Jump to content

Yellow Light, Speed Problems

Dynamic Blaze

By Dynamic Blaze
in Speed Problems

Recommended Posts

Dynamic Blaze Newbie

Dynamic Blaze

Posted
Posted

Lately I've been unable to get a green light on uTorrent while having download speeds above 40 kB/s. I have a yellow light currently and speeds around 100 at best, but my usual speed used to be around 300 or more on a good day with a consistent green light. It was all working fine up through uTorrent 1.7, but after 1.8 my problems with speed and the green light started. Below are my settings information after trying everything suggested in the speed problems thread with system, software and hardware information as well as a HijackThis log, HijackThis startup log and a process list from Process Explorer. With everything provided, I ask that you assist me in solving my connection and speed problems.

uTorrent 1.8.1

Upload Limit: 0
Upload Slots: 4
Connections per torrent: 50
Connections (global): 50
Max active torrents: 8
Max active downloads: 5

UPnP is disables
NAT-PMP is disabled
DHT is disabled
Resolve IPs is disabled
Protocol Encryption is enabled

bt.connect_speed is set to 15
net.max_halfopen is set to 5
peer.lazy_bitfield is enabled
peer.resolve_country is set to false

The network status light is yellow
The port checker says "Error! Port # does not appear to be open."
My operating system is Windows XP SP3

I have the following fully updated security software installed: 
Ad-aware 7.1.0.11
AVG 8.0.176
Windows Defender 1.1.1593.0

ISP: Embarq Corporation
Connection Type: DSL
Modem: Zyxel P645M
Router: D-Link 524

Download Speed Test Result: 3021 kb/s
Upload Speed Test Result: 640 kb/s

Toshiba Satellite Laptop
Intel Pentium M processor 1.86GHz
0.99GB of RAM

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:22:55 PM, on 12/6/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Toshiba\Tvs\TvsTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6

\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Apoint] "C:\Program Files\Apoint2K\Apoint.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SVPWUTIL] "C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe" SVPwUTIL
O4 - HKLM\..\Run: [CeEKEY] "C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TPNF] "C:\Program Files\TOSHIBA\TouchPad\TPTray.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [ZoomingHook] ZoomingHook.exe
O4 - HKLM\..\Run: [HWSetup] "C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe" hwSetUP
O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
O4 - HKLM\..\Run: [Pinger] "c:\toshiba\ivp\ism\pinger.exe" /run
O4 - HKLM\..\Run: [SmoothView] "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe"
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TOSHIBA Accessibility] "C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [LtMoh] "C:\Program Files\ltmoh\Ltmoh.exe"
O4 - HKLM\..\Run: [Tvs] "C:\Program Files\Toshiba\Tvs\TvsTray.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [TOSCDSPD] "C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'Default user')
O4 - Startup: AutorunsDisabled
O4 - Global Startup: AutorunsDisabled
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download 

Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download 

Manager\dlfvideo.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - 

http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1214771617078
O16 - DPF: {A4508A45-F1C4-40F3-99B4-0CA08AC77E3B} - http://download.netmarble.com/kdefence/kdfense8237.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DC9BD505-4A7A-496D-A825-782719AE5FA8}: NameServer = 192.168.0.1
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program 

Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
O24 - Desktop Component 0: (no name) - (no file)

--
End of file - 9277 bytes

StartupList report, 12/6/2008, 12:30:09 PM
StartupList version: 1.52.2
Started from : C:\Program Files\Trend Micro\HijackThis\HijackThis.EXE
Detected: Windows XP SP3 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.6000.16735)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Toshiba\Tvs\TvsTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

IgfxTray = C:\WINDOWS\system32\igfxtray.exe
HotKeysCmds = C:\WINDOWS\system32\hkcmd.exe
(Default) = 
IntelWireless = "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
Apoint = "C:\Program Files\Apoint2K\Apoint.exe"
AGRSMMSG = AGRSMMSG.exe
SVPWUTIL = "C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe" SVPwUTIL
CeEKEY = "C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe"
TPSMain = TPSMain.exe
TPNF = "C:\Program Files\TOSHIBA\TouchPad\TPTray.exe"
IMJPMIG8.1 = "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
PHIME2002ASync = "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
PHIME2002A = "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
NDSTray.exe = NDSTray.exe
TCtryIOHook = TCtrlIOHook.exe
ZoomingHook = ZoomingHook.exe
HWSetup = "C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe" hwSetUP
PadTouch = "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
Pinger = "c:\toshiba\ivp\ism\pinger.exe" /run
SmoothView = "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe"
TFncKy = TFncKy.exe
TOSHIBA Accessibility = "C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe"
Windows Defender = "C:\Program Files\Windows Defender\MSASCui.exe" -hide
LtMoh = "C:\Program Files\ltmoh\Ltmoh.exe"
Tvs = "C:\Program Files\Toshiba\Tvs\TvsTray.exe"
AVG8_TRAY = C:\PROGRA~1\AVG\AVG8\avgtray.exe
MSPY2002 = "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
dla = C:\WINDOWS\system32\dla\tfswctrl.exe
WinampAgent = "C:\Program Files\Winamp\winampa.exe"
Easy Dock = 
SunJavaUpdateSched = "C:\Program Files\Java\jre6\bin\jusched.exe"

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

TOSCDSPD = "C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe"
ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[AutorunsDisabled]
Easy Dock = C:\Documents and Settings\Owner\My Documents\RCA easyRip\EZDock.exe

[OptionalComponents]
*No values found*

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=avgrsstx.dll

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\system32\ssmypics.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - (no file) - AutorunsDisabled
WormRadar.com IESiteBlocker.NavFilter - C:\Program Files\AVG\AVG8\avgssie.dll - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
(no name) - C:\WINDOWS\system32\dla\tfswshx.dll - {5CA3D70E-1895-11CF-8E15-001234567890}
(no name) - C:\Program Files\Java\jre6\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
(no name) - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL - {A057A204-BACC-4D26-9990-79A187E2698E}
(no name) - C:\Program Files\Free Download Manager\iefdm2.dll - {CC59E0F9-7E43-44FA-9FAA-8377850BF205}
(no name) - C:\Program Files\Java\jre6\bin\jp2ssv.dll - {DBC80044-A445-435b-BC74-9C25C1C588A9}
JQSIEStartDetectorImpl - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll - {E7E6F031-17CE-4C07-BC86-EABFE594F69C}

--------------------------------------------------

Enumerating Task Scheduler jobs:

MP Scheduled Scan.job

--------------------------------------------------

Enumerating Download Program Files:

[MUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\muweb.dll
CODEBASE = http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1214771617078

[{A4508A45-F1C4-40F3-99B4-0CA08AC77E3B}]
CODEBASE = http://download.netmarble.com/kdefence/kdfense8237.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: C:\DOCUME~1\Owner\LOCALS~1\TEMPOR~1\Content.IE5\index.dat||C:\DOCUME~1\Owner\LOCALS~1

\History\History.IE5\desktop.ini||C:\DOCUME~1\Owner\LOCALS~1\History\History.IE5\index.dat||C:\DOCUME~1\Owner\LOCALS~1

\History\History.IE5\MSHIST~2\index.dat||C:\DOCUME~1\Owner\LOCALS~1\Temp\~nsu.tmp\Au_.exe||C:\DOCUME~1\Owner\LOCALS~1

\Temp\_iu14D2N.tmp


--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll
WPDShServiceObj: C:\WINDOWS\system32\WPDShServiceObj.dll

--------------------------------------------------
End of report, 9,810 bytes
Report generated in 0.031 seconds

Command line options:
   /verbose  - to add additional info on each section
   /complete - to include empty sections and unsuspicious data
   /full     - to include several rarely-important sections
   /force9x  - to include Win9x-only startups even if running on WinNT
   /forcent  - to include WinNT-only startups even if running on Win9x
   /forceall - to include all Win9x and WinNT startups, regardless of platform
   /history  - to list version history only

Process    PID    CPU    Description    Company Name
System Idle Process    0            
 Interrupts    n/a        Hardware Interrupts    
 DPCs    n/a        Deferred Procedure Calls    
 System    4            
  smss.exe    768        Windows NT Session Manager    Microsoft Corporation
   csrss.exe    856        Client Server Runtime Process    Microsoft Corporation
   winlogon.exe    884        Windows NT Logon Application    Microsoft Corporation
    services.exe    980        Services and Controller app    Microsoft Corporation
     svchost.exe    1188        Generic Host Process for Win32 Services    Microsoft Corporation
      1XConfig.exe    3244        8021XConfig Module    Intel
     svchost.exe    1280        Generic Host Process for Win32 Services    Microsoft Corporation
     MsMpEng.exe    1404        Service Executable    Microsoft Corporation
     svchost.exe    1444        Generic Host Process for Win32 Services    Microsoft Corporation
     svchost.exe    1476        Generic Host Process for Win32 Services    Microsoft Corporation
     EvtEng.exe    1632        EvtEng Module    Intel Corporation
     S24EvMon.exe    1668        Event Monitor - Supports driver extensions to  NIC Driver for wireless adapters.    

Intel Corporation 
     svchost.exe    1792        Generic Host Process for Win32 Services    Microsoft Corporation
     svchost.exe    1928        Generic Host Process for Win32 Services    Microsoft Corporation
     aawservice.exe    284        Ad-Aware Service    Lavasoft
     spoolsv.exe    1732        Spooler SubSystem App    Microsoft Corporation
     avgwdsvc.exe    188        AVG Watchdog Service    AVG Technologies CZ, s.r.o.
      avgrsx.exe    328        AVG Resident Shield Service    AVG Technologies CZ, s.r.o.
     CFSvcs.exe    1964        Service of ConfigFree.    TOSHIBA CORPORATION
     DVDRAMSV.exe    272        DVD-RAM Utility Helper Service    Matsushita Electric Industrial Co., Ltd.
     RegSrvc.exe    424        RegSrvc Module    Intel Corporation
     svchost.exe    512        Generic Host Process for Win32 Services    Microsoft Corporation
     swupdtmr.exe    620            
     alg.exe    2164        Application Layer Gateway Service    Microsoft Corporation
     svchost.exe    1888        Generic Host Process for Win32 Services    Microsoft Corporation
     jqs.exe    3852        Java(TM) Quick Starter Service    Sun Microsystems, Inc.
    lsass.exe    992        LSA Shell (Export Version)    Microsoft Corporation
    ZCfgSvc.exe    2872        ZeroCfgSvc MFC Application    Intel Corporation
explorer.exe    3084        Windows Explorer    Microsoft Corporation
 igfxtray.exe    4004        igfxTray Module    Intel Corporation
 hkcmd.exe    392        hkcmd Module    Intel Corporation
 iFrmewrk.exe    656        Intel Framework MFC Application    Intel Corporation
 Apoint.exe    956        Alps Pointing-device Driver    Alps Electric Co., Ltd.
 agrsmmsg.exe    3660        SoftModem Messaging Applet    Agere Systems
 CeEKey.exe    2920        TOSHIBA HotKey Utility    COMPAL ELECTRONIC INC.
 TPSMain.exe    3340            TOSHIBA Corporation
  TPSBattM.exe    1832            TOSHIBA Corporation
 TPTray.exe    3092        TPTray Application    COMPAL ELECTRONIC INC.
 NDSTray.exe    1576        ConfigFree(TM) Tray    TOSHIBA CORPORATION
 TCtrlIOHook.exe    1524        TOSHIBA Control Utility Hotkey Hook    TOSHIBA
 ZoomingHook.exe    3448        Zooming Utility Hotkey Hook    TOSHIBA
 PadExe.exe    2968        PadTouch Main    TOSHIBA
 SmoothView.exe    3640        SmoothView    TOSHIBA Corporation
 TFncKy.exe    3132        TFncKy    TOSHIBA Corporation
 FnKeyHook.exe    3756        TOSHIBA Accessibility Hotkey Hook    TOSHIBA
 MSASCui.exe    2444        Windows Defender User Interface    Microsoft Corporation
 ltmoh.exe    3800        LtMoh MFC Application    Agere Systems
 TvsTray.exe    3808        TOSHIBA Virtual Sound Taskbar Module    TOSHIBA Corporation
 avgtray.exe    588        AVG Tray Monitor    AVG Technologies CZ, s.r.o.
 tfswctrl.exe    2076        Drive Letter Access Component    Sonic Solutions
 winampa.exe    2208            
 TOSCDSPD.exe    2276        CD/DVD Drive Acoustic Silencer    TOSHIBA
 ctfmon.exe    2316        CTF Loader    Microsoft Corporation
 notepad.exe    2452        Notepad    Microsoft Corporation
 notepad.exe    1892        Notepad    Microsoft Corporation
 notepad.exe    3352        Notepad    Microsoft Corporation
 uTorrent.exe    2540        µTorrent    BitTorrent, Inc.
 procexp.exe    372        Sysinternals Process Explorer    Sysinternals
ApntEx.exe    3484        Alps Pointing-device Driver for Windows NT/2000/XP    Alps Electric Co., Ltd.

Process: uTorrent.exe Pid: 2540

Name    Description    Company Name    Version
activeds.dll    ADs Router Layer DLL    Microsoft Corporation    5.01.2600.5512
adsldpc.dll    ADs LDAP Provider C DLL    Microsoft Corporation    5.01.2600.5512
advapi32.dll    Advanced Windows 32 Base API    Microsoft Corporation    5.01.2600.5512
atl.dll    ATL Module for Windows XP (Unicode)    Microsoft Corporation    3.05.2284.0001
avgrsstx.dll    AVG Resident Shield Starter    AVG Technologies CZ, s.r.o.    8.00.0000.0134
clbcatq.dll        Microsoft Corporation    2001.12.4414.0700
comctl32.dll    User Experience Controls Library    Microsoft Corporation    6.00.2900.5512
comdlg32.dll    Common Dialogs DLL    Microsoft Corporation    6.00.2900.5512
comres.dll        Microsoft Corporation    2001.12.4414.0700
crypt32.dll    Crypto API32    Microsoft Corporation    5.131.2600.5512
ctype.nls            
dnsapi.dll    DNS Client API DLL    Microsoft Corporation    5.01.2600.5625
gdi32.dll    GDI Client DLL    Microsoft Corporation    5.01.2600.5512
hnetcfg.dll    Home Networking Configuration Manager    Microsoft Corporation    5.01.2600.5512
imm32.dll    Windows XP IMM32 API Client DLL    Microsoft Corporation    5.01.2600.5512
iphlpapi.dll    IP Helper API    Microsoft Corporation    5.01.2600.5512
kernel32.dll    Windows NT BASE API Client DLL    Microsoft Corporation    5.01.2600.5512
locale.nls            
lpk.dll    Language Pack    Microsoft Corporation    5.01.2600.5512
mprapi.dll    Windows NT MP Router Administration DLL    Microsoft Corporation    5.01.2600.5512
msasn1.dll    ASN.1 Runtime APIs    Microsoft Corporation    5.01.2600.5512
msctf.dll    MSCTF Server DLL    Microsoft Corporation    5.01.2600.5512
msctfime.ime    Microsoft Text Frame Work Service IME    Microsoft Corporation    5.01.2600.5512
msvcrt.dll    Windows NT CRT DLL    Microsoft Corporation    7.00.2600.5512
mswsock.dll    Microsoft Windows Sockets 2.0 Service Provider    Microsoft Corporation    5.01.2600.5625
netapi32.dll    Net Win32 API DLL    Microsoft Corporation    5.01.2600.5694
ntdll.dll    NT Layer DLL    Microsoft Corporation    5.01.2600.5512
ole32.dll    Microsoft OLE for Windows    Microsoft Corporation    5.01.2600.5512
oleaut32.dll        Microsoft Corporation    5.01.2600.5512
rasadhlp.dll    Remote Access AutoDial Helper    Microsoft Corporation    5.01.2600.5512
rpcrt4.dll    Remote Procedure Call Runtime    Microsoft Corporation    5.01.2600.5512
rsaenh.dll    Microsoft Enhanced Cryptographic Provider    Microsoft Corporation    5.01.2600.5507
rtutils.dll    Routing Utilities    Microsoft Corporation    5.01.2600.5512
samlib.dll    SAM Library DLL    Microsoft Corporation    5.01.2600.5512
secur32.dll    Security Support Provider Interface    Microsoft Corporation    5.01.2600.5512
setupapi.dll    Windows Setup API    Microsoft Corporation    5.01.2600.5512
shell32.dll    Windows Shell Common Dll    Microsoft Corporation    6.00.2900.5512
shfolder.dll    Shell Folder Service    Microsoft Corporation    6.00.2900.5512
shlwapi.dll    Shell Light-weight Utility Library    Microsoft Corporation    6.00.2900.5512
sortkey.nls            
sorttbls.nls            
unicode.nls            
user32.dll    Windows XP USER API Client DLL    Microsoft Corporation    5.01.2600.5512
userenv.dll    Userenv    Microsoft Corporation    5.01.2600.5512
usp10.dll    Uniscribe Unicode script processor    Microsoft Corporation    1.420.2600.5512
uTorrent.exe    µTorrent    BitTorrent, Inc.    1.08.0001.12639
uxtheme.dll    Microsoft UxTheme Library    Microsoft Corporation    6.00.2900.5512
version.dll    Version Checking and File Installation Libraries    Microsoft Corporation    5.01.2600.5512
wldap32.dll    Win32 LDAP API DLL    Microsoft Corporation    5.01.2600.5512
ws2_32.dll    Windows Socket 2.0 32-Bit DLL    Microsoft Corporation    5.01.2600.5512
ws2help.dll    Windows Socket 2.0 Helper for Windows NT    Microsoft Corporation    5.01.2600.5512
wshtcpip.dll    Windows Sockets Helper DLL    Microsoft Corporation    5.01.2600.5512

Link to comment
Share on other sites
Switeck Advanced Member

Switeck

Posted
Posted

This is the only DLL I see linked into uTorrent.exe that's not by Microsoft:

avgrsstx.dll AVG Resident Shield Starter AVG Technologies CZ, s.r.o. 8.00.0000.0134

Missing files in HijackThis! logs are generally a bad sign:

O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

Did you also configure your modem? (bridge mode if you can, otherwise use port forward/DMZ.)

Link to comment
Share on other sites
Dynamic Blaze Newbie

Dynamic Blaze

Posted
  • Author
Posted

Swapped AVG out for Avira, so the DLL is gone. The no name/no file items in hijackthis were deleted. And finally, I did configure my modem and router. My port somewhat appears to be mapped successfully. Although uTorrent port checker gives an error stating that it's not open, uTorrent says it's able to map it successfully for both TCP and UDP.

As far as I can tell, AVG must have been one of the main contributors to my problem. My download speed has risen greatly.

However, my network problems still seem to be present. I've only been able to get a green icon just now, and then it turned back to yellow. My download speeds still occasionally become sluggish for no apparent reason (although this may be due to the torrent rather than a problem). Sometimes the icon turns red, and while sometimes this happens simultaneously with sluggish speeds, it sometimes happens while still downloading at above 100-150 kB/s. Is there some way to get the icon back to a consistent green?

Link to comment
Share on other sites
Dynamic Blaze Newbie

Dynamic Blaze

Posted
  • Author
Posted

In my first post I provided the information requested, and little has changed. Anything that's changed, aside from fixing the possible problems stated by Switeck, has had neither a positive nor negative effect on the problem. Since it was present before, and is likely the same problem I've been having for the past week, the information provided at the time should suffice for figuring out a solution.

I tried my settings that I posted earlier (with the suggested fixes) again, and it made the problem worse. I wasn't getting a red light anymore, though. Only yellow. And download speeds below 40, at best. So here's the settings I have had the best luck with and am currently using:

Upload Limit: 47

Upload Slots: 4

Connections per torrent: 250

Connections (global): 90

Max active torrents: 3

Max active downloads: 3

UPnP is enabled

NAT-PMP is disabled

Everything else is at the default setting.

I just had a green light after changing net.upnp_tcp_only to true. Then it went back to yellow, although I'm still downloading at speeds around or over 100, and faring far better than I was with any of the suggested fixes.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

Go to topic listing
×
×
  • Create New...