Jump to content

access denied

diesel420

By diesel420
in Troubleshooting

Recommended Posts

diesel420 Newbie

diesel420

Posted
  • Author
Posted

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 9:00:37 PM, on 2/18/2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

Running processes:

C:\Windows\System32\smss.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe

C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

C:\Windows\system32\svchost.exe

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\WLANExt.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\agrsmsvc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

C:\Program Files\iSafer\iSaferSvr.exe

C:\TOSHIBA\IVP\ISM\pinger.exe

C:\Windows\system32\svchost.exe

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\Windows\system32\svchost.exe

c:\TOSHIBA\IVP\swupdate\swupdtmr.exe

C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe

C:\Windows\system32\TODDSrv.exe

C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

C:\Program Files\Viewpoint\Common\ViewpointService.exe

C:\Windows\System32\svchost.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\winlogon.exe

C:\Program Files\Protector Suite QL\upeksvr.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe

C:\Windows\RtHDVCpl.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

C:\Program Files\Toshiba\SmoothView\SmoothView.exe

C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

C:\Program Files\Toshiba\ConfigFree\NDSTray.exe

C:\Program Files\GamingSquared\Gaming2\G2.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Windows\System32\cfrog.exe

C:\Program Files\Synaptics\SynTP\SynToshiba.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe

C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe

C:\Program Files\Protector Suite QL\psqltray.exe

C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe

C:\Program Files\Internet Explorer\ieuser.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe

C:\TOSHIBA\IVP\ISM\ivpsvmgr.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\Windows\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.myspace.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/ymj/*http://www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http://www.yahoo.com/ext/search/search.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http://www.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: CMVideoPlugin - {24FB3922-5EB7-4817-BF5A-4B6A28A2438D} - C:\Windows\system32\CMVideo.dll

O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

O2 - BHO: (Gaming)2 - {971F630E-AD68-4d6e-B0C3-1C627AAC80F1} - C:\Program Files\GamingSquared\Gaming2\G2IE_v1042.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll

O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe"

O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\Protector Suite QL\launcher.exe" /startup

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe

O4 - HKLM\..\Run: [smoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe

O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

O4 - HKLM\..\Run: [Piolet] C:\PROGRA~1\Piolet\Piolet.exe SILENT

O4 - HKLM\..\Run: [spiralFrog] C:\Program Files\SpiralFrog\Spiralfrog.exe

O4 - HKLM\..\Run: [G2] "C:\Program Files\GamingSquared\Gaming2\G2.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [C:\Windows\system32\cfrog.exe] C:\Windows\system32\cfrog.exe

O4 - HKLM\..\Run: [WiniGuard] C:\Program Files\WiniGuard Software\WiniGuard\WiniGuard.exe -min

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe

O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet

O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1

O4 - HKCU\..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')

O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe

O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Startup: VZAccess Manager.lnk = C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe

O4 - Global Startup: iSafer.lnk = C:\Program Files\iSafer\iSafer.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-3/WebfettiInitialSetup1.0.1.0.cab

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -

O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_srl.cab

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab

O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{F754EA1E-0789-4DA0-B069-0B5D84D73270}: NameServer = 66.174.95.44 69.78.96.14

O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe

O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe

O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: iSafer - Personal Firewall (iSafer) - http://winsockfirewall.sourceforge.net - C:\Program Files\iSafer\iSaferSvr.exe

O23 - Service: pinger - Unknown owner - C:\TOSHIBA\IVP\ISM\pinger.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe

O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe

O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--

End of file - 13810 bytes

Link to comment
Share on other sites
traveller87 Newbie

traveller87

Posted
Posted

hello

i am getting the (apparently frequent) "Access Denied" problem. I don't want to waste anyone's time, so i've gone through the FAQ section. I don't have google or msn desktop. i don't have roxio or nero. i don't have avg7; i run norton on this laptop. i've closed the folder while trying to download. i've made sure that the folder is read and write. i've tried changing the save directory. nothing's working and i really quite miss using utorrent. does anyone have any clues? thanks.

Link to comment
Share on other sites
jlatino_11 Newbie

jlatino_11

Posted
Posted

Hi, I'm not sure what happened to my post from yesterday but the lowdown is this:

I have double checked that I am connectable, ports are properly forwarded, utorrent is allowed to operate through the windows firewall, I am running AVG 7 but even with it turned off I still get the access denied.

I was able to download and been seeding one torrent and then the error messages began.

Here is the information asked for plus a bit extra

Home/work/Uni connection - cable or dsl: Cable

Router (make/model):LinksysRT31P2

I have double checked that the port is open with grc

I have setup the internet protocol version properties 4 with IP address, subnet mask, default gateway, and name servers. (though I was able to download an app last night without the setup)

I do not have a dmp file.

I went through and tried all of the suggested fixes that were applicable from:

http://www.utorrent.com/faq.php#I_get_Error_Access_Denied_and_.C2.B5Torrent_halts_the_torrent

If you happened to find the problem. Would you mention how it is that I can fix it? I've seen some responses on posts at times that say "Get rid of _____" or delete "____". But sometimes those lines or programs aren't too easy to find.

Thanks in advance!

firefox version 3.0.6

File system: NTSC

anti virus :AVG Free V. 8.0.237

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:07:09 PM, on 2/18/2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

Is port randomize is checked:No it is not

Is UPnP disabled: yes, it is unchecked

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE

C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe

C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\AVG\AVG8\avgtray.exe

C:\Program Files\Microsoft Office\Office12\MSPUB.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\AVG\AVG8\avgui.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.reddit.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files\MSN\Toolbar\3.0.0541.0\msneshellx.dll

O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files\MSN\Toolbar\3.0.0541.0\msneshellx.dll

O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [updateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"

O4 - HKLM\..\Run: [updatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"

O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"

O4 - HKLM\..\Run: [updateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"

O4 - HKLM\..\Run: [updatePDIRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{705F09E2-C31B-4BE5-B8FD-B98333A1B7F2}: NameServer = 68.87.77.130,68.87.72.130

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe

O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)

O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--

End of file - 8527 bytes

Process PID CPU Description Company Name

System Idle Process 0 100.00

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 404

csrss.exe 524

wininit.exe 568

services.exe 672

svchost.exe 956

igfxsrvc.exe 528 igfxsrvc Module Intel Corporation

WmiPrvSE.exe 3656

HpqToaster.exe 1664 HpqToaster Module

svchost.exe 1016

svchost.exe 1052

svchost.exe 1148

audiodg.exe 1316

svchost.exe 1188

dwm.exe 1736 Desktop Window Manager Microsoft Corporation

wlanext.exe 1824

svchost.exe 1220

taskeng.exe 1964 Task Scheduler Engine Microsoft Corporation

taskeng.exe 768

SLsvc.exe 1352

svchost.exe 1392

svchost.exe 1556

spoolsv.exe 1948

svchost.exe 1996

AppleMobileDeviceService.exe 2180

avgwdsvc.exe 2208

avgrsx.exe 2556

avgnsx.exe 2564

mDNSResponder.exe 2248

LSSrvc.exe 2368

svchost.exe 2468

BLService.exe 2520

RichVideo.exe 2704

svchost.exe 2760

svchost.exe 2788

SearchIndexer.exe 2820

XAudio.exe 2996

avgemc.exe 3032

avgcsrvx.exe 3364

hpqwmiex.exe 3420

wmpnetwk.exe 3484

HPHC_Service.exe 1308

PresentationFontCache.exe 1416

lsass.exe 684

lsm.exe 692

csrss.exe 580

winlogon.exe 728

explorer.exe 1772 Windows Explorer Microsoft Corporation

SynTPEnh.exe 1372 Synaptics TouchPad Enhancements Synaptics, Inc.

SynTPHelper.exe 1780

igfxtray.exe 1536 igfxTray Module Intel Corporation

hkcmd.exe 1332 hkcmd Module Intel Corporation

igfxpers.exe 1584 persistence Module Intel Corporation

hpwuSchd2.exe 1108 hpwuSchd Application Hewlett-Packard

HPWAMain.exe 1816 HPWAMain Module Hewlett-Packard Development Company, L.P.

WiFiMsg.exe 4012 Module to process WiFi messages. Hewlett-Packard Development Company, L.P.

LightScribeControlPanel.exe 1124 Hewlett-Packard Company

uTorrent.exe 2120 µTorrent BitTorrent, Inc.

wmpnscfg.exe 2128 Windows Media Player Network Sharing Service Configuration Application Microsoft Corporation

avgtray.exe 5488 AVG Tray Monitor AVG Technologies CZ, s.r.o.

avgui.exe 3308 AVG User Interface AVG Technologies CZ, s.r.o.

MSPUB.EXE 4776 Microsoft Office Publisher Microsoft Corporation

firefox.exe 4252 Firefox Mozilla Corporation

procexp.exe 2780 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

Ymsgr_tray.exe 3256 Yahoo! Messenger Tray Yahoo! Inc.

HijackThis.exe 4052

notepad.exe 3248

********************

Process PID CPU Description Company Name

System Idle Process 0 95.39

Interrupts n/a 0.77 Hardware Interrupts

DPCs n/a 0.77 Deferred Procedure Calls

System 4

smss.exe 404

csrss.exe 524

wininit.exe 568

services.exe 672

svchost.exe 956

igfxsrvc.exe 528 igfxsrvc Module Intel Corporation

WmiPrvSE.exe 3656

HpqToaster.exe 1664 HpqToaster Module

svchost.exe 1016

svchost.exe 1052

svchost.exe 1148

audiodg.exe 1316

svchost.exe 1188

dwm.exe 1736 0.77 Desktop Window Manager Microsoft Corporation

wlanext.exe 1824

svchost.exe 1220

taskeng.exe 1964 Task Scheduler Engine Microsoft Corporation

taskeng.exe 768

SLsvc.exe 1352

svchost.exe 1392

svchost.exe 1556

spoolsv.exe 1948

svchost.exe 1996

AppleMobileDeviceService.exe 2180

avgwdsvc.exe 2208

avgrsx.exe 2556

avgnsx.exe 2564

mDNSResponder.exe 2248

LSSrvc.exe 2368

svchost.exe 2468

BLService.exe 2520

RichVideo.exe 2704

svchost.exe 2760

svchost.exe 2788

SearchIndexer.exe 2820

XAudio.exe 2996

avgemc.exe 3032

avgcsrvx.exe 3364

hpqwmiex.exe 3420

wmpnetwk.exe 3484

HPHC_Service.exe 1308

PresentationFontCache.exe 1416

lsass.exe 684

lsm.exe 692

csrss.exe 580 0.77

winlogon.exe 728

explorer.exe 1772 Windows Explorer Microsoft Corporation

SynTPEnh.exe 1372 0.77 Synaptics TouchPad Enhancements Synaptics, Inc.

SynTPHelper.exe 1780

igfxtray.exe 1536 igfxTray Module Intel Corporation

hkcmd.exe 1332 hkcmd Module Intel Corporation

igfxpers.exe 1584 persistence Module Intel Corporation

hpwuSchd2.exe 1108 hpwuSchd Application Hewlett-Packard

HPWAMain.exe 1816 HPWAMain Module Hewlett-Packard Development Company, L.P.

WiFiMsg.exe 4012 Module to process WiFi messages. Hewlett-Packard Development Company, L.P.

LightScribeControlPanel.exe 1124 Hewlett-Packard Company

uTorrent.exe 2120 0.77 µTorrent BitTorrent, Inc.

wmpnscfg.exe 2128 Windows Media Player Network Sharing Service Configuration Application Microsoft Corporation

avgtray.exe 5488 AVG Tray Monitor AVG Technologies CZ, s.r.o.

avgui.exe 3308 AVG User Interface AVG Technologies CZ, s.r.o.

MSPUB.EXE 4776 Microsoft Office Publisher Microsoft Corporation

firefox.exe 4252 Firefox Mozilla Corporation

procexp.exe 2780 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

notepad.exe 1008 Notepad Microsoft Corporation

Ymsgr_tray.exe 3256 Yahoo! Messenger Tray Yahoo! Inc.

HijackThis.exe 4052

notepad.exe 3248

Process: uTorrent.exe Pid: 2120

Type Name

Desktop \Default

Directory \KnownDlls

Directory \Sessions\1\BaseNamedObjects

File C:\Windows\System32

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File \Device\KsecDD

File \Device\Afd

File \Device\Afd

File \Device\Nsi

File \Device\Afd

File \Device\Afd

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File C:\Users\HP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

File C:\Users\HP\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

File C:\Users\HP\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File \Device\Afd

File \Device\Afd

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File C:\Windows\System32\en-US\user32.dll.mui

File C:\Users\HP\AppData\Roaming\Microsoft\SystemCertificates\My

File \Device\KsecDD

File \Device\KsecDD

File \Device\KsecDD

File \Device\KsecDD

File C:\Users\HP\AppData\Roaming\Microsoft\SystemCertificates\My

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File \Device\Afd

File C:\Windows\winsxs\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.6001.18000_en-us_72e6f33f34dfabb9

File C:\Windows\System32\en-US\duser.dll.mui

File C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc

File C:\Windows\System32\en-US\imageres.dll.mui

File C:\Windows\winsxs\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.6001.18000_en-us_72e6f33f34dfabb9\comctl32.dll.mui

Key HKLM

Key HKLM\SYSTEM\ControlSet001\Control\Session Manager

Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions

Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

Key HKU

Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9

Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5

Key HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer

Key HKCU

Key HKCU\Software\Classes

Key HKCU\Software\Classes

Key HKCU\Software\Policies

Key HKLM\SYSTEM\ControlSet001\Control\Nls\Locale\Alternate Sorts

Key HKLM\SYSTEM\ControlSet001\Control\Nls\Locale

Key HKLM\SYSTEM\ControlSet001\Control\Nls\Language Groups

Key HKLM\SYSTEM\ControlSet001\Hardware Profiles\0001

Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Key HKLM\SOFTWARE\Policies

Key HKCU\Software\Policies

Key HKCU\Software

Key HKLM\SOFTWARE

Key HKLM\SOFTWARE\Microsoft\Tracing\RASAPI32

Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer

Key HKCU

Key HKLM\SYSTEM\ControlSet001\Services\crypt32

Key HKCU\Software\Microsoft\SystemCertificates\My

Key HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness

Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Key HKCU\Software\Policies

Key HKLM\SOFTWARE\Policies

Key HKCU\Software

Key HKLM\SOFTWARE

Key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

Key HKLM\SOFTWARE\Policies

Key HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts

Key HKLM\SOFTWARE

Key HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config

Key HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT

Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Root

Key HKCU\Software\Microsoft\SystemCertificates\Root

Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot

Key HKLM\SOFTWARE\Microsoft\SystemCertificates\CA

Key HKLM\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot

Key HKCU\Software\Microsoft\SystemCertificates\CA

Key HKCU\Software\Microsoft\SystemCertificates\SmartCardRoot

Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA

Key HKCU

Key HKLM\SOFTWARE\Microsoft\SystemCertificates\Disallowed

Key HKCU\Software\Microsoft\SystemCertificates\Disallowed

Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed

Key HKCU

Key HKLM\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople

Key HKCU\Software\Microsoft\SystemCertificates\TrustedPeople

Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople

Key HKCU

Key HKLM\SOFTWARE\Microsoft\SystemCertificates\trust

Key HKCU\Software\Microsoft\SystemCertificates\My

Key HKCU\Software\Microsoft\SystemCertificates\trust

Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Trust

Key HKCU

Key HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates

Key HKCU\Software\Policies\Microsoft\SystemCertificates

Key HKCU\Software

Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

Key HKCU\Software\Microsoft\Windows NT\CurrentVersion

Mutant \Sessions\1\BaseNamedObjects\µTorrent4823DF041B09

Mutant \Sessions\1\BaseNamedObjects\c:!users!hp!appdata!local!microsoft!windows!temporary internet files!content.ie5!

Mutant \Sessions\1\BaseNamedObjects\_!MSFTHISTORY!_

Mutant \Sessions\1\BaseNamedObjects\c:!users!hp!appdata!roaming!microsoft!windows!cookies!

Mutant \Sessions\1\BaseNamedObjects\c:!users!hp!appdata!local!microsoft!windows!history!history.ie5!

Mutant \Sessions\1\BaseNamedObjects\WininetStartupMutex

Mutant \Sessions\1\BaseNamedObjects\WininetConnectionMutex

Mutant \Sessions\1\BaseNamedObjects\WininetProxyRegistryMutex

Mutant \Sessions\1\BaseNamedObjects\oleacc-msaa-loaded

Mutant \Sessions\1\BaseNamedObjects\RasPbFile

Mutant \Sessions\1\BaseNamedObjects\ZonesCounterMutex

Mutant \Sessions\1\BaseNamedObjects\ZoneAttributeCacheCounterMutex

Mutant \Sessions\1\BaseNamedObjects\ZoneAttributeCacheCounterMutex

Mutant \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex

Mutant \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex

Mutant \Sessions\1\BaseNamedObjects\MSCTF.Asm.MutexDefaultS-1-5-21-3266242569-2193808765-3408022287-1000

Section \Sessions\1\BaseNamedObjects\windows_shell_global_counters

Section \BaseNamedObjects\__ComCatalogCache__

Section \BaseNamedObjects\__ComCatalogCache__

Section \Sessions\1\BaseNamedObjects\C:_Users_HP_AppData_Local_Microsoft_Windows_Temporary Internet Files_Content.IE5_index.dat_294912

Section \Sessions\1\BaseNamedObjects\C:_Users_HP_AppData_Roaming_Microsoft_Windows_Cookies_index.dat_32768

Section \Sessions\1\BaseNamedObjects\C:_Users_HP_AppData_Local_Microsoft_Windows_History_History.IE5_index.dat_589824

Section \BaseNamedObjects\windows_shell_global_counters

Section \Sessions\1\BaseNamedObjects\UrlZonesSM_HP

Thread uTorrent.exe(2120): 2124

Thread uTorrent.exe(2120): 2244

Thread uTorrent.exe(2120): 2124

Thread uTorrent.exe(2120): 2432

Thread uTorrent.exe(2120): 2612

Thread uTorrent.exe(2120): 2244

Thread uTorrent.exe(2120): 2612

Thread uTorrent.exe(2120): 2612

Thread uTorrent.exe(2120): 2244

Thread uTorrent.exe(2120): 3040

Thread uTorrent.exe(2120): 3044

Thread uTorrent.exe(2120): 3040

Thread uTorrent.exe(2120): 3328

Thread uTorrent.exe(2120): 3328

Thread uTorrent.exe(2120): 3044

Thread uTorrent.exe(2120): 5296

WindowStation \Sessions\1\Windows\WindowStations\WinSta0

WindowStation \Sessions\1\Windows\WindowStations\WinSta0

Link to comment
Share on other sites
jlatino_11 Newbie

jlatino_11

Posted
Posted

While in Process explorer I did a ctrl+D but nothing seemed to happen. I also went through the whole menu selection trying to locate a feature that had a shortcut of ctrl+d and found nada.

Also, funny thing is that I noticed the norton running as well. Whats f'd up is that it's not even listed as a program that is on my pc. Even when I go through explorer and try to locate it. It's hidden somewhere.

I'll return to the process explorer and ctrl+D again and see if something happens.

Thanks for the quick reply!

Maybe this is what your looking for regarding the ctrl+D

Process PID CPU Description Company Name

System Idle Process 0 92.75

Interrupts n/a 0.76 Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 404

csrss.exe 524

wininit.exe 568

services.exe 672

svchost.exe 956

igfxsrvc.exe 528 igfxsrvc Module Intel Corporation

WmiPrvSE.exe 3656

HpqToaster.exe 1664 HpqToaster Module

svchost.exe 1016

svchost.exe 1052

svchost.exe 1148

audiodg.exe 1316

svchost.exe 1188

dwm.exe 1736 0.76 Desktop Window Manager Microsoft Corporation

wlanext.exe 1824

svchost.exe 1220

taskeng.exe 1964 Task Scheduler Engine Microsoft Corporation

taskeng.exe 768

SLsvc.exe 1352

svchost.exe 1392

svchost.exe 1556

spoolsv.exe 1948

svchost.exe 1996

AppleMobileDeviceService.exe 2180

avgwdsvc.exe 2208

avgrsx.exe 2556

avgnsx.exe 2564

mDNSResponder.exe 2248

LSSrvc.exe 2368

svchost.exe 2468

BLService.exe 2520

RichVideo.exe 2704

svchost.exe 2760

svchost.exe 2788

SearchIndexer.exe 2820

XAudio.exe 2996

avgemc.exe 3032

avgcsrvx.exe 3364

hpqwmiex.exe 3420

wmpnetwk.exe 3484

HPHC_Service.exe 1308

PresentationFontCache.exe 1416

lsass.exe 684

lsm.exe 692

csrss.exe 580

winlogon.exe 728

explorer.exe 1772 1.52 Windows Explorer Microsoft Corporation

SynTPEnh.exe 1372 Synaptics TouchPad Enhancements Synaptics, Inc.

SynTPHelper.exe 1780

igfxtray.exe 1536 igfxTray Module Intel Corporation

hkcmd.exe 1332 hkcmd Module Intel Corporation

igfxpers.exe 1584 persistence Module Intel Corporation

hpwuSchd2.exe 1108 hpwuSchd Application Hewlett-Packard

HPWAMain.exe 1816 HPWAMain Module Hewlett-Packard Development Company, L.P.

WiFiMsg.exe 4012 Module to process WiFi messages. Hewlett-Packard Development Company, L.P.

LightScribeControlPanel.exe 1124 Hewlett-Packard Company

uTorrent.exe 2120 µTorrent BitTorrent, Inc.

wmpnscfg.exe 2128 Windows Media Player Network Sharing Service Configuration Application Microsoft Corporation

avgtray.exe 5488 AVG Tray Monitor AVG Technologies CZ, s.r.o.

procexp.exe 2516 3.04 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

Ymsgr_tray.exe 3256 Yahoo! Messenger Tray Yahoo! Inc.

Adobe_Updater.exe 5744 Adobe Updater Adobe Systems Incorporated

firefox.exe 4376 Firefox Mozilla Corporation

Process: uTorrent.exe Pid: 2120

Name Description Company Name Version

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.0.6001.18000

apphelp.dll Application Compatibility Client Library Microsoft Corporation 6.0.6001.18000

avgrsstx.dll AVG Resident Shield Starter AVG Technologies CZ, s.r.o. 8.0.0.223

bcrypt.dll Windows Cryptographic Primitives Library Microsoft Corporation 6.0.6001.18000

browseui.dll Shell Browser UI Library Microsoft Corporation 6.0.6001.18000

Cabinet.dll Microsoft® Cabinet File API Microsoft Corporation 6.0.6001.18000

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.6931.18000

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.10.6001.18000

comctl32.dll.mui User Experience Controls Library Microsoft Corporation 6.10.6001.18000

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.0.6001.18000

credssp.dll TS Single Sign On Security Package Microsoft Corporation 6.0.6001.18000

CRYPT32.dll Crypto API32 Microsoft Corporation 6.0.6001.18000

cryptnet.dll Crypto Network Related API Microsoft Corporation 6.0.6001.18000

dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.0.6001.18000

dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.0.6001.18000

DnsApi.dll DNS Client API DLL Microsoft Corporation 6.0.6001.18000

dssenh.dll Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider Microsoft Corporation 6.0.6001.18000

DUser.dll Windows DirectUser Engine Microsoft Corporation 6.0.6001.18000

duser.dll.mui Windows DirectUser Engine Microsoft Corporation 6.0.6000.16386

FirewallAPI.dll Windows Firewall API Microsoft Corporation 6.0.6001.18000

GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6001.18159

GPAPI.dll Group Policy Client API Microsoft Corporation 6.0.6001.18000

ieframe.dll Internet Explorer Microsoft Corporation 7.0.6001.18203

iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.0.6001.18203

imagehlp.dll Windows NT Image Helper Microsoft Corporation 6.0.6001.18000

imageres.dll Windows Image Resource Microsoft Corporation 6.0.6000.16386

imageres.dll.mui Windows Image Resource Microsoft Corporation 6.0.6000.16386

IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6001.18000

index.dat

index.dat

index.dat

Iphlpapi.dll IP Helper API Microsoft Corporation 6.0.6001.18000

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.0.6001.18000

locale.nls

locale.nls

LPK.DLL Language Pack Microsoft Corporation 6.0.6001.18000

mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 1.0.5.11

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.0.6000.16386

MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.0.6001.18000

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6001.18000

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.0.6001.18000

napinsp.dll E-mail Naming Shim Provider Microsoft Corporation 6.0.6001.18000

ncrypt.dll Windows cryptographic library Microsoft Corporation 6.0.6001.18000

NETAPI32.dll Net Win32 API DLL Microsoft Corporation 6.0.6001.18157

NLAapi.dll Network Location Awareness 2 Microsoft Corporation 6.0.6001.18000

Normaliz.dll Unicode Normalization DLL Microsoft Corporation 6.0.6000.16386

NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6001.18000

ntdll.dll NT Layer DLL Microsoft Corporation 6.0.6001.18000

NTMARTA.DLL Windows NT MARTA provider Microsoft Corporation 6.0.6001.18000

ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.0.6001.18000

OLEACC.dll Active Accessibility Core Component Microsoft Corporation 4.2.5406.0

oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation 4.2.5406.0

oleaut32.dll Microsoft Corporation 6.0.6001.18000

pnrpnsp.dll PNRP Name Space Provider Microsoft Corporation 6.0.6001.18000

PROPSYS.dll Microsoft Property System Microsoft Corporation 7.0.6001.16503

PSAPI.DLL Process Status Helper Microsoft Corporation 6.0.6000.16386

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.0.6000.16386

RASAPI32.dll Remote Access API Microsoft Corporation 6.0.6001.18000

rasman.dll Remote Access Connection Manager Microsoft Corporation 6.0.6001.18000

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.0.6001.18051

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.0.6001.18000

rtutils.dll Routing Utilities Microsoft Corporation 6.0.6000.16386

SAMLIB.dll SAM Library DLL Microsoft Corporation 6.0.6001.18000

schannel.dll TLS / SSL Security Provider Microsoft Corporation 6.0.6001.18000

Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6001.18000

sensapi.dll SENS Connectivity API DLL Microsoft Corporation 6.0.6000.16386

SETUPAPI.dll Windows Setup API Microsoft Corporation 6.0.6001.18000

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.6001.18167

shfolder.dll Shell Folder Service Microsoft Corporation 6.0.6000.16386

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.6001.18000

slc.dll Software Licensing Client Dll Microsoft Corporation 6.0.6001.18000

TAPI32.dll Microsoft® Windows Telephony API Client DLL Microsoft Corporation 6.0.6000.16386

tiptsf.dll Tablet PC Input Panel Text Services Framework Microsoft Corporation 6.0.6001.18000

urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.0.6001.18203

USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6001.18000

user32.dll.mui Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6001.18000

USERENV.dll Userenv Microsoft Corporation 6.0.6001.18000

USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6001.18000

uTorrent.exe µTorrent BitTorrent, Inc. 1.8.2.14458

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.0.6001.18000

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.0.6001.18000

WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation 6.0.6001.18131

wininet.dll Internet Extensions for Win32 Microsoft Corporation 7.0.6001.18203

WINMM.dll MCI API DLL Microsoft Corporation 6.0.6001.18000

WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6001.18000

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.0.6000.16386

wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation 6.0.6001.18000

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6001.18000

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.0.6001.18000

wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.0.6001.18000

wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.0.6001.18000

Link to comment
Share on other sites
jlatino_11 Newbie

jlatino_11

Posted
Posted

I ran the norton tool removal program, it didn't say whether or not anything was removed. Again, I when through all of explorer with a fine tooth comb and came up with nothing. Maybe I should had checked the registry as well before running it.

Anyhow, I have 3 torrents. When I tried to restart them, even with a force start, same, "access denied"

Link to comment
Share on other sites
jlatino_11 Newbie

jlatino_11

Posted
Posted

moogly,

I went in, made sure that the "read only" was turned off and then unchecked the "fast index," explorer is NOT in thumbnail view mode, went back to utorrent reloaded trackers and then hit start. It seems to run a little bit longer than before, instead of 0.1% it has gotten up to 1.2% then gives the error reading again.

Link to comment
Share on other sites
jlatino_11 Newbie

jlatino_11

Posted
Posted

That did it!

I followed your directions. I didn't know how to move the incomplete data, because I couldn't find it. Chances are there was never enough downloaded for it to appear in the torrent download folder in teh first place.

I right clicked onto the torrent file in utorrent> advanced >set Dwl location (usb drive)> force recheck > restarted the download location to the

USB. So any idea what gives with the HD? Is it the location or something not configured properly.

Hmmm...

I created anew folder on the desktop and assigned it as the new download folder via preferences in utorrent. All appears to be good.

Thank you very much. I'll put in a good word to the powers that be that suggested coming here.

Link to comment
Share on other sites
moogly Advanced Member

moogly

Posted
Posted

Ok so I think it's a problem relative to write/read permissions. Check the global folder where you previously saved your downloads and check the permissions & indexing (right click). If with a new folder on the desktop, you don't meet the issue, that's clearly relative to last folder (or it's container folder).

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

Go to topic listing
×
×
  • Create New...