Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Computer Shut down


  • Please log in to reply

#16
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
Please run this:

"Silent Runners.vbs", revision 33, http://www.silentrunners.org/

And show me the log.
  • 0

Advertisements


#17
BusyLizzie

BusyLizzie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
hello coachwife,

It iffered me revision 34,,,hope thats ok..

here it is:

"Silent Runners.vbs", revision 34, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"MSMSGS" = ""C:\Program Files\Messenger\msmsgs.exe" /background" [MS]
"Spyware Doctor" = ""C:\Program Files\Spyware Doctor\swdoctor.exe" /Q" ["PCTools"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"AVG7_CC" = "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP" ["GRISOFT, s.r.o."]
"AVG7_EMC" = "C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe" ["GRISOFT, s.r.o."]
"Zone Labs Client" = ""C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"" ["Zone Labs LLC"]
"RegistryMechanic" = "C:\Program Files\Registry Mechanic\RegMech.exe /QS" ["PCTools"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string]
{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB}\(Default) = "PCTools Site Guard" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll" ["PCTools.com"]
{AA58ED58-01DD-4d91-8333-CF10577473F7}\(Default) = "Google Toolbar Helper" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar1.dll" ["Google Inc."]
{B56A7D7D-6927-48C8-A975-17DF180C71AC}\(Default) = "PCTools Browser Monitor" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll" ["GuideWorks Pty. Ltd."]
{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}\(Default) = "EpsonToolBandKicker Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll" ["SEIKO EPSON CORPORATION"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Display Panning CPL Extension"
-> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "HyperTerminal Icon Ext"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}" = "AVG7 Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]
"{9F97547E-460A-42C5-AE0C-81C61FFAEBC3}" = "AVG7 Find Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]
"{acb4a560-3606-11d3-aef4-00104bd0f92d}" = "KodakShellExtension"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Common Files\KODAK\IFSCore\kodakshx.dll" ["Eastman Kodak Company"]
"{FA010552-4A27-4cb1-A1BB-3E2D697F1639}" = "SpySubtract Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "c:\Program Files\interMute\SpySubtract\sshook.dll" ["InterMute, Inc."]


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]


Enabled Wallpaper and Active Desktop:
-------------------------------------

Active Desktop is disabled.

HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"


Startup items in "user" & "All Users" startup folders:
------------------------------------------------------

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
"Kodak EasyShare software" -> shortcut to: "C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe -h" ["Eastman Kodak Company"]
"Kodak software updater" -> shortcut to: "C:\Program Files\KODAK\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe" [null data]
"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]
"Microsoft Works Calendar Reminders" -> shortcut to: "C:\WINDOWS\Installer\{F128BA10-362E-11D3-81AB-00C04FB932BA}\4EBD23F5.exe" [null data]
"SpySubtract" -> shortcut to: "C:\Program Files\interMute\SpySubtract\SpySub.exe -autostart" ["InterMute, Inc."]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{EE5D279F-081B-4404-994D-C6B60AAEBA6D}"
-> {CLSID}\(Default) = "EPSON Web-To-Page"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll" ["SEIKO EPSON CORPORATION"]

"{2318C2B1-4965-11D4-9B18-009027A5CD4F}"
-> {CLSID}\(Default) = "&Google"
-> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar1.dll" ["Google Inc."]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{EE5D279F-081B-4404-994D-C6B60AAEBA6D}"
-> {CLSID}\(Default) = "EPSON Web-To-Page"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll" ["SEIKO EPSON CORPORATION"]

"{2318C2B1-4965-11D4-9B18-009027A5CD4F}"
-> {CLSID}\(Default) = "&Google"
-> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar1.dll" ["Google Inc."]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{2D663D1A-8670-49D9-A1A5-4C56B4E14E84}\
"ButtonText" = "Spyware Doctor"
"CLSIDExtension" = "{A1EDC4A1-940F-48E0-8DFD-E38F1D501021}"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll" ["GuideWorks Pty. Ltd."]

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

AVG7 Alert Manager Server, Avg7Alrt, "C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe" ["GRISOFT, s.r.o."]
AVG7 Update Service, Avg7UpdSvc, "C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe" ["GRISOFT, s.r.o."]
Kodak Camera Connection Software, KodakCCS, "C:\WINDOWS\system32\drivers\KodakCCS.exe" ["Eastman Kodak Company"]
ptssvc, ptssvc, "C:\Program Files\KODAK\KODAK Picture Transfer Software\PTSsvc.exe" ["KODAK"]
TrueVector Internet Monitor, vsmon, "C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service" ["Zone Labs LLC"]


----------
This report excludes default entries except where indicated.
To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
----------

hope it is what you want..

Thank you

Lizzie
  • 0

#18
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
How is it running?
  • 0

#19
BusyLizzie

BusyLizzie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
hello Coachwife,

The computer seems to be running ok. But it still won't shut down properly.
It still automatically restarts after shut down.

Lizzie
  • 0

#20
coachwife6

coachwife6

    SuperStar

  • Retired Staff
  • 11,413 posts
I'm going to move this topic over to the hardware forum. Maybe one of those guys can help you. Doesn't appear to be malware related.

You might try this: and realize this does not come from a techno-wiz. One time I was having major problems a long time ago. Computer tech pulled off the back and blew it out with pressurized air and cleaned out all the dust. It worked after that. May have been dumb luck, but it worked. :tazz:
  • 0

#21
BusyLizzie

BusyLizzie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
hello coachwife,

Just to say thank you for all your time and patience and for handing me over to the hardware guys.

The computer has been cleaned out only a month ago..but.....as you say.....one never knows!

Thanks again Coachwife, your help has been very much appreciated.

Lizzie :tazz:
  • 0

#22
Doby

Doby

    Member 2k

  • Member
  • PipPipPipPipPip
  • 2,075 posts
Hi Lizzie,

First you can't keep unpluging it I suggest letting it run.

What kind of computer brand name,model name, model number?

There are some things we can test that are hardware related but this involves opening the case and taking some things apart witch I can guide you if you are willing to do so. Let me know how you want to proceed.

I am not entirerly sure this is hardware it could be a bad install of XP. Do you have a XP disk?

Rick
  • 0

#23
BusyLizzie

BusyLizzie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
Hello Rick,
Thank you for taking an interest. Hope this is the information you require. I am not computer literate at all. So bear with me please.

OS Name..........................Microsoft Windows XP Home Edition
Version............................5.1.2600 Service pack 2 Build 2600
OS Manufacturer...............Microsoft Corporation
System Name...................User ADAA5D94FD
System manufacturer........VIA
System Model...................VT8371
System Type....................X86-based PC
Processor.........................x86 Family 6 Model 6 Stepping 2 AuthenticAMD~1000mhz
Bios Version/Date.............American Megatrends Inc. 62710 29/03/2002
SMBIOS Version...............23
Windows Directory............C\:Windows
System Directory..............C\:Windows\system32
Boot Device......................\Device\Harddisk Volume 1
Locale..............................United Kingdom
Hardware Abstraction Layer...Version = "5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)"
User Name.......................USER-ADAA5D94FD\user
Time Zone.......................GMT Standard Time
Total Physical memory......352.00 MB
Available Physical memory..81.53 MB
Total Virtual memory..........2.00 GB
Available Virtual memory....1.96 GB
Page File Space..................854.39 MB
Page File............................C:\pagefile.sys

I do have the XP Disc

I am not sure about taking the Tower apart, but I am very willing to give it a go.

Just one other thing... the guy who loaded XP for me, and fitted the new Modem (why he fitted the new modem I have no idea the old one worked ok until I took it to him) Also loaded my ISP Disk for me (BLUEYONDER.CO.UK) but it hasnt loaded correctly. I only have the tutorial section showing on desktop. The other two icons for starting blueyonder are not there. Ive tried reloading blueyonder but it doesnt load properly. Cannot load the blueyonder and Internet Explorer section. Just the tutorial section. I have to click on the Explorer Icon on desk top to connect to the internet. And in my add/remove progs there is no Internet Explorer prog listed. Just Internet Explorer via google. I have tried downloading Internet explorer 6.1 but it gets so far then it asks me to reboot to clear something which is running. After rebooting and trying again.. I get the same recurring problem.

I bet youv'e got a headache now! :tazz:

Thank you again.

Lizzie
  • 0

#24
Doby

Doby

    Member 2k

  • Member
  • PipPipPipPipPip
  • 2,075 posts
Ok try unistalling the BLUEYONDER software thru add remove programs and leave it uninstalled to see if the computer will then shut down properly.

The BLUEYONDER software might not be compatible with XP that is why it won't load completely but see what happens when you completely uninstall it.

If that don't help then

I checked the MS website and here is what they say to do for your problem, you can look over it but basically this what to do.

Click the Start button, right-click My Computer, click Properties, click the Advanced tab, and then click Settings under Startup and Recovery. The startup and recovery box will appear look under system failure and uncheck the automatic restart.

Close out of everything and see if you can shutdown normally thru the start button.
This may give you the BSOD (blue screen of death) if it does and has a error with it write it down and post the error message. This may also allow you to shut down normally

To recover from the BSOD push the reset button on the front of the case if you have one if you don't the push and hold the power button for 5 seconds.

Rick
  • 0

#25
BusyLizzie

BusyLizzie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
Hello Rick, sorry for lateness of reply, I haven't been at home until this morning.

I have gone to settings and unchecked the ''automatically restart'' box. Rebooted and closed down again but computer still starts up automatically. I checked the settings again and the ''automatically restart'' box is still unchecked

I have uninstalled blueyonder (from add/remove prog) ....run a search for blueyonder (in files and folders) and deleted any reference to blueyonder found there. Have deleted the Internet Explorer via Google from add/remove prog.
Rebooted and closed down again but computer still started up automatically.

The weird thing is this: I have uninstalled blueyonder and all references I can find to it. And I have not reloaded it from the disk. But I can still get on line. By clicking on MSN Messenger, the blueyonder ''connection'' box appears on screen and when I click on ''connect'' it automatically dials up and connects me to the Internet.

Is this right? Should I be able to connect to the Web if I've uninstalled the ISP Server?

Lizzie
  • 0

Advertisements


#26
Mistertom

Mistertom

    Member

  • Member
  • PipPip
  • 28 posts
Hi Lizzie,

Read your problem and found this:

Registry:
HKEY_LOCAL_MACHINE\software\Microsoft\WindowsNT\Currentverion\Winlogon

Powerdownaftershutdown -> 0=Reboot 1=Power Down


Check your registry for the above and see if it comes close. My own just has the value 0 and works ok.

BE VERY CAREFULL when editing registry items as one wrong character can really mess things up!

If your not sure how to do this let me know and I will guide you through it.

One other thought.........your pc can be "brought out of standby" by any one of several ways, your mouse being one of them. Have you tried another mouse in case its faulty? Certain programs and hardware can also bring your pc out of standby for internet access updates etc. Check the properties of your hardware to see if any have "allow to bring computer out of standby" checkboxes. You never know, it could be that simple!

Hope this is of some use to you. I know how annoying it is.

For further help try computing.net which is where the above reg entry came from or annoyances.com. Both are very good.

Good luck.

Gaz.
  • 0

#27
Doby

Doby

    Member 2k

  • Member
  • PipPipPipPipPip
  • 2,075 posts
Lizzie,

Try Mistertom suggestion and keep us posted hopefully it will work if not we will have to troubleshoot some hardware next if no body else has any ideas.

Rick
  • 0

#28
Doby

Doby

    Member 2k

  • Member
  • PipPipPipPipPip
  • 2,075 posts
I also found this let me know if you have any of that software.
  • 0

#29
BusyLizzie

BusyLizzie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
Hi Gaz, and thank you for your input, very much appreciated.

However, I have gone through the hardware profiles using ''Device manager'' and everything is coming up ''this device is working properly''

The devices which had a power management tab were ticked for '' allow the computer to turn off this device to save power''.

Except the Modem which had ''allow the computer to turn of this device to save power'' greyed out. And ''allow this device to bring the computer out of standby'' not ticked. Is this set correctly?

I have not tried your suggestion of the HKEY in Registry because frankly I am too scared to mess with it.

And thank you for the two sites you have suggested I try. I havent been to them yet because I am getting very confused trying different things at the moment. But I will try them and let you know if they make any sense to me. As I have said previously, this machine scares the heck out of me and I get frightened to change things on it without some instruction.

Thank you once again for your time and interest.

Lizzie
  • 0

#30
BusyLizzie

BusyLizzie

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
Hello Doby, Thank you too for your interest.

I went to the site you posted and I am nearly certain that I haven't any of that software on my pc.. but will do a more thorough check and get back to you.

It looks a wonderful site, but somehwat confusing and I will visit it again tomorrow and look through it properly.

Thanks again Doby.

Lizzie
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP