Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hp Compaq Dx2300 Hangs On Shut Down (xp Pro)


  • Please log in to reply
2 replies to this topic

#1 pamspam

pamspam

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 20 April 2007 - 10:48 AM

Just bought from Newegg a HP Compaq dx2300 to replace my Dad's aging P1 64ram Win. 98 Dell.

HP loads up Ms office intro - which I uninstalled, and I uninstall 2 other commercial products that appeared. (symantec and one other)
Installed AVG Antivirus, Spybot, Adobe 8, and Open Office.
Moved over modem card from old computer, he still uses dial-up.

Got to his place, set-up ISP, let it dial out and HP asked for registration (did that), AVG asked for updates (let it run), MS asked for updates. MS updates number in the 75 and on dial-up asked for 9.4 hrs. So I shutdown system to go home and load it on my thumbdrive to install it later. System hangs on shutdown.

Loaded up all MS updates and installed. Rebooted, tried shutdown - system hangs.
Device mgr. is showing no exclamation marks, Looked at USB nothing, ran Dr. Watson (for what its worth - nothing) Safe Mode - computer shuts down perfect.
I assume this is a start up program...?
I turned off Adobe, AVG, ctfron.exe (something to do with MS office..?) one at a time, through msconfig...nothing.

Hijackthis Log Analyer (iamontageek) showed red for scheduler.exe, ctfon.exe, xpnetdiag.exe (2 lines), and WPDShServiceObj.dl.
Rec. to remove: lgfxtray.exe, hkcmd.exe, igfxpars.exe, msmgs.exe, and Remind_xp.exe.
I have disabled in Services: Alerter, Clipbook, Computer browser, Error reporting svc., indexing svc., net logon, remote desktop, NLA, Provisoning Svc., remote desktop help, 2nd logon, remote registry, server, smart card, SSPD discovery, TCP/NEtbios helper, UPnP Host, uninter. ps, web client, wireless confi, WMI perf. - in case I turned off something that is needed...

Hijack Log:
Logfile of HijackThis v1.99.1
Scan saved at 9:59:54 AM, on 4/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\PDF Complete\pdfsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\PDF Complete\pdfsty.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\OpenOffice.org 2.1\program\soffice.exe
C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\USSCON~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe"
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O17 - HKLM\System\CCS\Services\Tcpip\..\{86375F4B-7A20-4DF8-9881-990BD3844796}: NameServer = 69.72.0.7 209.163.108.78
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe

Appreciate any input on the Hijack log or rec. to diagnose in msconfi./ Spybot start-up log. I turned off some, but didn't want to screw around with such a new computer...

Edited by pamspam, 20 April 2007 - 10:57 AM.


BC AdBot (Login to Remove)

 


#2 pamspam

pamspam
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 21 April 2007 - 01:08 PM

One thing my Dad found out the other day was if he logs out, the computer will shut down....There is only 2 signins- him and the adminstrator...Does this "ring a bell" of why it would shut down when he logs out vs just turning off...?

#3 Papakid

Papakid

    Guru at being a Newbie


  • Malware Response Team
  • 6,581 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:33 PM

Posted 28 April 2007 - 01:03 PM

Hi pamspam,

Sorry for the long delay--these forums are really busy helping to remove malware.

I don't see any signs of malware in your log and it really sounds like a hardware or operating system problem. You would probably be better served to post a question like this in the Hardware or XP forums:

http://www.bleepingcomputer.com/forums/ind...&s=&f=7
http://www.bleepingcomputer.com/forums/ind...amp;s=&f=56

Please link to this thread for some technical info that might be helpful.

Since the computer is so new, I think, if it were me, that I would contact HP/Compac support as it may be a configuration issue. Just as a wild guess I would say there may be a problem with the modem you pulled out of the old 98 system being compatible with the new motherboard and/or newer technology.

Dr. Watson is the Windows debugging program and you have a memory dump showing in your log. Whoever helps you in the other forum should be able to get more information on the error from the Dr. Wtason log or error info in Event Viewer.

The fate of all mankind, I see

Is in the hands of fools

--King Crimson





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users