yan1s Posted January 5, 2011 Report Posted January 5, 2011 Hello people,i'm having some issues with uTorrent. I started the setup guide, and as soon as it starts checking the port, uTorrent crashes(not responding)Same thing when i add a file to download. Never had issues before. Tried bittorrent same thing:Here's my log:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 19:13:36, on 05/01/2011Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\iTunes\iTunesHelper.exeC:\Documents and Settings\HY\Mes documents\GammaSutra.exeC:\Documents and Settings\HY\Local Settings\Apps\F.lux\flux.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\iPod\bin\iPodService.exeC:\Documents and Settings\HY\Bureau\procexp.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\WINDOWS\system32\rundll32.exeC:\WINDOWS\system32\wuauclt.exeC:\WINDOWS\system32\msiexec.exeC:\Program Files\Trend Micro\HiJackThis\HiJackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dllO2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [GammaSutra] C:\Documents and Settings\HY\Mes documents\GammaSutra.exeO4 - HKCU\..\Run: [F.lux] "C:\Documents and Settings\HY\Local Settings\Apps\F.lux\flux.exe" /noshowO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Documents and Settings\HY\Application Data\DVDVideoSoftIEHelpers\youtubetomp3.htmO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabO16 - DPF: {DBDC1CDA-B64B-49F7-9535-6317AA416E51} (VMware_VDM_Client Class) - https://geii-broker.unice.fr/downloads/VMware-viewclient.cabO16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cabO22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dllO22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dllO23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exeO23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exeO23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exeO23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exeO23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exeO23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exeO23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exeO23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exeO23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exeO23 - Service: Telnet (TlntSvr) - Unknown owner - C:\WINDOWS\system32\tlntsvr.exeO23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exeO23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exeO23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exeO23 - Service: VMware View Client Service (wsnm) - VMware, Inc. - C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe--End of file - 6850 bytesAnd the PE file:Process PID CPU Private Bytes Working Set Description Company NameSystem Idle Process 0 90.77 0 K 28 K Interrupts n/a 0 K 0 K Hardware Interrupts DPCs n/a 0 K 0 K Deferred Procedure Calls System 4 0 K 56 K smss.exe 460 172 K 60 K Gestionnaire de session Windows NT Microsoft Corporation csrss.exe 516 1 620 K 1 916 K Client Server Runtime Process Microsoft Corporation winlogon.exe 544 6 616 K 1 840 K Application d'ouverture de session Windows NT Microsoft Corporation services.exe 588 1 796 K 1 624 K Applications Services et Contrôleur Microsoft Corporation ati2evxx.exe 764 620 K 272 K ATI External Event Utility EXE Module ATI Technologies Inc. svchost.exe 792 3 108 K 1 536 K Generic Host Process for Win32 Services Microsoft Corporation wmiprvse.exe 196 2 888 K 5 788 K WMI Microsoft Corporation svchost.exe 840 3 200 K 1 276 K Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 912 19 768 K 11 564 K Generic Host Process for Win32 Services Microsoft Corporation wscntfy.exe 1144 580 K 328 K Windows Security Center Notification App Microsoft Corporation wuauclt.exe 3072 6 476 K 4 612 K Windows Update Microsoft Corporation svchost.exe 952 2 392 K 128 K Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1068 2 760 K 1 648 K Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1168 2 736 K 1 048 K Generic Host Process for Win32 Services Microsoft Corporation spoolsv.exe 1284 3 192 K 620 K Spooler SubSystem App Microsoft Corporation svchost.exe 1604 1 312 K 80 K Generic Host Process for Win32 Services Microsoft Corporation AppleMobileDeviceService.exe 1636 2 956 K 212 K Apple Mobile Device Service Apple Inc. mDNSResponder.exe 1660 2 536 K 656 K Bonjour Service Apple Inc. svchost.exe 1896 2 396 K 136 K Generic Host Process for Win32 Services Microsoft Corporation alg.exe 908 2 532 K 1 152 K Application Layer Gateway Service Microsoft Corporation iPodService.exe 2536 2 464 K 796 K iPodService Module (32-bit) Apple Inc. msiexec.exe 2388 2 828 K 6 608 K Windows® installer Microsoft Corporation lsass.exe 600 5 124 K 1 580 K LSA Shell (Export Version) Microsoft Corporation ati2evxx.exe 1196 764 K 496 K ATI External Event Utility EXE Module ATI Technologies Inc.explorer.exe 1412 17 808 K 12 112 K Explorateur Windows Microsoft Corporation iTunesHelper.exe 1912 9 936 K 716 K iTunesHelper Apple Inc. GammaSutra.exe 1932 612 K 400 K flux.exe 1956 5 592 K 992 K ctfmon.exe 1220 948 K 1 520 K CTF Loader Microsoft Corporation procexp.exe 2624 3.08 15 420 K 9 096 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com firefox.exe 3460 6.15 119 204 K 86 136 K Firefox Mozilla Corporation rundll32.exe 3284 15 116 K 8 452 K Exécuter une DLL en tant qu'application Microsoft Corporation HiJackThis.exe 1780 4 916 K 1 636 K HijackThis Trend Micro Inc. uTorrent.exe 1888 6 184 K 10 700 K µTorrent BitTorrent, Inc.Process: uTorrent.exe Pid: 1888Name Description Company Name Versionactiveds.dll DLL de la couche de routage AD Microsoft Corporation 5.1.2600.5512adsldpc.dll DLL C du fournisseur LDAP AD Microsoft Corporation 5.1.2600.5512advapi32.dll API avancées Windows 32 Microsoft Corporation 5.1.2600.5755atl.dll ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.2clbcatq.dll Microsoft Corporation 2001.12.4414.700comctl32.dll User Experience Controls Library Microsoft Corporation 6.0.2900.6028comdlg32.dll DLL commune de boîtes de dialogues Microsoft Corporation 6.0.2900.5512comres.dll Microsoft Corporation 2001.12.4414.700credui.dll Interface utilisateur du gestionnaire d'informations d'identification Microsoft Corporation 5.1.2600.5512crypt32.dll Crypto API32 Microsoft Corporation 5.131.2600.5512ctype.nls dnsapi.dll DNS Client API DLL Microsoft Corporation 5.1.2600.5625dot3api.dll API de configuration 802.3 Microsoft Corporation 5.1.2600.5512dot3dlg.dll Application d'assistance de l'IU 802.3 Microsoft Corporation 5.1.2600.5512eappcfg.dll Configuration d'homologue EAP Microsoft Corporation 5.1.2600.5512eappprxy.dll Microsoft EAPHost Peer Client DLL Microsoft Corporation 5.1.2600.5512gdi32.dll GDI Client DLL Microsoft Corporation 5.1.2600.5698hnetcfg.dll Gestionnaire de configuration de réseau domestique Microsoft Corporation 5.1.2600.5512iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 8.0.6001.18992imm32.dll Windows XP IMM32 API Client DLL Microsoft Corporation 5.1.2600.5512iphlpapi.dll API de l'application d'assistance IP Microsoft Corporation 5.1.2600.5512kernel32.dll DLL du client API BASE Windows NT Microsoft Corporation 5.1.2600.5781locale.nls lspcs.dll filter lsp Solid Oak 1.0.0.11mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 2.0.3.0mprapi.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.1.2600.5512msasn1.dll ASN.1 Runtime APIs Microsoft Corporation 5.1.2600.5875MSCTF.dll DLL de MSCTF Server Microsoft Corporation 5.1.2600.5512msctfime.ime Microsoft Text Frame Work Service IME Microsoft Corporation 5.1.2600.5768msi.dll Windows Installer Microsoft Corporation 4.5.6001.22299msimg32.dll GDIEXT Client DLL Microsoft Corporation 5.1.2600.5512msvcp60.dll Microsoft ® C++ Runtime Library Microsoft Corporation 6.2.3104.0msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.2600.5512mswsock.dll Fournisseur de service Sockets 2.0 de Microsoft Windows Microsoft Corporation 5.1.2600.5625netapi32.dll Net Win32 API DLL Microsoft Corporation 5.1.2600.5694netshell.dll Noyau des Connexions réseau Microsoft Corporation 5.1.2600.5512ntdll.dll DLL Couche NT Microsoft Corporation 5.1.2600.5755ole32.dll Microsoft OLE pour Windows Microsoft Corporation 5.1.2600.6010oleaut32.dll Microsoft Corporation 5.1.2600.5512onex.dll Bibliothèque de demandeur IEEE 802.1X Microsoft Corporation 5.1.2600.5512psapi.dll Process Status Helper Microsoft Corporation 5.1.2600.5512rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.1.2600.5512rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation 5.1.2600.6022rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.1.2600.5507rtutils.dll Routing Utilities Microsoft Corporation 5.1.2600.5512samlib.dll SAM Library DLL Microsoft Corporation 5.1.2600.5512secur32.dll Security Support Provider Interface Microsoft Corporation 5.1.2600.5834setupapi.dll Installation de L'API Windows Microsoft Corporation 5.1.2600.5512shell32.dll DLL commune du shell Windows Microsoft Corporation 6.0.2900.6018shfolder.dll Shell Folder Service Microsoft Corporation 6.0.2900.5512shlwapi.dll Bibliothèque d'utilitaires légers du Shell Microsoft Corporation 6.0.2900.5912sortkey.nls sorttbls.nls unicode.nls urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 8.0.6001.18992user32.dll DLL client de l'API Utilisateur de Windows XP Microsoft Corporation 5.1.2600.5512userenv.dll Userenv Microsoft Corporation 5.1.2600.5512uTorrent.exe µTorrent BitTorrent, Inc. 2.2.0.23774uxtheme.dll Bibliothèque de thèmes Ux Microsoft Microsoft Corporation 6.0.2900.5512version.dll Version Checking and File Installation Libraries Microsoft Corporation 5.1.2600.5512winsta.dll Winstation Library Microsoft Corporation 5.1.2600.5512wldap32.dll DLL API LDAP Win32 Microsoft Corporation 5.1.2600.5512ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.1.2600.5512ws2help.dll Application d'assistance de Windows Socket 2.0 pour Windows NT Microsoft Corporation 5.1.2600.5512wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.1.2600.5512wtsapi32.dll Windows Terminal Server SDK APIs Microsoft Corporation 5.1.2600.5512xpsp2res.dll Messages Service Pack 2 Microsoft Corporation 5.1.2600.5512Thanks.
moogly Posted January 5, 2011 Report Posted January 5, 2011 lspcs.dll filter lsp Solid Oak 1.0.0.11This dll has nothing to do injected into µT. Remove it.
yan1s Posted January 5, 2011 Author Report Posted January 5, 2011 I found something: When the automating port matting is disabled, and i open a port(21613) it worksAny ideas?Edit: How do i remove the dll?Edit2: I moved the dll from the system32 folder, uT no longer loads it. But now, i got a listen error, you should change the listen port?What should i do?
moogly Posted January 5, 2011 Report Posted January 5, 2011 The culprit is this DLL from CyberSitter (Solid Oak), it's a known issue:http://forum.utorrent.com/viewtopic.php?pid=422177#p422177 (this post and following)You need to REMOVE it, not just move it.
yan1s Posted January 5, 2011 Author Report Posted January 5, 2011 yeah, i removed it but then i lost my internet connetion i don't recall installing that shit..
yan1s Posted January 5, 2011 Author Report Posted January 5, 2011 i'll try to install it and uninstall it to see if that works
moogly Posted January 5, 2011 Report Posted January 5, 2011 Try LSP fix. http://www.cexx.org/lspfix.htm
yan1s Posted January 5, 2011 Author Report Posted January 5, 2011 thanks man it worksyou're good keep up the good work bro
Recommended Posts
Archived
This topic is now archived and is closed to further replies.