Continues crashes with Vista

[mtissink]

Now i had enough of the troubles while downloading with uTorrent. I've already looked for another torrent handler, but hey, uTorrent is far the best!

So, now i have to solve some problems, because i still want to use uTorrent.

Followed the how-to post guide so, here it is!

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:06:08, on 27-4-2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18226)

Boot mode: Normal

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

C:\Windows\WindowsMobile\wmdc.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\BOINC\boinctray.exe

C:\Program Files\BOINC\boincmgr.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Comodo\COMODO Internet Security\cfp.exe

C:\Program Files\Roboform\robotaskbaricon.exe

C:\Program Files\Workrave\lib\Workrave.exe

C:\Users\Mark Tissink\AppData\Local\Google\Update\GoogleUpdate.exe

C:\Program Files\Google\Google Talk\googletalk.exe

C:\Program Files\Google Calendar Sync\GoogleCalendarSync.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\System32\mobsync.exe

C:\Windows\WindowsMobile\WmdHost.exe

C:\Program Files\Windows Media Player\wmplayer.exe

C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Users\Mark Tissink\Desktop\procexp.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Roboform\roboform.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Roboform\roboform.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"

O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [boinctray] "C:\Program Files\BOINC\boinctray.exe"

O4 - HKLM\..\Run: [boincmgr] "C:\Program Files\BOINC\boincmgr.exe" /a /s

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QT Lite\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\Comodo\COMODO Internet Security\cfp.exe" -h

O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Roboform\RoboTaskBarIcon.exe"

O4 - HKCU\..\Run: [Workrave] C:\Program Files\Workrave\lib\Workrave.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\Mark Tissink\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-21-2712125126-4204676684-1847411261-1001\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'boinc_master')

O4 - Global Startup: Google Calendar Sync.lnk = C:\Program Files\Google Calendar Sync\GoogleCalendarSync.exe

O4 - Global Startup: Logitech SetPoint.lnk = ?

O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Roboform\RoboFormComCustomizeIEMenu.html

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Roboform\RoboFormComFillForms.html

O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Roboform\RoboFormComShowToolbar.html

O8 - Extra context menu item: Save Forms - file://C:\Program Files\Roboform\RoboFormComSavePass.html

O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Roboform\RoboFormComFillForms.html

O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Roboform\RoboFormComFillForms.html

O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Roboform\RoboFormComSavePass.html

O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Roboform\RoboFormComSavePass.html

O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Roboform\RoboFormComShowToolbar.html

O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Roboform\RoboFormComShowToolbar.html

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O17 - HKLM\System\CCS\Services\Tcpip\..\{DE1CA1AA-8859-49EC-BE23-75D3AE99A26A}: NameServer = 208.67.222.222,208.67.220.220

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: BOINC - World Community Grid - C:\Program Files\BOINC\boinc.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

--

End of file - 10190 bytes

And the second part, the process explorer :

Process PID CPU Description Company Name

System Idle Process 0 87.67

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 488

csrss.exe 584

wininit.exe 648

services.exe 696

svchost.exe 872

mobsync.exe 3192 Microsoft Sync Center Microsoft Corporation

wmplayer.exe 6140 0.76 Windows Media Player Microsoft Corporation

WmdHost.exe 5724 Windows Mobile Device Center Sync Host Microsoft Corporation

OUTLOOK.EXE 2848 Microsoft Office Outlook Microsoft Corporation

WmiPrvSE.exe 4932

svchost.exe 944

cmdagent.exe 1032

svchost.exe 1100

svchost.exe 1120

Ati2evxx.exe 1180

Ati2evxx.exe 1756

svchost.exe 1204

audiodg.exe 1348

svchost.exe 1244

dwm.exe 1688 Beheer van bureaubladvensters Microsoft Corporation

WUDFHost.exe 1456

WUDFHost.exe 6012

svchost.exe 1280

taskeng.exe 1884 Taakplanner-engine Microsoft Corporation

taskeng.exe 2520

svchost.exe 1552

SLsvc.exe 1608

svchost.exe 1672

spoolsv.exe 320

svchost.exe 308

AppleMobileDeviceService.exe 3000

boinc.exe 3100

mDNSResponder.exe 3120

svchost.exe 3136

sqlservr.exe 3568

svchost.exe 3808

svchost.exe 3856

svchost.exe 3916

SearchIndexer.exe 3964

svchost.exe 2668

FNPLicensingService.exe 2712

iPodService.exe 4732

lsass.exe 708

lsm.exe 716

csrss.exe 660 0.76

winlogon.exe 1056

explorer.exe 868 0.76 Windows Verkenner Microsoft Corporation

MSASCui.exe 2080 Windows Defender User Interface Microsoft Corporation

Acrotray.exe 2096 AcroTray Adobe Systems Inc.

wmdc.exe 2104 Windows Mobile Apparaatcentrum Microsoft Corporation

RtHDVCpl.exe 2116 HD Audio Control Panel Realtek Semiconductor

boinctray.exe 2144 BOINC System Tray for Windows Space Sciences Laboratory

boincmgr.exe 2152 World Community Grid for Windows World Community Grid

jusched.exe 2192 Java Platform SE binary Sun Microsystems, Inc.

iTunesHelper.exe 2208 iTunesHelper Module Apple Inc.

cfp.exe 2328 COMODO Internet Security COMODO

robotaskbaricon.exe 2340 RoboForm TaskBar Icon Siber Systems

Workrave.exe 2356

GoogleUpdate.exe 2392 Google Installer Google Inc.

googletalk.exe 2416 Google Talk Google

GoogleCalendarSync.exe 2436 Google Calendar Sync Google

SetPoint.exe 2444 Logitech SetPoint Event Manager (UNICODE) Logitech, Inc.

KHALMNPR.exe 3444 Logitech KHAL Main Process Logitech, Inc.

firefox.exe 4300 Firefox Mozilla Corporation

uTorrent.exe 4828 0.76 µTorrent BitTorrent, Inc.

procexp.exe 2128 9.83 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

HijackThis.exe 4800 HijackThis Trend Micro Inc.

MOM.exe 2280 Catalyst Control Center: Monitoring program Advanced Micro Devices Inc.

CCC.exe 3684 Catalyst Control Centre: Host application ATI Technologies Inc.

Process: uTorrent.exe Pid: 4828

Name Description Company Name Version

ADVAPI32.dll Geavanceerde Windows 32 basis-API Microsoft Corporation 6.0.6001.18000

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.6931.18000

COMCTL32.dll Bibliotheek met elementen voor gebruikerservaring Microsoft Corporation 6.10.6001.18000

comdlg32.dll DLL voor gedeelde dialoogvensters Microsoft Corporation 6.0.6001.18000

CRYPT32.dll Crypto-API32 Microsoft Corporation 6.0.6001.18000

dhcpcsvc.DLL DHCP Client-service Microsoft Corporation 6.0.6001.18000

dhcpcsvc6.DLL DHCPv6-client Microsoft Corporation 6.0.6001.18000

DnsApi.dll API DLL van DNS Client Microsoft Corporation 6.0.6001.18000

FirewallAPI.dll API van Windows Firewall Microsoft Corporation 6.0.6001.18000

fltlib.dll Filterbibliotheek Microsoft Corporation 6.0.6000.16386

GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6001.18159

guard32.dll COMODO Internet Security COMODO 3.8.260.476

IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6001.18000

Iphlpapi.dll IP-helper-API Microsoft Corporation 6.0.6001.18000

kernel32.dll DLL-bestand voor Windows NT BASE API-client Microsoft Corporation 6.0.6001.18215

lgscroll.dll Logitech Scroll Enabler (UNICODE) Logitech, Inc. 4.70.213.0

locale.nls

locale.nls

LPK.DLL Language Pack Microsoft Corporation 6.0.6001.18000

mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 1.0.6.2

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.0.6000.16386

MSCTF.dll DLL-bestand voor MSCTF-server Microsoft Corporation 6.0.6001.18000

MSVCR80.dll Microsoft® C Runtime Library Microsoft Corporation 8.0.50727.3053

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6001.18000

mswsock.dll Microsoft Windows Sockets 2.0 Service-aanbieder Microsoft Corporation 6.0.6001.18000

napinsp.dll Shim-provider van e-mailnamen Microsoft Corporation 6.0.6001.18000

NLAapi.dll Network Location Awareness 2 Microsoft Corporation 6.0.6001.18000

NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6001.18000

ntdll.dll DLL-bestand voor NT-laag Microsoft Corporation 6.0.6001.18000

NTMARTA.DLL Windows NT MARTA-provider Microsoft Corporation 6.0.6001.18000

ole32.dll Microsoft OLE voor Windows Microsoft Corporation 6.0.6001.18000

oleaut32.dll Microsoft Corporation 6.0.6001.18000

pnrpnsp.dll PNRP-naamruimteprovider Microsoft Corporation 6.0.6001.18000

PSAPI.DLL Process Status Helper Microsoft Corporation 6.0.6000.16386

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.0.6000.16386

RPCRT4.dll Runtime voor RPC (Remote Procedure Call) Microsoft Corporation 6.0.6001.18051

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.0.6001.18000

SAMLIB.dll SAM Library DLL Microsoft Corporation 6.0.6001.18000

Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6001.18215

SHELL32.dll Gemeenschappelijk DLL-bestand van Windows Shell Microsoft Corporation 6.0.6001.18167

shfolder.dll Shell Folder Service Microsoft Corporation 6.0.6000.16386

SHLWAPI.dll Shell lichtgewicht hulpprogrammabibliotheek Microsoft Corporation 6.0.6001.18000

USER32.dll DLL-bestand voor Windows USER API-client (meerdere gebruikers) Microsoft Corporation 6.0.6001.18000

USERENV.dll Userenv Microsoft Corporation 6.0.6001.18000

USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6001.18000

uTorrent.exe µTorrent BitTorrent, Inc. 1.8.2.14458

uxtheme.dll DLL-bestand Microsoft UxTheme Microsoft Corporation 6.0.6001.18000

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.0.6001.18000

WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6001.18000

winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.0.6000.16386

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6001.18000

WS2_32.dll Windows Socket 2.0 32-bits DLL-bestand Microsoft Corporation 6.0.6001.18000

wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.0.6001.18000

wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.0.6001.18000

I couldn't find any dump-files in the directory the guide was pointing at.

[jewelisheaven]

What kind of crash? Are there any error codes when you press More Info? Or is it a bluescreen. Unfortunately I still don't have much experience with broken VIsta PCs to give more insight.

The Comodo doesn't appear to have anything that conflicts.. unless it may be that WORKRAVE application. What does it do? Did you install it?

[mtissink]

I'm not at my computer this moment, but at work, but i can tell what my computer does. It just completely stops. Most of the time the image my monitor was just presenting is of turned into black or show some blurred parts of the past image.

Workrave is my anti-rsi application -> http://www.workrave.org/welcome/

Further, i don't see any blue screens or 'more info'.

Edit: Comodo i just installed and kicked NOD firewall + antivirus. I had enough of that lazy program

[jewelisheaven]

Hmm, very spiffy app. And I like the sheep mascot. I may even try it out at work

As far as other possibilities, the only extra DLLs inside uT are logitech, comodo and bonjour... so it sounds like it's a combination of factors. Usually things like this are exposed by network drivers. Are you running WLAN? Or what about ralink chipset for your NIC?

[mtissink]

I know quite a lot about computers, but removing dll's from an application, is that possible?

I'm never working wireless since this is a desktop computer.

The card i'm using is the Realtek RTL8168/8111 Family PCI-E Gigabit Ethernet NIC (NDIS 6.0).

Does that make sense?

[jewelisheaven]

Well, using process explorer, one can remove the dll from the process... it's actually the only way to manually remove some of those horrible rootkit / trojans out there.

But what I was talking about... RTL8168 ... if you check your device manager properties, what version of the driver do you have? If you try to update it and check Windows Update and your computer manufacturer's website :/ Sometimes driver updates make things go away. Unless you also happen to be running > 4 GB of RAM.

[mtissink]

Hmm.., updated mij Realtek RTL8168B/8111B Family PCI-E GBE NIC with the newest drivers (version 6.218.317.2009) from their site and i've not completely stressed it up, but now it works quite well i think.

I'll keep you guys informed!

[jewelisheaven]

Here's to hoping that was it <cheers>