Overnet Rpc Error

[senttonull0]

I keep getting an error message when ever Overnet is running.

After about 45mins-1hour WinXP error "Unexpected RPC ended suddenly, please save all files as system will shutdown in 1 minute."

I have the newest virus scan and only have 59 connections on Overnet ver.52. :frusty:

Does anyone else have this problem and more importantly, does anyone know how to fix this problem? :helpsmile:

[ZaZu]

Check memory usage while Overnet is running, on my sys it would consume ALL available sys memory, thats why I deleted it from my &#39;puter <_<

[senttonull0]

Well, there must be a way to fix this problem. Especially since, Overnet works so well for other people.

What OS are you using by the way?

[MUSLEMAN]

lol overnet does not use no more 5 to 10% at the most.

if you have a high cpu usage problem it could be files hashing, corrupt files, sofware compatibility issue, memory leak, too many downlaod/uploads and etc.

you can adjust the pirority in task manager for overnet.exe or use the command line client, its suppose to have less cpu usage

[senttonull0]

Well from what I&#39;ve seen Overnet does only take about 5-10% of the CPU.

But once Overnet is running, it increases the SVCHOST.EXE via SYSTEM up to 100% after 45mins to 1 hour until SVCHOST crashes and the OS is forced to reboot. This happens every time and only when Overnet is running.

Since, I don&#39;t have this problem with CleanKMD or BT or Shareaza and actually just re-installed the OS from scratch it must be something with the Overnet client.

Just so you know, I&#39;m only downloading 3 files at time and only hold 50 connections max, of which most of the time only about 13 connections are established.

Which is why I wonder if others have the same problem and which OS they use.

[MUSLEMAN]

what are your specs?? and read my post again i have named 4 or 5 differernt reasons

[senttonull0]

Originally posted by MUSLEMAN@1 February 2004 - 05:27
lol overnet does not use no more 5 to 10% at the most.

if you have a high cpu usage problem it could be files hashing, corrupt files, sofware compatibility issue, memory leak, too many downlaod/uploads and etc.

you can adjust the pirority in task manager for overnet.exe or use the command line client, its suppose to have less cpu usage

if you have a high cpu usage problem it could be files hashing, corrupt files, sofware compatibility issue, memory leak, too many downlaod/uploads and etc.


It doesn&#39;t read that it&#39;s hashing, it reads as transfering. Even if I were a hashing problem, I doubt that would happen again after I re-installed the OS and installed Overnet the second time.

Corrupt files, I don&#39;t think it&#39;s the corrupt system files as again, I mentioned that I installed everything from scratch twice. So I&#39;m guessing corrupt files that I&#39;m downloading? I doubt that since the files I&#39;m downloading are quite common and it doesn&#39;t matter what I&#39;m downloading, maybe it be a 1mb crack file to a 700mb CD image or a 40mb video clip.

Software compatiblity issue, I&#39;m running WinXP on an AMD 1Ghz with 256DRAM with 2 HDD, one 40GB and the other 80GB. I don&#39;t use anything out of the ordinary. I&#39;m not running X-windows of a BSD box or anything.

Memory leak, yes I definately believe this to be the problem. Overnet is link through SVCHOST.EXE. The question is how do I fix this?

Too many files, I&#39;m downloading 3 files and have only 13 out of 50 connections only. I&#39;m using about 40% of my bandwidth. I&#39;ve got 20GB of free space on my second HDD and plenty of working memory as nothing else is running.

[Ariel_001]

it sounds like you have the W32.Blaster.Worm (http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html)

if this is not the case try using overnet lite

[senttonull0]

That isn&#39;t the case since, I do have virus scan.

Plus this only happens when I&#39;m using Overnet. It does not happen when I&#39;m using BT, Shareaza or CleanKMD.

Where can I download Overnet Lite? Can you recommend a good site?

[MUSLEMAN]

how many uploads do you have and what is the total speed??

you realy need to take a look here and stop assumning things (http://forum.overnet.com/)

[senttonull0]

As I&#39;ve mentioned before, I got only 3 downloads going and are averaging about 20-25k download speeds for all three.

I&#39;ve got 512k/128k DSL.

And again, I don&#39;t have a problem with CleanKMD, BT or Shareaza where I&#39;ve reached consistant download speeds of 50k over days. I average about 2GB of data a day with BT and KLite.

I&#39;m not assuming anything, I&#39;m asking for advice from other users.

[MUSLEMAN]

ok boss this is getting old, first of all if you take the time to read my post you will see i was asking for upload info.


second you tell me you don&#39;t think there is any conflict when you don&#39;t even know what could cause a conflick (assumption #1)

third this is overnet and has noting to do with anyother p2p just because one is ok on your pc does not mean the rest will, so just because klite is ok on your pc it does not mean overnet is going to be also (assumption #2)

you are asking for advice but what ever advice we give you, you quickly say you don&#39;t think its this and you don&#39;t think its that.

stop trying to make sense out of it boss, if it made sinse to you, you would know the answer already, just be patient and follow along and at some point you will run in to what is causing the problem, but again you need to be patient and don&#39;t dismiss anything you never know, its always the small things that we miss.

and last for get about any other p2p when you are trouble shooting one, they are different and the rules that apply to one won&#39;t apply to the other.

visit the overnet forum link i have provided and just search for your problem.

there you will find a list of software that is not compatible and other possiblities and solutions boss.

good luck
:lol:

[Ariel_001]

Originally posted by senttonull0@2 February 2004 - 02:27
That isn&#39;t the case since, I do have virus scan.

Plus this only happens when I&#39;m using Overnet. It does not happen when I&#39;m using BT, Shareaza or CleanKMD.

Where can I download Overnet Lite? Can you recommend a good site?
you could try getting it here.

http://filesharingtalk.com/index.php?showtopic=91053&st=0


I&#39;ve mentioned in earlier posts that I were going to create my own installer for Overnet. And so it is, there are NO adware/spyware applications included.

Yes, its done. I hope you&#39;ll like it&#33;

Let it be said, there are no differences in Overnet itself, Its just Overnet Pro the second the installation is complete.

You can get it here: http://myimages.fourvalve.com/overnetlite/edonkey2000lite
Mirror (By ultimatejester): http://ultimate.250free.com/overnetlite052.exe

CODE
ed2k://|file|overnetlite052.exe|1112717|ce5961ef76df0727b9fa441b1aaf417f|/


I could imagine that Lycos will disable my account pretty soon, so I decided to share the file on eDonkey & Overnet. If you can make HTTP/FTP mirrors or help sharing the file it will be greatly apreciated.

If you find any errors in the installer, or have a suggestion, reply to this thread or PM me.

[senttonull0]

Ariel,

I think you are right. After troubleshooting this problem it&#39;s starting to seem more and more like a strand of the w32 worm virus.

The only problem is that both Trend and Mcafee aren&#39;t able to pick up anything. That and the fact that as long as I don&#39;t run Overnet the system seems to be fine.

My best guess at this point is that when Overnet is open, it must open a port which allows for some sort of IRC bot to kill my RPC.

I&#39;m going to try to setup a test by blocking heavy with my firewall. but before I do I was wondering which TCP / UDP ports works best for Overnet?

I was going to use TCP = 4665 and UDP = 4669.

[MUSLEMAN]

:frusty: :frusty:

its not a worm boss

tcp=4662 udp=6440

[senttonull0]

I appreciate the help, but plese don&#39;t call me boss.

fact - SVCHOST.exe sends outbound into the internet and then my system crashes.

event logs from firewall and OS comfirms this.

If it is not a virus of some sort then what would cause Overnet to do this?

I&#39;ve searched on your forum you mentioned. The forum says that it is a virus.

[thisiswhoweare]

Try a different antivirus....kapersky (sp?), AVG, Norton Corp edition are good ones.

[MUSLEMAN]

i have an online anti virus on my site try that (http://www.klitetools.com/) its panda its on the bottom left

[senttonull0]

After Mcaffee, Trend and now finally Norton discovered 11 viruses.

These viruses act like the w32/blaster virus and hide in the system restore partion of of XP/2000 OS.

The reason why this only affected Overnet and not my other P2P sharing apps was because the virus was embedded into Overnet Crack.dat and the named BAT.Trojan.

Point being is that this was specifically targeted for Overnet users who used the upload crack.

And that is messed up.

It was so hard getting rid of the virus that I had to use the Symantec Wiping tool just to delete it because deleting and emptying the recycle bin wasn&#39;t getting rid of files.

Furthermore, once I log into Overnet, all sort of attacks start. Blaster attack from TFTP on port 2000 something, IRC port attack, etc.

You can not use Overnet safely without heavy firewalling and when I only open port 4662 and 6440, my downloads are at a crawl.

So, I&#39;m wondering...

1) how can I open my firewall to point where I can download at the same rate as before?

2) why 4662 and 6440 specifically?

[MUSLEMAN]

hmmm ok i never herd of that one first of all, i&#39;m sorry i was wrong and you were right :lol:

now the ports i gave you are more common on ed2k network and i have been using them for ever now

as far as the crack and stuff goes with the attacks,

we for the crack i have posted a pic of which loader to get and that one is clean and should do it for you

as far as the attacks i&#39;m not sure, yu could still have spyware and etc on your pc. but are you downloading from a bunch of sources at low speed or few sources at low speed??

at the bottom does it say "open" or firewalled??

[senttonull0]

No, we were both wrong. Ariel was right with the call. I just didn&#39;t think it was a virus since, Mcafee + Trend failed to detect it.

Yes, I definately may still have some spyware on me. Which is why I&#39;m firewalling myself like a madman.

I&#39;ve forward the 2 ports you mentioned and yes, Overnet does read "Open" at the bottem left, next to "Connected".

It&#39;s sad &#39;cause, were I used to get something like 30k downloads, now I&#39;m getting like 5-9k.

I think these attacks are specifically aimed at Overnet users.

[senttonull0]

ok, all you firewall users for Overnet please help. :helpsmile:

I&#39;ve set TCP 4662 and UDP 6440 for Overnet and opened these ports on my firewall.

But once I do this Overnet downloads much slower. Are there any other ports that I should open for Overnet to download faster?

[Ariel_001]

Are you using a router or a software firewall. if it is a software firewall then you could just allow overnet to work on all ports incoming and outgoing.

If you are using a router then you going to need to forward the ports overnet uses.

also use norton antivirus corp. it is fast and lite weight and done not come with crap like Mcafee.

(i hate how you have to update Mcafee and the "extra" crap it has. Mabe someone can show me a better version)

[MUSLEMAN]

mcafee 7.0 pro and no problems what so ever and you don&#39;t update it, you update your virus definitions every now and then they do have and update for the program but who does not?? also norton is one of the softwares that can have a compatiblity issue with overnet, and norton sucks anyways,

best firewall is sygate.

you guys can use almost any port you like but if you gonna change it then restart overnet and give it time, your sources had you done for the other ports give it time and see if it does not change after a day then change it :lol:

[Ariel_001]

Originally posted by MUSLEMAN@6 February 2004 - 15:45
mcafee 7.0 pro and no problems what so ever and you don&#39;t update it, you update your virus definitions every now and then they do have and update for the program but who does not?? also norton is one of the softwares that can have a compatiblity issue with overnet, and norton sucks anyways,

best firewall is sygate.

you guys can use almost any port you like but if you gonna change it then restart overnet and give it time, your sources had you done for the other ports give it time and see if it does not change after a day then change it :lol:
The problem I found with mcafee is that it has to be updated in Internet Explorer as a activex/popup window and has the has extra buttons and shit like " spam guard not installed" or something like that.

anyways you will have to set up your router (assuming you have one) to forward ports overnet uses (check settings) or if you use a software firewall (like sygate or norton&#39;s) just let it connect to any ports, incoming and outgoing)

[MUSLEMAN]

emm boss i have no idea what you are talking about with mcafee???? :blink: :blink: my default browser is opera (no activex) and also all internet traffic goes thru ghost surf (proxied)

now that i look at your post better, its sounds like you are talking about the bottomof the line mcafee and the mcafee security center which you can disable to not install at all.

again as i said mcafee pro 7.0

remember all products have different versions, the one i &#39;m talking about is easy and nice and no problem or too much cpu usage.

having said that, i belive the best av is nav and firewall is sygate

[Ariel_001]

Originally posted by MUSLEMAN@7 February 2004 - 10:06
emm boss i have no idea what you are talking about with mcafee???? :blink: :blink: my default browser is opera (no activex) and also all internet traffic goes thru ghost surf (proxied)

now that i look at your post better, its sounds like you are talking about the bottomof the line mcafee and the mcafee security center which you can disable to not install at all.

again as i said mcafee pro 7.0

remember all products have different versions, the one i &#39;m talking about is easy and nice and no problem or too much cpu usage.

having said that, i belive the best av is nav and firewall is sygate
mcafee pro 7.0 . ok i go try it. maybe your are right B)

[sarefin]

Have you use the beta plug-in or any Emule mod??