bug utorrent 2.0 build 16850

rinzewind · October 16, 2009

i have a problem, utorrent will not load/continue any torrent file's yesterday i had about 300 completed torrent's and there where 10 downloading, and 6 uploading, but after a restart has everything gone blank, i mean there are 0 downloads anymore and 0 completed, but the maps where the torrent file's are located are still existing and all the torrent's itself are there, the weird thing is every time i try to reinsert a torrent and try to continue where it left of it forgot the place it was saved etc, but after reboot the same thing happend again, again utorrent is as clean as ever.

the same thing hapens also with new torrent's they load but after reboot they are gone.

i included the hijack log and the pexplorer log, there was no dmp file so i coudn't put it here.

hijack this log :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:28:24, on 16/10/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\WINDOWS\system32\cisvc.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe

C:\WINDOWS\system32\vmnat.exe

C:\Program Files\VMware\VMware Workstation\vmware-authd.exe

C:\WINDOWS\system32\vmnetdhcp.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

C:\Program Files\InterlinkNetworks\LucidLinkClient\bin\LucidLinkClient.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Volumouse\volumouse.exe

C:\Program Files\DAEMON Tools Lite\daemon.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\SpeedswitchXP\SpeedswitchXP.exe

C:\Program Files\FTD Watchdog\FtdMonitor.exe

C:\Users\Administrator\Desktop\Core Temp.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\cidaemon.exe

C:\Program Files\uTorrent\utorrent.exe

C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe

C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe

C:\Users\Administrator\My Documents\Downloads\HijackThis.exe

C:\ppApps\WinRAR\WinRAR.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = IE

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: CmjBrowserHelperObject Object - {07A11D74-9D25-4fea-A833-8B0D76A5577A} - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\ppApps\Flashget\jccatch.dll

O2 - BHO: IE to GetRight Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: Kwyshell MidpX BHO - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - C:\Program Files\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll

O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll

O3 - Toolbar: QT Breadcrumbs Address Bar - {af83e43c-dd2b-4787-826b-31b17dee52ed} - mscoree.dll (file missing)

O3 - Toolbar: QT TabBar - {d2bf470e-ed1c-487f-a333-2bd8835eb6ce} - mscoree.dll (file missing)

O3 - Toolbar: QT Tab Standard Buttons - {D2BF470E-ED1C-487F-A666-2BD8835EB6CE} - mscoree.dll (file missing)

O3 - Toolbar: Kwyshell MidpX - {EBE9E2B5-B526-48BC-AD46-687263EDCB0E} - C:\Program Files\Kwyshell\MidpX\JadInvoker\MidpInvoker.dll

O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

O4 - HKLM\..\Run: [LucidLinkClient] "C:\Program Files\InterlinkNetworks\LucidLinkClient\bin\LucidLinkClient.exe" -autolaunch

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [$Volumouse$] "C:\Program Files\Volumouse\volumouse.exe" /nodlg

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\utorrent.exe"

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [speedswitchXP] C:\Program Files\SpeedswitchXP\SpeedswitchXP.exe

O4 - HKCU\..\Run: [FTD Watchdog Monitor] "C:\Program Files\FTD Watchdog\FtdMonitor.exe"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')

O4 - Startup: Core Temp.lnk = C:\Users\Administrator\Desktop\Core Temp.exe

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present

O8 - Extra context menu item: &Download All with FlashGet - C:\ppApps\Flashget\jc_all.htm

O8 - Extra context menu item: &Download with FlashGet - C:\ppApps\Flashget\jc_link.htm

O8 - Extra context menu item: &Download with TrueDownloader! - C:\Program Files\TrueDownloader\TrueDownloader.htm

O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm

O8 - Extra context menu item: Download met LeechGet - file://C:\Program Files\LeechGet 2009\\AddUrl.html

O8 - Extra context menu item: Download met LeechGet Wizard - file://C:\Program Files\LeechGet 2009\\Wizard.html

O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm

O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm

O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm

O8 - Extra context menu item: Download with GetRight Pro - C:\Program Files\GetRight\GRdownload.htm

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Link to &MidpX - C:\Program Files\Kwyshell\MidpX\JadInvoker\Extent\jad_wrap.htm

O8 - Extra context menu item: Open with GetRight Pro Browser - C:\Program Files\GetRight\GRbrowse.htm

O8 - Extra context menu item: Verwerk met LeechGet (Parse) - file://C:\Program Files\LeechGet 2009\\Parser.html

O9 - Extra button: Send to Mindjet MindManager - {941E1A34-C6AF-4baa-A973-224F9C3E04BF} - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll

O17 - HKLM\System\CCS\Services\Tcpip\..\{7ED4E92E-4AF1-480C-9CBE-9C393589D711}: NameServer = 192.168.2.1

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 127.0.0.1

O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 127.0.0.1

O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 127.0.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 127.0.0.1

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe

O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe

O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe

O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe

O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe

--

End of file - 13070 bytes

pexplorer

Process PID CPU Description Company Name

System Idle Process 0 87.23

procexp.exe 2256 6.38 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

services.exe 1460 2.13 Services and Controller app Microsoft Corporation

System 4

explorer.exe 424 Windows Explorer Microsoft Corporation

ekrn.exe 868 1.06 ESET Service ESET

DPCs n/a Deferred Procedure Calls

chrome.exe 3548 Google Chrome Google Inc.

chrome.exe 3448 Google Chrome Google Inc.

wmiprvse.exe 1328 WMI Microsoft Corporation

WinRAR.exe 3884 WinRAR archiver Alexander Roshal

winlogon.exe 1416 Windows NT Logon Application Microsoft Corporation

volumouse.exe 3944 Volumouse Utility NirSoft

vmware-ufad.exe 1168 VMware Host Process for Ufa Services VMware, Inc.

vmware-authd.exe 2072 VMware Authorization Service VMware, Inc.

vmnetdhcp.exe 2288 VMware VMnet DHCP service VMware, Inc.

vmnat.exe 1636 VMware NAT Service VMware, Inc.

utorrent.exe 1552 µTorrent BitTorrent, Inc.

svchost.exe 1740 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1104 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1644 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1700 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1772 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1944 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 2020 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1064 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 776 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 3200 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 3896 Generic Host Process for Win32 Services Microsoft Corporation

SpeedswitchXP.exe 4000 A CPU frequency applet for Windows XP Christian Diefer

SMSvcHost.exe 1256 SMSvcHost.exe Microsoft Corporation

smss.exe 1284 Windows NT Session Manager Microsoft Corporation

SkypeNames.exe 3748 SkypeNames Skype Technologies S.A.

notepad++.exe 2112 Notepad++ : a free (GNU) source code editor Don HO don.h@free.fr

LucidLinkClient.exe 3880 LucidLink Client Interlink Networks, Inc.

lsass.exe 1472 LSA Shell (Export Version) Microsoft Corporation

locator.exe 808 Rpc Locator Microsoft Corporation

iTunesHelper.exe 3920 iTunesHelper Module Apple Inc.

iPodService.exe 3632 iPodService Module (32-bit) Apple Inc.

Interrupts n/a Hardware Interrupts

HijackThis.exe 2524 HijackThis Trend Micro Inc.

FtdMonitor.exe 4016 FTD Watchdog Monitor

egui.exe 3872 1.06 ESET GUI ESET

daemon.exe 3976 DAEMON Tools Lite DT Soft Ltd

ctfmon.exe 3988 CTF Loader Microsoft Corporation

csrss.exe 1388 Client Server Runtime Process Microsoft Corporation

Core Temp.exe 4048 CPU temperature and system information utility

cisvc.exe 844 Content Index service Microsoft Corporation

cidaemon.exe 2684 Indexing Service filter daemon Microsoft Corporation

chrome.exe 3600 Google Chrome Google Inc.

chrome.exe 2788 Google Chrome Google Inc.

chrome.exe 2508 2.13 Google Chrome Google Inc.

chrome.exe 1344 Google Chrome Google Inc.

chrome.exe 2792 Google Chrome Google Inc.

chrome.exe 3768 Google Chrome Google Inc.

chrome.exe 964 Google Chrome Google Inc.

chrome.exe 1888 Google Chrome Google Inc.

chrome.exe 948 Google Chrome Google Inc.

chrome.exe 2972 Google Chrome Google Inc.

AppleMobileDeviceService.exe 812 Apple Mobile Device Service Apple Inc.

alg.exe 2604 Application Layer Gateway Service Microsoft Corporation

AcroRd32.exe 2516 Adobe Reader 8.1 Adobe Systems Incorporated

Switeck · October 16, 2009

uTorrent.exe DLL list is missing from Process Explorer text.

It is critical that we know what possibly hostile DLLs are deep-linking into uTorrent and causing the undesired results you're seeing.

rinzewind · October 16, 2009

okay, how can i get this ? is this thn what you need ?

otherwise tell me what i exact need to do.

Process PID CPU Description Company Name

System Idle Process 0 64.18

utorrent.exe 3616 16.42 µTorrent BitTorrent, Inc.

DPCs n/a 13.43 Deferred Procedure Calls

Interrupts n/a 2.99 Hardware Interrupts

System 4 1.49

services.exe 1460 1.49 Services and Controller app Microsoft Corporation

wmiprvse.exe 1328 WMI Microsoft Corporation

WinRAR.exe 2068 WinRAR archiver Alexander Roshal