digihax420 Posted August 23, 2010 Report Share Posted August 23, 2010 I have a problem and not too sure what's causing it to happen, I've been getting download messages in the bottom right corner of firefox trying to get me to download a file from a torrent site that i did not request to have downloaded. Has anyone else been having this to happen to them also?, how do i fix this?. Link to comment Share on other sites More sharing options...
digihax420 Posted August 24, 2010 Author Report Share Posted August 24, 2010 So this has never happened to nobody else?, I'm the only 1, I even have a pop-up that saying do i want to save a binary file of µtorrent.exe what's that about...you do know about your own software right? This is µtorrents forums right. Why am i getting a download complete then asking me if i want to save or cancel a µtorrent.exe binary file and a torrent download complete... Link to comment Share on other sites More sharing options...
paintball9 Posted August 24, 2010 Report Share Posted August 24, 2010 Sounds like spyware/virii. If it's not uTorrent.com then don't trust it. Link to comment Share on other sites More sharing options...
moogly Posted August 24, 2010 Report Share Posted August 24, 2010 Yep, you are surely infected.Maybe can you post HJT log. Guide: http://forum.utorrent.com/viewtopic.php?id=29748 Link to comment Share on other sites More sharing options...
digihax420 Posted August 24, 2010 Author Report Share Posted August 24, 2010 Sounds like spyware/virii. If it's not uTorrent.com then don't trust it. Yep, this is where i downloaded it from, the only way that it stops is if i un-install µtorrent...When i un-install µtorrent and browse the web with firefox, i don't get any odd pop-ups like another download of µtorrent, or a torrent file... Link to comment Share on other sites More sharing options...
digihax420 Posted August 24, 2010 Author Report Share Posted August 24, 2010 Yep, you are surely infected.Maybe can you post HJT log. Guide: http://forum.utorrent.com/viewtopic.php?id=29748 Sure, could you tell me what HJT Log is, I'm new to this torrent stuff.oh im sorry nvm i know what you mean now lol... Link to comment Share on other sites More sharing options...
DreadWingKnight Posted August 24, 2010 Report Share Posted August 24, 2010 Follow the guide he linked. Link to comment Share on other sites More sharing options...
digihax420 Posted August 24, 2010 Author Report Share Posted August 24, 2010 Follow the guide he linked.Idk if i'm doing this right but from the way i understood it i copy everything in the log file after did a system scan so here it is...Logfile of Trend Micro HijackThis v2.0.4Scan saved at 11:28:18 AM, on 8/24/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18943)Boot mode: NormalRunning processes:C:\Program Files (x86)\AVG\AVG9\avgtray.exeC:\Program Files (x86)\Internet Explorer\IELowutil.exeC:\Program Files (x86)\uTorrent\uTorrent.exeC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Users\Jeffrey Phillips\Downloads\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =O1 - Hosts: ::1 localhostO2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dllO2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dllO2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dllO2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dllO2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dllO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dllO3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dllO3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dllO3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dllO4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exeO4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.htmlO9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dllO9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dllO16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - http://d1ylr6sba64qi3.cloudfront.net/gl … 1.71.0.cabO16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabO18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dllO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dllO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dllO23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Unknown owner - C:\Windows\system32\agr64svc.exe (file missing)O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG9\Toolbar\ToolbarBroker.exeO23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exeO23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exeO23 - Service: TOSHIBA Web Camera Service (camsvc) - TOSHIBA - C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exeO23 - Service: ConfigFree Gadget Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exeO23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exeO23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exeO23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exeO23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exeO23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)O23 - Service: TOSHIBA Modem region select service (RSELSVC) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\rselect\RSelSvc.exeO23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)O23 - Service: TOSHIBA HDD Protection (Thpsrv) - Unknown owner - C:\Windows\system32\ThpSrv.exe (file missing)O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exeO23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing)O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exeO23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TECO\TecoService.exeO23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exeO23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exeO23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exeO23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)--End of file - 9684 bytes LoL, Please tell me you can help me fix this.Last edited by digihax420 (Today 11:34:59) Link to comment Share on other sites More sharing options...
DreadWingKnight Posted August 24, 2010 Report Share Posted August 24, 2010 Did you run hijackthis as admin when you ran the scan? Link to comment Share on other sites More sharing options...
digihax420 Posted August 24, 2010 Author Report Share Posted August 24, 2010 No i don't think i did, no i didn't...let me try this again sorry buddy i'm new at this... Link to comment Share on other sites More sharing options...
digihax420 Posted August 24, 2010 Author Report Share Posted August 24, 2010 Ok, now it's in admin.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 6:48:09 PM, on 8/24/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18943)Boot mode: NormalRunning processes:C:\Program Files (x86)\AVG\AVG9\avgtray.exeC:\Program Files (x86)\Internet Explorer\IELowutil.exeC:\Program Files (x86)\uTorrent\uTorrent.exeC:\Users\Jeffrey Phillips\Downloads\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhostO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dllO2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dllO2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dllO2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dllO2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dllO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dllO3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dllO3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\npwinext.dllO3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dllO4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exeO4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.htmlO9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dllO9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dllO16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - http://d1ylr6sba64qi3.cloudfront.net/global/bin/srldetect_cyri_4.1.71.0.cabO16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabO18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dllO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dllO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dllO23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Unknown owner - C:\Windows\system32\agr64svc.exe (file missing)O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG9\Toolbar\ToolbarBroker.exeO23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exeO23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exeO23 - Service: TOSHIBA Web Camera Service (camsvc) - TOSHIBA - C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exeO23 - Service: ConfigFree Gadget Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exeO23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exeO23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exeO23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exeO23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exeO23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)O23 - Service: TOSHIBA Modem region select service (RSELSVC) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\rselect\RSelSvc.exeO23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)O23 - Service: TOSHIBA HDD Protection (Thpsrv) - Unknown owner - C:\Windows\system32\ThpSrv.exe (file missing)O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exeO23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing)O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exeO23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TECO\TecoService.exeO23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exeO23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exeO23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exeO23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)--End of file - 9557 bytes Link to comment Share on other sites More sharing options...
digihax420 Posted August 25, 2010 Author Report Share Posted August 25, 2010 Here's the other i'm supposed to post. This is in Admin. Privilege also.Process PID CPU Private Bytes Working Set Description Company NameSystem Idle Process 0 93.13 0 K 24 K Interrupts n/a 0 K 0 K Hardware Interrupts DPCs n/a 0 K 0 K Deferred Procedure Calls System 4 0 K 147,100 K smss.exe 588 476 K 992 K csrss.exe 656 2,972 K 7,904 K wininit.exe 688 1,792 K 5,196 K avgchsva.exe 716 71,544 K 1,560 K avgrsa.exe 724 3,132 K 828 K avgcsrva.exe 832 16,156 K 1,732 K services.exe 776 3,332 K 8,408 K svchost.exe 648 3,588 K 8,568 K Host Process for Windows Services Microsoft Corporation PresentationFontCache.exe 1040 27,988 K 21,056 K PresentationFontCache.exe Microsoft Corporation svchost.exe 1092 4,920 K 9,148 K Host Process for Windows Services Microsoft Corporation Ati2evxx.exe 1212 1,816 K 5,160 K ATI External Event Utility EXE Module ATI Technologies Inc. Ati2evxx.exe 1772 3,860 K 8,176 K svchost.exe 1244 18,864 K 18,044 K Host Process for Windows Services Microsoft Corporation audiodg.exe 1400 20,612 K 23,748 K svchost.exe 1276 186,300 K 193,564 K Host Process for Windows Services Microsoft Corporation dwm.exe 3584 1,636 K 4,676 K Desktop Window Manager Microsoft Corporation svchost.exe 1296 85,288 K 101,716 K Host Process for Windows Services Microsoft Corporation taskeng.exe 2988 2,836 K 7,976 K taskeng.exe 3524 11,200 K 13,936 K Task Scheduler Engine Microsoft Corporation svchost.exe 1416 2,552 K 6,220 K Host Process for Windows Services Microsoft Corporation SLsvc.exe 1452 8,532 K 13,508 K Microsoft Software Licensing Service Microsoft Corporation svchost.exe 1476 10,296 K 19,472 K Host Process for Windows Services Microsoft Corporation svchost.exe 1620 30,980 K 36,316 K Host Process for Windows Services Microsoft Corporation spoolsv.exe 1972 6,852 K 12,484 K Spooler SubSystem App Microsoft Corporation svchost.exe 1996 18,940 K 24,428 K Host Process for Windows Services Microsoft Corporation agr64svc.exe 912 1,204 K 3,008 K Agere Soft Modem Call Progress Service Agere Systems avgwdsvc.exe 2060 7,916 K 2,784 K AVG Watchdog Service AVG Technologies CZ, s.r.o. avgnsa.exe 1768 30,344 K 700 K TWebCameraSrv.exe 2096 1,336 K 4,356 K TOSHIBA CFProcSRVC.exe 2120 3,656 K 8,992 K ConfigFree Gadget Process Service TOSHIBA CORPORATION CFSvcs.exe 2156 2,696 K 1,408 K ConfigFree Service Process TOSHIBA CORPORATION LSSrvc.exe 2292 1,372 K 4,580 K Hewlett-Packard Company svchost.exe 2408 3,008 K 6,964 K Host Process for Windows Services Microsoft Corporation RSelSvc.exe 2428 1,160 K 2,816 K RSelSvc Service Application TOSHIBA Corporation SeaPort.exe 2472 5,264 K 9,312 K Microsoft SeaPort Search Enhancement Broker Microsoft Corporation svchost.exe 2520 4,768 K 8,452 K Host Process for Windows Services Microsoft Corporation ThpSrv.exe 2600 1,484 K 3,428 K TOSHIBA HDD Protection Service TOSHIBA Corporation TNaviSrv.exe 2616 1,272 K 4,320 K TOSHIBA Navi Support Service TOSHIBA Corporation TODDSrv.exe 2632 2,796 K 4,664 K TDCSrv Application TOSHIBA Corporation TosCoSrv.exe 2652 2,520 K 4,912 K TOSHIBA Power Saver TOSHIBA Corporation TecoService.exe 2716 1,848 K 4,568 K TOSHIBA eco Utility Service TOSHIBA Corporation TosSmartSrv.exe 2740 1,264 K 3,100 K TosSmartSrv.exe TOSHIBA Corporation TuneUpUtilitiesService64.exe 2764 7,732 K 15,664 K TuneUp Utilities Service TuneUp Software TuneUpUtilitiesApp64.exe 3612 3,924 K 11,928 K TuneUp Utilities TuneUp Software svchost.exe 2788 1,184 K 2,996 K Host Process for Windows Services Microsoft Corporation WLIDSVC.EXE 2824 5,460 K 12,992 K WLIDSVCM.EXE 3312 1,464 K 3,560 K avgemc.exe 3040 6,660 K 2,004 K AVG E-Mail Scanner AVG Technologies CZ, s.r.o. avgcsrvx.exe 2168 4,356 K 8,180 K wmpnetwk.exe 2784 14,988 K 23,144 K Windows Media Player Network Sharing Service Microsoft Corporation lsass.exe 800 4,364 K 3,136 K Local Security Authority Process Microsoft Corporation lsm.exe 808 2,964 K 5,296 K csrss.exe 708 14,028 K 12,136 K winlogon.exe 884 4,076 K 7,880 K explorer.exe 3728 46,736 K 89,352 K Windows Explorer Microsoft Corporation vlc.exe 3364 1.55 107,828 K 90,436 K VLC media player the VideoLAN Team firefox.exe 3832 59,452 K 72,328 K Firefox Mozilla Corporation procexp.exe 2596 2,540 K 7,052 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com procexp64.exe 2196 3.10 18,428 K 27,760 K Sysinternals Process Explorer Sysinternals - www.sysinternals.comavgtray.exe 3940 5,972 K 3,404 K AVG Tray Monitor AVG Technologies CZ, s.r.o.ielowutil.exe 3384 1,432 K 5,300 K Internet Explorer Microsoft CorporationuTorrent.exe 3816 1.55 14,532 K 22,416 K µTorrent BitTorrent, Inc. Link to comment Share on other sites More sharing options...
digihax420 Posted August 25, 2010 Author Report Share Posted August 25, 2010 Could i get a little help copying and pasting the my .dmp report, i can't get notepad to open it up, or am i supposed to open it up in notepad copy and paste it before i send it to the http://zshare.net/ site?. Link to comment Share on other sites More sharing options...
paintball9 Posted August 25, 2010 Report Share Posted August 25, 2010 uTorrent didn't crash on you recently did it? If not then there is no need to post that. The logs were all that is needed. Although you forgot a section of the process explorer log Make sure the DLL list (Ctrl+d) for the uTorrent.exe process is included.I didn't notice anything out of the ordinary, Anyone else see something? Link to comment Share on other sites More sharing options...
digihax420 Posted August 25, 2010 Author Report Share Posted August 25, 2010 Well, i read the directions and the last instruction said id i did the 1st 2, that i didn't have to do the 3rd, kinda funny actually but since i did what i was asked to do,utorrent.exe and an odd torrent file file haven't been popping up as described in my thread. So idk maybe it was a fluke???...could have been,. Anyway, what do you think is missing, is it missing something from the 1st or 2nd log i posted?.Well, anyway, i'm glad whatever is making it stop doing what it was doing lol. Edit:3. CrashdumpThis file is saved by uTorrent upon the crash.Name : Ends in .dmpDefault location : %programfiles%\utorrent or wherever your utorrent.exe is locatedUpload this file to a file hosting site you like (or to a webpage if you have) and paste it into your thread.Some free file hosting sites :http://zshare.nethttp://upload2.net...Please do not use rapidshare, megaupload, or depositfiles.That's it... (If you can't do all 3 report no problem, any of them helps.<---see, it says i don't need all 3), thats why i just did the 1st 2 right... Link to comment Share on other sites More sharing options...
digihax420 Posted August 25, 2010 Author Report Share Posted August 25, 2010 uTorrent didn't crash on you recently did it? If not then there is no need to post that. The logs were all that is needed. Although you forgot a section of the process explorer log Make sure the DLL list (Ctrl+d) for the uTorrent.exe process is included.I didn't notice anything out of the ordinary, Anyone else see something?sorry i forgot to ask, how do i copy and paste this screen of the process explorer log?, i've never used this program before.edit: is this it ...Key HKCU\Software\Classes\Applications\uTorrent.exe Link to comment Share on other sites More sharing options...
paintball9 Posted August 25, 2010 Report Share Posted August 25, 2010 The bottom few lines of this post may be easier to understand http://forum.utorrent.com/viewtopic.php?pid=258238#p258238 Basically same instructions though. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.