WIINDOWS XP SHUT DOWN PROBLEM

Hello satishmadhu =)

got START>RUN and type  msconfig
in the STARTUP section, disable all applications, reboot and now try to shutdown.
Does it give the error again ??

!! GOOD LUCK !!

When it Ends Down the program, it NAME is written on the Title Bar of this small window.
What is this NAME ??

Probably not much help, but:

Shutdown and Restart Troubleshooting:
http://aumha.org/win5/a/shtdwnxp.htm

Create a batch file and to shutdown the OS using the following utility and at the minimum use the -f switch

Syntax for Windows XP:

      SHUTDOWN [options] [-m [\\ComputerName]]  

options
   -M \\Computer  : A remote computer to shutdown.
   -L          : logoff current user

   -c "Msg"    : An optional shutdown message
   -S          : Shutdown

   -R          : Shutdown and reboot

   -A          : Abort a system shutdown during the timeout period.

   -T:xx       : Set the timer for system shutdown in seconds.[20 sec. default]

   -F          : Force running applications to close.
                 ATTENTION: If you use the -F parameter shutdown will not
                            prompt for File-Save in any open applications.
                            This will result in a loss of all unsaved data!!!

   -d u:xx:yy   : List a USER reason code for the shutdown.
   -d P:xx:yy   : List a PLANNED reason code for the shutdown.
                   xx Specifies the major reason code (0-255)
                   yy Specifies the minor reason code (0-65536)
When using this command to reboot a server - the shutdown can be made faster if the services are halted using NET STOP - the NT shutdown process will normally allow about 30 seconds to ensure each running service has time to stop.
e.g.

net stop "Microsoft Exchange Internet Mail Service"
net stop "Microsoft Exchange System Attendant" /y
wait 20
shutdown /Y /T:5 /C /R

Whats the Name of the Process that gives an error??
????.exe

Adecold

adecold seems like SheharyaarSaahil already asked that.

:)

Hi,

The name of the process is SAMPLE.

lerouge

so, did u tried to disable all the starting applications from msconfig ??

Hi,
tried that but still the problem persists

lerouge

plzzz do one thing, i want to check for the background applications that are running on ur system, so plzz Download HijackThis from here, run it, Save the Log File and post here:
http://www.softpedia.com/public/cat/10/17/10-17-69.shtml

Hi,
here is the log file.

Logfile of HijackThis v1.97.7
Scan saved at 8:10:18 PM, on 4/29/2000
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\MY DOWNLOADS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\SATISH MADHUSUDAN\Application Data\Mozilla\Profiles\default\4x686n21.slt\prefs.js)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_16_0.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_3_16_0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

lerouge

FYI HijackThis log tutorial
http://www.spywareinfo.com/%7Emerijn/htlogtutorial.html

These look fishy to me

C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\ZCfgSvc.exe

And these

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

Maybe running this will help

http://crazyone.tekmasters.com/malwaretools.html
BHODemon | Think of BHODemon as a guardian for your Internet browser: it protects you from unknown Browser Helper Objects (BHOs), by letting you enable/disable them individually. BHODemon is free, runs in the tray area, and works on Windows 95 or later operating systems.

I don't like this one either


O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

From what i read ZCfgSvc.exe is a process that has to do with laptop networking os something related to that.
http://www.answersthatwork.com/Tasklist_pages/tasklist_z.htm

Heres some info about inetinfo.exe and it's vulneribility
http://pestpatrol.com/pestinfo/i/inetinfo_exe_vulnerability.asp


Adecold

HI guys,
The problem still persists.Here is my latest highjack file


Logfile of HijackThis v1.97.7
Scan saved at 11:37:47 PM, on 5/3/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\MY DOWNLOADS\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=136763
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_page.html?&account_id=136763
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_page.html?&account_id=136763
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\SATISH MADHUSUDAN\Application Data\Mozilla\Profiles\default\4x686n21.slt\prefs.js)
O2 - BHO: IE Agent - {00000000-0000-0000-0000-000000000221} - (no file)
O2 - BHO: (no name) - {00000762-3965-4A1A-98CE-3D4BF457D4C8} - (no file)
O2 - BHO: (no name) - {000020DD-C72E-4113-AF77-DD56626C6C42} - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (disabled by BHODemon)
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (disabled by BHODemon)
O2 - BHO: (no name) - {F7F808F0-6F7D-442C-93E3-4A4827C2E4C8} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Web Rebates - file://C:\Program Files\WebRebates\System\Temp\topr1150_script0.htm
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)

lerouge

Man !! i can't find anything suspisious here :-\

Ok plzz do one thing, boot into safemdoe, login as Administrator, and after getting into safemode, restart the system, does this SAMPLE message comes up here too ??

if NO, then try to login as anohter profile of the system, and check whether this problem is also happening in other profile or not ??

Hi,
It comes up when I run the ccomputer in safe mode and also when I use a different proffile.

lerouge.

:-\

that means, its a Windwos system problem,,,,,,,, !!!

Consider doing a Repair install,,,,,

How to Perform an In-Place Upgrade (Reinstallation) of Windows XP:
http://support.microsoft.com/?kbid=315341


or if u want u can also try SFC scan,,,,,,,
Goto START>RUN and type  sfc /scannow
u will need ur WinXP CD in order to fix the corruted windows system files, if found by scan.

!! GOOD LUCK !!

Hi,

I tried the sfc/scannow thing and it says that windows cannot find the required file.Is something corrupt with my system files?

lerouge

did it gave the error after scanning, or after u typed  sfc /scannow

Hi saahil,
After i typed in sfc/scannow.

lerouge

> sfc /scannow


u have to type exactly the above thing, just copy and paste in the run dialog box !!

uffffffffff,,,,,,,ok this is the Exact thing


sfc /scannow

Hi,

ok this time i get a dos window which vanishes in just 1 or 2 secs.

lerouge.

....  and then nothing happens.

lerouge

after that DOS windows vanished, didn't u get any other small window with a progress bar ??

Then do this

Start > run cmd
sfc /scannnow

Hi guys,

Didnt get any other window showing the progress bar.

Also tried doing it using the start/cmd thing:  says YOU MUST BE AN ADMINISTRATOR RUNNING A CONSOLE SESSION IN ORDER TO USE THE WINDOWS FILE CHECKE UTILITY.

What does this mean as I am logged in as the administrator?
lerouge

Hi guys,

I tried to upgrade my OS and it failed and gave me an error saying fdc.sys is corrupt.What to do now ?

lerouge.

HI guys,

Tried to do a do repair of OS,the first time did not complete.It gave an error

"UNREGMP2.EXE entry point not found
The procedure entry point GetIUMS could not be located in the dynamic link library MSDART.DLL."

Then tried the repair again and this time it worked perfectly.

Checked for the SAMPLE thing and it still persists.

Dont know what to do.

lerouge

satishmadhu,,,, plzz close this question now,,, for inforamtion reffer here >> http:/help/closing.jsp#1

Hi guys,

Since none o ur answers could actually solve my problem,I have decided to close this question without awarding any points
Thanks for all of ur help again.


lerouge

no problem,,,,, go ahead :)

!! GOOD LUCK !!