Mortuum Black Posted October 31, 2008 Report Share Posted October 31, 2008 Well now.i seem to have a rather odd problem..Whenever i try to load a torrent on uTorrent a second uTorrent Client opens with different torrents on the history list and downloading FAKE data.That means that it downloads,but it doesnt download.Ex. i downloaded Assassin's Creed but though it was around 80% i couldnt find the temp data..Also after it finished downloading it couldnt find any trace of it all..that happens everytime i try to open utorrent.so far i have tried reinstalling,deleting from registry utor entries, complete virus and spywere scan,and a process viewer to see if it is a different process or smt..well..nothing worked and i am kinda desperate Link to comment Share on other sites More sharing options...
thelittlefire Posted October 31, 2008 Report Share Posted October 31, 2008 ... where is it running from? Don't use /RECOVER parameter in the command line.Data is stored in the General tab, Save As location. Link to comment Share on other sites More sharing options...
Mortuum Black Posted November 1, 2008 Author Report Share Posted November 1, 2008 what do you mean exactly?coz you kinda confused me.and just to be sure i did a full search through all of my hard drives but even then i found no trace of the game or even the temp file. Link to comment Share on other sites More sharing options...
Ultima Posted November 1, 2008 Report Share Posted November 1, 2008 a) get HijackThis from trendsecure.com, run it, view the log, and post the contents here get Process Explorer from sysinternals.com, run it, Ctrl+D (to show the lower DLL pane), select the µTorrent process from the list, Ctrl+S (and save the list somewhere you'll find easily -- like the Desktop), then post the contents of the saved process list in the .txt file hereAnd uh, upload your µTorrent executable to virustotal.com and post the result link here. Link to comment Share on other sites More sharing options...
Mortuum Black Posted November 1, 2008 Author Report Share Posted November 1, 2008 Virustotal Scan (http://www.virustotal.com/analisis/da848edd33aef90e78878b40f0994817)---------------Proccess Explorer FoundingsProcess PID CPU Description Company NameSystem Idle Process 0 96.15 Interrupts n/a Hardware Interrupts DPCs n/a 1.54 Deferred Procedure Calls System 4 smss.exe 792 Windows NT Session Manager Microsoft Corporation csrss.exe 856 Client Server Runtime Process Microsoft Corporation winlogon.exe 892 Windows NT Logon Application Microsoft Corporation services.exe 936 Services and Controller app Microsoft Corporation ati2evxx.exe 1112 ATI External Event Utility EXE Module ATI Technologies Inc. svchost.exe 1132 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1212 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1260 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1344 Generic Host Process for Win32 Services Microsoft Corporation ISWSVC.exe 332 ZoneAlarm ForceField Check Point Software Technologies ForceField.exe 2824 ZoneAlarm ForceField Check Point Software Technologies ISWMGR.exe 3032 ZoneAlarm ForceField Check Point Software Technologies ISWMGR.exe 3652 ZoneAlarm ForceField Check Point Software Technologies ISWLDR.dat 5780 Firefox Mozilla Corporation spoolsv.exe 388 Spooler SubSystem App Microsoft Corporation svchost.exe 532 Generic Host Process for Win32 Services Microsoft Corporation AppleMobileDeviceService.exe 612 Apple Mobile Device Service Apple Inc. awServ.exe 640 AdminWorks Agent OSA Technologies Inc., An Avocent Company mDNSResponder.exe 1288 Bonjour Service Apple Inc. IAANTmon.exe 1352 RAID Monitor Intel Corporation NBService.exe 1588 Nero BackItUp Nero AG RichVideo.exe 600 RichVideo Module stacsv.exe 232 IDT PC Audio IDT, Inc. svchost.exe 1600 Generic Host Process for Win32 Services Microsoft Corporation uphclean.exe 1636 User Profile Hive Cleanup Service Microsoft Corporation searchindexer.exe 1988 Microsoft Windows Search Indexer Microsoft Corporation searchprotocolhost.exe 4828 Microsoft Windows Search Protocol Host Microsoft Corporation searchfilterhost.exe 5660 Microsoft Windows Search Filter Host Microsoft Corporation alg.exe 2504 Application Layer Gateway Service Microsoft Corporation iPodService.exe 2192 iPodService Module Apple Inc. vsmon.exe 2752 TrueVector Service Check Point Software Technologies LTD ScanningProcess.exe 412 ScanningProcess.exe 4964 usnsvc.exe 4792 Messenger Sharing USN Journal Reader Service Microsoft Corporation lsass.exe 948 LSA Shell (Export Version) Microsoft Corporation ati2evxx.exe 1472 ATI External Event Utility EXE Module ATI Technologies Inc.explorer.exe 1764 1.54 Windows Explorer Microsoft Corporation IAAnotif.exe 2876 Event Monitor User Notification Tool Intel Corporation jusched.exe 3020 Java Platform SE binary Sun Microsystems, Inc. VM_STI.EXE 3072 Vimicro Vimicro sttray.exe 3232 IDT PC Audio IDT, Inc. brs.exe 3284 brs cyberlink GrooveMonitor.exe 3328 GrooveMonitor Utility Microsoft Corporation itype.exe 3448 IType.exe Microsoft Corporation dpupdchk.exe 3760 dpupdchk.exe Microsoft Corporation iTunesHelper.exe 3572 iTunesHelper Module Apple Inc. ctfmon.exe 3608 CTF Loader Microsoft Corporation daemon.exe 3660 DAEMON Tools Lite DT Soft Ltd uTorrent.exe 2044 µTorrent BitTorrent, Inc. zlclient.exe 3856 ZoneAlarm Client Check Point Software Technologies LTD msnmsgr.exe 5952 Windows Live Messenger Microsoft Corporation iTunes.exe 4472 iTunes Apple Inc. procexp.exe 3548 0.77 Sysinternals Process Explorer Sysinternals - www.sysinternals.comMOM.exe 2964 Catalyst Control Center: Monitoring program Advanced Micro Devices Inc. CCC.exe 3308 Catalyst Control Centre: Host application ATI Technologies Inc.mantispm.exe 3408 Spam Filter SonicWALL, Inc.LastFM.exe 3528 Last.fm Last.fmProcess: uTorrent.exe Pid: 2044Name Description Company Name VersionACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.5512adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.5512ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.5512apphelp.dll Application Compatibility Client Library Microsoft Corporation 5.01.2600.5512ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0001ATL80.DLL ATL Module for Windows (Unicode) Microsoft Corporation 8.00.50727.0762c_1252.nls CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0700COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.5512comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.2900.5512COMRes.dll Microsoft Corporation 2001.12.4414.0700CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.2600.5512ctype.nls DnsApi.dll DNS Client API DLL Microsoft Corporation 5.01.2600.5625GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.5512GrooveNew.DLL GrooveNew Module Microsoft Corporation 12.00.6211.1000GrooveShellExtensions.dll GrooveShellExtensions Module Microsoft Corporation 12.00.6211.1000GrooveUtil.DLL GrooveUtil Module Microsoft Corporation 12.00.6211.1000hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.5512icsak.dll ZoneAlarm ForceField Check Point Software Technologies 1.01.0079.0000ieframe.dll Internet Explorer Microsoft Corporation 7.00.6000.16757ieframe.dll.mui Internet Explorer Microsoft Corporation 7.00.6000.16414iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.00.6000.16735IMM32.DLL Windows XP IMM32 API Client DLL Microsoft Corporation 5.01.2600.5512Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.5512ISWSHEX.dll ZoneAlarm ForceField Check Point Software Technologies 1.01.0079.0000kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.5512locale.nls mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 1.00.0005.0011mlfhook.dll Spam Filter Hook 5.00.0061.9957MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.5512MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.01.2600.5512MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.5512msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.01.2600.5512MSImg32.dll GDIEXT Client DLL Microsoft Corporation 5.01.2600.5512MSNLNamespaceMgr.dll Windows Search Namespace Manager Microsoft Corporation 7.00.6001.16503MSVCR80.dll Microsoft® C Runtime Library Microsoft Corporation 8.00.50727.1433msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.5512mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.01.2600.5625netapi32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.5694Normaliz.dll Unicode Normalization DLL Microsoft Corporation 6.00.5441.0000ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.5512NTMARTA.DLL Windows NT MARTA provider Microsoft Corporation 5.01.2600.5512ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.5512oleaut32.dll Microsoft Corporation 5.01.2600.5512PSAPI.DLL Process Status Helper Microsoft Corporation 5.01.2600.5512rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.5512RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.5512rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.01.2600.5507rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.5512SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.5512Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.5512SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.5512SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.5512shfolder.dll Shell Folder Service Microsoft Corporation 6.00.2900.5512SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.5512sortkey.nls sorttbls.nls unicode.nls urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.00.6000.16735USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.5512USERENV.dll Userenv Microsoft Corporation 5.01.2600.5512uTorrent.exe µTorrent BitTorrent, Inc. 1.08.0001.12639uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.5512VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.5512WININET.dll Internet Extensions for Win32 Microsoft Corporation 7.00.6000.16735WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.5512WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.5512WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.5512wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.5512---------------------------------------------------------------------------------------------------Hijackthis Log: http://rapidshare.com/files/159650087/hijackthis.log.html Link to comment Share on other sites More sharing options...
thelittlefire Posted November 1, 2008 Report Share Posted November 1, 2008 Zone Alarm, GAH! It doesn't usually manifest these problems, then again, it works for people, and kills others' computers.Is this logfile from a duplicate uTorrent instance? When that happens you can double click on the utorrent.exe processes in Process Explorer. Take note/copy their launch path and command-line fields. They should/can only be different paths with /RECOVER as far as you're explaining the situation Link to comment Share on other sites More sharing options...
Mortuum Black Posted November 1, 2008 Author Report Share Posted November 1, 2008 zonealarm works like a charm on my pc.i never had probs with it.about a month ago uTor was working perfectly. Also it seems like there are 2 EXACT torrent applications running but with different memory and cpu usage.Anyway,for now i removed manually all registry entries and saved torrents.for the last 2 hours i had no issue and it seems to be working fine Link to comment Share on other sites More sharing options...
thelittlefire Posted November 1, 2008 Report Share Posted November 1, 2008 .. So where was the 2nd one running from? Without /RECOVER in the command line there is no other way I can think of. ESPECIALLY since even running two instances from the same settings files will have at least SOME torrents in common. Link to comment Share on other sites More sharing options...
Firon Posted November 2, 2008 Report Share Posted November 2, 2008 ZA is a really screwed firewall. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.