Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Take a picture of the shutdown screen of a Windows 7 64bit computer


  • Please log in to reply
5 replies to this topic

#1 Testing12

Testing12

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:38 AM

Posted 19 June 2015 - 10:08 AM

When I shut down my Windows 7 64bit computer, I get a series of 2 black screens with white or yellow writing telling me that a program or process is being made to shut down. However, it happens so fast that I cannot read all the info. I’d really like to see what’s being automatically shut down.

 

Is there a way to take a picture of each of these screens, or stop the shutdown process at the presentation of each of these screens?

 

Thanks for any assistance.



BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,393 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:38 PM

Posted 19 June 2015 - 10:15 AM

FWIW:  Windows will automatically close/shut down any program which is running at time of shutdown.  This is perfectly normal and not an item to be concerned with, IMO.

 

But...if you want to explore what programs might be running...I suggest that you take a look at the Application errors reflected by Event Viewer.  The item, if there, would probably be listed as a "hanging application" and the Event Viewer item will reflect the time of the error.

 

Louis



#3 Testing12

Testing12
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:38 AM

Posted 19 June 2015 - 09:11 PM

Not at all familiar with Event Viewer, however I'll have a looksee.

Thanks for the reply.



#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,393 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:12:38 PM

Posted 20 June 2015 - 07:51 AM

Event Viewer

 

Event Viewer Basics

 

Louis



#5 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:38 AM

Posted 20 June 2015 - 09:39 AM

Does this message ask you if you want to force the shutdown of a program?

 

If this is the case there is not error and should have one listed in the event viewer.  But let's check it to be sure.

 

Please download MiniToolBox, save it to your desktop and run it.
 
Checkmark only the following checkbox:
 
• List last 10 Event Viewer log
 
Click on Go to start the scan.  Once it is finished highlight the text, copy it and paste it in your next post.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#6 Testing12

Testing12
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:38 AM

Posted 20 June 2015 - 03:40 PM

Hi Arachibutyrophobia,

Thanks for steeping in.

Here's the copy of the last 10 Event Viewer log:

 

 

 

 

 

MiniToolBox by Farbar  Version: 11-05-2015 01
Ran by Owner (administrator) on 20-06-2015 at 13:37:24
Running from "C:\Users\Owner\Desktop"
Microsoft Windows 7 Ultimate  Service Pack 1 (X64)
Model: DZ68DB__ Manufacturer: INTEL_
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (06/16/2015 01:18:52 AM) (Source: Microsoft-Windows-RestartManager) (User: Owner-PC)
Description: Application or service 'Windows Explorer' could not be shut down.

 

Error: (06/16/2015 01:18:52 AM) (Source: Microsoft-Windows-RestartManager) (User: Owner-PC)
Description: Application or service 'Windows Explorer' could not be shut down.

 

Error: (06/07/2015 03:52:56 AM) (Source: Application Error) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17801, time stamp: 0x5536642c
Faulting module name: MSHTML.dll, version: 11.0.9600.17801, time stamp: 0x5536793e
Exception code: 0xc0000005
Fault offset: 0x000a8b41
Faulting process id: 0x159c
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3

 

Error: (06/07/2015 03:52:40 AM) (Source: Application Error) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17801, time stamp: 0x5536642c
Faulting module name: MSHTML.dll, version: 11.0.9600.17801, time stamp: 0x5536793e
Exception code: 0xc0000005
Fault offset: 0x000a8b41
Faulting process id: 0x13f4
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3

 

Error: (06/07/2015 03:52:27 AM) (Source: Application Error) (User: )
Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17801, time stamp: 0x5536642c
Faulting module name: MSHTML.dll, version: 11.0.9600.17801, time stamp: 0x5536793e
Exception code: 0xc0000005
Fault offset: 0x000a8b41
Faulting process id: 0x1314
Faulting application start time: 0xIEXPLORE.EXE0
Faulting application path: IEXPLORE.EXE1
Faulting module path: IEXPLORE.EXE2
Report Id: IEXPLORE.EXE3

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service) (User: )
Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.

Details:
 The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service) (User: )
Description: The index cannot be initialized.

Details:
 The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service) (User: )
Description: The application cannot be initialized.

Context: Windows Application

Details:
 The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service) (User: )
Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
 The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service) (User: )
Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:
 Element not found.  (HRESULT : 0x80070490) (0x80070490)

 

System errors:
=============
Error: (06/20/2015 01:35:08 PM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.

 

Error: (06/20/2015 01:29:52 PM) (Source: Service Control Manager) (User: )
Description: The ScRegSetValueExW call failed for Start with the following error:
%%5

 

Error: (06/20/2015 01:29:52 PM) (Source: Microsoft Antimalware) (User: )
Description: %%860 Real-Time Protection feature has encountered an error and failed.

 Feature: %%886

 Error Code: 0x80070005

 Error description: Access is denied.

 Reason: %%892

 

Error: (06/20/2015 01:29:50 PM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.

 

Error: (06/20/2015 10:33:33 AM) (Source: Service Control Manager) (User: )
Description: The ScRegSetValueExW call failed for FailureCommand with the following error:
%%5

 

Error: (06/20/2015 10:33:31 AM) (Source: Service Control Manager) (User: )
Description: The ScRegSetValueExW call failed for Start with the following error:
%%5

 

Error: (06/20/2015 10:23:33 AM) (Source: Service Control Manager) (User: )
Description: The ScRegSetValueExW call failed for Start with the following error:
%%5

 

Error: (06/20/2015 10:23:33 AM) (Source: Microsoft Antimalware) (User: )
Description: %%860 Real-Time Protection feature has encountered an error and failed.

 Feature: %%886

 Error Code: 0x80070005

 Error description: Access is denied.

 Reason: %%892

 

Error: (06/20/2015 10:23:32 AM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.

 

Error: (06/19/2015 09:09:41 AM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.

 

Microsoft Office Sessions:
=========================
Error: (06/16/2015 01:18:52 AM) (Source: Microsoft-Windows-RestartManager)(User: Owner-PC)
Description: 1C:\Windows\explorer.exeWindows Explorer041174964143003A005C00570069006E0064006F00770073005C006500780070006C006F007200650072002E006500780065000000

 

Error: (06/16/2015 01:18:52 AM) (Source: Microsoft-Windows-RestartManager)(User: Owner-PC)
Description: 1C:\Windows\explorer.exeWindows Explorer041172504143003A005C00570069006E0064006F00770073005C006500780070006C006F007200650072002E006500780065000000

 

Error: (06/07/2015 03:52:56 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.178015536642cMSHTML.dll11.0.9600.178015536793ec0000005000a8b41159c01d0a1101891ddd1C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\system32\MSHTML.dll5a576cb9-0d03-11e5-a9c1-386077a38c1e

 

Error: (06/07/2015 03:52:40 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.178015536642cMSHTML.dll11.0.9600.178015536793ec0000005000a8b4113f401d0a1100d7f6157C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\system32\MSHTML.dll508129d7-0d03-11e5-a9c1-386077a38c1e

 

Error: (06/07/2015 03:52:27 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.178015536642cMSHTML.dll11.0.9600.178015536793ec0000005000a8b41131401d0a10ffe8d3bfeC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\system32\MSHTML.dll48b5ec69-0d03-11e5-a9c1-386077a38c1e

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service)(User: )
Description:
Details:
 The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service)(User: )
Description:
Details:
 The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application

Details:
 The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
 The content index catalog is corrupt.  (HRESULT : 0xc0041801) (0xc0041801)

 

Error: (06/05/2015 03:09:52 PM) (Source: Windows Search Service)(User: )
Description: Context: Windows Application, SystemIndex Catalog

Details:
 Element not found.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

 

CodeIntegrity Errors:
===================================
  Date: 2015-04-04 08:15:45.020
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

  Date: 2015-04-04 08:15:44.895
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

**** End of log ****


Edited by hamluis, 20 June 2015 - 04:31 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users