Program Not Responding

Hiram · April 21, 2008

Hello Everyone,

I just installed utorrent 1.7.7 and everything seems to work fine up to the point that it shows the number of peers and seeders, it doesn't ever start downloading anything and then it says Program Not Responding.

I redownloaded it and installed it several times, but each time it does the same thing.

Would anyone know where I should start looking for the problem ?

Thank you in advance for any help.

Hiram

DreadWingKnight · April 21, 2008

post a hijackthis log and process explorer process list please.

Hiram · April 21, 2008

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:05:57 AM, on 4/21/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe

C:\Program Files\iolo\common\lib\ioloServiceManager.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe

C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\ioloAV.exe

C:\Program Files\Microsoft Hardware\Keyboard\type32.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\Google\Google Talk\googletalk.exe

C:\Program Files\iolo\System Mechanic Professional 7\Personal Firewall\ioloFW.exe

C:\Program Files\DNA\btdna.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Webshots\webshots.scr

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\iAVEmailScanner.exe

C:\Program Files\FarStone\VirtualDrive\VDTask.exe

C:\Program Files\bfgclient\bfgclient.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files\Viewpoint\Common\ViewpointService.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\HijackThis\HijackThis.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\WINDOWS\system32\SearchFilterHost.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qrz.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [sMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe"

O4 - HKLM\..\Run: [iolo AntiVirus] "C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\ioloAV.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [intelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart

O4 - HKLM\..\Run: [iolo Personal Firewall] "C:\Program Files\iolo\System Mechanic Professional 7\Personal Firewall\ioloFW.exe"

O4 - HKLM\..\Run: [RAMDrive] "C:\Program Files\FarStone\VirtualDrive\VHD\RDTask.exe"

O4 - HKLM\..\Run: [VirtualDrive] "C:\Program Files\FarStone\VirtualDrive\VDTask.exe" /AutoRestore

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\RunOnce: [RegDll] Regsvr32.exe /s "C:\WINDOWS\system32\VGDShell.dll"

O4 - HKLM\..\RunOnce: [RegVDATL] "C:\WINDOWS\system32\regsvr32.exe" /s "C:\WINDOWS\system32\atl.dll"

O4 - HKLM\..\RunOnce: [RegVDShell] "C:\WINDOWS\system32\regsvr32.exe" /s "C:\WINDOWS\system32\vgdshell.dll"

O4 - HKCU\..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Program Files\DNA\btdna.exe"

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Search Using Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT

O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE

O9 - Extra 'Tools' menuitem: Launch Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE

O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll

O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1208648944468

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe

O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe

O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

O23 - Service: WPEServ - Unknown owner - C:\Program Files\Common Files\WPE\wpeserv.exe

--

End of file - 8517 bytes

===============

Process PID CPU Description Company Name

System Idle Process 0 98.46

Interrupts n/a Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 692 Windows NT Session Manager Microsoft Corporation

csrss.exe 740 Client Server Runtime Process Microsoft Corporation

winlogon.exe 768 Windows NT Logon Application Microsoft Corporation

services.exe 812 0.77 Services and Controller app Microsoft Corporation

ati2evxx.exe 992 ATI External Event Utility EXE Module ATI Technologies Inc.

svchost.exe 1012 Generic Host Process for Win32 Services Microsoft Corporation

NMIndexStoreSvr.exe 3328 Nero Home Nero AG

NMBgMonitor.exe 2652 Nero Home Nero AG

svchost.exe 1080 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1200 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1288 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1372 Generic Host Process for Win32 Services Microsoft Corporation

spoolsv.exe 1620 Spooler SubSystem App Microsoft Corporation

dvpapi.exe 1876 Authentium, Inc.

ioloServiceManager.exe 1912

svchost.exe 1976 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 232 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 440 Generic Host Process for Win32 Services Microsoft Corporation

searchindexer.exe 536 Microsoft Windows Search Indexer Microsoft Corporation

alg.exe 1496 Application Layer Gateway Service Microsoft Corporation

NMIndexingService.exe 1284 Nero Home Nero AG

LSSrvc.exe 4060 Hewlett-Packard Company

ViewpointService.exe 3100 ViewMgr Viewpoint Corporation

lsass.exe 824 LSA Shell (Export Version) Microsoft Corporation

ati2evxx.exe 1528 ATI External Event Utility EXE Module ATI Technologies Inc.

explorer.exe 300 Windows Explorer Microsoft Corporation

RTHDCPL.exe 1448 Realtek HD Audio Control Panel Realtek Semiconductor Corp.

SMSystemAnalyzer.exe 1568

ioloAV.exe 1732

iAVEmailScanner.exe 3556

type32.exe 1560 Microsoft IntelliType Pro Microsoft Corporation

winampa.exe 1856

googletalk.exe 1868 Google Talk Google

ioloFW.exe 2052

btdna.exe 2092 DNA BitTorrent, Inc.

hpqtra08.exe 2116 HP Digital Imaging Monitor Hewlett-Packard Development Company, L.P.

hpqste08.exe 3228 HP CUE Status Hewlett-Packard Development Company, L.P.

procexp.exe 3136 0.77 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

Webshots.scr 2188 Webshots Photo Manager Webshots.com

vdtask.exe 3272 VirtualDrive VDTask FarStone Technology Inc.

bfgclient.exe 1224 bfgclient Application

hpwuSchd2.exe 1220 hpwuSchd Application Hewlett-Packard

LightScribeControlPanel.exe 1504 Hewlett-Packard Company

jewelisheaven · April 21, 2008

Thank you, but you didn't have uTorrent.exe selected when you did the Process Explorer logfile.

My guess is iolo... If possible, I'd uninstall, reboot, reinstall. Normally with properly functioning AV it doesn't show multiple entries

O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll

You can of course also remove all but one instance of each.... or run HJT after the install prior to the reinstall to be sure it's all gone. This could be unintended orphan behaviour of the process.

Hiram · April 21, 2008

I uninstalled iolo and cleaned the registry and rebooted and reinstalled it, and utorrent is still not responding. Here is HJT and PE logs after the reinstall

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 4:20:26 AM, on 4/22/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\SYSTEM32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\SYSTEM32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\iolo\common\lib\ioloServiceManager.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Viewpoint\Common\ViewpointService.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\Microsoft Hardware\Keyboard\type32.exe

C:\Program Files\Winamp\winampa.exe

C:\Program Files\Google\Google Talk\googletalk.exe

C:\Program Files\FarStone\VirtualDrive\VHD\RDTask.exe

C:\Program Files\FarStone\VirtualDrive\VDTask.exe

C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe

C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\ioloAV.exe

C:\Program Files\DNA\btdna.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\PROGRA~1\Webshots\Webshots.scr

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\iAVEmailScanner.exe

C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe

C:\Program Files\Winamp\winamp.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\WINDOWS\system32\SearchFilterHost.exe

C:\HijackThis\HijackThis.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qrz.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =