Rufus J Squirrel Posted February 25, 2008 Report Posted February 25, 2008 Hello. I guess it all started with the 1.7.7 upgrade. I have since uninstalled Netlimiter and Zone Alarm with no effect. I have no idea what could possibly be causing the problem. Sometimes it happens when the computer is idle, sometimes not.Logfile of Trend Micro HijackThis v2.0.0 (BETA)Scan saved at 5:20:21 PM, on 2/25/2008Platform: Windows XP SP2 (WinNT 5.01.2600)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\RTHDCPL.EXEC:\Program Files\cFosSpeed\spd.exeC:\Program Files\MozyHome\mozybackup.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\Program Files\Java\jre1.6.0_03\bin\jusched.exeC:\Program Files\cFosSpeed\cFosSpeed.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Winamp Remote\bin\OrbMediaService.exeC:\WINDOWS\system32\PnkBstrA.exeC:\Program Files\Winamp Remote\bin\OrbTray.exeC:\program files\steam\steam.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\DAEMON Tools\daemon.exeC:\Program Files\PeerGuardian2\pg2.exeC:\Program Files\uTorrent\uTorrent.exeC:\Program Files\MozyHome\mozystat.exeC:\Program Files\Last.fm\LastFMHelper.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\iTunes\iTunes.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Soulseek\slsk.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Winamp\winamp.exeC:\Program Files\Winamp Remote\bin\Orb.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Last.fm\LastFM.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exeC:\Program Files\HiJackThis_v2.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seanconneryhasthemostunusualvendingmachine.ytmnd.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLLO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dllO2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dllO4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXEO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"O4 - HKLM\..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cFosSpeed.exeO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silentO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exeO4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /backgroundO4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exeO4 - Global Startup: MozyHome Status.lnk = C:\Program Files\MozyHome\mozystat.exeO8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.htmlO8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.htmlO8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dllO9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLLO9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1187673172968O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocxO18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLLO22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dllO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dllO23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeO23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exeO23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exeO23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exeO23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exeO23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: MozyHome Backup Service (mozybackup) - Unknown owner - C:\Program Files\MozyHome\mozybackup.exeO23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exeO23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: OrbMediaService - Orb Networks - C:\Program Files\Winamp Remote\bin\OrbMediaService.exeO23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exeO23 - Service: Tor Win32 Service (tor) - Unknown owner - C:\Program Files\Vidalia Bundle\Tor\tor.exe (file missing)Tor is actually uninstalled.Process PID CPU Description Company NameSystem Idle Process 0 96.15 Interrupts n/a Hardware Interrupts DPCs n/a Deferred Procedure Calls System 4 smss.exe 1012 Windows NT Session Manager Microsoft Corporation csrss.exe 1084 Client Server Runtime Process Microsoft Corporation winlogon.exe 1112 Windows NT Logon Application Microsoft Corporation services.exe 1156 0.77 Services and Controller app Microsoft Corporation svchost.exe 1324 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1384 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1504 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1572 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1712 Generic Host Process for Win32 Services Microsoft Corporation aawservice.exe 1888 Ad-Aware 2007 Service Lavasoft aswUpdSv.exe 1952 avast! Antivirus updating service ALWIL Software ashServ.exe 2008 avast! antivirus service ALWIL Software spoolsv.exe 564 Spooler SubSystem App Microsoft Corporation AppleMobileDeviceService.exe 1432 Apple Mobile Device Service Apple, Inc. mDNSResponder.exe 1456 Bonjour Service Apple Inc. spd.exe 1624 cFosSpeed Service cFos Software GmbH mozybackup.exe 360 nvsvc32.exe 2104 NVIDIA Driver Helper Service, Version 169.04 NVIDIA Corporation OrbMediaService.exe 2144 OrbMediaService Orb Networks OrbTray.exe 2196 Orb Orb Networks Orb.exe 2080 Orb Application Orb Networks, Inc. PnkBstrA.exe 2172 ashMaiSv.exe 2532 avast! e-Mail Scanner Service ALWIL Software ashWebSv.exe 2580 0.77 avast! Web Scanner ALWIL Software alg.exe 3308 Application Layer Gateway Service Microsoft Corporation svchost.exe 4008 Generic Host Process for Win32 Services Microsoft Corporation iPodService.exe 604 iPodService Module Apple Inc. lsass.exe 1168 LSA Shell (Export Version) Microsoft Corporationexplorer.exe 904 Windows Explorer Microsoft Corporation RTHDCPL.exe 1468 Realtek HD Audio Control Panel Realtek Semiconductor Corp. ashDisp.exe 1036 avast! service GUI component ALWIL Software GrooveMonitor.exe 1748 GrooveMonitor Utility Microsoft Corporation jusched.exe 1696 Java(TM) Platform SE binary Sun Microsystems, Inc. cfosspeed.exe 1828 cFosSpeed Window cFos Software GmbH rundll32.exe 1852 Run a DLL as an App Microsoft Corporation iTunesHelper.exe 2132 iTunesHelper Module Apple Inc. steam.exe 2412 Steam Valve Corporation ctfmon.exe 2588 CTF Loader Microsoft Corporation daemon.exe 3004 Virtual DAEMON Manager DT Soft Ltd. pg2.exe 3300 PeerGuardian 2 Methlabs uTorrent.exe 3596 mozystat.exe 3832 LastFMHelper.exe 3840 Last.fm Helper Last.fm iTunes.exe 4024 iTunes Apple Inc. AppleMobileDeviceHelper.exe 2232 AppleMobileDeviceHelper slsk.exe 896 0.77 SoulSeek firefox.exe 1632 Firefox Mozilla Corporation winamp.exe 2056 Winamp Nullsoft LastFM.exe 3236 Last.fm Last.fm HiJackThis_v2.exe 1772 HijackThis Trend Micro Inc. notepad.exe 2316 Notepad Microsoft Corporation procexp.exe 704 1.54 Sysinternals Process Explorer Sysinternalsdistnoted.exe 2672 distnoted.exe Process: uTorrent.exe Pid: 3596Name Description Company Name VersionACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.2180adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.2180ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.2180apphelp.dll Application Compatibility Client Library Microsoft Corporation 5.01.2600.2180ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0000CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0308COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.2982comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.2900.2180COMRes.dll Microsoft Corporation 2001.12.4414.0258CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.2600.2180ctype.nls DNSAPI.dll DNS Client API DLL Microsoft Corporation 5.01.2600.2938dssenh.dll Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider Microsoft Corporation 5.01.2600.2133GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.3159hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.2180iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.00.6000.16608IMAGEHLP.dll Windows NT Image Helper Microsoft Corporation 5.01.2600.2180IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation 5.01.2600.2180index.dat index.dat index.dat Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.2912kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.3119locale.nls LPK.DLL Language Pack Microsoft Corporation 5.01.2600.2180mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 1.00.0004.0012MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.2180MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.01.2600.2180MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.2180msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.01.2600.2180msv1_0.dll Microsoft Authentication Package v1.0 Microsoft Corporation 5.01.2600.2180msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.2180mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.01.2600.2180NETAPI32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.2976Normaliz.dll Unicode Normalization DLL Microsoft Corporation 6.00.5441.0000ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.2180ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.2726oleaut32.dll Microsoft Corporation 5.01.2600.3266rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.2938RASAPI32.dll Remote Access API Microsoft Corporation 5.01.2600.2180rasman.dll Remote Access Connection Manager Microsoft Corporation 5.01.2600.2180RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.3173rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.01.2600.2161rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.2180SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.2180schannel.dll TLS / SSL Security Provider Microsoft Corporation 5.01.2600.3126Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.2180sensapi.dll SENS Connectivity API DLL Microsoft Corporation 5.01.2600.2180SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.2180SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.3241SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.3121sortkey.nls sorttbls.nls TAPI32.dll Microsoft® Windows(TM) Telephony API Client DLL Microsoft Corporation 5.01.2600.2180unicode.nls urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.00.6000.16608USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.3099USERENV.dll Userenv Microsoft Corporation 5.01.2600.2180USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.420.2600.2180uTorrent.exe UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.2180VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.2180wininet.dll Internet Extensions for Win32 Microsoft Corporation 7.00.6000.16608WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.2180winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 5.01.2600.2180wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation 5.131.2600.2180WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.2180WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.2180WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.2180wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.2180xpsp2res.dll Service Pack 2 Messages Microsoft Corporation 5.01.2600.2180Any help is greatly appreciated. All the programs I am currently running have been on here for a long time and everything was running fine until the update. Thanks.
jewelisheaven Posted February 26, 2008 Report Posted February 26, 2008 There's a couple of extra Windows DLLs injected that I don't recognize.... Have you setup CFOSSpeed according to the Software Firewalls Configuration thread? There are some Incompatible Software installed.. including the nero scout which caused troubloe with "access denied" errors :/ Additionally blocking is useless so why do you even bother with PeerGuardian. Not to mention they recently added updated servers for ESET antivirus to their ... list, lol
jewelisheaven Posted February 26, 2008 Report Posted February 26, 2008 The point is they admit to doing it on their mainpage, and thinking of yourself as "safe" when using a blocklist application still is a delusion.
GTHK Posted February 26, 2008 Report Posted February 26, 2008 I agree, and using PeerGuarding can cause quite a few problems.
Rufus J Squirrel Posted February 26, 2008 Author Report Posted February 26, 2008 I appreciate the problems with PeerGuardian and its general uselessness but I have had few problems with it, once I set up the proper IP exceptions. Unless, of course, it's somehow causing this. My ports are correctly forwarded and CFOS is, far as I know, correctly configured. Moreover, I've been running it for at least a year and half - well in excess of the current problems. I am showing as connectable on any torrent site. Avast P2P is off.What incompatible software, in particular, are you seeing? I looked over the FAQ and didn't think I was running any. Thanks for the help so far.
jewelisheaven Posted February 26, 2008 Report Posted February 26, 2008 As I mentioned above Nero Scout (Nero 7 and 8's version of a media indexer), as well as possibly the Orb suite you use can cause access denied errors... not necessarily the crashing however. Unfortunately I don't know of a troubleshooting regimen which does not include removing software piecemeal to see where the incompatibilty lies. Truthfully since it is not a rogue injected DLL (into utorrent.exe) that makes the process a bit harder... What timeframe are we talking about for the crashing... and does it crate dump files (you will find them as *.dmp in the %APPDATA%\utorrent directory)... When you get the crash dialog can you say do not relaunch and do not send the files. Alternatively gather up the .dmp and rar or some other compression mechanism and upload them to mediafire.com ? It allows direct correlation of specific dumps to specific problems.
Rufus J Squirrel Posted February 26, 2008 Author Report Posted February 26, 2008 It has been generating dumps but my understanding is that those dumps have username and password hashes in them. Before I put them somewhere public, can you tell me what I should use to open them? It's all gibberish in Wordpad, Notepad, Word, etc. I'd like to have a good look at one too to see if I can tell anything.To answer the question though, it sometimes generates dumps and sometimes just crashes. The timeframe actually seems rather random. I had only been seeing them when I'd get up in the morning after having left uTorrent running all night or when I got home from work but a couple nights ago it crashed within maybe an hour of a cold start.
Firon Posted February 26, 2008 Report Posted February 26, 2008 You can e-mail them to greg@bittorrent.com (with a link to this thread) if you don't wanna post it publicly.
jewelisheaven Posted February 26, 2008 Report Posted February 26, 2008 The dumps are dumps of memory information. If you don't want to post them publicly, then do the same as mentioned before and email them to greg@bittorrent.com. You should link to this thread and include more information about what you are doing when it crashes. I know the developers go through all email but.. as they are developers they are usually overworked as is and you will receive a response via email or this thread when they look at it.
Rufus J Squirrel Posted February 26, 2008 Author Report Posted February 26, 2008 Thanks guys. Will do.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.