Well.... not sure if this is the right plcae, but have been reading the borad and people here seems very informed and plesant.
I have a few bugs with winxp home sp2. Basically it happens when I boot, the hd runs and runs and runs. Take a few minutes to get past the shut down and several to load up. I have found one message that seems to keep popping up in Event:
"Event Type:Warning Event Source:Userenv Event Category:None Event ID: 1517 User: NT AUTHORITY\SYSTEM
Windows saved user my computer registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account."
I did a search and found "User Profile Hive Cleanup Service"
That didn't seem to help the problem.
Not sure if it's a corrupt driver or somehting else. So I am looking for a few suggestions and tips.
FYI I just did a full recovery and installed sp2 off the disk and did all the xp sp2 updates and OEM updates.
Thank you for your time.
N3051M
02-14-2006, 09:19 AM
scan the four baddies: virus, mal/spy/adware
goto task manager and see what processes you have running and whats runnign when you shut down
disable norton antivirus/systemworks/i.net sec.
update all drivers and such
if its still hapening, goto msconfing (start>run) and goto startup and see whats what, google if unknown.. eliminate each processes untill you find the culprit
post back results
Ad
02-14-2006, 09:19 AM
elredon
02-15-2006, 03:40 PM
"scan the four baddies: virus, mal/spy/adware"
Did that all clean.
"goto task manager and see what processes you have running and whats runnign when you shut down"
How do I tell what's running when I shut down?
"disable norton antivirus/systemworks/i.net sec."
I am norton free!
"update all drivers and such"
I have updated what ever I could. Most companies say see the manufacturer, the manufacturer has not responded, went to their site and updated what I could.
"if its still hapening, goto msconfing (start>run) and goto startup and see whats what, google if unknown.. eliminate each processes untill you find the culprit post back results"
Logfile of HijackThis v1.99.1
Scan saved at 1:36:38 PM, on 2/15/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
run: chkdsk /f and defrag your drive, also defrag.
run msconfig, goto diagnostic startup and reboot.
if the problem goes then enable each catagory and reboot, (may be time consuming) untill you find which catagory causing it, and then disable services untill you find it...
through a bit of research, that thing is harmless but we'll try to get rid of it.
question 1. do you by any chance have ms anti-spyware installed?
question 2. did you recently delete a profile on the machine?
thats all i can think off at the moment
cheers
elredon
02-16-2006, 01:36 PM
"run: chkdsk /f and defrag your drive, also defrag."
Did that it worked out fine.
"run msconfig, goto diagnostic startup and reboot. if the problem goes then enable each catagory and reboot, (may be time consuming) untill you find which catagory causing it, and then disable services untill you find it..."
I will give this a go
"through a bit of research, that thing is harmless but we'll try to get rid of it.
question 1. do you by any chance have ms anti-spyware installed?"
I ran their program then uninstalled it.
"question 2. did you recently delete a profile on the machine?"
No, but I changed the name in user profiles.
Here's something else I found:
The following handles in user profile hive (...) have been remapped because they were preventing the profile from unloading successfully:
svchost.exe (788)
HKCU (0x338)
Mean anything?
Also I called the makers, cause of the warrenty, they couldn't help with the software, but they think I might have an issues with the fan, they are going to look into that next week.
Thanks again :)
N3051M
02-17-2006, 06:19 AM
after a bit more reading..
-check your memory (ram) usage?
-try without any ethernet connection active (unplugged)
-try running a registry cleaner?
give this a try.. i realy dont know what will happen but what does happen someone here can figure out.. i guess a log file could help out..
UPHClean readme.txt:
By default UPHClean takes action to allow profiles to unload. You can
choose to have UPHClean only report what processes it finds preventing profiles
from unloading. To do this, install UPHClean and use the registry editor to
set:
HKLM\System\CurrentControlSet\Services\UPHClean\Parameters\REPORT_ONLY to 1.
Bookmark / Share this 
Post a reply, see related topics & more