Tiptup300 Posted April 3, 2010 Report Posted April 3, 2010 Okay, this has been happening quite often now. After running utorrent (maybe only when it starts when I reboot?) and closing it, it keeps running in the background, I'm not sure if it's seeding or downloading, but it's a process in my task manager, and the weird thing is that I can't kill the process manually. Also if I try to run utorrent by just clicking the .exe, it will tell me "uTorrent is already running or is not responding." So it doesn't run again. What I can also do though is open a .torrent file via firefox and it will open another uTorrent. If I look in the task manager it shows that there are two uTorrent processes running. I've also found that the phantom uTorrent process also has control over the files that it was seeding/downloading so I can't rename/edit them.
moogly Posted April 3, 2010 Report Posted April 3, 2010 You have to post logs.Guide: http://forum.utorrent.com/viewtopic.php?id=29748For Process Explorer, select utorrent.exe and enable dll mode (ctrl+D).
laffe Posted April 4, 2010 Report Posted April 4, 2010 I have the exact same problem.And its anoying as hell.Have to reboot the pc everytime this happens.Here are the logs you wanted.I did not find the dump that is mentioned.But let me know if you need it and ill have a new look.Hijackthis:http://www.zshare.net/download/745958812df30cf1/Procexp:http://www.zshare.net/download/74595953b6294381/Hope you can solve this problem.Its after i upgraded to version 2 i think thi startedLaffe
DreadWingKnight Posted April 4, 2010 Report Posted April 4, 2010 paste the logs directly into your posts please
laffe Posted April 4, 2010 Report Posted April 4, 2010 I can paste them in for sure. But the post mentioned above mentioned to use those to upload. Sorry if i missunderstood.Here are the logs starting with the hijack one.Logfile of Trend Micro HijackThis v2.0.3 (BETA)Scan saved at 15:57:35, on 04.04.2010Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Microsoft Security Essentials\msseces.exeC:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exeC:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exeC:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exeC:\Program Files\HP\HP Software Update\hpwuschd2.exeC:\Program Files\Voddler\service\VNetManager.exeC:\Program Files\Windows Live\Messenger\msnmsgr.exeC:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exeC:\Program Files\AIM\aim.exeC:\Program Files\Yahoo!\Messenger\YahooMessenger.exeC:\Program Files\Microsoft Office\Office12\OUTLOOK.EXEC:\Program Files\Windows Live\Contacts\wlcomm.exeC:\Program Files\DAEMON Tools Lite\DTLite.exeC:\Windows\explorer.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\uTorrent\uTorrent.exeC:\Windows\system32\SearchFilterHost.exeC:\Program Files\WinRAR\WinRAR.exeC:\Users\laffe\AppData\Local\Temp\Rar$EX03.424\procexp.exeC:\Program Files\TrendMicro\HiJackThis\HiJackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: %windir%\system32\drivers\etc\hostsO2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dllO2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dllO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dllO2 - BHO: Påloggingshjelp for Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dllO2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dllO3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dllO4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkeyO4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exeO4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exeO4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbyloginO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottimeO4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exeO4 - HKLM\..\Run: [VoddlerNet Manager] C:\Program Files\Voddler\service\VNetManager.exeO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorunO4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"O4 - HKCU\..\Run: [Aim] "C:\Program Files\AIM\aim.exe" /d locale=nb-NOO4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quietO4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silentO4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKAL TJENESTE')O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKAL TJENESTE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETTVERKSTJENESTE')O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETTVERKSTJENESTE')O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exeO8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202O8 - Extra context menu item: E&ksporter til Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000O8 - Extra context menu item: Fyll Skjema - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.htmlO8 - Extra context menu item: Lagre Skjema - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.htmlO8 - Extra context menu item: RoboForm Verktøylinje - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.htmlO8 - Extra context menu item: Tilpass Meny - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.htmlO9 - Extra button: Fyll ut skjemaer - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.htmlO9 - Extra 'Tools' menuitem: Fyll Skjema - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.htmlO9 - Extra button: Lagre - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.htmlO9 - Extra 'Tools' menuitem: Lagre Skjema - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.htmlO9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.htmlO9 - Extra 'Tools' menuitem: RoboForm Verktøylinje - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.htmlO13 - Gopher Prefix: O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLLO23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exeO23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: Mamut Synchronization Service (MamutSyncService) - Mamut ASA - C:\Program Files\Mamut\Synchronization\Mamut.SynchronizationService.SynchronizationWindowsService.exeO23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exeO23 - Service: VoddlerNet - Voddler - C:\Program Files\Voddler\service\voddler.exeO23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe--End of file - 8773 bytesProcexp log:Process PID CPU Private Bytes Working Set Description Company NameSystem Idle Process 0 16.11 0 K 12 K Interrupts n/a 0.77 0 K 0 K Hardware Interrupts DPCs n/a 4.60 0 K 0 K Deferred Procedure Calls System 4 4.60 56 K 6 672 K smss.exe 456 252 K 600 K Windows Session Manager Microsoft Corporationcsrss.exe 568 1 312 K 1 984 K Kjøretidsprosess for klientserver Microsoft Corporationwininit.exe 700 832 K 1 428 K Oppstartsprogram for Windows Microsoft Corporation services.exe 748 4 352 K 4 696 K Program for tjenester og kontroller Microsoft Corporation svchost.exe 940 3 212 K 4 208 K Vertsprosess for Windows-tjenester Microsoft Corporation wlcomm.exe 3124 0.77 23 360 K 16 256 K Windows Live Communications Platform Microsoft Corporation WmiPrvSE.exe 3640 4 904 K 4 188 K WMI Provider Host Microsoft Corporation explorer.exe 5808 21 100 K 12 240 K Windows Utforsker Microsoft Corporation svchost.exe 1012 3 624 K 4 088 K Vertsprosess for Windows-tjenester Microsoft Corporation MsMpEng.exe 1060 9.97 150 592 K 63 088 K AntiMalware Service Executable Microsoft Corporation svchost.exe 1172 3.07 16 368 K 9 696 K Vertsprosess for Windows-tjenester Microsoft Corporationaudiodg.exe 4376 0.77 792 K 3 112 K Windows Audio Device Graph Isolation Microsoft Corporation svchost.exe 1272 56 448 K 51 584 K Vertsprosess for Windows-tjenester Microsoft Corporation WUDFHost.exe 2648 1 548 K 1 636 K Windows Driver Foundation - Vertsprosess for drivere i brukermodus Microsoft Corporation dwm.exe 3028 3.84 66 828 K 92 344 K Desktop Window Manager Microsoft Corporation svchost.exe 1320 1.53 27 704 K 21 020 K Vertsprosess for Windows-tjenester Microsoft Corporation svchost.exe 1512 9 288 K 10 944 K Vertsprosess for Windows-tjenester Microsoft Corporation svchost.exe 1604 24 824 K 19 224 K Vertsprosess for Windows-tjenester Microsoft Corporation svchost.exe 1740 237 056 K 43 720 K Vertsprosess for Windows-tjenester Microsoft Corporation schedul2.exe 1840 876 K 1 372 K Acronis Scheduler 2 Acronis svchost.exe 1884 6 208 K 7 568 K Vertsprosess for Windows-tjenester Microsoft Corporation Mamut.SynchronizationService.SynchronizationWindowsService.exe 1908 14 552 K 6 676 K SynchronizationWindowsService Mamut ASA sqlservr.exe 1960 42 908 K 14 504 K SQL Server Windows NT Microsoft Corporation sqlbrowser.exe 496 936 K 1 356 K SQL Browser Service EXE Microsoft Corporation sqlwriter.exe 564 1 360 K 2 676 K SQL Server VSS Writer Microsoft Corporation svchost.exe 956 2 752 K 2 496 K Vertsprosess for Windows-tjenester Microsoft Corporation TrueImageTryStartService.exe 1376 2 368 K 1 932 K voddler.exe 2060 7.67 4 776 K 4 492 K VoddlerNet Service Voddler YahooAUService.exe 2096 3 816 K 3 792 K AutoUpater Service Module Yahoo! Inc. svchost.exe 2696 1 688 K 2 220 K Vertsprosess for Windows-tjenester Microsoft Corporation taskhost.exe 2976 7 604 K 5 132 K Vertsprosess for Windows-oppgaver Microsoft Corporation SearchIndexer.exe 3816 46 712 K 21 592 K Microsoft Windows Search-indeksering Microsoft Corporation wmpnetwk.exe 4092 6 240 K 5 672 K Windows Media Player Network Sharing Service Microsoft Corporation svchost.exe 3664 1 468 K 2 488 K Vertsprosess for Windows-tjenester Microsoft Corporation spoolsv.exe 3620 5 888 K 4 528 K Delsystem for utskriftskø Microsoft Corporation msiexec.exe 5984 6 860 K 14 320 K Windows® installer Microsoft Corporation VSSVC.exe 1100 4 168 K 8 404 K Tjenesten Microsoft® Volume Shadow Copy Microsoft Corporation svchost.exe 5340 1 140 K 3 896 K Vertsprosess for Windows-tjenester Microsoft Corporation lsass.exe 764 4 048 K 5 280 K Local Security Authority Process Microsoft Corporation lsm.exe 772 1 400 K 1 836 K Local Session Manager Service Microsoft Corporationcsrss.exe 712 15 708 K 6 180 K Kjøretidsprosess for klientserver Microsoft Corporationwinlogon.exe 872 1 660 K 1 764 K Påloggingsprogram for Windows Microsoft Corporationexplorer.exe 3064 10.74 46 560 K 51 348 K Windows Utforsker Microsoft Corporation msseces.exe 3192 3 704 K 7 272 K Microsoft Security Essentials User Interface Microsoft Corporation TrueImageMonitor.exe 3200 4 212 K 1 084 K Acronis True Image Monitor Acronis TimounterMonitor.exe 3208 6 512 K 1 772 K Monitor for Acronis True Image Backup Archive Explorer Acronis schedhlp.exe 3216 744 K 1 440 K Acronis Scheduler Helper Acronis hpwuschd2.exe 3372 1 584 K 2 784 K hpwuSchd Application Hewlett-Packard VNetManager.exe 3400 2 868 K 3 120 K VoddlerNet Manager Application msnmsgr.exe 3424 4.60 98 616 K 67 908 K Windows Live Messenger Microsoft Corporation robotaskbaricon.exe 3452 0.77 2 956 K 5 216 K RoboForm TaskBar Icon Siber Systems aim.exe 3516 23 436 K 7 276 K AOL Instant Messenger AOL Inc. YahooMessenger.exe 3532 75 188 K 27 888 K Yahoo! Messenger Yahoo! Inc. OUTLOOK.EXE 2524 82 012 K 67 044 K Microsoft Office Outlook Microsoft Corporation DTLite.exe 2756 11 184 K 8 548 K DAEMON Tools Lite DT Soft Ltd firefox.exe 5724 15.34 366 688 K 266 700 K Firefox Mozilla Corporation uTorrent.exe 3676 22 692 K 21 364 K µTorrent BitTorrent, Inc. WinRAR.exe 5516 8 196 K 18 720 K WinRAR archiver Alexander Roshal procexp.exe 2228 14.57 19 904 K 36 560 K Sysinternals Process Explorer Sysinternals - www.sysinternals.comMpCmdRun.exe 2468 3 372 K 6 736 K Microsoft Malware Protection Command Line Utility Microsoft Corporation
DreadWingKnight Posted April 4, 2010 Report Posted April 4, 2010 Missing dll list for the utorrent.exe process.
laffe Posted April 4, 2010 Report Posted April 4, 2010 i do not know what that means.Those lists are the once the programs spit out.Is it the dump you need?
moogly Posted April 4, 2010 Report Posted April 4, 2010 Select utorrent.exe and enable DLL mode (ctrl+d) in Process Explorer.Guide: http://forum.utorrent.com/viewtopic.php?id=29748
laffe Posted April 4, 2010 Report Posted April 4, 2010 This whats needed?Process PID CPU Private Bytes Working Set Description Company NameSystem Idle Process 0 86.21 0 K 12 K Interrupts n/a 0 K 0 K Hardware Interrupts DPCs n/a 0 K 0 K Deferred Procedure Calls System 4 0.73 56 K 6 700 K smss.exe 456 252 K 600 K Windows Session Manager Microsoft Corporationcsrss.exe 568 1 312 K 1 624 K Kjøretidsprosess for klientserver Microsoft Corporationwininit.exe 700 832 K 1 428 K Oppstartsprogram for Windows Microsoft Corporation services.exe 748 4 296 K 4 660 K Program for tjenester og kontroller Microsoft Corporation svchost.exe 940 3 144 K 4 068 K Vertsprosess for Windows-tjenester Microsoft Corporation wlcomm.exe 3124 23 456 K 16 236 K Windows Live Communications Platform Microsoft Corporation WmiPrvSE.exe 3640 4 752 K 4 024 K WMI Provider Host Microsoft Corporation explorer.exe 5808 21 168 K 10 940 K Windows Utforsker Microsoft Corporation svchost.exe 1012 3 640 K 4 092 K Vertsprosess for Windows-tjenester Microsoft Corporation MsMpEng.exe 1060 150 452 K 65 588 K AntiMalware Service Executable Microsoft Corporation svchost.exe 1172 16 116 K 9 720 K Vertsprosess for Windows-tjenester Microsoft Corporation audiodg.exe 2104 15 128 K 13 840 K Windows Audio Device Graph Isolation Microsoft Corporation svchost.exe 1272 64 272 K 58 280 K Vertsprosess for Windows-tjenester Microsoft Corporation WUDFHost.exe 2648 1 548 K 1 628 K Windows Driver Foundation - Vertsprosess for drivere i brukermodus Microsoft Corporation dwm.exe 3028 66 884 K 98 496 K Desktop Window Manager Microsoft Corporation svchost.exe 1320 28 148 K 21 156 K Vertsprosess for Windows-tjenester Microsoft Corporation svchost.exe 1512 9 472 K 11 112 K Vertsprosess for Windows-tjenester Microsoft Corporation svchost.exe 1604 24 996 K 14 624 K Vertsprosess for Windows-tjenester Microsoft Corporation svchost.exe 1740 237 044 K 46 612 K Vertsprosess for Windows-tjenester Microsoft Corporation schedul2.exe 1840 876 K 1 372 K Acronis Scheduler 2 Acronis svchost.exe 1884 6 268 K 7 904 K Vertsprosess for Windows-tjenester Microsoft Corporation Mamut.SynchronizationService.SynchronizationWindowsService.exe 1908 14 556 K 6 332 K SynchronizationWindowsService Mamut ASA sqlservr.exe 1960 42 700 K 15 192 K SQL Server Windows NT Microsoft Corporation sqlbrowser.exe 496 936 K 1 356 K SQL Browser Service EXE Microsoft Corporation sqlwriter.exe 564 1 304 K 2 608 K SQL Server VSS Writer Microsoft Corporation svchost.exe 956 2 752 K 2 280 K Vertsprosess for Windows-tjenester Microsoft Corporation TrueImageTryStartService.exe 1376 2 368 K 1 932 K voddler.exe 2060 0.73 4 784 K 4 168 K VoddlerNet Service Voddler YahooAUService.exe 2096 3 816 K 3 792 K AutoUpater Service Module Yahoo! Inc. svchost.exe 2696 1 688 K 1 832 K Vertsprosess for Windows-tjenester Microsoft Corporation taskhost.exe 2976 7 632 K 5 584 K Vertsprosess for Windows-oppgaver Microsoft Corporation SearchIndexer.exe 3816 47 436 K 20 788 K Microsoft Windows Search-indeksering Microsoft Corporation wmpnetwk.exe 4092 6 264 K 5 736 K Windows Media Player Network Sharing Service Microsoft Corporation svchost.exe 3664 1 496 K 2 500 K Vertsprosess for Windows-tjenester Microsoft Corporation spoolsv.exe 3620 5 888 K 4 508 K Delsystem for utskriftskø Microsoft Corporation lsass.exe 764 4 080 K 5 160 K Local Security Authority Process Microsoft Corporation lsm.exe 772 1 400 K 1 784 K Local Session Manager Service Microsoft Corporationcsrss.exe 712 15 752 K 6 728 K Kjøretidsprosess for klientserver Microsoft Corporationwinlogon.exe 872 1 660 K 1 764 K Påloggingsprogram for Windows Microsoft Corporationexplorer.exe 3064 44 888 K 58 172 K Windows Utforsker Microsoft Corporation msseces.exe 3192 3 704 K 6 568 K Microsoft Security Essentials User Interface Microsoft Corporation TrueImageMonitor.exe 3200 4 212 K 1 084 K Acronis True Image Monitor Acronis TimounterMonitor.exe 3208 6 512 K 1 772 K Monitor for Acronis True Image Backup Archive Explorer Acronis schedhlp.exe 3216 744 K 1 436 K Acronis Scheduler Helper Acronis hpwuschd2.exe 3372 1 584 K 2 788 K hpwuSchd Application Hewlett-Packard VNetManager.exe 3400 2 868 K 3 124 K VoddlerNet Manager Application msnmsgr.exe 3424 127 580 K 82 116 K Windows Live Messenger Microsoft Corporation robotaskbaricon.exe 3452 3 036 K 5 344 K RoboForm TaskBar Icon Siber Systems aim.exe 3516 23 452 K 7 032 K AOL Instant Messenger AOL Inc. YahooMessenger.exe 3532 75 200 K 26 380 K Yahoo! Messenger Yahoo! Inc. OUTLOOK.EXE 2524 82 360 K 68 192 K Microsoft Office Outlook Microsoft Corporation DTLite.exe 2756 11 184 K 8 600 K DAEMON Tools Lite DT Soft Ltd firefox.exe 5724 4.38 390 640 K 333 668 K Firefox Mozilla Corporation uTorrent.exe 3676 22 692 K 20 348 K µTorrent BitTorrent, Inc. WinRAR.exe 2212 8 356 K 18 448 K WinRAR archiver Alexander Roshal procexp.exe 5196 8.77 20 360 K 41 556 K Sysinternals Process Explorer Sysinternals - www.sysinternals.comProcess: uTorrent.exe Pid: 3676Name Description Company Name Version{67D69890-D853-4011-A87E-AA64FA83CE5A}.2.ver0x0000000000000001.db {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000003.db {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000008.db {DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db actxprxy.dll ActiveX Interface Marshaling Library Microsoft Corporation 6.1.7600.16385ADFSMenu.dll Adobe Drive Menu Adobe Systems Incorporated 4.0.0.344AdobeDriveCS4_NP.dll Adobe Drive Network Provider Adobe Systems Incorporated 4.0.0.344ADVAPI32.dll Avansert Windows 32 Base-API Microsoft Corporation 6.1.7600.16385apphelp.dll Klientbibliotek for programkompatibilitet Microsoft Corporation 6.1.7600.16481ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.0AUTHZ.dll Authorization Framework Microsoft Corporation 6.1.7600.16385AVRT.dll Multimedia Realtime Runtime Microsoft Corporation 6.1.7600.16385browcli.dll Browser Service Client DLL Microsoft Corporation 6.1.7600.16385CFGMGR32.dll Configuration Manager DLL Microsoft Corporation 6.1.7600.16385CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.8530.16385COMCTL32.dll Bibliotek for brukerkontroller Microsoft Corporation 6.10.7600.16385comdlg32.dll DLL for felles dialogbokser Microsoft Corporation 6.1.7600.16385comdlg32.dll.mui DLL for felles dialogbokser Microsoft Corporation 6.1.7600.16385credssp.dll Credential Delegation Security Package Microsoft Corporation 6.1.7600.16385CRYPT32.dll Crypto API32 Microsoft Corporation 6.1.7600.16385CRYPTBASE.dll Base cryptographic API DLL Microsoft Corporation 6.1.7600.16385CRYPTSP.dll Cryptographic Service Provider API Microsoft Corporation 6.1.7600.16385CSCAPI.dll Offline Files Win32 API Microsoft Corporation 6.1.7600.16385CSCDLL.dll Offline Files Temporary Shim Microsoft Corporation 6.1.7600.16385cscui.dll Grensesnitt for Hurtigbufring på klientsiden Microsoft Corporation 6.1.7600.16385cversions.2.db cversions.2.db cversions.2.db cversions.2.db d3d8thk.dll Microsoft Direct3D OS Thunk Layer Microsoft Corporation 6.1.7600.16385d3d9.dll Direct3D 9 Runtime Microsoft Corporation 6.1.7600.16385davclnt.dll Web DAV Client DLL Microsoft Corporation 6.1.7600.16385DAVHLPR.dll DAV Helper DLL Microsoft Corporation 6.1.7600.16385DEVOBJ.dll Device Information Set DLL Microsoft Corporation 6.1.7600.16385dfscli.dll Windows NT Distributed File System Client DLL Microsoft Corporation 6.1.7600.16385dhcpcsvc.DLL Tjenesten DHCP-klient Microsoft Corporation 6.1.7600.16385dhcpcsvc6.DLL DHCPv6-klient Microsoft Corporation 6.1.7600.16385DnsApi.dll DNS-klient API DLL Microsoft Corporation 6.1.7600.16385drprov.dll Nettverksleverandør for Microsoft vertsserver for ekstern skrivebordsøkt Microsoft Corporation 6.1.7600.16385DUI70.dll Windows DirectUI-motor Microsoft Corporation 6.1.7600.16385DUser.dll Windows DirectUser Engine Microsoft Corporation 6.1.7600.16385dwmapi.dll Microsoft Desktop Window Manager API Microsoft Corporation 6.1.7600.16385EhStorShell.dll Skallutvidelses-DLL for Windows Forbedret lagring Microsoft Corporation 6.1.7600.16385explorerframe.dll ExplorerFrame Microsoft Corporation 6.1.7600.16385explorerframe.dll.mui ExplorerFrame Microsoft Corporation 6.1.7600.16385FirewallAPI.dll Windows-brannmur-API Microsoft Corporation 6.1.7600.16385FirewallAPI.dll.mui Windows-brannmur-API Microsoft Corporation 6.1.7600.16385fwpuclnt.dll FWP/IPsec brukermodus-API Microsoft Corporation 6.1.7600.16385GDI32.dll GDI Client DLL Microsoft Corporation 6.1.7600.16385gdiplus.dll Microsoft GDI+ Microsoft Corporation 6.1.7600.16385GPAPI.dll Gruppepolicyklient-API Microsoft Corporation 6.1.7600.16385hnetcfg.dll Konfigurasjonsbehandling for hjemmenettverk Microsoft Corporation 6.1.7600.16385hnetcfg.dll.mui Konfigurasjonsbehandling for hjemmenettverk Microsoft Corporation 6.1.7600.16385IconCodecService.dll Converts a PNG part of the icon to a legacy bmp icon Microsoft Corporation 6.1.7600.16385ieframe.DLL Internett-leser Microsoft Corporation 8.0.7600.16535ieproxy.dll IE ActiveX Interface Marshaling Library Microsoft Corporation 8.0.7600.16535iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 8.0.7600.16385imageres.dll Windows Image Resource Microsoft Corporation 6.1.7600.16385imageres.dll.mui Windows Image Resource Microsoft Corporation 6.1.7600.16385IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.1.7600.16385index.dat index.dat index.dat Iphlpapi.dll IP Helper API Microsoft Corporation 6.1.7600.16385kernel32.dll DLL-fil for Windows NT BASE API-klient Microsoft Corporation 6.1.7600.16481KERNELBASE.dll DLL-fil for Windows NT BASE API-klient Microsoft Corporation 6.1.7600.16385KernelBase.dll.mui DLL-fil for Windows NT BASE API-klient Microsoft Corporation 6.1.7600.16385ksuser.dll User CSA Library Microsoft Corporation 6.1.7600.16385LINKINFO.dll Windows Volume Tracking Microsoft Corporation 6.1.7600.16385locale.nls LPK.dll Language Pack Microsoft Corporation 6.1.7600.16385mf.dll DLL for mediefundament Microsoft Corporation 12.0.7600.16385MFPlat.DLL Media Foundation Platform DLL Microsoft Corporation 12.0.7600.16385MPR.dll DLL for Multiple Provider Router Microsoft Corporation 6.1.7600.16385mpr.dll.mui DLL for Multiple Provider Router Microsoft Corporation 6.1.7600.16385MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.1.7600.16415MSCTF.dll MSCTF-server-DLL Microsoft Corporation 6.1.7600.16385msctf.dll.mui MSCTF-server-DLL Microsoft Corporation 6.1.7600.16385msi.dll Windows Installer Microsoft Corporation 5.0.7600.16385msls31.dll Microsoft Line Services library file Microsoft Corporation 3.10.349.0msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.7600.16385mswsock.dll Microsoft Windows Sockets 2.0-tjenesteprogram Microsoft Corporation 6.1.7600.16385msxml3.dll MSXML 3.0 SP11 Microsoft Corporation 8.110.7600.16385msxml3r.dll XML Resources Microsoft Corporation 8.110.7600.16385netshell.dll Skall for nettverkstilkoblinger Microsoft Corporation 6.1.7600.16385netutils.dll Net Win32 API Helpers DLL Microsoft Corporation 6.1.7600.16385NetworkExplorer.dll Nettverksutforsker Microsoft Corporation 6.1.7600.16385nlaapi.dll Network Location Awareness 2 Microsoft Corporation 6.1.7600.16385Normaliz.dll Unicode Normalization DLL Microsoft Corporation 6.1.7600.16385NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.1.7600.16385ntdll.dll NT nivå-dll Microsoft Corporation 6.1.7600.16385ntlanman.dll Microsoft® Lan Manager Microsoft Corporation 6.1.7600.16385ntmarta.dll Windows NT MARTA-leverandør Microsoft Corporation 6.1.7600.16385ntshrui.dll Skallutvidelse for deling Microsoft Corporation 6.1.7600.16385ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.1.7600.16385OLEACC.dll Active Accessibility Core Component Microsoft Corporation 7.0.0.0oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation 7.0.0.0oleaccrc.dll.mui Active Accessibility Resource DLL Microsoft Corporation 7.0.0.0oleaut32.dll Microsoft Corporation 6.1.7600.16385peerdist.dll Klientbibliotek for BranchCache Microsoft Corporation 6.1.7600.16385PhotoBase.dll Photo Base Library Microsoft Corporation 6.1.7600.16385PhotoViewer.dll Windows Fotovisning Microsoft Corporation 6.1.7600.16385profapi.dll User Profile Basic API Microsoft Corporation 6.1.7600.16385PROPSYS.dll Microsoft Property System Microsoft Corporation 7.0.7600.16385propsys.dll.mui Microsoft Property System Microsoft Corporation 7.0.7600.16385PSAPI.DLL Process Status Helper Microsoft Corporation 6.1.7600.16385rarext.dll WinRAR shell extension Alexander Roshal 3.92.0.0rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.1.7600.16385RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.1.7600.16385RpcRtRemote.dll Remote RPC Extension Microsoft Corporation 6.1.7600.16385rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.1.7600.16385sbdrop.dll Sidepanel-droptarget Microsoft Corporation 6.1.7600.16385sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation 6.1.7600.16385Secur32.dll Security Support Provider Interface Microsoft Corporation 6.1.7600.16385SETUPAPI.dll Installasjons-API for Windows Microsoft Corporation 6.1.7600.16385setupapi.dll.mui Installasjons-API for Windows Microsoft Corporation 6.1.7600.16385SHDOCVW.dll Bibliotek for grensesnittsobjekter og -kontroller Microsoft Corporation 6.1.7600.16385SHELL32.dll Felles DLL-fil for Windows-skall Microsoft Corporation 6.1.7600.16385shell32.dll.mui Felles DLL-fil for Windows-skall Microsoft Corporation 6.1.7600.16385shellext.dll Microsoft Security Essentials Shell Extension Microsoft Corporation 1.0.1961.0shellext.dll.mui Microsoft Security Essentials Shell Extension Microsoft Corporation 1.0.1961.0shfolder.dll Shell Folder Service Microsoft Corporation 6.1.7600.16385SHLWAPI.dll Lavnivåbibliotek for grensesnitt Microsoft Corporation 6.1.7600.16385slc.dll Klient-DLL for programvarelisensiering Microsoft Corporation 6.1.7600.16385SortDefault.nls srvcli.dll Server Service Client DLL Microsoft Corporation 6.1.7600.16385SSDPAPI.dll SSDP Client API DLL Microsoft Corporation 6.1.7600.16385SspiCli.dll Security Support Provider Interface Microsoft Corporation 6.1.7600.16385StaticCache.dat StructuredQuery.dll Structured Query Microsoft Corporation 7.0.7600.16385SXS.DLL Fusion 2.5 Microsoft Corporation 6.1.7600.16385SYNCENG.dll Windows Briefcase Engine Microsoft Corporation 6.1.7600.16385syncui.dll Windows Koffert Microsoft Corporation 6.1.7600.16385thumbcache.dll Microsoft Hurtigbuffer for miniatyrbilder Microsoft Corporation 6.1.7600.16385thumbcache_1024.db thumbcache_256.db thumbcache_32.db thumbcache_96.db thumbcache_96.db thumbcache_idx.db thumbcache_idx.db thumbcache_sr.db timounter.dll timounter Dynamic Link Library Acronis 4.0.0.469tiptsf.dll Tekstrammeverk for Tablet PC Inndatapanel Microsoft Corporation 6.1.7600.16385tishell.dll Acronis True Image Shell Extensions Acronis 11.0.0.8027twext.dll Egenskapsside for tidligere versjoner Microsoft Corporation 6.1.7600.16385twext.dll.mui Egenskapsside for tidligere versjoner Microsoft Corporation 6.1.7600.16385upnp.dll API for UPnP-kontrollpunkt Microsoft Corporation 6.1.7600.16385urlmon.dll OLE32-utvidelse for Win32 Microsoft Corporation 8.0.7600.16535urlmon.dll.mui OLE32-utvidelse for Win32 Microsoft Corporation 8.0.7600.16385USER32.dll Windows USER API klient-DLL for flere brukere Microsoft Corporation 6.1.7600.16385user32.dll.mui Windows USER API klient-DLL for flere brukere Microsoft Corporation 6.1.7600.16385USERENV.dll Userenv Microsoft Corporation 6.1.7600.16385USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.7600.16385uTorrent.exe µTorrent BitTorrent, Inc. 2.0.0.18488uxtheme.dll Microsoft UxTema-bibliotek Microsoft Corporation 6.1.7600.16385VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.1.7600.16385webio.dll Weboverføringsprotokoller API Microsoft Corporation 6.1.7600.16385WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation 6.1.7600.16385WINHTTP.dll Windows HTTP-tjenester Microsoft Corporation 6.1.7600.16385WININET.dll Internett-tillegg for Win32 Microsoft Corporation 8.0.7600.16535WINMM.dll MCI API DLL Microsoft Corporation 6.1.7600.16385WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.1.7600.16385WINSTA.dll Winstation Library Microsoft Corporation 6.1.7600.16385WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 6.1.7600.16385wkscli.dll Workstation Service Client DLL Microsoft Corporation 6.1.7600.16385WLDAP32.dll DLL-fil for Win32 LDAP-API Microsoft Corporation 6.1.7600.16385wmpnssui.dll WMPNSS-skallutvidelser for Windows Media Player Microsoft Corporation 6.1.7600.16385WS2_32.dll Windows Socket 2.0 32-biters DLL Microsoft Corporation 6.1.7600.16385wship6.dll Winsock2-hjelpe-DLL (TL/IPv6) Microsoft Corporation 6.1.7600.16385wshtcpip.dll Winsock2-hjelpe-DLL (TL/IPv4) Microsoft Corporation 6.1.7600.16385WTSAPI32.dll Windows Remote Desktop Session Host Server SDK APIs Microsoft Corporation 6.1.7600.16385xmllite.dll Microsoft XmlLite Library Microsoft Corporation 1.3.1000.0
yarodin Posted April 5, 2010 Report Posted April 5, 2010 Same to me. Win7x64/utorrent 2.0 build 18907. After close utorrent it keeps running in the background. When i try to kill it from task manager i got "Access denied" message. Only reboot help.When bt.graceful_shutdown is set to true utorrent process freeze every close of app, with false not so often (one-two times per day). utorrent 1.8.5 - works absolutely normal.My logs:Logfile of Trend Micro HijackThis v2.0.3 (BETA)Scan saved at 18:24:44, on 05.04.2010Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exeC:\Windows\SysWOW64\rundll32.exeC:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exeC:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exeC:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exeC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Miranda\miranda32.exeC:\Program Files (x86)\uTorrent\uTorrent.exeC:\Program Files (x86)\TrendMicro\HiJackThis\HiJackThis.exeC:\Program Files (x86)\TrendMicro\HiJackThis\HiJackThis.exeC:\Windows\SysWOW64\DllHost.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exeO2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dllO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (file missing)O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntryO4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exeO8 - Extra context menu item: &Экспорт в Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000O8 - Extra context menu item: Semagic - C:\Program Files (x86)\Semagic\link.htmO8 - Extra context menu item: Копировать в Semagic - C:\Program Files (x86)\Semagic\copy.htmO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLLO13 - Gopher Prefix: O15 - Trusted Zone: http://software.kuaiche.comO16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15111/CTPID.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{94905FC1-D363-4347-9FDB-BD316E520BFC}: NameServer = 192.168.1.1O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exeO23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exeO23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exeO23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exeO23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exeO23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)--End of file - 6746 bytesProcess PID CPU Private Bytes Working Set Description Company NameSystem Idle Process 0 96.72 0 K 24 K Interrupts n/a 0 K 0 K Hardware Interrupts DPCs n/a 0 K 0 K Deferred Procedure Calls System 4 108 K 304 K smss.exe 288 420 K 988 K Диспетчер сеанса Windows Microsoft Corporationcsrss.exe 392 2 120 K 4 108 K Процесс исполнения клиент-сервер Microsoft Corporationwininit.exe 452 1 456 K 4 032 K Автозагрузка приложений Windows Microsoft Corporation services.exe 512 5 028 K 9 392 K Приложение служб и контроллеров Microsoft Corporation svchost.exe 640 4 412 K 9 684 K Хост-процесс для служб Windows Microsoft Corporation hpqbam08.exe 912 1 584 K 5 440 K HP CUE Alert Popup Window Objects Hewlett-Packard Co. hpqgpc01.exe 2656 3 860 K 9 624 K GPCore COM object Hewlett-Packard VBoxSVC.exe 3052 5 204 K 13 588 K VirtualBox Interface Sun Microsystems, Inc. VirtualBox.exe 3104 0.77 45 004 K 52 296 K VirtualBox GUI Sun Microsystems, Inc. nvvsvc.exe 740 1 576 K 4 428 K NVIDIA Driver Helper Service, Version 197.13 NVIDIA Corporation nvvsvc.exe 372 3 116 K 8 012 K NVIDIA Driver Helper Service, Version 197.13 NVIDIA Corporation svchost.exe 780 4 504 K 8 380 K Хост-процесс для служб Windows Microsoft Corporation svchost.exe 844 17 724 K 19 884 K Хост-процесс для служб Windows Microsoft Corporation audiodg.exe 4616 14 308 K 15 016 K Изоляция графов аудиоустройств Windows Microsoft Corporation svchost.exe 920 147 196 K 136 936 K Хост-процесс для служб Windows Microsoft Corporation WUDFHost.exe 1960 2 036 K 5 328 K Windows Driver Foundation (WDF) - хост-процесс инфраструктуры драйверов пользовательского режима Microsoft Corporation dwm.exe 2208 27 008 K 27 856 K Диспетчер окон рабочего стола Microsoft Corporation svchost.exe 968 24 392 K 39 592 K Хост-процесс для служб Windows Microsoft Corporation CTAudSvc.exe 312 1 276 K 4 088 K Creative Audio Service Creative Technology Ltd svchost.exe 480 9 640 K 16 484 K Хост-процесс для служб Windows Microsoft Corporation svchost.exe 1136 11 412 K 14 144 K Хост-процесс для служб Windows Microsoft Corporation spoolsv.exe 1240 6 644 K 10 964 K Диспетчер очереди печати Microsoft Corporation svchost.exe 1280 8 020 K 7 172 K Хост-процесс для служб Windows Microsoft Corporation AVerRemote.exe 1348 4 772 K 10 332 K AVerRemote MFC Application AVerMedia ekrn.exe 1396 53 660 K 61 036 K ESET Service ESET svchost.exe 1460 4 188 K 9 636 K Хост-процесс для служб Windows Microsoft Corporation mdm.exe 1480 1 936 K 4 912 K Machine Debug Manager Microsoft Corporation svchost.exe 1516 1 144 K 3 328 K Хост-процесс для служб Windows Microsoft Corporation svchost.exe 1604 1 164 K 3 404 K Хост-процесс для служб Windows Microsoft Corporation svchost.exe 1628 1 788 K 5 200 K Хост-процесс для служб Windows Microsoft Corporation svchost.exe 1092 1 836 K 5 040 K Хост-процесс для служб Windows Microsoft Corporation taskhost.exe 2124 8 400 K 9 992 K Хост-процесс для задач Windows Microsoft Corporation svchost.exe 504 4 992 K 8 568 K Хост-процесс для служб Windows Microsoft Corporation lsass.exe 520 4 284 K 10 612 K Local Security Authority Process Microsoft Corporation lsm.exe 528 2 392 K 4 072 K Служба диспетчера локальных сеансов Microsoft Corporationcsrss.exe 476 0.77 2 340 K 6 252 K Процесс исполнения клиент-сервер Microsoft Corporationwinlogon.exe 692 3 220 K 7 200 K Программа входа в систему Windows Microsoft Corporationexplorer.exe 2224 59 376 K 82 904 K Проводник Microsoft Corporation hpqtra08.exe 2404 4 940 K 12 600 K HP Digital Imaging Monitor Hewlett-Packard Co. hpqste08.exe 2400 3 880 K 10 636 K HP CUE Status Root Hewlett-Packard Co. firefox.exe 248 149 072 K 176 068 K Firefox Mozilla Corporation miranda32.exe 3116 35 516 K 14 048 K Miranda IM taskmgr.exe 3268 0.77 4 504 K 11 860 K Диспетчер задач Windows Microsoft Corporation HiJackThis.exe 4736 8 396 K 17 888 K HijackThis Trend Micro Inc. uTorrent.exe 4372 11 644 K 18 420 K µTorrent BitTorrent, Inc. notepad.exe 4732 1 644 K 6 656 K Блокнот Microsoft Corporation procexp.exe 4612 1 752 K 6 140 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com procexp64.exe 4480 1.55 18 732 K 36 048 K Sysinternals Process Explorer Sysinternals - www.sysinternals.comrundll32.exe 2520 8 208 K 7 700 K Хост-процесс Windows (Rundll32) Microsoft CorporationuTorrent.exe 4908 12 416 K 18 460 K µTorrent BitTorrent, Inc.Process: uTorrent.exe Pid: 4372Name Description Company Name VersionADVAPI32.dll Расширенная библиотека API Windows 32 Microsoft Corporation 6.1.7600.16385C_1252.NLS COMCTL32.dll Библиотека элементов управления взаимодействия с пользователем Microsoft Corporation 6.10.7600.16385comctl32.dll.mui Библиотека элементов управления взаимодействия с пользователем Microsoft Corporation 6.10.7600.16385comdlg32.dll Библиотека общих диалоговых окон Microsoft Corporation 6.1.7600.16385CRYPT32.dll API32 криптографии Microsoft Corporation 6.1.7600.16385CRYPTBASE.dll Base cryptographic API DLL Microsoft Corporation 6.1.7600.16385CRYPTSP.dll Cryptographic Service Provider API Microsoft Corporation 6.1.7600.16385dhcpcsvc.DLL Служба DHCP-клиента Microsoft Corporation 6.1.7600.16385dhcpcsvc6.DLL Клиент DHCPv6 Microsoft Corporation 6.1.7600.16385DnsApi.dll Динамическая библиотека API DNS-клиента Microsoft Corporation 6.1.7600.16385DUser.dll Windows DirectUser Engine Microsoft Corporation 6.1.7600.16385duser.dll.mui Windows DirectUser Engine Microsoft Corporation 6.1.7600.16385dwmapi.dll Интерфейс API диспетчера окон рабочего стола (Майкрософт) Microsoft Corporation 6.1.7600.16385fwpuclnt.dll API пользовательского режима FWP/IPsec Microsoft Corporation 6.1.7600.16385GDI32.dll GDI Client DLL Microsoft Corporation 6.1.7600.16385iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 8.0.7600.16385IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.1.7600.16385index.dat index.dat index.dat Iphlpapi.dll IP Helper API Microsoft Corporation 6.1.7600.16385kernel32.dll Библиотека клиента Windows NT BASE API Microsoft Corporation 6.1.7600.16385KERNELBASE.dll Библиотека клиента Windows NT BASE API Microsoft Corporation 6.1.7600.16385KernelBase.dll.mui Библиотека клиента Windows NT BASE API Microsoft Corporation 6.1.7600.16385locale.nls LPK.dll Language Pack Microsoft Corporation 6.1.7600.16385MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.1.7600.16415MSCTF.dll Серверная библиотека MSCTF Microsoft Corporation 6.1.7600.16385msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.7600.16385mswsock.dll Расширение поставщика службы API Microsoft Windows Sockets 2.0 Microsoft Corporation 6.1.7600.16385napinsp.dll Поставщик оболочки совместимости для имен электронной почты Microsoft Corporation 6.1.7600.16385NLAapi.dll Network Location Awareness 2 Microsoft Corporation 6.1.7600.16385Normaliz.dll Unicode Normalization DLL Microsoft Corporation 6.1.7600.16385NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.1.7600.16385ntdll.dll Системная библиотека NT Microsoft Corporation 6.1.7600.16385ntdll.dll Системная библиотека NT Microsoft Corporation 6.1.7600.16385ntmarta.dll Поставщик Windows NT MARTA Microsoft Corporation 6.1.7600.16385ole32.dll Microsoft OLE для Windows Microsoft Corporation 6.1.7600.16385oleaut32.dll Microsoft Corporation 6.1.7600.16385pnrpnsp.dll Поставщик пространства имен PNRP Microsoft Corporation 6.1.7600.16385profapi.dll User Profile Basic API Microsoft Corporation 6.1.7600.16385rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.1.7600.16385RASAPI32.dll Remote Access API Microsoft Corporation 6.1.7600.16385rasman.dll Remote Access Connection Manager Microsoft Corporation 6.1.7600.16385RPCRT4.dll Библиотека удаленного вызова процедур Microsoft Corporation 6.1.7600.16385rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.1.7600.16385rtutils.dll Routing Utilities Microsoft Corporation 6.1.7600.16385sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation 6.1.7600.16385sensapi.dll SENS Connectivity API DLL Microsoft Corporation 6.1.7600.16385SHELL32.dll Общая библиотека оболочки Windows Microsoft Corporation 6.1.7600.16385shfolder.dll Shell Folder Service Microsoft Corporation 6.1.7600.16385SHLWAPI.dll Библиотека небольших программ оболочки Microsoft Corporation 6.1.7600.16385SortDefault.nls SspiCli.dll Security Support Provider Interface Microsoft Corporation 6.1.7600.16385StaticCache.dat urlmon.dll Расширения OLE32 для Win32 Microsoft Corporation 8.0.7600.16535USER32.dll Многопользовательская библиотека клиента USER API Windows Microsoft Corporation 6.1.7600.16385USERENV.dll Userenv Microsoft Corporation 6.1.7600.16385USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.7600.16385uTorrent.exe µTorrent BitTorrent, Inc. 2.0.0.18907uxtheme.dll Библиотека тем UxTheme (Microsoft) Microsoft Corporation 6.1.7600.16385VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.1.7600.16385wininet.dll Расширения Интернета для Win32 Microsoft Corporation 8.0.7600.16535winmm.dll MCI API DLL Microsoft Corporation 6.1.7600.16385WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.1.7600.16385winrnr.dll LDAP RnR Provider DLL Microsoft Corporation 6.1.7600.16385WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.1.7600.16385wow64.dll Win32 Emulation on NT64 Microsoft Corporation 6.1.7600.16491wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation 6.1.7600.16385wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation 6.1.7600.16385WS2_32.dll 32-разрядная библиотека Windows Socket 2.0 Microsoft Corporation 6.1.7600.16385wship6.dll Библиотека DLL помощника Winsock2 (TL/IPv6) Microsoft Corporation 6.1.7600.16385wshtcpip.dll Библиотека DLL помощника службы Winsock2 (TL/IPv4) Microsoft Corporation 6.1.7600.16385
Firon Posted April 6, 2010 Report Posted April 6, 2010 http://forum.utorrent.com/viewtopic.php?pid=472978#p472978Please read this post.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.