[M-Rex]

Folks,

Forgive me if this is a common problem and has been dealt with before. I need help. If you guys can't help me, then probably no one can.

For the longest time, my computer would hang for anywhere from 5 to 15 minutes on shutdown or restart. I tried everything I knew to do including AdAware, Norton WinDoctor, Defrag, Norton AntiVirus, Panda AntiVirus Online, Windows Registry Repair Pro...nothing fixed the problem.

This continued for a number of weeks. I downloaded Spybot Scan and Destroy, and GlarySoft Utilities which includes a registry cleaner. I ran both of them. They found spyware and some registry things that were cleaned. Great! Maybe this fixed it? No way. My computer restarted, and shutdown 'at the correct speed', but a new problem cropped up.

Now, I get a window that says something to the effect of "Explorer.exe cannot shut down" and it asks if I'd like to "end task now". After a few seconds, I get another window that states exactly the same thing, but this time it's 'HiddenFaxWindow'.

Help me. I'm about ready to turn my computer into a boat anchor if I can't figure this out.

Thanks,
M.

Edited by M-Rex, 27 April 2005 - 11:27 PM.

[Advertisements]

are you running a fax program ?

[peterm]

are you running a fax program ?

[M-Rex]

Nope. No E-Fax, and my HP Officejet V40 is not sending anything. In addition, this is a recent problem that occurred only after cleaning the registry with GlarySoft Registry Cleaner.

Edited by M-Rex, 28 April 2005 - 12:19 AM.

[peterm]

go and show all hiden files
then search for any fax files

[Chasterkulio]

[removed]

Edited by admin, 28 April 2005 - 06:01 PM.

[gerryf]

M-rex,

I realize you are getting bombarded by suggestions.

If I could add one more to the list.

Note the time.

reboot, on restart
Start > run
eventvwr.msc
<enter>

Look for Red Xs at the time of the shutdown...post the results

[M-Rex]

For gerryf -

Here is what I have from Event Viewer Application:

Error 4/28/2005 8:48:03 AM nview_info None 1 N/A OEMCOMPUTER
Information 4/28/2005 8:47:55 AM ESENT General 102 N/A OEMCOMPUTER
Information 4/28/2005 8:47:55 AM ESENT General 100 N/A OEMCOMPUTER
Information 4/28/2005 8:47:24 AM ccPwdSvc None 1 SYSTEM OEMCOMPUTER
Information 4/28/2005 8:47:10 AM SecurityCenter None 1800 N/A OEMCOMPUTER
Error 4/28/2005 8:47:08 AM SecurityCenter None 1802 N/A OEMCOMPUTER
Information 4/28/2005 8:47:07 AM ccEvtMgr None 1 SYSTEM OEMCOMPUTER
Information 4/28/2005 8:47:00 AM NProtectService None 3 SYSTEM OEMCOMPUTER
Information 4/28/2005 8:47:00 AM ccEvtMgr None 26 SYSTEM OEMCOMPUTER
Warning 4/28/2005 8:45:06 AM Userenv None 1517 SYSTEM OEMCOMPUTER

No errors show for either System or Security tabs.

Thanks for the help.

M.

[M-Rex]

For Chasterkulio:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"SystemTray"="SysTray.Exe"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\j2re1.4.2_04\\bin\\jusched.exe"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"gcasServ"="\"C:\\Program Files\\Microsoft AntiSpyware\\gcasServ.exe\""
"ccRegVfy"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccRegVfy.exe\""
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"nwiz"="nwiz.exe /install"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

[gerryf]

Warning 4/28/2005 8:45:06 AM Userenv None 1517 SYSTEM OEMCOMPUTER

double click on that one, does it mention anything about a registry hive not unloading?


If so, download and install the following, then reboot.

Cannot recall if it takes effect immediately, or if you will have to reboot a second time to catch the effect.


http://www.microsoft...&displaylang=en

Does it make a difference?

[M-Rex]

gerryf,

I clicked on the reference you stated, and it did, indeed, state exactly what you described.

Unfortunately, that solution did not work. I installed the fix you suggested. I restarted once and did not see the windows I described before. However, avter three more restarts, both the Explorer.exe window returned, as well as the HiddenFaxWindow.

Strangely, during one of the restarts, the HiddenFaxWindow window was replaced with the same sort of shutdown window, but for Connections Tray.

I'm stumped. Half of my computing time is spent trying to track down various errors. I'm ready to go completely offline. Please, someone explain to me how a computer can go from 'working perfectly' to 'error after error after error after error' overnight when the user does nothing more than turn it off, go to bed, and turn it on in the morning.

M.

Edited by M-Rex, 28 April 2005 - 11:35 AM.

[gerryf]

but is it shutting down more quickly now?

[gerryf]

Please post a hijackthis log....

Note: I AM NOT LOOKING FOR SPYWARE AND THIS IS NOT AN INVITATION FOR EVERYONE TO POST SUCH LOGS IN THIS FORUM

[M-Rex]

but is it shutting down more quickly now?

Most certainly. Occasionally it shuts down fine. I've restarted my machine several times. Sometimes it's fine. Others, it stops at both the windows I described above. Overall, it looks like it is shutting down 'faster'.

M.

[M-Rex]

gerryf,

Here you go. Thank you for taking a look at this.

M.

Logfile of HijackThis v1.99.1
Scan saved at 11:25:50 AM, on 4/28/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Speed Disk\nopdb.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet v series\Bin\hpoant07.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\SYSTEM\MDM.EXE
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Michael F. Zabkar\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: 70.84.36.134 classicbattletech.com
O1 - Hosts: 70.84.36.134 www.classicbattletech.com
O1 - Hosts: 70.84.36.134 forums.classicbattletech.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM32\MDM.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: HPAiODevice(hp officejet v series).lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet v series\Bin\hpoant07.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O15 - Trusted Zone: http://*.tawpaintball.com
O16 - DPF: {11818680-FCF6-11D0-9808-0800092A4865} (FormFlow Form Control) - http://jobs.spb.ca.g...ase/FormCtl.cab
O16 - DPF: {224F7DEA-B7C1-11D3-AB40-00902712A5C9} (PLSAddin Class) - http://jobs.spb.ca.g.../plsspeller.cab
O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.../US/install.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.wea...Transporter.cab?
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse....iveX/winrep.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1093368652404
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai....23/cpbrkpie.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.h...edsolutions.cab
O16 - DPF: {A762E064-A885-40E4-AC10-671BB62DC2B2} (OFMailHTMLCtl Class) - http://www.eomniform...ins/OFMailX.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.h.../qdiagh.cab?326
O16 - DPF: {EF2FB80F-0975-408E-A871-B00CC863478A} (FormFlow Soft Font Installer) - http://jobs.spb.ca.g...ntinstaller.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/kdx.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Utilities\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\Program Files\Speed Disk\nopdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

[gerryf]

Please post a hijackthis log....

Note: I AM NOT LOOKING FOR SPYWARE AND THIS IS NOT AN INVITATION FOR EVERYONE TO POST SUCH LOGS IN THIS FORUM

you see this ? ^