANY antivirus programs you have running under your CA security suite?? Are you sure you need them all?

Could you describe your computer layout as something like this:

ISP -> modem -> router -> computers? When you setup your computer did you login to your router, or the ISPs modem they gave you for port forwarding (if you don't have your own router and instead used the ISPs modem, it has a modem+router functionality). In that case all of this ... internet protection, software firewall, and realtime monitoring is essentially useless. I do agree that an email scanner is a good idea because you never KNOW what's out there. But with you behind a hardware firewall the weakest point (in my experience) is your IE6, with its ActiveX allowing whatever to download. I would set it up to BLOCK all activex scripting by default and only allow sites you TRUST (a whitelist) to do anything.

Err you also may want to double check after removal of that software because you have software masquerading as legitimate windows processes. http://www.prevx.com/filenames/3006961307729582796-0/SVCPRS32.EXE.html is a link to information about your service O23 - Service: WinSock Svchost Manager (WinSvchostManager) - Unknown owner - C:\WINDOWS\system32\svcprs32.exe

Yeah, and

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocach … 0.15-3.cab
O16 - DPF: {68A2C3BD-7809-11D3-8ACF-0050046F2F9A} (AXELPlayer Class) - http://www.mindavenue.com/Downloads/AXE … _Win32.cab

... i wouldn't trust them, the mindavenue says it's an english landing portal, but.. it's not. and I couldn't even get a website for imgfarm.com

[sim21]

Hi, Ok I have removed 'my web search', and checked my firewall where I had already made utorrent and exception to allow it. As for the antivirus, i obviously have a security suite and it runs itself - do i need them all, i dont know?

How do I set up the active x this way??

I went to the site you gave me, it ran a spyware/malaware program but did not find anything, how do I get rid of it if the spyware programs cannot find it??

For tha last part - I found the AXELPlayer as an addon and diabled it, but it did not come up as a program to remove it and could not find the first one at all??

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocach … 0.15-3.cab

Again thankyou for your help.

[jewelisheaven]

My question now is, do you find the error showing up less often, or at all now?

One thing to check in your security suite.. for whatever "active monitoring" tool it uses, see if there's an "open in read-only" mode, or as an alternative see if you can add %APPDATA%\uTorrent to its whitelist (exception for a folder).

[sim21]

Ok - well I had to reboot to completely get rid of some programs, when i restarted utorrent all my torrents and settings were gone, had to start again.

could not find a 'read on;y' mode and could not add the utorrent folder in appdata, but could add the resume.dat and settings.dat file individually.