"Not Responding" on system shutdown

[bradmatejo]

Spybot runs just fine for me. However, when I shutdown my system, I get a box saying Shutting Down Spybot, followed by a box saying This Program Is Not Responding. I have to click a button (sorry, don't remember exactly what it says) to make Spybot stop in order for shutdown to proceed.

What gives?

Thanks in advance!
Brad

[md usa spybot fan]

I normally shutdown (Exit) Spybot – Search & Destroy after completing update, scans, etc. I also normally close all applications that are running before turning off or restarting my system.

However, I left Spybot – Search & Destroy running and shutdown my system (Windows XP – Home) to see if I could duplicate the problem you are having and I could not.

Can you provide additional details? Does this always happen or does it only happen periodically and if so under what circumstances?

[bradmatejo]

Sorry, I should have been more clear. I do not have Spybot (or any other program) running when I shut down. Like you said, I shut down all programs before shutting down the pc. Except of course for background stuff like Norton AV, ZoneAlarm, etc. This happens every time I shut down, whether I've run Spybot or not. TeaTimer does run in the background, maybe it's TeaTimer that's not responding and it just says Spybot? (which would then raise the same question of Why?)

[md usa spybot fan]

The next time you receive the "This program is not responding" message, please copy down the program or task that is not responding and post it.

[bradmatejo]

It says Spybot Search and Destroy.

[md usa spybot fan]

Is that actually "Spybot - Search & Destroy" as opposed to "Spybot Search and Destroy"?

What Windows Operating System are you running and if it is a system with multiple user accounts, are you logged on to the same user account when the problem occurs that you installed Spybot-S&D from?

Also post the following:
Go into Spybot > Mode > Advanced mode > Tools > System Startup.
Place the cursor on the listing that is displayed, right click on the listing and select "Copy to Clipboard".
Paste (Ctrl+V) the Clipboard to the post.

[bradmatejo]

Yes, it says Spybot - Search & Destroy.
Running on Windows XP Pro, only one user profile.

What did you want from the startup list? The entire list?

[md usa spybot fan]

Yes, I wanted to look at the entire list.

Something must be causing "Spybot - Search & Destroy" to start and run hidden. It most likely is a startup entry or a scheduled tack entry. What I don't understand is how you are able to start and run Spybot manually if the application is already running.

[bradmatejo]

Okay, here's the list. Yeah, when I open Spybot, I get a "Loading" progress bar. And the Not Responding problem happens regardless of whether I've opened Spybot and regardless of how long it's been since last reboot.

--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-05-31 TeaTimer_original.exe (1.4.0.2)
2006-04-07 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-01-02 Tools.dll (2.0.1.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-02-14 Includes\Cookies.sbi
2006-12-08 Includes\Dialer.sbi
2007-02-14 Includes\DialerC.sbi
2007-02-07 Includes\Hijackers.sbi
2007-02-14 Includes\HijackersC.sbi
2006-10-27 Includes\Keyloggers.sbi
2007-02-14 Includes\KeyloggersC.sbi
2007-02-14 Includes\Malware.sbi
2007-02-14 Includes\MalwareC.sbi
2007-01-19 Includes\PUPS.sbi
2007-02-14 Includes\PUPSC.sbi
2007-02-14 Includes\Revision.sbi
2006-12-08 Includes\Security.sbi
2007-02-14 Includes\SecurityC.sbi
2007-02-02 Includes\Spybots.sbi
2007-02-14 Includes\SpybotsC.sbi
2005-02-17 Includes\Tracks.uti
2007-02-14 Includes\Trojans.sbi
2007-02-14 Includes\TrojansC.sbi

Located: HK_LM:Run,
command:
file:

Located: HK_LM:Run, Acrobat Assistant 7.0
command: "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
file: C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
size: 483328
MD5: fbd06a45db2d543efd932768029ec5f2

Located: HK_LM:Run, Adobe Version Cue CS2
command: "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
file: C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
size: 856064
MD5: 98fafd82e4f0674d2d7bb3c8fd141d32

Located: HK_LM:Run, ccApp
command: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
file: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 52840
MD5: ae0f500ea5e01afef0bb9051969804b2

Located: HK_LM:Run, EPSON Stylus CX4600 Series
command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE /P26 "EPSON Stylus CX4600 Series" /O6 "USB001" /M "Stylus CX4600"
file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE
size: 98304
MD5: 3758bb30e224d88bc1027b9302635429

Located: HK_LM:Run, Gene USB Monitor
command: C:\WINDOWS\system32\UMonit2K.exe
file: C:\WINDOWS\system32\UMonit2K.exe
size: 40960
MD5: a5c5dab70c469e8cf9406b1de2a462cf

Located: HK_LM:Run, IntelliPoint
command: "C:\Program Files\Microsoft IntelliPoint\point32.exe"
file: C:\Program Files\Microsoft IntelliPoint\point32.exe
size: 217088
MD5: 5d11ca6af7a30878c58aa1db12bca082

Located: HK_LM:Run, iTunesHelper
command: "C:\Program Files\iTunes\iTunesHelper.exe"
file: C:\Program Files\iTunes\iTunesHelper.exe
size: 256576
MD5: d2ed7af383aab672cb7e135040967954

Located: HK_LM:Run, KernelFaultCheck
command: %systemroot%\system32\dumprep 0 -k
file: C:\WINDOWS\system32\dumprep.exe
size: 10752
MD5: 13922eb54890c77005268882629a31fe

Located: HK_LM:Run, NeroFilterCheck
command: C:\WINDOWS\system32\NeroCheck.exe
file: C:\WINDOWS\system32\NeroCheck.exe
size: 155648
MD5: 3e4c03cefad8de135263236b61a49c90

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
file: C:\WINDOWS\system32\RUNDLL32.EXE
size: 33280
MD5: da285490bbd8a1d0ce6623577d5ba1ff

Located: HK_LM:Run, NvMediaCenter
command: RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
file: C:\WINDOWS\system32\RUNDLL32.EXE
size: 33280
MD5: da285490bbd8a1d0ce6623577d5ba1ff

Located: HK_LM:Run, nwiz
command: nwiz.exe /install
file: C:\WINDOWS\system32\nwiz.exe
size: 921600
MD5: 96880791e6dde3fac08342c1d5b045ac

Located: HK_LM:Run, QD FastAndSafe
command:
file:

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 282624
MD5: d195e74b712dd105402b90e6cb28263f

Located: HK_LM:Run, SunJavaUpdateSched
command: C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
file: C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
size: 32881
MD5: d7b9be63c406103ee1405fe473ac0697

Located: HK_LM:Run, type32
command: "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
file: C:\Program Files\Microsoft IntelliType Pro\type32.exe
size: 196608
MD5: 760c00a152dc010dd8e41969be33dc8a

Located: HK_LM:Run, UserFaultCheck
command: %systemroot%\system32\dumprep 0 -u
file: C:\WINDOWS\system32\dumprep.exe
size: 10752
MD5: 13922eb54890c77005268882629a31fe

Located: HK_LM:Run, Zone Labs Client
command: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
size: 968696
MD5: 71514e2c74d554f5902dc184046eca3b

Located: HK_CU:Run, ctfmon.exe
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996a38c0b0cf151c2140ae29fc8

Located: HK_CU:Run, FreeRAM XP
command: "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
file: C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
size: 1591808
MD5: 667f078955a93fe382f74d5f109dfe31

Located: HK_CU:Run, H/PC Connection Agent
command: "C:\PROGRA~1\MICROS~2\wcescomm.exe"
file: C:\PROGRA~1\MICROS~2\wcescomm.exe
size: 1207080
MD5: 9f7129ffff7bb008fea0c11745f16553

Located: HK_CU:Run, SpybotSD TeaTimer
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1415824
MD5: 8f1862afc3c79c0ea37621e87cc2fe6e

Located: System.ini, crypt32chain
command: crypt32.dll
file: crypt32.dll

Located: System.ini, cryptnet
command: cryptnet.dll
file: cryptnet.dll

Located: System.ini, cscdll
command: cscdll.dll
file: cscdll.dll

Located: System.ini, ScCertProp
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, Schedule
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll

Located: System.ini, SensLogn
command: WlNotify.dll
file: WlNotify.dll

Located: System.ini, termsrv
command: wlnotify.dll
file: wlnotify.dll

Located: System.ini, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll

Located: System.ini, wlballoon
command: wlnotify.dll
file: wlnotify.dll

[md usa spybot fan]

Check in Scheduled Tasks for "Spybot - Search & Destroy". Click Start, click All Programs, point to Accessories, point to System Tools, and then click Scheduled Tasks. Is "Spybot - Search & Destroy" listed?

[bradmatejo]

Nope, only Norton AV.

[md usa spybot fan]

There is only one other thing that I can think of to check and that is that the program that is actually not responding ("Spybot - Search & Destroy") is actually Spybot's executable (SpybotSD.exe). Before shutting down your system look for "SpybotSD.exe" in Windows Task Manager.

To open Windows Task Manager, right-click an empty space on the taskbar, and then click Task Manager. Click on the Processes tab and look for "SpybotSD.exe". Note if you click on the "Image Name" column title the list of processes will be sorted in "Image Name" order which may make looking for "SpybotSD.exe" easier.