Some software....error/high mem usage

bcd3m0n · November 1, 2011

I keep getting this error "Some software on your computer prevents utorrent from working properly. This is possibly caused by the following DLLs". But like everyone else, utorrent doesn't show what DLL are causing the issue. I also notice high memory usage (400mb+) while DL/UL a torrent.

Firewall: Windows Firewall

AV: Malwarebytes Anti-malware

I've gone through the incompatible software list and I don't have any of them.

Anyway you guys could make that error msg contain the problematic DLLs? Or advise which of the many LOGGING modes will track that error?

Thank You

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 6:20:54 AM, on 01/11/2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\astsrv.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\system32\dllhost.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\WINDOWS\system32\IoctlSvc.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\zabkat\xplorer2\xplorer2_UC.exe

C:\Documents and Settings\L4nc3l0t\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

C:\WINDOWS\system32\taskmgr.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\L4nc3l0t\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Documents and Settings\L4nc3l0t\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [NetLimiter] "C:\Program Files\NetLimiter 3\NLClientApp.exe" /tray

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\L4nc3l0t\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O17 - HKLM\System\CCS\Services\Tcpip\..\{62249D5C-DA76-4F0F-834A-C74419AC0EDE}: NameServer = 64.59.168.13,64.59.174.84

O17 - HKLM\System\CS2\Services\Tcpip\..\{62249D5C-DA76-4F0F-834A-C74419AC0EDE}: NameServer = 64.59.168.13,64.59.174.84

O17 - HKLM\System\CS3\Services\Tcpip\..\{62249D5C-DA76-4F0F-834A-C74419AC0EDE}: NameServer = 64.59.168.13,64.59.174.84

O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\WINDOWS\system32\astsrv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Ahead\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\WINDOWS\system32\nlssrv32.exe

O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

--

End of file - 7049 bytes

DreadWingKnight · November 1, 2011

What about the process explorer process list with the dll list for the utorrent.exe process?

bcd3m0n · November 1, 2011

My Bad.

Process PID CPU Description Company Name User Name Virtual Size

alg.exe 580 Application Layer Gateway Service Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 35,548 K

ASTSRV.EXE 1664 1.52 Nalpeiron Highend Service Nalpeiron Ltd. NT AUTHORITY\SYSTEM 13,436 K

ati2evxx.exe 1956 ATI External Event Utility EXE Module ATI Technologies Inc. NT AUTHORITY\SYSTEM 23,984 K

ati2evxx.exe 836 ATI External Event Utility EXE Module ATI Technologies Inc. NT AUTHORITY\SYSTEM 28,284 K

CCC.exe 832 Catalyst Control Centre: Host application ATI Technologies Inc. C4NTF1NDM3\L4nc3l0t 207,024 K

chrome.exe 1444 Google Chrome Google Inc. C4NTF1NDM3\L4nc3l0t 277,472 K

chrome.exe 4524 Google Chrome Google Inc. C4NTF1NDM3\L4nc3l0t 136,532 K

chrome.exe 5896 15.15 Google Chrome Google Inc. C4NTF1NDM3\L4nc3l0t 183,068 K

chrome.exe 5296 Google Chrome Google Inc. C4NTF1NDM3\L4nc3l0t 200,120 K

chrome.exe 5696 Google Chrome Google Inc. C4NTF1NDM3\L4nc3l0t 141,220 K

csrss.exe 1412 Client Server Runtime Process Microsoft Corporation NT AUTHORITY\SYSTEM 84,112 K

ctfmon.exe 3988 CTF Loader Microsoft Corporation C4NTF1NDM3\L4nc3l0t 30,864 K

dllhost.exe 384 COM Surrogate Microsoft Corporation NT AUTHORITY\SYSTEM 49,148 K

DPCs n/a 6.06 Deferred Procedure Calls 0 K

explorer.exe 888 Windows Explorer Microsoft Corporation C4NTF1NDM3\L4nc3l0t 120,336 K

Interrupts n/a Hardware Interrupts 0 K

IoctlSvc.exe 2448 PLFlash DeviceIoControl Service Prolific Technology Inc. NT AUTHORITY\SYSTEM 14,428 K

jqs.exe 752 Java Quick Starter Service Sun Microsystems, Inc. NT AUTHORITY\SYSTEM 36,360 K

lsass.exe 1552 LSA Shell (Export Version) Microsoft Corporation NT AUTHORITY\SYSTEM 41,924 K

mbamgui.exe 3828 Malwarebytes' Anti-Malware Malwarebytes Corporation C4NTF1NDM3\L4nc3l0t 32,644 K

mbamservice.exe 1120 6.06 Malwarebytes' Anti-Malware Malwarebytes Corporation NT AUTHORITY\SYSTEM 172,268 K

mDNSResponder.exe 292 Bonjour Service Apple Computer, Inc. NT AUTHORITY\SYSTEM 31,272 K

MOM.exe 3728 Catalyst Control Center: Monitoring program Advanced Micro Devices Inc. C4NTF1NDM3\L4nc3l0t 140,884 K

mscorsvw.exe 3212 .NET Runtime Optimization Service Microsoft Corporation NT AUTHORITY\SYSTEM 42,196 K

msdtc.exe 3168 MS DTC console program Microsoft Corporation NT AUTHORITY\NETWORK SERVICE 38,440 K

procexp.exe 2276 Sysinternals Process Explorer Sysinternals - www.sysinternals.com C4NTF1NDM3\L4nc3l0t 76,528 K

services.exe 1508 1.52 Services and Controller app Microsoft Corporation NT AUTHORITY\SYSTEM 151,628 K

smss.exe 1012 Windows NT Session Manager Microsoft Corporation NT AUTHORITY\SYSTEM 3,808 K

spoolsv.exe 1396 Spooler SubSystem App Microsoft Corporation NT AUTHORITY\SYSTEM 44,996 K

svchost.exe 1976 1.52 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 63,820 K

svchost.exe 340 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE 37,328 K

svchost.exe 684 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 186,016 K

svchost.exe 792 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\NETWORK SERVICE 36,804 K

svchost.exe 1036 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 39,824 K

svchost.exe 2516 3.03 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 38,036 K

svchost.exe 2092 Generic Host Process for Win32 Services Microsoft Corporation NT AUTHORITY\SYSTEM 38,312 K

System 4 1.52 NT AUTHORITY\SYSTEM 1,884 K

System Idle Process 0 62.12 NT AUTHORITY\SYSTEM 0 K

taskmgr.exe 5460 Windows TaskManager Microsoft Corporation C4NTF1NDM3\L4nc3l0t 32,328 K

uTorrent.exe 268 1.52 µTorrent BitTorrent, Inc. C4NTF1NDM3\L4nc3l0t 96,168 K

wdfmgr.exe 2572 Windows User Mode Driver Manager Microsoft Corporation NT AUTHORITY\LOCAL SERVICE 21,052 K

winlogon.exe 1288 Windows NT Logon Application Microsoft Corporation NT AUTHORITY\SYSTEM 57,152 K

wuauclt.exe 5876 Windows Update Microsoft Corporation C4NTF1NDM3\L4nc3l0t 39,452 K

xplorer2_UC.exe 864 x2 - explorer replacement ZabKat C4NTF1NDM3\L4nc3l0t 76,500 K

Process: uTorrent.exe Pid: 268

Name Description Company Name Version

ACTIVEDS.dll ADs Router Layer DLL Microsoft Corporation 5.01.2600.5512

adsldpc.dll ADs LDAP Provider C DLL Microsoft Corporation 5.01.2600.5512

ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 5.01.2600.5755

appHelp.dll Application Compatibility Client Library Microsoft Corporation 5.01.2600.5512

ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.05.2284.0002

browseui.dll Shell Browser UI Library Microsoft Corporation 6.00.2900.6126

CLBCATQ.DLL Microsoft Corporation 2001.12.4414.0700

COMCTL32.dll User Experience Controls Library Microsoft Corporation 6.00.2900.6028

comdlg32.dll Common Dialogs DLL Microsoft Corporation 6.00.2900.5512

COMRes.dll Microsoft Corporation 2001.12.4414.0700

credui.dll Credential Manager User Interface Microsoft Corporation 5.01.2600.5512

CRYPT32.dll Crypto API32 Microsoft Corporation 5.131.2600.6147

CSCDLL.dll Offline Network Agent Microsoft Corporation 5.01.2600.5512

cscui.dll Client Side Caching UI Microsoft Corporation 5.01.2600.5512

ctype.nls

DnsApi.dll DNS Client API DLL Microsoft Corporation 5.01.2600.6089

dot3api.dll 802.3 Autoconfiguration API Microsoft Corporation 5.01.2600.5512

dot3dlg.dll 802.3 UI Helper Microsoft Corporation 5.01.2600.5512

eappcfg.dll Eap Peer Config Microsoft Corporation 5.01.2600.5512

eappprxy.dll Microsoft EAPHost Peer Client DLL Microsoft Corporation 5.01.2600.5512

GDI32.dll GDI Client DLL Microsoft Corporation 5.01.2600.5698

hnetcfg.dll Home Networking Configuration Manager Microsoft Corporation 5.01.2600.5512

Iphlpapi.dll IP Helper API Microsoft Corporation 5.01.2600.5512

kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 5.01.2600.5781

locale.nls

mdnsNSP.dll Bonjour Namespace Provider Apple Computer, Inc. 1.00.0003.0001

MPRAPI.dll Windows NT MP Router Administration DLL Microsoft Corporation 5.01.2600.5512

MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 5.01.2600.5875

MSCTF.dll MSCTF Server DLL Microsoft Corporation 5.01.2600.5512

MSVCP60.dll Microsoft ® C++ Runtime Library Microsoft Corporation 6.02.3104.0000

msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.00.2600.5512

mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 5.01.2600.5625

msxml3.dll MSXML 3.0 SP10 Microsoft Corporation 8.100.1052.0000

msxml3r.dll XML Resources Microsoft Corporation 8.20.8730.0001

netapi32.dll Net Win32 API DLL Microsoft Corporation 5.01.2600.5694

NETSHELL.dll Network Connections Shell Microsoft Corporation 5.01.2600.5512

ntdll.dll NT Layer DLL Microsoft Corporation 5.01.2600.6055

ole32.dll Microsoft OLE for Windows Microsoft Corporation 5.01.2600.6010

oleaut32.dll Microsoft Corporation 5.01.2600.6058

OneX.DLL IEEE 802.1X supplicant library Microsoft Corporation 5.01.2600.5512

rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 5.01.2600.5512

RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 5.01.2600.6022

rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 5.01.2600.5507

rtutils.dll Routing Utilities Microsoft Corporation 5.01.2600.5512

SAMLIB.dll SAM Library DLL Microsoft Corporation 5.01.2600.5512

Secur32.dll Security Support Provider Interface Microsoft Corporation 5.01.2600.5834

SETUPAPI.dll Windows Setup API Microsoft Corporation 5.01.2600.5512

SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.00.2900.6072

shfolder.dll Shell Folder Service Microsoft Corporation 6.00.2900.5512

SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.00.2900.5912

sortkey.nls

sorttbls.nls

SSDPAPI.dll SSDP Client API DLL Microsoft Corporation 5.01.2600.5512

SXS.DLL Fusion 2.5 Microsoft Corporation 5.01.2600.5512

unicode.nls

upnp.dll Universal Plug and Play API Microsoft Corporation 5.01.2600.5512

urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 6.00.2900.6126

USER32.dll Windows XP USER API Client DLL Microsoft Corporation 5.01.2600.5512

USERENV.dll Userenv Microsoft Corporation 5.01.2600.5512

uTorrent.exe µTorrent BitTorrent, Inc. 2.00.0004.21515

uxtheme.dll Microsoft UxTheme Library Microsoft Corporation 6.00.2900.5512

VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 5.01.2600.5512

WINHTTP.dll Windows HTTP Services Microsoft Corporation 5.01.2600.5868

WININET.dll Internet Extensions for Win32 Microsoft Corporation 6.00.2900.6126

WINMM.dll MCI API DLL Microsoft Corporation 5.01.2600.5512

WINSTA.dll Winstation Library Microsoft Corporation 5.01.2600.5512

WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 5.01.2600.5512

WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 5.01.2600.5512

WS2HELP.dll Windows Socket 2.0 Helper for Windows NT Microsoft Corporation 5.01.2600.5512

wshtcpip.dll Windows Sockets Helper DLL Microsoft Corporation 5.01.2600.5512

WTSAPI32.dll Windows Terminal Server SDK APIs Microsoft Corporation 5.01.2600.5512

xpsp2res.dll Service Pack 2 Messages Microsoft Corporation 5.01.2600.5512

DreadWingKnight · November 1, 2011

Why are you using such an outdated version of uTorrent?

bcd3m0n · November 2, 2011

Because the problem started when I downloaded the newest version about 3 months ago. I never had any problems with 2.04, so I went back to it, but the problem persists now.

Why hasn't the error message been fixed to show exactly what DLL are causing the problems?

DreadWingKnight · November 2, 2011

Well 2.0.4 isn't supported.

Screenshot showing your error message.

bcd3m0n · November 2, 2011

I'll have to wait for it to happen again. But it's just a small rectangular window that says "Some software on your computer prevents utorrent from working properly. This is possibly caused by the following DLLs" and that's it.

I'll post a pic when I get one.

bcd3m0n · November 10, 2011

K, so I dumped the older version, downloaded the brand new one. It ran good for a few days, with not much upload. Today it's been uploading a fair bit, and I got the error again. And yes, I got a pic of the error window so you can see it too...

Here is a new Hijack this log and a Process Explorer save file for utorrent:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 8:07:52 PM, on 09/11/2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\astsrv.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\system32\dllhost.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\WINDOWS\system32\nlssrv32.exe

C:\WINDOWS\system32\IoctlSvc.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Documents and Settings\L4nc3l0t\Local Settings\Application Data\Google\Update\GoogleUpdate.exe