windows will not shut down properly

Posted on 2004-11-15
Last Modified: 2008-02-01
Two days ago, my computer started to act strange, principally not shutting down (dell inspiron 500m, windows xp).

When I try to shut down, I get a a series of alert window that say that a program cannot be terminated, with the following messages:

TRD ww:

TRD ww:

TRD ww:

I have scanned my computer for spyware and two were found and deleted (using Giant Antispyware). I have also scanned for viruses using AVG (none found), and (two worms were found - WORM_RBOT.WK). The files indicated that have the worms were removed through the C: window.

But, the problem still persists. The computer will not shut down.

I tried to delete the wuaumqr.exe file in the C: window but it says it can't be found.

Any help is appreciated.

Question by:cameronbrooks
    LVL 14

    Expert Comment

    Try to manually close the programs and then shutdown windows
    LVL 14

    Expert Comment

    wuaumqr.exe may be attributed as hidden so before search check Search in Hidden files and the search
    LVL 59

    Accepted Solution

    Wuaumgr.exe is associated with the virus described here (click on the Description tab):

    Sygate.exe is associated with this one:

    I couldn't find a reference to glavas.exe, but I would bet it is a virus problem also.  This could be a problem with viruses/trojans/spyware or other malware. Some free online virus scanners:

    Also try these free programs to rid your system of spyware, trojans, and other malware:
    Spybot - Search & Destroy can detect and remove a multitude of adware files and modules from your computer. Spybot can also clean program and Web usage tracks from your system, which is especially useful if you share your computer with other users. Modules chosen for removal can be sent directly to the included file shredder, ensuring complete elimination from your system. And for advanced users, it allows you to fix Registry inconsistencies related to adware or malicious program installations. The handy online update feature ensures that Spybot always has the most current and complete listing of adware, dialers, and other uninvited system residents.
    Version 1.2 adds a variety of new and updated features, including an immunization option that allows you to block many spyware downloads before they get to your computer, and improved detection mechanisms for morphing files.
    With its ability to scan your RAM, Registry, hard drives, and external storage devices for known data mining, advertising, and tracking components, Ad-aware can easily rid your system of these tracking components, allowing you to maintain a higher degree of privacy while you surf the Web.

    I use BOTH of the above programs on my 3 Windows systems; what one program misses, the other catches.  Also make sure to download the most up-to-date data before you run the programs.

    Author Comment

    I'm trying to use one of the online scans (
    but it seems to stall about 1/3 of the way through the scan. Is this becuse of the worm/virus?
    LVL 2

    Expert Comment

    Very likely, we just had an RBOT infection in the building here, it is a beast to clean.

    If you can, i would highly suggest a format and reinstall.
    LVL 65

    Assisted Solution

    camer, first of all you should get Adaware, Spybot and then download Stinger from here >>
    Then goto Start>Run>msconfig>Startup
    and untick all applications except the Antivirus and Firewall entires

    Restart and now boot the system in safemode >>
    then Disable the system restore >>;%5BLN%5D;310405
    Now Run all of those four tools one by one in safemode and delete everything they detect.
    Then enable Show Hidden Files from folder options, and then check if you can find and delete those three files which gives error upon shutdown ??
    Then delete the temporary internet files and history of IE
    and run Disk Cleanup on ur hard drive to delete those temp and junk files.

    Restart back in Normal Mode and Now run the Online virus scan to check if it completes now or not and if Yes then what does it report now about yur system ?? :)

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article ( first and run the tool TDSSKiller ( to get rid of the infection. Once done, and if the …
    Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now