I can’t turn off my computer by the normal way like I’ve allways done. Start, Turn off computer, Turn off. Nothing happens. I have to shut it off by the switch in back of the CPU. I’ve been told by a tech support that built the computer that I probably have a virus and to bring it in, ($60.00 an hour). I ran avast through and it came up no virus found. I also ran Spybot and Malware, no virus. The problem started after I downloaded a trial version of a Registery cleaner but then removed it right away. I’m using XP and have no trouble starting it up or running all the programs. Can there still be a virus that avast doesn’t detect? Thanks
bexar656:
The registry cleaner you downloaded,was it a full function trial,
or just one of those that say:
“We have found 1000 bad registry entries,that we will
fix when you buy the software”?.
What I am getting at it is possible if you used a full trial,and allowed it to remove
what it found,it is possible it was over zealous,and removed an important key(s).
There can always be a malware Avast! or any other software does not detect,
but both Avast! and Malwarebytes missing it is getting the highly unlikely range.
Have you tried using System Restore? Try restoring it to a time before you installed the reg cleaner.
The registry cleaner you downloaded,was it a full function trial,
or just one of those that say:
“We have found 1000 bad registry entries,that we will
fix when you buy the software”?.[/color]
No it didn’t say anything like that it was just a download and try for 30 days. I didn’t go any further after download once I saw the price. I uninstalled it by the program and then it was also gone from Add/Remove. Also I tried system restore and it made no change. Well at least it’s a shutoff problem and not a turn on one. Thanks
Someone will come along with a better idea.
The problem is very many hard shutdowns can bork a
Windows install pretty fast.
Taking the case that you dont have a virus – check Microsoft Event viewer for clues
Start → Run → type - “eventvwr.msc” (without quotations) → press
I think best check these categories
- Application
- System
Look for errors and warnings
If you see anything that may indicate where is the problem / may identify the problem
Note down event IDs and search with google
Reply post here
Try these tips:
http://www.windowsnetworking.com/articles_tutorials/Troubleshooting-Windows-Shutdown.html
http://www.microsoft.com/downloads/details.aspx?FamilyID=1b286e6d-8912-4e18-b570-42470e2f3582&displaylang=en&Hash=DP6HHR9
http://www.zdnetasia.com/insight/software/0,39044822,39086135,00.htm
UPDATE: MKIS: I went to eventvwr.msc and it came up with a ton of error listings. One I found was “Hanging application, RegMech.exe.” This might refer to the Registery cleaner I mentioned before. I clicked it to open and it said is it OK to send it to the internet. Not knowing what that ment I said OK and that was that. Also in system it came up with another ton of Warnings. It would have taken me all day to get through all of the errors and warnings so I just stopped there.
YOKenny: The sites listed many questions on shutdown but they all refered to the system rebooting at shutdown. But I finally found a question with the exact shutdown problem I’m having where nothing happens at shutdown. I signed up with the site thinking it then would give me an answer to this persons problem but I can find no way to get to an answer. Reply only brings up a blank box for someone to reply. In the dark on how to find an answer.
Well thanks to all and I’ll keep looking.
Ref:“Hanging application, RegMech.exe.”
Was the Registry cleaner you downloaded PC Tools Registry mechanic?
And was the event error time stamped after you uninsulated the program?
Maybe you can do a windows explorer search for “registry Mechanic” and delete what you find.
you might also check for “PC Tools” and delete them as well.
(providing of course you do not have any PC Tools software you want to keep!!)
Another option would be reinstall registry cleaner,download Revo uninstaller,
and use Revo to uninstall the registry cleaner.
If you are knowledgeable in such things you can also do a regedit search for
“registry Mechanic” and “PC Tools” keys.
Important to know this –
Was the Registry cleaner you downloaded PC Tools Registry mechanic? And was the event error time stamped after you uninsulated the program?
What are the time frames?
Does it show you are still having problems with reg cleaner you uninstalled?
[i]Was the Registry cleaner you downloaded PC Tools Registry mechanic?
And was the event error time stamped after you uninsulated the program?
Maybe you can do a windows explorer search for “registry Mechanic” and delete what you find.
you might also check for “PC Tools” and delete them as well.
(providing of course you do not have any PC Tools software you want to keep!!)[/i]
First two questions answer No. It was just listed as Registry Cleaner from Hippo.
Second sentences. Did a search and came up with nothing. I believe it’s uninstalled and not even sure if it was the prolem.
Nothing shows registry cleaner anywhere or if it is causing the problem. I think it’s all something else.
Bexar we need to know whether among your error warnings in Event viewer, there are entries that occurred after your problem began / are still occuring now. In the detail of the error, there will be the times that these error warnings occurred. You need to supply this information. (Bear in mind, no disrespect intended).
obviously, then we will have some idea of whether or perhaps to what extent Regtech.exe is still possible causing your problem. You may not have completely uninstalled yr reg cleaner or may have inadvertently actioned some other reg outcome. And if you can still otherwise use yr PC then take some time looking around the issue without actual taking any actions. You are our key resource in helping to solve problem.
Also.
You may have infection. You may have intrusion by rouge. And other malware type possibilities. We can get to that as well.
Also.
YoKenny’s reply provides very good start points. Dont disregard these avenues just yet.
Edit - see if you can shut down using Task Manager. See if that helps.
Combo fix is a great malware remover. I highly recommend it.
Download from the bleeping computer forum , and run it. Rarely have I seen combo fix not remove malware.
Bexar we need to know whether among your error warnings in Event viewer, there are entries that occurred after your problem began / are still occuring now. In the detail of the error, there will be the times that these error warnings occurred. You need to supply this information
I hope this is what you want: I installed and uninstalled Registery Cleaner on 10/6 after that I get the following from event viewer.
Error 10/6 Application hang
Error 10/8 Service control Mgr. (three of these all on the 8th)
Warning 10/8 User 32 about a dozen of these
Warning 10/8 User32 time
Warning 10/7 User 32
Also I tried Combo Fix and it said do not use this unless you have been advised to do so by a profesional. I tried it and my Porno blocker kept blocking it. I guess I can get around it by accepting it.
Hope this all helps.
Hi bexar656!
ref:Error 10/6 Application hang
Error 10/8 Service control Mgr. (three of these all on the 8th)
If you go back to the event viewer and click on the first one,“Error 10/6 Application hang” does the pop-up box say anything about what “The Faulting Application” is?
on this expanded pop-up box,you can click the button below the two arrow buttons
in the top right corner,and it it will copy the error message.
You can then paste it to note pad,and copy paste it here.
We will get there in the end!! Sounds like we are getting closer!
(Combo-Fix is pretty hardcore.I really do not THANK your problem is malware related at this point,and if not Combo-fix would do no good.and the risk is not justified. Wiser heads may thank differently.)
Is this the Registry cleaner?
Eusing Free Registry Cleaner 2.5.1
http://www.eusing.com/free_registry_cleaner/registry_cleaner.htm
When you ran it, did it ask if you wanted to back up the registry of set a restore point?
If so, can you find where the back up or restore point is?
Below are copies of registry back up / restore points that are set on my computer when I run ccleaner.
If you go back to the event viewer and click on the first one,“Error 10/6 Application hang” does the pop-up box say anything about what “The Faulting Application” is?
It says: Hanging application is Paint Shop Pro X exc. (which is a photo program I use).
on this expanded pop-up box,you can click the button below the two arrow buttons
in the top right corner,and it it will copy the error message.
You can then paste it to note pad,and copy paste it here.
Clicking the bottom button nothing happens.
For mkis. No to all
OK,Dang-it,I was expecting to see remnants of the registry cleaner showing up in the event error message.
That does not seem to be the case.
You said you have scanned with Avast!,Spybot and “Malware”.
You do mean Malwarebytes,right?
If so,and this Paint Shop Pro X is a program you have used for awhile before the not shutting down problem began,I am pretty much empty.
Lets wait for Mkis on this.
Oh,by the way, I was not very clear when I told you how to save
a copy of the event return.
When you hit the button below the two arrows,the text is copied to your clipboard.
You will not see anything happen.
If you then open notepad,and right click/choose paste,it will copy the text on the note pad.
In a ‘ton of error listings’, were RegMech.exe and Paintshop Pro X just two amongst a whole heap of other name applications that were hanging or whatever else, or were there lots of same name entries but different times and days (whenever you tried to shut down).
What about in Safe Mode?
mkis, their all the same with different times. norm, yes it is malewarebytes. Here is something new I just found out. If I go to Start, Turn off computer then Standby it stops and screen goes black. I then hit space bar and it comes back with a different screen with Turn off computer at bottem left. I click that and it says shutting down. Befor it does it says “other people are using this computer and this can cause a loss of their data. Do you want to continue.” I click yes and it shuts down compleetly. I am not sharing this computer with anyone else. No network.