bigfork1921 Posted August 9, 2009 Report Share Posted August 9, 2009 Any torrent I download to my PC will freeze when used in uTorrent.HijackThis Log first, Process Explorer after:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:12:19 AM, on 8/9/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18226)Boot mode: NormalRunning processes:C:\Windows\Explorer.EXEC:\Windows\system32\Dwm.exeC:\Windows\WVCSCR.exeC:\Windows\SYSTEM32\taskeng.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Windows\SYSTEM32\taskeng.exec:\PROGRA~1\mcafee\msc\mcuimgr.exeC:\Users\Mitchell\Downloads\Firefox Downloads\utorrent(3).exeC:\Windows\system32\SearchFilterHost.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exeO1 - Hosts: ::1 localhostO2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dllO2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dllO2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dllO2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dllO3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dllO3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dllO4 - HKLM\..\Run: [KBD] "C:\HP\KBD\KbdStub.EXE"O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"O4 - HKLM\..\Run: [RtHDVCpl] "C:\Windows\RtHDVCpl.exe"O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\HP\HP Software Update\HPWuSchd2.exe"O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"O4 - HKLM\..\Run: [NvSvc] "C:\Windows\SYSTEM32\RUNDLL32.EXE" C:\Windows\system32\nvsvc.dll,nvsvcStartO4 - HKLM\..\Run: [NvCplDaemon] "C:\Windows\SYSTEM32\RUNDLL32.EXE" C:\Windows\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [NvMediaCenter] "C:\Windows\SYSTEM32\RUNDLL32.EXE" C:\Windows\system32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exeO4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbyloginO4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exeO4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1204582992\ee\AOLSoftware.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottimeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exeO4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dllO9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dllO9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dllO9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dllO9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLLO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dllO13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeO23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeO23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeO23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: Communication Services (CCOMSVC) - Solid Oak Software, Inc. - C:\Windows\CComSvc.exeO23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exeO23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exeO23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXEO23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exeO23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exeO23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeO23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeO23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exeO23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exeO23 - Service: Pure Networks Network Magic Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\nmsrvc.exeO23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exeO23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exeO23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exeO23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exeO23 - Service: websrvx - Unknown owner - C:\Program Files\websrvx\websrvx.exe (file missing)O23 - Service: Monitoring Service (WVCSWDSVC) - Solid Oak Software, Inc. - C:\Windows\WVCSWD.exeO23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe--End of file - 9199 bytesProcess PID CPU Description Company NameSystem Idle Process 0 75.92 Interrupts n/a Hardware Interrupts DPCs n/a Deferred Procedure Calls System 4 1.49 smss.exe 436 csrss.exe 568 wininit.exe 620 services.exe 664 svchost.exe 828 0.74 WmiPrvSE.exe 2988 3.72 mcuimgr.exe 6116 McAfee User Interface Manager McAfee, Inc. svchost.exe 928 svchost.exe 976 svchost.exe 1072 audiodg.exe 1240 svchost.exe 1148 WUDFHost.exe 3096 dwm.exe 1380 Desktop Window Manager Microsoft Corporation svchost.exe 1172 taskeng.exe 4020 taskeng.exe 5308 Task Scheduler Engine Microsoft Corporation jusched.exe 5800 Java Platform SE binary Sun Microsystems, Inc. taskeng.exe 820 SLsvc.exe 1276 svchost.exe 1308 svchost.exe 1492 spoolsv.exe 1728 svchost.exe 1756 AOLacsd.exe 376 AppleMobileDeviceService.exe 444 AluSchedulerSvc.exe 528 mDNSResponder.exe 712 CComSvc.exe 680 4.47 LSSrvc.exe 1232 McProxy.exe 1592 Mcshield.exe 924 MpfSrv.exe 264 svchost.exe 2064 svchost.exe 2096 ViewpointService.exe 2172 svchost.exe 2212 SearchIndexer.exe 2280 WVCSWD.exe 2496 WVCSCR.exe 4664 7.44 Solid Oak Software, Inc. XAudio.exe 2564 nmsrvc.exe 2668 svchost.exe 2612 wuauclt.exe 4800 Windows Update Automatic Updates Microsoft Corporation iPodService.exe 2656 HPHC_Service.exe 2476 mcmscsvc.exe 3052 McNASvc.exe 1364 0.74 wmpnetwk.exe 3256 lsass.exe 676 0.74 lsm.exe 684 csrss.exe 632 1.49 winlogon.exe 860 explorer.exe 3068 Windows Explorer Microsoft Corporation firefox.exe 5600 Firefox Mozilla Corporation WinRAR.exe 4860 WinRAR archiver Alexander Roshal procexp.exe 5212 2.98 Sysinternals Process Explorer Sysinternals - www.sysinternals.comuTorrent.exe 5272 µTorrent BitTorrent, Inc.Process: uTorrent.exe Pid: 5272Name Description Company Name VersionADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.0.6001.18000ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.0CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.6931.18000COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.10.6001.18000comctl32.dll.mui User Experience Controls Library Microsoft Corporation 6.10.6001.18000comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.0.6001.18000dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.0.6001.18000dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.0.6001.18000DnsApi.dll DNS Client API DLL Microsoft Corporation 6.0.6001.18000DUser.dll Windows DirectUser Engine Microsoft Corporation 6.0.6001.18000duser.dll.mui Windows DirectUser Engine Microsoft Corporation 6.0.6000.16386FirewallAPI.dll Windows Firewall API Microsoft Corporation 6.0.6001.18000GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6001.18159GPAPI.dll Group Policy Client API Microsoft Corporation 6.0.6001.18000hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 6.0.6001.18000iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 7.0.6001.18226imageres.dll Windows Image Resource Microsoft Corporation 6.0.6000.16386imageres.dll.mui Windows Image Resource Microsoft Corporation 6.0.6000.16386IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6001.18000Iphlpapi.dll IP Helper API Microsoft Corporation 6.0.6001.18000kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.0.6001.18215locale.nls locale.nls LPK.DLL Language Pack Microsoft Corporation 6.0.6001.18000lspcs.dll filter lsp Solid Oak 1.0.0.11mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 1.0.6.2MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.0.6001.18000msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6001.18000mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.0.6001.18000msxml3.dll MSXML 3.0 SP10 Microsoft Corporation 8.100.1048.0msxml3r.dll XML Resources Microsoft Corporation 8.20.8730.1napinsp.dll E-mail Naming Shim Provider Microsoft Corporation 6.0.6001.18000NETAPI32.dll Net Win32 API DLL Microsoft Corporation 6.0.6001.18157netshell.dll Network Connections Shell Microsoft Corporation 6.0.6001.18000NLAapi.dll Network Location Awareness 2 Microsoft Corporation 6.0.6001.18000npmproxy.dll Network List Manager Proxy Microsoft Corporation 6.0.6000.16386NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6001.18000ntdll.dll NT Layer DLL Microsoft Corporation 6.0.6001.18000ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.0.6001.18000oleaut32.dll Microsoft Corporation 6.0.6001.18000pnrpnsp.dll PNRP Name Space Provider Microsoft Corporation 6.0.6001.18000PSAPI.DLL Process Status Helper Microsoft Corporation 6.0.6000.16386R000000000009.clb rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.0.6000.16386RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.0.6001.18051rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.0.6001.18000Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6001.18215SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.6001.18167shfolder.dll Shell Folder Service Microsoft Corporation 6.0.6000.16386SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.6001.18000slc.dll Software Licensing Client Dll Microsoft Corporation 6.0.6001.18000SSDPAPI.dll SSDP Client API DLL Microsoft Corporation 6.0.6000.16386SXS.DLL Fusion 2.5 Microsoft Corporation 6.0.6001.18000upnp.dll UPnP Control Point API Microsoft Corporation 6.0.6001.18000urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 7.0.6001.18226USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6001.18000USERENV.dll Userenv Microsoft Corporation 6.0.6001.18000USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6001.18000uTorrent.exe µTorrent BitTorrent, Inc. 1.8.1.12639UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.0.6001.18000VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.0.6001.18000WINHTTP.dll Windows HTTP Services Microsoft Corporation 6.0.6001.18178WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6001.18000winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.0.6000.16386WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6001.18000wpclsp.dll WPC LSP Microsoft Corporation 1.0.0.1WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.0.6001.18000wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.0.6001.18000wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.0.6001.18000Any help is greatly appreciated =] Link to comment Share on other sites More sharing options...
moogly Posted August 9, 2009 Report Share Posted August 9, 2009 You have to edit Process Explorer log when uT is running.Select utorrent.exe and enable DLL mode (ctrl+d). Link to comment Share on other sites More sharing options...
bigfork1921 Posted August 9, 2009 Author Report Share Posted August 9, 2009 Is that what you mean? Updated above. Link to comment Share on other sites More sharing options...
DreadWingKnight Posted August 9, 2009 Report Share Posted August 9, 2009 Ignoring the fact that you're using an unsupported version of uT,lspcs.dll filter lsp Solid Oak 1.0.0.11could be interfering Link to comment Share on other sites More sharing options...
bigfork1921 Posted August 10, 2009 Author Report Share Posted August 10, 2009 =\ What should I do about it? Link to comment Share on other sites More sharing options...
moogly Posted August 10, 2009 Report Share Posted August 10, 2009 It's a part of Internet filter provided by Solid Oak. So uninstall this program for another one or try to configure it to not interfer with utorrent.exe and torrents. Link to comment Share on other sites More sharing options...
bigfork1921 Posted August 10, 2009 Author Report Share Posted August 10, 2009 Solid Oak created CYBERSitter, which my father installed on this computer. I googled a way to get rid of it and it seemed to work completely. No more recording of computer activities and no more limitations. Except that apparently Solid Oak is still running in process explorer. Is there any final way to get rid of this or do I absolutely need the password? Link to comment Share on other sites More sharing options...
Switeck Posted August 10, 2009 Report Share Posted August 10, 2009 Other posts in the past have written off CYBERSitter as a lost cause:http://forum.utorrent.com/viewtopic.php?id=40106http://forum.utorrent.com/viewtopic.php?id=41323http://forum.utorrent.com/viewtopic.php?id=50730 Link to comment Share on other sites More sharing options...
moogly Posted August 11, 2009 Report Share Posted August 11, 2009 Maybe there is a way to configure it and exclude utorrent.exe.But many of these filters to protect kids against the black face of internet try to access to files that you're downloading and lock uT. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.