shutdown problem

[crickett]

hi everyone,
When I shutdown WinME, it stalls and an end task window with NO title comes up. If I end the task, WinME will shut down. This happens 99 out of a hundred times and I've tried to figure out what is different about the 1 time it does shutdown correctly. I've tried ending everything I can before shutting down. I am online with a wireless router and have tried disconnecting from the router before shutting down. Nothing seems to work. Also, when it shuts down incorrectly, I notice that the following bootup is slow and my wireless mouse needs to be reset before it connects. I'm not sure where to go or what to try. Any help?

crickett >

 

[jaksback]

might want to uninstall the software for the mouse, shutdown (see if it happens again) then bootup and reinstall it.

Also you might have spyware/adware probs. get hijackthis , run it, and post the log file results for someone to analize and fix for you.

 

[crickett]

I've run Norton AV, Spyware S&D, Ad-aware and defragged. All showed nothing out of the ordinary. I'll try hijackthis and post the results as you suggested this evening or tomorrow as I'm at work now on a different computer. Thanks!

crickett >

 

[Lone Wolf]

There might be a application running in the background that hasn't finished it's process when you're shutting down. Before you shut down, press Ctrl-Alt-Del and see what applications (if any) are running.

 

[jaksback]

its more than likely a background app rather than one that was manually started.

 

[Lone Wolf]

Yeah so if you click on the processes tab you should be able to see which one is hogging the memory and the probable culprit.

EDIT: I'm thinking of W2K. It's been so long since i've used Win9.x .... isnt' there the same tab available in Win ME as well?

 

[crickett]

There is nothing runing in the task monitor that shouldn't be. I've ended everything and it still doesn't want to shutdown. I'm thinking it IS a background app like jak says, but the window has no program name in the title bar. I'm going to try hijackthis and post the results as soon as I get some time.

crickett >

 

[jaksback]

do that and we'll be here to help....

 

[crickett]

Ok, I just downloaded it and ran it. How do I post the log results here?

crickett : )>

 

[crickett]

Maybe like this?

crickett : )>

Running processes:
C:\WINME\SYSTEM\KERNEL32.DLL
C:\WINME\SYSTEM\MSGSRV32.EXE
C:\WINME\SYSTEM\mmtask.tsk
C:\WINME\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINME\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINME\SYSTEM\RESTORE\STMGR.EXE
C:\WINME\SYSTEM\SYSTRAY.EXE
C:\WINME\SYSTEM\WMIEXE.EXE
C:\WINME\DOCKAPP.EXE
C:\WINME\SYSTEM\HIDSERV.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINME\SYSTEM\HPZTSB04.EXE
C:\D-LINK AIRPLUS\AIRPLUS.EXE
C:\WINME\SYSTEM\SPOOL32.EXE
C:\WINME\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\WINME\SYSTEM\PSTORES.EXE
C:\WINME\SYSTEM\STIMON.EXE
C:\MY STUFF\APPLICATIONS\HIJACKTHIS.EXE

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\utilities\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\UTILIT~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINME\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\utilities\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINME\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [CPortPatch] C:\WINME\Quick Install\CPPatch.exe
O4 - HKLM\..\Run: [BayMgr] DockApp.exe
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [MSConfigReminder] C:\WINME\SYSTEM\msconfig.exe /reminder
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINME\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - Startup: D-Link AirPlus.lnk = C:\D-Link AirPlus\AirPlus.exe
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (sys Class) - http://www.pcpitstop.com/dell/site/PCPitStop.CAB
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab
O16 - DPF: {B8E71371-F7F7-11D2-A2CE-0060B0FB9D0D} (CDToolCtrl Class) - http://free.aol.com/tryaolfree/cdt175/aolcdt175.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security1.norton.com/SSC/SharedContent/sc/bin/cabsa.cab
O16 - DPF: {A8739816-022C-11D6-A85D-00C04F9AEAFB} (Web Camera Server Control) - http://208.9.159.164/wg_webeye.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2002082001/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/bonnie/us/win/QuickTimeInstaller.exe
O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - http://mirror.worldwinner.com/games/v50/swapit/swapit.cab
O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) - http://mirror.worldwinner.com/games/v42/blockwerx/blockwerx.cab
O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot4_x.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38070.7151157407
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/popcap/zuma/popcaploader_v5.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?319
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 207.99.0.1,207.99.0.2