Utorrent sucking up Massive Memory Resources and refusing to close

mlumb · September 17, 2009

This happened to me on a different system and I posted previously about it with no real resolution. Well now it's happening on a new machine that I moved utorrent to.

After an unspecified amount of time utorrents memory usage climbs and the download/upload speeds drop to 1-4 kbps. I have noted memory usage from utorrent over 1.5 Gb when this happens. If I stop all running torrents the memory leak will hold at whatever memory it has taken up to that point. However closing utorrent is impossible without a reboot. I can close the app, but the process is still running and doesn't close or release the memory.

This is a major issue and I am hoping SOMEONE has an idea of what to do.

Virus/spyware scans have come up with nothing.

I am running Windows 7 Enterprise 64 Bit

Dual Core MSI MOBO AMD Dual Core CPU

4 GB RAM

Utorrent Ver. 1.8.3.16010

DreadWingKnight · September 17, 2009

Post a hijackthis log and process explorer process list with the dll list for the utorrent.exe process.

mlumb · September 17, 2009

Here's the HiJack This Log

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 3:58:09 PM, on 9/17/2009

Platform: Unknown Windows (WinNT 6.01.3504)

MSIE: Internet Explorer v8.00 (8.00.7600.16385)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\MediaMall\PlayOn.exe

C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\BeatPack\BeatPack.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Users\Michael Lumb\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

C:\Program Files (x86)\uTorrent\uTorrent.exe

C:\Program Files (x86)\iTunes\iTunes.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [WyseBrowser] "C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\WyseBrowser.exe"

O4 - HKCU\..\Run: [PlayOn] C:\Program Files (x86)\MediaMall\PlayOn.exe

O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [iTunesFolderWatch] C:\Program Files (x86)\JezSoft\iTunesFolderWatch\iTunesFolderWatch.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\Michael Lumb\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Michael Lumb\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Global Startup: BeatPack.lnk = C:\Program Files\BeatPack\BeatPack.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O13 - Gopher Prefix:

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O23 - Service: DynDNS Updater Service (DynDNS_Updater_Service) - Kana Solution - C:\Program Files (x86)\DynDNS Updater\DynDNS.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

O23 - Service: MediaMall Server - MediaMall Technologies, Inc. - C:\Program Files (x86)\MediaMall\MediaMallServer.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files (x86)\TVersity\Media Server\MediaServer.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~2\COMMON~1\X10\Common\x10nets.exe

--

End of file - 7995 bytes

GTHK · September 17, 2009

Need PE w/ DLL list: https://forum.utorrent.com/viewtopic.php?id=29748

mlumb · September 17, 2009

Here is the Process Explorer File

Process PID CPU Description Company Name

System Idle Process 0 79.85

Interrupts n/a 3.80 Hardware Interrupts

DPCs n/a 0.76 Deferred Procedure Calls

System 4

smss.exe 272 Windows Session Manager Microsoft Corporation

csrss.exe 376 Client Server Runtime Process Microsoft Corporation

wininit.exe 432 Windows Start-Up Application Microsoft Corporation

services.exe 492 Services and Controller app Microsoft Corporation

svchost.exe 664 Host Process for Windows Services Microsoft Corporation

WmiPrvSE.exe 3512 WMI Provider Host Microsoft Corporation

NMIndexStoreSvr.exe 3924 Nero Home Nero AG

unsecapp.exe 4028 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation

iTunes.exe 4376 iTunes Apple Inc.

nvvsvc.exe 724 NVIDIA Driver Helper Service, Version 190.38 NVIDIA Corporation

nvvsvc.exe 1116 NVIDIA Driver Helper Service, Version 190.38 NVIDIA Corporation

svchost.exe 752 Host Process for Windows Services Microsoft Corporation

MsMpEng.exe 812 AntiMalware Service Executable Microsoft Corporation

svchost.exe 972 Host Process for Windows Services Microsoft Corporation

audiodg.exe 3792 Windows Audio Device Graph Isolation Microsoft Corporation

svchost.exe 1008 0.76 Host Process for Windows Services Microsoft Corporation

WUDFHost.exe 2632 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation

dwm.exe 3256 Desktop Window Manager Microsoft Corporation

svchost.exe 292 Host Process for Windows Services Microsoft Corporation

svchost.exe 340 Host Process for Windows Services Microsoft Corporation

svchost.exe 1228 Host Process for Windows Services Microsoft Corporation

rdpclip.exe 3112 RDP Clip Monitor Microsoft Corporation

spoolsv.exe 1348 Spooler SubSystem App Microsoft Corporation

svchost.exe 1380 Host Process for Windows Services Microsoft Corporation

AppleMobileDeviceService.exe 1536 Apple Mobile Device Service Apple Inc.

mDNSResponder.exe 1556 Bonjour Service Apple Inc.

svchost.exe 1604 Host Process for Windows Services Microsoft Corporation

FileZilla server.exe 1628 FileZilla Server FileZilla Project

LSSrvc.exe 1668 LightScribe Service Hewlett-Packard Company

MediaMallServer.exe 1724 PlayOn Server MediaMall Technologies, Inc.

IoctlSvc.exe 1940 PLFlash DeviceIoControl Service Prolific Technology Inc.

MediaServer.exe 1160

X10nets.exe 1252 X10 Module X10

DynDNS.exe 2280 DynDNS Updater Kana Solution

svchost.exe 2616 Host Process for Windows Services Microsoft Corporation

wmpnetwk.exe 152 11.41 Windows Media Player Network Sharing Service Microsoft Corporation

SearchIndexer.exe 1204 Microsoft Windows Search Indexer Microsoft Corporation

SearchProtocolHost.exe 4396 Microsoft Windows Search Protocol Host Microsoft Corporation

SearchFilterHost.exe 2740 Microsoft Windows Search Filter Host Microsoft Corporation

taskhost.exe 3124 Host Process for Windows Tasks Microsoft Corporation

NMIndexingService.exe 3804 Nero Home Nero AG

svchost.exe 2612 Host Process for Windows Services Microsoft Corporation

iPodService.exe 3624 iPodService Module (64-bit) Apple Inc.

lsass.exe 508 Local Security Authority Process Microsoft Corporation

lsm.exe 516 Local Session Manager Service Microsoft Corporation

csrss.exe 468 Client Server Runtime Process Microsoft Corporation

winlogon.exe 604 Windows Logon Application Microsoft Corporation

LogonUI.exe 848 Windows Logon User Interface Host Microsoft Corporation

csrss.exe 1776 Client Server Runtime Process Microsoft Corporation

winlogon.exe 200 Windows Logon Application Microsoft Corporation

explorer.exe 3296 Windows Explorer Microsoft Corporation

nvraidservice.exe 3420 NVIDIA RAID Service English language NVIDIA Corporation

msseces.exe 3448 Microsoft Security Essentials User Interface Microsoft Corporation

PlayOn.exe 3460 PlayOn System Tray Monitor MediaMall Technologies, Inc.

LightScribeControlPanel.exe 3504 Hewlett-Packard Company

NMBgMonitor.exe 3596 Nero Home Nero AG

iTunesFolderWatch.exe 3608 iTunesFolderWatch

GoogleUpdate.exe 3616 Google Installer Google Inc.

BeatPack.exe 3724

Dropbox.exe 3760 Dropbox

procexp.exe 4296 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

procexp64.exe 4288 2.28 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

uTorrent.exe 4348 µTorrent BitTorrent, Inc.

firefox.exe 3332 Firefox Mozilla Corporation

iTunesHelper.exe 3896 iTunesHelper Module Apple Inc.

Process: uTorrent.exe Pid: 4348

Name Description Company Name Version

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.1.7600.16385

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.8530.16385

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.10.7600.16385

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.1.7600.16385

CRYPTBASE.dll Base cryptographic API DLL Microsoft Corporation 6.1.7600.16385

CRYPTSP.dll Cryptographic Service Provider API Microsoft Corporation 6.1.7600.16385

dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.1.7600.16385

dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.1.7600.16385

DnsApi.dll DNS Client API DLL Microsoft Corporation 6.1.7600.16385

dwmapi.dll Microsoft Desktop Window Manager API Microsoft Corporation 6.1.7600.16385

FirewallAPI.dll Windows Firewall API Microsoft Corporation 6.1.7600.16385

fwpuclnt.dll FWP/IPsec User-Mode API Microsoft Corporation 6.1.7600.16385

GDI32.dll GDI Client DLL Microsoft Corporation 6.1.7600.16385

IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.1.7600.16385

Iphlpapi.dll IP Helper API Microsoft Corporation 6.1.7600.16385

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.1.7600.16385

KERNELBASE.dll Windows NT BASE API Client DLL Microsoft Corporation 6.1.7600.16385

locale.nls

LPK.dll Language Pack Microsoft Corporation 6.1.7600.16385

MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.1.7600.16385

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.7600.16385

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.1.7600.16385

NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.1.7600.16385

ntdll.dll NT Layer DLL Microsoft Corporation 6.1.7600.16385

ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.1.7600.16385

oleaut32.dll Microsoft Corporation 6.1.7600.16385

profapi.dll User Profile Basic API Microsoft Corporation 6.1.7600.16385

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.1.7600.16385

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.1.7600.16385

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.1.7600.16385

sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation 6.1.7600.16385

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.1.7600.16385

shfolder.dll Shell Folder Service Microsoft Corporation 6.1.7600.16385

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.1.7600.16385

SortDefault.nls

SspiCli.dll Security Support Provider Interface Microsoft Corporation 6.1.7600.16385

StaticCache.dat

USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.1.7600.16385

USERENV.dll Userenv Microsoft Corporation 6.1.7600.16385

USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.7600.16385

uTorrent.exe µTorrent BitTorrent, Inc. 1.8.3.16010

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.1.7600.16385

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.1.7600.16385

WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.1.7600.16385

wow64.dll Win32 Emulation on NT64 Microsoft Corporation 6.1.7600.16385

wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation 6.1.7600.16385

wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation 6.1.7600.16385

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.1.7600.16385

wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.1.7600.16385

wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.1.7600.16385

Firon · September 17, 2009

The actual utorrent.exe process is using 1.5GB of RAM?

mlumb · September 18, 2009

It doesn't take that amount everytime but the first time I caught it doing this yes. The utorrent.exe process alone was taking 1.5 GB worth of memory. Usually i catch it now around 300-400mb of ram. When it's oporating normally it only takes about 30mb at peak.

HERE is the Process Explorer output from the last 2 times it happened. RAM usage only climbed to 250 Mb before I rebooted, but uTorrent still refused to close and I had to hard boot the machine.

Process PID CPU Description Company Name User Name Window Status

System Idle Process 0 44.90 NT AUTHORITY\SYSTEM

Interrupts n/a 2.99 Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4 NT AUTHORITY\SYSTEM

smss.exe 272 Windows Session Manager Microsoft Corporation NT AUTHORITY\SYSTEM

csrss.exe 372 Client Server Runtime Process Microsoft Corporation NT AUTHORITY\SYSTEM

wininit.exe 428 Windows Start-Up Application Microsoft Corporation NT AUTHORITY\SYSTEM

services.exe 488 0.75 Services and Controller app Microsoft Corporation NT AUTHORITY\SYSTEM

svchost.exe 672 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\SYSTEM

WmiPrvSE.exe 3732 WMI Provider Host Microsoft Corporation NT AUTHORITY\SYSTEM

NMIndexStoreSvr.exe 3980 Nero Home Nero AG Lynn2\Michael Lumb

unsecapp.exe 3844 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation Lynn2\Michael Lumb

ehmsas.exe 3764 Media Center Media Status Aggregator Service Microsoft Corporation Lynn2\Michael Lumb

iexplore.exe 4880 Internet Explorer Microsoft Corporation Lynn2\Michael Lumb

iexplore.exe 4808 Internet Explorer Microsoft Corporation Lynn2\Michael Lumb

nvvsvc.exe 732 NVIDIA Driver Helper Service, Version 190.38 NVIDIA Corporation NT AUTHORITY\SYSTEM

nvvsvc.exe 3052 NVIDIA Driver Helper Service, Version 190.38 NVIDIA Corporation NT AUTHORITY\SYSTEM

svchost.exe 772 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE

MsMpEng.exe 832 AntiMalware Service Executable Microsoft Corporation NT AUTHORITY\SYSTEM

svchost.exe 972 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE

svchost.exe 1008 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\SYSTEM

WUDFHost.exe 2928 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation NT AUTHORITY\LOCAL SERVICE

dwm.exe 3388 0.75 Desktop Window Manager Microsoft Corporation Lynn2\Michael Lumb

svchost.exe 316 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\SYSTEM

svchost.exe 1032 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE

svchost.exe 1252 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE

spoolsv.exe 1344 Spooler SubSystem App Microsoft Corporation NT AUTHORITY\SYSTEM

svchost.exe 1412 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE

AppleMobileDeviceService.exe 1496 Apple Mobile Device Service Apple Inc. NT AUTHORITY\SYSTEM

mDNSResponder.exe 1520 Bonjour Service Apple Inc. NT AUTHORITY\SYSTEM

svchost.exe 1608 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE

FileZilla server.exe 1640 FileZilla Server FileZilla Project NT AUTHORITY\SYSTEM

LSSrvc.exe 1700 LightScribe Service Hewlett-Packard Company NT AUTHORITY\SYSTEM

IoctlSvc.exe 1900 PLFlash DeviceIoControl Service Prolific Technology Inc. NT AUTHORITY\SYSTEM

MediaServer.exe 1276 NT AUTHORITY\SYSTEM

X10nets.exe 1580 X10 Module X10 NT AUTHORITY\SYSTEM

DynDNS.exe 2188 DynDNS Updater Kana Solution NT AUTHORITY\SYSTEM

svchost.exe 2852 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE

wmpnetwk.exe 2824 Windows Media Player Network Sharing Service Microsoft Corporation NT AUTHORITY\NETWORK SERVICE

SearchIndexer.exe 1100 Microsoft Windows Search Indexer Microsoft Corporation NT AUTHORITY\SYSTEM

SearchProtocolHost.exe 5056 Microsoft Windows Search Protocol Host Microsoft Corporation NT AUTHORITY\SYSTEM

SearchProtocolHost.exe 3460 Microsoft Windows Search Protocol Host Microsoft Corporation NT AUTHORITY\SYSTEM

SearchProtocolHost.exe 3220 Microsoft Windows Search Protocol Host Microsoft Corporation NT AUTHORITY\SYSTEM

SearchProtocolHost.exe 788 Microsoft Windows Search Protocol Host Microsoft Corporation NT AUTHORITY\SYSTEM

SearchProtocolHost.exe 3808 Microsoft Windows Search Protocol Host Microsoft Corporation NT AUTHORITY\SYSTEM

SearchProtocolHost.exe 3756 Microsoft Windows Search Protocol Host Microsoft Corporation NT AUTHORITY\SYSTEM

SearchFilterHost.exe 1844 Microsoft Windows Search Filter Host Microsoft Corporation NT AUTHORITY\SYSTEM

taskhost.exe 3156 Host Process for Windows Tasks Microsoft Corporation Lynn2\Michael Lumb

NMIndexingService.exe 3868 Nero Home Nero AG NT AUTHORITY\SYSTEM

iPodService.exe 2452 iPodService Module (64-bit) Apple Inc. NT AUTHORITY\SYSTEM

svchost.exe 4388 Host Process for Windows Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE

MediaMallServer.exe 4304 PlayOn Server MediaMall Technologies, Inc. NT AUTHORITY\SYSTEM

taskhost.exe 3912 Host Process for Windows Tasks Microsoft Corporation Lynn2\Michael Lumb

lsass.exe 504 Local Security Authority Process Microsoft Corporation NT AUTHORITY\SYSTEM

lsm.exe 512 Local Session Manager Service Microsoft Corporation NT AUTHORITY\SYSTEM

csrss.exe 1116 Client Server Runtime Process Microsoft Corporation NT AUTHORITY\SYSTEM

winlogon.exe 1424 Windows Logon Application Microsoft Corporation NT AUTHORITY\SYSTEM

explorer.exe 3424 Windows Explorer Microsoft Corporation Lynn2\Michael Lumb Running

nvraidservice.exe 3536 NVIDIA RAID Service English language NVIDIA Corporation Lynn2\Michael Lumb

PlayOn.exe 3564 PlayOn System Tray Monitor MediaMall Technologies, Inc. Lynn2\Michael Lumb

LightScribeControlPanel.exe 3580 Hewlett-Packard Company Lynn2\Michael Lumb

NMBgMonitor.exe 3588 Nero Home Nero AG Lynn2\Michael Lumb

iTunesFolderWatch.exe 3644 iTunesFolderWatch Lynn2\Michael Lumb Running

BeatPack.exe 3712 45.65 Lynn2\Michael Lumb Running

Dropbox.exe 3796 Dropbox Lynn2\Michael Lumb

uTorrent.exe 2972 1.50 µTorrent BitTorrent, Inc. Lynn2\Michael Lumb Running

taskmgr.exe 1392 1.50 Windows Task Manager Microsoft Corporation Lynn2\Michael Lumb Running

TVersity.exe 3888 Lynn2\Michael Lumb Running

procexp.exe 3892 Sysinternals Process Explorer Sysinternals - www.sysinternals.com Lynn2\Michael Lumb

procexp64.exe 4536 2.25 Sysinternals Process Explorer Sysinternals - www.sysinternals.com Lynn2\Michael Lumb Running

iTunesHelper.exe 3828 iTunesHelper Module Apple Inc. Lynn2\Michael Lumb

firefox.exe 556 Firefox Mozilla Corporation Lynn2\Michael Lumb Running

SoundcrankLoader.exe 4820 Soundcrank, Inc. Lynn2\Michael Lumb

Process: uTorrent.exe Pid: 2972

Name Description Company Name Version

{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000001.db

{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db

{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db

{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db

actxprxy.dll ActiveX Interface Marshaling Library Microsoft Corporation 6.1.7600.16385

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.1.7600.16385

apphelp.dll Application Compatibility Client Library Microsoft Corporation 6.1.7600.16385

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.0

browcli.dll Browser Service Client DLL Microsoft Corporation 6.1.7600.16385

CFGMGR32.dll Configuration Manager DLL Microsoft Corporation 6.1.7600.16385

CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.8530.16385

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.10.7600.16385

comctl32.dll.mui User Experience Controls Library Microsoft Corporation 6.10.7600.16385

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.1.7600.16385

comdlg32.dll.mui Common Dialogs DLL Microsoft Corporation 6.1.7600.16385

CRYPT32.dll Crypto API32 Microsoft Corporation 6.1.7600.16385

CRYPTBASE.dll Base cryptographic API DLL Microsoft Corporation 6.1.7600.16385

CRYPTSP.dll Cryptographic Service Provider API Microsoft Corporation 6.1.7600.16385

cscapi.dll Offline Files Win32 API Microsoft Corporation 6.1.7600.16385

cversions.2.db

davclnt.dll Web DAV Client DLL Microsoft Corporation 6.1.7600.16385

DAVHLPR.dll DAV Helper DLL Microsoft Corporation 6.1.7600.16385

DEVOBJ.dll Device Information Set DLL Microsoft Corporation 6.1.7600.16385

dfscli.dll Windows NT Distributed File System Client DLL Microsoft Corporation 6.1.7600.16385

dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.1.7600.16385

dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.1.7600.16385

DnsApi.dll DNS Client API DLL Microsoft Corporation 6.1.7600.16385

DropboxExt.3.dll Dropbox Shell Extension Evenflow, Inc. 1.0.0.3

drprov.dll Microsoft Remote Desktop Session Host Server Network Provider Microsoft Corporation 6.1.7600.16385

dtsh.dll Detection and Sharing Status API Microsoft Corporation 6.1.7600.16385

DUI70.dll Windows DirectUI Engine Microsoft Corporation 6.1.7600.16385

DUser.dll Windows DirectUser Engine Microsoft Corporation 6.1.7600.16385

dwmapi.dll Microsoft Desktop Window Manager API Microsoft Corporation 6.1.7600.16385

EhStorAPI.dll Windows Enhanced Storage API Microsoft Corporation 6.1.7600.16385

EhStorShell.dll Windows Enhanced Storage Shell Extension DLL Microsoft Corporation 6.1.7600.16385

explorerframe.dll ExplorerFrame Microsoft Corporation 6.1.7600.16385

fastprox.dll WMI Custom Marshaller Microsoft Corporation 6.1.7600.16385

fdproxy.dll Function Discovery Proxy Dll Microsoft Corporation 6.1.7600.16385

fdwcn.dll Windows Connect Now - Config Function Discovery Provider DLL Microsoft Corporation 6.1.7600.16385

fdWNet.dll Function Discovery WNet Provider Dll Microsoft Corporation 6.1.7600.16385

FirewallAPI.dll Windows Firewall API Microsoft Corporation 6.1.7600.16385

FunDisc.dll Function Discovery Dll Microsoft Corporation 6.1.7600.16385

FunDisc.dll.mui Function Discovery Dll Microsoft Corporation 6.1.7600.16385

fwpuclnt.dll FWP/IPsec User-Mode API Microsoft Corporation 6.1.7600.16385

GDI32.dll GDI Client DLL Microsoft Corporation 6.1.7600.16385

IconCodecService.dll Converts a PNG part of the icon to a legacy bmp icon Microsoft Corporation 6.1.7600.16385

ieframe.DLL Internet Browser Microsoft Corporation 8.0.7600.16385

ieproxy.dll IE ActiveX Interface Marshaling Library Microsoft Corporation 8.0.7600.16385

iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 8.0.7600.16385

imageres.dll Windows Image Resource Microsoft Corporation 6.1.7600.16385

IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.1.7600.16385

Iphlpapi.dll IP Helper API Microsoft Corporation 6.1.7600.16385

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.1.7600.16385

KERNELBASE.dll Windows NT BASE API Client DLL Microsoft Corporation 6.1.7600.16385

KernelBase.dll.mui Windows NT BASE API Client DLL Microsoft Corporation 6.1.7600.16385

LINKINFO.dll Windows Volume Tracking Microsoft Corporation 6.1.7600.16385

locale.nls

LPK.dll Language Pack Microsoft Corporation 6.1.7600.16385

MPR.dll Multiple Provider Router DLL Microsoft Corporation 6.1.7600.16385

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.1.7600.16385

MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.1.7600.16385

msls31.dll Microsoft Line Services library file Microsoft Corporation 3.10.349.0

MSVCP71.dll Microsoft® C++ Runtime Library Microsoft Corporation 7.10.3077.0

MSVCR71.dll Microsoft® C Runtime Library Microsoft Corporation 7.10.3052.4

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.7600.16385

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.1.7600.16385

msxml6.dll MSXML 6.0 SP3 Microsoft Corporation 6.30.7600.16385

msxml6r.dll XML Resources Microsoft Corporation 6.30.7600.16385

netutils.dll Net Win32 API Helpers DLL Microsoft Corporation 6.1.7600.16385

NetworkExplorer.dll Network Explorer Microsoft Corporation 6.1.7600.16385

NetworkItemFactory.dll NetworkItem Factory Microsoft Corporation 6.1.7600.16385

NetworkItemFactory.dll.mui NetworkItem Factory Microsoft Corporation 6.1.7600.16385

npmproxy.dll Network List Manager Proxy Microsoft Corporation 6.1.7600.16385

NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.1.7600.16385

ntdll.dll NT Layer DLL Microsoft Corporation 6.1.7600.16385

NTDSAPI.dll Active Directory Domain Services API Microsoft Corporation 6.1.7600.16385

ntlanman.dll Microsoft® Lan Manager Microsoft Corporation 6.1.7600.16385

ntmarta.dll Windows NT MARTA provider Microsoft Corporation 6.1.7600.16385

ntshrui.dll Shell extensions for sharing Microsoft Corporation 6.1.7600.16385

ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.1.7600.16385

OLEACC.dll Active Accessibility Core Component Microsoft Corporation 7.0.0.0

oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation 7.0.0.0

oleaccrc.dll.mui Active Accessibility Resource DLL Microsoft Corporation 7.0.0.0

oleaut32.dll Microsoft Corporation 6.1.7600.16385

PortableDeviceApi.dll Windows Portable Device API Components Microsoft Corporation 6.1.7600.16385

PortableDeviceTypes.dll Windows Portable Device (Parameter) Types Component Microsoft Corporation 6.1.7600.16385

profapi.dll User Profile Basic API Microsoft Corporation 6.1.7600.16385

PROPSYS.dll Microsoft Property System Microsoft Corporation 7.0.7600.16385

PSAPI.DLL Process Status Helper Microsoft Corporation 6.1.7600.16385

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.1.7600.16385

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.1.7600.16385

RpcRtRemote.dll Remote RPC Extension Microsoft Corporation 6.1.7600.16385

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.1.7600.16385

SearchFolder.dll SearchFolder Microsoft Corporation 6.1.7600.16385

sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation 6.1.7600.16385

Secur32.dll Security Support Provider Interface Microsoft Corporation 6.1.7600.16385

SETUPAPI.dll Windows Setup API Microsoft Corporation 6.1.7600.16385

SHDOCVW.dll Shell Doc Object and Control Library Microsoft Corporation 6.1.7600.16385

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.1.7600.16385

shfolder.dll Shell Folder Service Microsoft Corporation 6.1.7600.16385

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.1.7600.16385

slc.dll Software Licensing Client Dll Microsoft Corporation 6.1.7600.16385

SortDefault.nls

srvcli.dll Server Service Client DLL Microsoft Corporation 6.1.7600.16385

SspiCli.dll Security Support Provider Interface Microsoft Corporation 6.1.7600.16385

StaticCache.dat

StructuredQuery.dll Structured Query Microsoft Corporation 7.0.7600.16385

thumbcache.dll Microsoft Thumbnail Cache Microsoft Corporation 6.1.7600.16385

thumbcache_idx.db

tiptsf.dll Tablet PC Input Panel Text Services Framework Microsoft Corporation 6.1.7600.16385

urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 8.0.7600.16385

USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.1.7600.16385

USERENV.dll Userenv Microsoft Corporation 6.1.7600.16385

USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.7600.16385

uTorrent.exe µTorrent BitTorrent, Inc. 1.8.3.16010

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.1.7600.16385

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.1.7600.16385

wbemcomn.dll WMI Microsoft Corporation 6.1.7600.16385

wbemprox.dll WMI Microsoft Corporation 6.1.7600.16385

wbemsvc.dll WMI Microsoft Corporation 6.1.7600.16385

wcnapi.dll Windows Connect Now - API Helper DLL Microsoft Corporation 6.1.7600.16385

WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation 6.1.7600.16385

WINMM.dll MCI API DLL Microsoft Corporation 6.1.7600.16385

WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.1.7600.16385

WINSTA.dll Winstation Library Microsoft Corporation 6.1.7600.16385

WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 6.1.7600.16385

wkscli.dll Workstation Service Client DLL Microsoft Corporation 6.1.7600.16385

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.1.7600.16385