Windows Legacy OS forum

General discussion

Windows XP shutdown hang/freeze up?

by aceofspades24 / July 9, 2008 8:04 AM PDT

well, this problem started a little while ago, Ive got a 2.93ghz P4, and 1GB memory, so i know my computer is (plenty) fast enough.

when i click on the button in the start menu "Turn Off Computer", my PC shows the hourglass, and i cant click on anything, this will go on for about a minute or 2, once it took 5 minutes. then the small box with shutdown options comes up finally, and then after the light blue screen gets to "Shutting Down...". it takes maybe a bit longer than expected but im not to sure about that.

any help?

Discussion is locked
You are posting a reply to: Windows XP shutdown hang/freeze up?
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Windows XP shutdown hang/freeze up?
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Re: Windows XP shutdown hang/freeze up?
by aceofspades24 / July 9, 2008 8:08 AM PDT

oh and also! shutdown is flawless within like 2 minutes of startup. no hang up.

Collapse -
Re: Windows XP shutdown hang/freeze up?
by aceofspades24 / July 11, 2008 4:55 AM PDT

no help?

Collapse -
Consider some inspection?
by R. Proffitt Forum moderator / July 11, 2008 5:38 AM PDT

If this was my machine I would look at the results of HIJACKTHIS (see google) and then understand each item found there. As it stands you have asked "Why?" Sorry but this is just the beginning so we'll have to start at the beginning. Feel free to ask about items you can't identify yourself.

Collapse -
Re: Windows XP shutdown hang/freeze up?
by waltere20 / July 11, 2008 6:03 AM PDT

I have had the same problem before. Press CTRL-DEL-Delete keys at the same time and continue holding until your computer shuts down by itself. When you open the system, Windows will be fine since it was closed the normal way (as opposed to unplugging the power chord or manually turning off the power button from your computer).

Collapse -
Possible Some Programs or Functions.....
by tobeach / July 11, 2008 5:39 PM PDT

are not shutting right away? I saw a case & the problem was he'd scheduled AV scan to run at shut down & of course it took nearly an hour. Other possibles might be windows update done last thing, Adobe programs wanting to call home or waiting for background download to finish. Bob's suggestion of HJT would likely show something. Happy

Collapse -
by aceofspades24 / July 17, 2008 10:47 AM PDT

well, to start off my avira guard found a "TR/Delf.AXRH Trojan" when i logged on, so ill have to restart and see if that quarantine helped.

and bob thanks for the response, i was going to eventually resort to a full system restore, and start from scratch... but Ive got 50GB of music, and 25GB of photos...

ill download the HJT if the quarantine didn't help.

Collapse -
If you are thinking of re-formatting.
by Maddogmcree / July 17, 2008 7:22 PM PDT
In reply to: Thanks

Then copy all of your music and photos onto disc.

Otherwise try and immigrate them to another drive.



Collapse -
Log File
by aceofspades24 / July 18, 2008 4:33 AM PDT

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:25:54 AM, on 7/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\eMachines Bay Reader\shwiconem.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5D5D16B7-7920-4D60-815D-44C4EF377DEF} - \
O2 - BHO: &Google Web Accelerator Helper - {69A87B7D-DE56-4136-9655-716BA50C19C7} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: (no name) - {BCC73622-F72D-4277-803C-D65565A0947F} - (no file)
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Google Web Accelerator - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - C:\Program Files\Google\Web Accelerator\GoogleWebAccToolbar.dll
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunKistEM] "C:\Program Files\eMachines Bay Reader\shwiconem.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] "C:\PROGRA~1\SYMNET~1\SNDMon.exe" /Consumer
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [PCTAVApp] "C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCAN
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\system32\mstask.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) -
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) -
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} -
O23 - Service: Avira AntiVir Personal ? Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal ? Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

End of file - 9702 bytes

i sifted out some obvious programs, but i left others that i know but have multiple processes that i cant distinguish form each other.

Collapse -
Death by overkill.
by R. Proffitt Forum moderator / July 18, 2008 4:52 AM PDT
In reply to: Log File

I see more than 1 Antivirus. I also see the (no file) BHO entries.

1. Pick one antivirus.
2. Remove all the BHO (no file) entries.

Collapse -
by aceofspades24 / July 18, 2008 4:57 AM PDT
In reply to: Death by overkill.

an odd one i found, im not sure if its in the last file:

O2 - BHO: (no name) - {5D5D16B7-7920-4D60-815D-44C4EF377DEF} - \

bad? should i fix it?

o and, in the trial in trying to find this virus, this is what has happened... sorry.

which is the better one?

SPySweeper wiht AV
Avira Free
AVG Free
Threat Fire
PC tools AV
or Spybot S & D?

Collapse -
The no name lines are things I remove.
by R. Proffitt Forum moderator / July 18, 2008 5:02 AM PDT
In reply to: Yeah...

You can research such but I just delete.

"Avira Free
AVG Free

You didn't give the criteria so for today I'll go with Avast. Tomorrow I may change my mind.

As to the antispyware I do not have ANY currently installed but then again I don't use Internet Explorer, don't perform high wire acts and scan weekly with things like MALWAREBYTES. Since my machine never finds such issues I just have the usual antivirus (1) and firewall (1).

Collapse -
in addition.
by aceofspades24 / July 18, 2008 5:03 AM PDT
In reply to: Yeah...

yeah i streamline my pc, so after this virus hit it, and i got all these AV's and AS's, my memory usage went from 273mb average, to 520mb average. its at 551mb right now...

Collapse -
by aceofspades24 / July 19, 2008 2:39 AM PDT
In reply to: in addition.

didn't work, any other ways i can find out whats wrong?

Collapse -
Same problem. Identified svchost.exe as culprit. Not fixed.
by ElmerHomeroP / January 28, 2009 1:39 PM PST
In reply to: nope.

I tried to put ALL the message in the subject (and nearly succeeded, too).
I have the same problem.
Only I have a little more data:
- This seems to happen only when I access hotmail (and yet, not EVERY time I access hotmail).
- It also seems to happen only when a "svchost.exe NETWORK SERVICE" is among the active processes.

I have not fixed it yet (and would love to get help to do this).
But I have succeeded in designing a method that allows me to avoid this annoying hang-up.

At the start of a hang-up, open Task Manager (ctrl alt del, etc.) and locate (and END) any svchost.exe processes that are running on user NETWORK SERVICE. This will bring up a window that warns the user of an imminent (60 second delayed) shutdown. I do not know whether this happens, because I do not want to wait for a minute. Instead, I run in a cmd window the "shutdown -a" command. This command ABORTS the shutdown. After doing this, the shutdown will not freeze.
Hope I am helping someone here. If this is of any help to you I only ask in return that you write here that this helped you. (Gad! I am stuck with this "help" word!)
I also noticed that the CPU usage does not increase with this, which makes me doubt that it is a virus or a trojan.

Collapse -
Are you sure it's the same problem?
by R. Proffitt Forum moderator / January 29, 2009 6:05 AM PST

Above I found more than one antivirus and a glut of BHO entries.

Did you take care of those?

Collapse -
Re: Same problem svchost culprit
by ElmerHomeroP / January 30, 2009 1:16 AM PST

Well, to be precise, I should have said "same symptom".
I did not have the opportunity to run the HJT on the computer for reasons too long to put here. Will do and post the results.
Thanks. Any help welcome here.

Collapse -
Be sure to take advantage of the freebies.
by R. Proffitt Forum moderator / January 30, 2009 1:27 AM PST
Popular Forums
Computer Help 51,912 discussions
Computer Newbies 10,498 discussions
Laptops 20,411 discussions
Security 30,882 discussions
TVs & Home Theaters 21,253 discussions
Windows 10 1,672 discussions
Phones 16,494 discussions
Windows 7 7,855 discussions
Networking & Wireless 15,504 discussions


The most beautiful phone ever has one wildly annoying issue

The Samsung Galaxy S8's fast speeds and fantastic curved screen make it a top phone for 2017, but the annoying fingerprint reader could sour your experience.