TechSpot

XP Shutdown Problem

By Stonking
Aug 26, 2005
  1. Hi, If I boot up my PC, run for say 10 mins and shut down, it will shut down in about 20 seconds. If however it runs for an hour then from when I hit shutdown to the windows screen that says shutdown / restart / etc takes 3 mins and then if I confirm shutdown it takes another 3 mins. Any ideas?

    Regards
     
  2. jobeard

    jobeard TS Ambassador Posts: 9,351   +622

    likely some program has a connection to the Internet and it is Stalled
    attempting to close it. There's a program to monitor ALL open connections;
    see http://www.nirsoft.net and look for CurrPorts.
    (url has been corrected)

    The object here is to understand which programs are accessing the Internet,
    and to control IF/when they should even be here (ie: backdoors )
     
  3. Stonking

    Stonking TS Rookie Topic Starter Posts: 47

    Jobeard, Thanks for the reply but that web site you left has "Site under construction" on it. Do you know of another way of finding what ports are running. I am sure you are right because my broadband always seems to be flashing away.
     
  4. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

  5. Stonking

    Stonking TS Rookie Topic Starter Posts: 47

    Hi, I found currport and I have loads of things running from my machine. How do I know which one's are ok?
     
  6. jobeard

    jobeard TS Ambassador Posts: 9,351   +622

    We're working under the assumption that your ISP access is properly
    configured and you have NO outstanding issues for access, like
    Access Timed Out, Site Not Found. If you've seen anything like this lately,
    get your TCP config fixed first.

    You need to understand what you've installed and where.
    The attached pdf shows some active programs; notice the Process Path.
    you should understand each of these and respond, 'AH, I remember'.

    Anything that originates from \Temp or \Windows\Temp is a suspect trojan,
    so verify that it was downloaded as an ActiveX component or something
    you just wanted to try out.

    <ctl><alt><del> will get you to the task manager and ANY program
    that is shown as Not Responding is a zombe and will not behave correctly
    at shutdown.
     
  7. Stonking

    Stonking TS Rookie Topic Starter Posts: 47

    They all seem to come from windows/system32/svchost or AOL so I am guessing thats ok then.
     
  8. puncrawcboi92

    puncrawcboi92 TS Rookie Posts: 49

  9. Stonking

    Stonking TS Rookie Topic Starter Posts: 47

    Thanks Puncrawcboi92 but it found no worm so it can not be that. I'm still battling along here so if anyone else has any ideas please get typing.

    Regards
     
  10. puncrawcboi92

    puncrawcboi92 TS Rookie Posts: 49

  11. Stonking

    Stonking TS Rookie Topic Starter Posts: 47

    Puncrawcboi92, That's that scan alos turned up no viruses etc. Any othere thoughts?

    Regards
     
  12. Stonking

    Stonking TS Rookie Topic Starter Posts: 47

    I must stay off the juice if I am going to post. Let me try that again.

    Puncrawcboi92. I have run that scan and it also reports no viruses etc, any other ideas?

    Regards
     
  13. puncrawcboi92

    puncrawcboi92 TS Rookie Posts: 49

    press start
    then go into control panel
    switch to classic view
    go into administrative tools
    event viewer
    and look at your application and system
    post the warnings and errors
     
  14. Stonking

    Stonking TS Rookie Topic Starter Posts: 47

    Puncrawcboi92, I copied some of the application log and system log and took out the most recent errors and warnings.

    ok From the application log I :-

    Error 29/08/2005 21:37:33 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:37:33 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:37:32 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:37:32 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:37:32 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:37:32 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:37:31 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:37:31 ESENT Logging/Recovery 494 N/A ASUS

    Information 29/08/2005 21:37:31 ESENT General 101 N/A ASUSError 29/08/2005 21:37:31 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:37:31 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:37:30 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:37:30 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:07:30 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:07:30 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:07:29 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:07:29 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:07:29 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:07:29 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:07:28 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:07:28 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:07:28 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:07:28 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 21:07:27 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 21:07:27 ESENT Logging/Recovery 494 N/A ASUS

    Error 29/08/2005 20:37:27 ESENT Logging/Recovery 454 N/A ASUS
    Error 29/08/2005 20:37:27 ESENT Logging/Recovery 494 N/A ASUS

    From the system log I have :

    Type Date Time Source Category Event User Computer

    Information 29/08/2005 11:06:40 Service Control Manager None 7035 SYSTEM ASUS
    Warning 29/08/2005 11:05:57 Dhcp None 1007 N/A ASUS

    Error 29/08/2005 11:04:15 acpi None 4 N/A ASUS
    Error 29/08/2005 11:04:15 acpi None 5 N/A ASUS
    26 N/A ASUS
    Error 29/08/2005 11:02:11 acpi None 4 N/A ASUS
    Error 29/08/2005 11:02:11 acpi None 5 N/A ASUS

    Error 28/08/2005 21:47:22 DCOM None 10010 SYSTEM ASUS
    Error 28/08/2005 21:43:02 DCOM None 10010 Stephen & Janet ASUS
    Warning 28/08/2005 12:10:10 Dhcp None 1007 N/A ASUS
    Information 28/08/2005 12:09:21 Service Control Manager None 7036 N/A ASUS
    Information 28/08/2005 12:09:14 Service Control Manager None 7036 N/A ASUS
    Information 28/08/2005 12:09:14 Service Control Manager None 7035 SYSTEM ASUS
    Information 28/08/2005 12:09:14 Service Control Manager None 7035 SYSTEM ASUS
    Information 28/08/2005 12:09:14 Service Control Manager None 7036 N/A ASUS
    Information 28/08/2005 12:09:07 Tcpip None 4201 N/A ASUS
    Information 28/08/2005 12:09:07 Service Control Manager None 7036 N/A ASUS
    Information 28/08/2005 12:09:07 Service Control Manager None 7036 N/A ASUS
    Information 28/08/2005 12:09:06 Service Control Manager None 7035 SYSTEM ASUS
    Information 28/08/2005 12:09:05 Service Control Manager None 7036 N/A ASUS
    Information 28/08/2005 12:09:05 Service Control Manager None 7035 SYSTEM ASUS
    Information 28/08/2005 12:09:04 Service Control Manager None 7036 N/A ASUS
    Information 28/08/2005 12:08:48 Application Popup None 26 N/A ASUS
    Information 28/08/2005 12:08:48 Application Popup None 26 N/A ASUS
    Information 28/08/2005 12:08:48 Application Popup None 26 N/A ASUS
    Information 28/08/2005 12:08:48 Application Popup None 26 N/A ASUS
    Information 28/08/2005 12:08:48 Application Popup None 26 N/A ASUS
    Information 28/08/2005 12:08:48 Application Popup None 26 N/A ASUS
    Error 28/08/2005 12:08:32 acpi None 4 N/A ASUS
    Error 28/08/2005 12:08:32 acpi None 5 N/A ASUS
    Error 28/08/2005 12:07:39 DCOM None 10010 SYSTEM ASUS
    Error 28/08/2005 12:05:06 DCOM None 10010 Stephen & Janet ASUS
    Information 28/08/2005 12:03:03 RemoteAccess None 20159 N/A ASUS
    Warning 28/08/2005 08:37:27 Dhcp None 1007 N/A ASUS
    27/08/2005 21:43:59 eventlog None 6006 N/A ASUS
    Error 27/08/2005 21:43:58 DCOM None 10010 SYSTEM ASUS

    Does this mean anything to you. There are loads more I just took the first few of each.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...