1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

[SOLVED] Computer Won't Shut Off (win 98se)

Discussion in 'Earlier Versions of Windows' started by RBG, Mar 22, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. RBG

    RBG Thread Starter

    Joined:
    Mar 22, 2003
    Messages:
    120
    I'M RUNNING WINDOWS 98 SE AND I CAN'T GET MY COMPUTER TO SHUT DOWN. IT JUST KEEPS REBOOTING? I KNOW THE CLOSING SOUND FILE IS GOOD. WHAT ELSE COULD IT BE?

    RBG
     
  2. Byteman

    Byteman Moderator Malware Specialist

    Joined:
    Jan 24, 2002
    Messages:
    17,727
    Hi, Win98se had a bug that bothers users sometimes, what exactly causes it and how to manually find and fix it I couldn't say- though I know of several possible causes, such as RAM problem, file corruption, power management settings messed up....the easiest way may be to try the Patch from Microsoft specifically for this problem, at least it might allow you to shut down the pc. If it does not work, then there are several other things we can have you try.
    You want the win98se Shutdown patch:

    http://www.microsoft.com/windows98/downloads/contents/WURecommended/S_WUFeatured/Win98SE/Default.asp
    post back if you need more help, or the patch seems to have helped, OK?
     
  3. RBG

    RBG Thread Starter

    Joined:
    Mar 22, 2003
    Messages:
    120
    HI! I TRIED THE WINDOWS SHUTDOWN PATCH AND NOW INSTEAD
    OF REBOOTING IT JUST LOCKS UP AT THE SHUTDOWN WINDOW. IS THERE ANYTHING ELSE I MIGHT TRY?

    RBG
     
  4. Byteman

    Byteman Moderator Malware Specialist

    Joined:
    Jan 24, 2002
    Messages:
    17,727
    When did this problem first occur- if within the last few days, you may be able to restore a good registry.
    To do this:
    If the pc will restart by pressing CTRL+ALT+DEL, when it first starts up, press and hold the CTRL key...till you see a menu, select "Command Prompt"
    A:\>C:
    and hit enter key
    C:\>scanreg /restore
    and hit enter key
    select started Registry the day of the "problem" or before.
    NOTE: You may lose things you created or changed in the time since the Registry restore date you try, and now.

    If that does not work-

    How are you connected to the Internet, if you are using the pc with the problem now, by cable modem or dialup?
    Is the PC part of a network, wireless or with a cable?
    Do you use any file sharing programs?
     
  5. Deke40

    Deke40

    Joined:
    Jun 27, 2002
    Messages:
    5,554
    Look here:

    http://www.aumha.org/a/shutdown.htm


    In the meantime use this to shutdown:

    Shutting Down with an Icon
    How to shutdown your computer from a desktop icon. Note: This procedure does not work with Windows NT or 95.

    Step 1. Right-click on your desktop for context window and select New; then click on Shortcut.

    Step 2. Type the following line in the Command line space:
    To Shut Down:
    C:\WINDOWS\RUNDLL32.EXE shell32,SHExitWindowsEx 1

    To Log Off:
    C:\WINDOWS\RUNDLL32.EXE shell32,SHExitWindowsEx 0

    To Restart:
    C:\WINDOWS\RUNDLL32.EXE shell32,SHExitWindowsEx 2
    Note: two spaces in the command lines: The first between EXE and shell32, and the second between Ex and the numeral.

    Step 3. Click on Next and type Shutdown, in place of Rundll.

    Step 4. Click on Finish and an Icon will appear on the desktop labeled Shutdown.

    Step 5. Double click on this Icon to shutdown your computer.
    =======================================================================
    If you just want to restart Windows use this:

    For the Windows "Restart!" (warm reboot) shortcut (all Windows 95/98 releases):
    C:\WINDOWS\RUNDLL.EXE C:\WINDOWS\SYSTEM\USER.EXE,ExitWindowsExec
    Note that you canNOT use RUNDLL32.EXE for this last command with Win98/98 SE because the GUI does NOT support this 32-bit DLL API redirect from the command line, and after all USER.EXE is a "plain" 16-bit executable. :(


    For the Windows complete (cold) "Reboot!" shortcut (Windows 98/98 SE only):
    C:\WINDOWS\RUNDLL32.EXE C:\WINDOWS\SYSTEM\SHELL32.DLL,SHExitWindowsEx 2
     
  6. RBG

    RBG Thread Starter

    Joined:
    Mar 22, 2003
    Messages:
    120
    HI AGAIN!
    THE PROBLEM STARTED MANY WEEKS AGO (MAYBE MONTHS, I'M NOT SURE NOW). I HAVE RESTORED A GOOD REGISTRY, AND THAT DIDEN'T WORK. I'M USING A DIAL UP DSL SERVICE (AOL).
    I DO HAVE A FILE SHARING PROGRAM INSTALLED (JUST RECENTLY)(KAZAA), BUT THE SHUTDOWN PROBLEM STARTED LONG BEFORE I
    EVER BEGAN USING THAT PROGRAM.? I ALSO HAVE A PROGRAM THAT HAS AN UPDATE THATS BEEN GIVING ME A PROBLEM. WHEN I INSTALL THE UPDATE, THE PROGRAM RUNS JUST FINE BUT WHEN I CLOSE THE UPDATED PROGRAM AND THEN REOPEN THE PROGRAM A FEW MINUTES LATER, IT TELLS ME THE UPDATE WAS NOT INSTALLED PROPERLY, PLEASE REINSTALL THE UPDATE (EVEN AFTER I'VE REBOOTED). COULD THESE PROBLEMS BE RELATED?

    RBG
     
  7. Byteman

    Byteman Moderator Malware Specialist

    Joined:
    Jan 24, 2002
    Messages:
    17,727
    hi, I posted that if the problem was more than a few days old, the registry restore would not fix anything....but, no problem, you may have meant that you tried the above some time ago....
    The updating program could be a suspect...let's have you post the Startup List that this download will generate into a reply, just like you were posting back....
    What you want is Startup List 1.52, just download to the desktop, and follow the prompts....have it do a scan, the logfile it produces you want to attach as a test file to a reply, OR copy and paste the entire contents to a reply. It may take awhile for some of the experts to get back with their input...I will try in the meantime. Usually, the "suspects" are obvious, but with your problem, there may be regular programs like the update thing, that are producing the problem, so it might take awhile to get it sorted out, just be patient, no need to rush with this.
    http://www.lurkhere.com/~nicefiles/index.html

    Bookmark the above site, you may need to come back for SpyBot Search and Destroy if you have some junkware....
    If you use Kazaa Lite, or the later versions of Kazaa that are better, SpyBot should leave it alone...you can exclude items from removal, anyway....if you don't understand anything about the junkware, spyware stuff, go here and read about it:

    http://forums.techguy.org/t110854/s.html
     
  8. RBG

    RBG Thread Starter

    Joined:
    Mar 22, 2003
    Messages:
    120
    OK...HERES THE TEST FILE RESULTS!!

    StartupList report, 3/22/03, 7:45:27 PM
    StartupList version: 1.52
    Started from : C:\WINDOWS\TEMP\STARTUPLIST.EXE
    Detected: Windows 98 SE (Win9x 4.10.2222A)
    Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    * Using default options
    ==================================================

    Running processes:

    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\PROGRAM FILES\WILD FILE\GOBACK\GBPOLL.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\ptsnoop.exe
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
    C:\WINDOWS\BBSTORE\DSS\DSSAGENT.EXE
    C:\AFTER DARK\AFTER DARK.EXE
    C:\PROGRAM FILES\IVASION\WINPOET\WINPPPOVERETHERNET.EXE
    C:\PROGRAM FILES\COMMON FILES\CMEII\CMESYS.EXE
    C:\CWIN\SYSTEM\QTTASK.EXE
    C:\WINDOWS\TPPALDR.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\PROGRAM FILES\STOPZILLA!\STOPZILLA.EXE
    C:\WINDOWS\SYSTEM\WINKOB.EXE
    C:\WINDOWS\RunDLL.exe
    C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BACKWEB-8876480.EXE
    C:\PROGRAM FILES\DESKTOP SHANIA\SKINKERS.EXE
    C:\PROGRAM FILES\WILD FILE\GOBACK\GBMENU.EXE
    C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE
    C:\PROGRAM FILES\NORTON UTILITIES\SYSDOC32.EXE
    C:\PROGRAM FILES\COMMON FILES\GMT\GMT.EXE
    C:\PROGRAM FILES\MP3.COM\MP3.COM UPLOADER\MP3UPLOADER.EXE
    C:\PROGRAM FILES\PRECISIONTIME\PRECISIONTIME.EXE
    C:\PROGRAM FILES\WESTELL\DGN ICON\DGNICON.EXE
    C:\PROGRAM FILES\MP3.COM\MP3.COM UPLOADER\MP3UPLOADERIVV.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\PROGRAM FILES\WESTELL\DGN ICON\DGNICONXZW.EXE
    C:\AOL DSL\WAOL.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPLAYER.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINZIP\WINZIP32.EXE
    C:\WINDOWS\TEMP\STARTUPLIST.EXE

    --------------------------------------------------

    Listing of startup folders:

    Shell folders Startup:
    [C:\WINDOWS\Start Menu\Programs\StartUp]
    Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    GoBack.lnk = C:\Program Files\Wild File\GoBack\GBMenu.exe
    Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    Norton System Doctor.lnk = C:\Program Files\Norton Utilities\SYSDOC32.EXE
    GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
    MP3.com Uploader.lnk = C:\Program Files\MP3.com\MP3.com Uploader\MP3Uploader.exe
    BonziBUDDY.lnk = C:\Program Files\BonziBUDDY\BonziBDY.EXE
    PrecisionTime.lnk = C:\Program Files\PrecisionTime\PrecisionTime.exe
    Westell DGNIcon.lnk = C:\Program Files\Westell\DGN Icon\DGNIcon.exe

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

    CountrySelection = pctptt.exe
    PTSNOOP = ptsnoop.exe
    TaskMonitor = C:\WINDOWS\taskmon.exe
    SystemTray = SysTray.Exe
    LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    EM_EXEC = C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    DSS = C:\WINDOWS\BBSTORE\DSS\DSSAGENT.EXE
    After Dark QuickAccess = "c:\After Dark\After Dark.exe" /taskbar
    WinPoET = C:\Program Files\iVasion\WinPoET\WinPPPoverEthernet.exe
    CMESys = "C:\PROGRAM FILES\COMMON FILES\CMEII\CMESYS.EXE"
    ClickTheButton =
    BonziBUDDY =
    QuickTime Task = C:\CWIN\SYSTEM\QTTASK.EXE
    TPP Auto Loader = C:\WINDOWS\TPPALDR.EXE
    StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
    STOPzilla = C:\PROGRAM FILES\STOPZILLA!\STOPZILLA.EXE /autorun
    Winkob = C:\WINDOWS\SYSTEM\Winkob.exe

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

    LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    GoBack Polling Service = C:\Program Files\Wild File\GoBack\GBPoll.exe

    --------------------------------------------------

    Autorun entries from Registry:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run

    Taskbar Display Controls = RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
    LDM = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    Desktop Weather = C:\PROGRA~1\THEWEA~1\TheWea~1.exe
    Weather = C:\PROGRAM FILES\AWS\WEATHERBUG\WEATHER.EXE 1
    DesktopShaniaCluster = C:\PROGRAM FILES\DESKTOP SHANIA\SKINKERS.EXE
    WeatherCast = C:\Program Files\WeatherCast\Weather.exe /q

    --------------------------------------------------

    Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

    Shell=Explorer.exe
    SCRNSAVE.EXE=
    drivers=mmsystem.dll power.drv ctpnpscn.drv

    --------------------------------------------------

    C:\WINDOWS\WININIT.BAK listing:
    (Created 22/3/2003, 14:15:16)

    [Rename]
    C:\WINDOWS\system.bak=C:\WINDOWS\system.dat
    C:\WINDOWS\user.bak=C:\WINDOWS\user.dat
    C:\WINDOWS\system.dat=C:\WINDOWS\system.pak
    C:\WINDOWS\user.dat=C:\WINDOWS\user.pak

    --------------------------------------------------

    C:\AUTOEXEC.BAT listing:

    PATH=C:\PROGRA~1\NETWOR~1\NUTS&B~1
    SET SOUND=C:\PROGRA~1\CREATIVE\CTSND
    SET MIDI=SYNTH:1 MAP:E MODE:0
    SET BLASTER=A240 I7 D0 H7 P300 T6
    SET CTSYN=C:\WINDOWS
    C:\PROGRA~1\CREATIVE\SBPCI512\DOSDRV\SBEINIT.COM

    --------------------------------------------------


    Enumerating Browser Helper Objects:

    BonziBuddy Web Compass Browser Helper Object - C:\PROGRAM FILES\BONZI.COM WEB COMPASS\WEBCOMPASS.DLL - {A28C2A31-3AB0-4118-922F-F6B3184F5495}
    (no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
    (no name) - C:\WINDOWS\SYSTEM\STOPZILLABHO.DLL - {E3215F20-3212-11D6-9F8B-00D0B743919D}

    --------------------------------------------------

    Enumerating Download Program Files:

    [Shockwave Flash Object]
    InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    [Shockwave ActiveX Control]
    InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab

    [{9DBAFCCF-592F-FFFF-FFFF-00608CEC297C}]
    CODEBASE = http://download.weatherbug.com/minibug/tricklers/AWS/minibuginstaller.cab?rand=200321011

    [QuickTime Object]
    InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
    CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

    [ActiveDataObj Class]
    InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\ACTIVEDATA.DLL
    CODEBASE = https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab

    [{FC327B3F-377B-4CB7-8B61-27CD69816BC3}]
    InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\SNDBMARK.DLL
    CODEBASE = http://spweather.whenu.com/WeatherInstCAST1202.cab

    [Update Class]
    InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
    CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37676.6143055556

    [symsupportutil]
    InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
    CODEBASE = https://www-secure.symantec.com/techsupp/activedata/symsupportutil.CAB
    OSD = C:\WINDOWS\Downloaded Program Files\OSD34.OSD

    --------------------------------------------------

    Enumerating ShellServiceObjectDelayLoad items:

    WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL

    --------------------------------------------------
    End of report, 7,930 bytes
    Report generated in 0.217 seconds

    Command line options:
    /verbose - to add additional info on each section
    /complete - to include empty sections and unsuspicious data
    /full - to include several rarely-important sections
    /force9x - to include Win9x-only startups even if running on WinNT
    /forcent - to include WinNT-only startups even if running on Win9x
    /forceall - to include all Win9x and WinNT startups, regardless of platform
    /history - to list version history only
     
  9. Byteman

    Byteman Moderator Malware Specialist

    Joined:
    Jan 24, 2002
    Messages:
    17,727
    Hi, Bingo- these 3 things are not good.
    Bonzi Buddy
    DSSAgent
    Gator (CMESYS.exe)

    SpyBot should remove them. I messed with Bonzi once, back before we had tools to help with it, I had to reinstall Bonzi as someone had tried to just delete some folders....You MUST click on Bonzi once, and say "Goodbye" to turn off the background monitoring before removal....it does have an "uninstall" feature within the Program list, I believe, or Add/Remove Programs...you can try running it's uninstall, SS&D will clean up after that. Actually, any of these may appear in A/R or have an uninstall...
    The newest version of SpyBot SS&D should handle all these things, ( and there are others) What the status of your Kazaa will be, working or not, don't know, but you say you recently installed it, so it would probably be the junkware-free version, which is fairly OK to use.
    You have a lot that is starting at bootup that can be turned off to help with system resources, too, but after we get cleaned out.
    Weatherbug may be detected by SS&D, it does contain a small amount of tracking things....optional to remove it.
    The others must go.
    Read the TSG post by Rog, it has good directions for using SS&D....I will tell you to update the include files, anything to do with the program itself, the skins updates are not important now....after you download and install SS&D, use the ONLINE button on the main program page to check for updates to the include files, and program files. After these download and install, run SS&D, everything you see checked in RED that has a checkmark, should go. There are some things you can uncheck in SETTINGS, like File Sets and Usage Tracks...these are history, and document, etc personal track records, not actual junkware, so removing them will not help you. After or before you run SS&D, it will be to your benefit to run Disk Cleanup and take care of Temporary Internet Files.
     
  10. Steppinstone

    Steppinstone

    Joined:
    Aug 18, 2002
    Messages:
    2,798
    Not trying to but in , but arent most wink type entries Klez virus cuz this was in the start-up list above WINKOB.EXE .
    I can't direct you in the right direction I just happened to spot this while reading this thread.
    Chari
     
  11. Byteman

    Byteman Moderator Malware Specialist

    Joined:
    Jan 24, 2002
    Messages:
    17,727
    Steppinstone- You bet, that looks like Klez
    That's why we have people post the List.
    Very easy to miss the buggers, thanks for helping.



    RBG- you need to run an updated antivirus program, your own or an online scanner will probably do.

    Here is a place to download a small Klez removal tool:
    http://www.symantec.com/avcenter/tools.list.html
    Use the Klez tool per instructions. Do it first.
    And, here is a site with several different A/V and Trojan scanners you can run online.
    Try the Housecall one, it takes a while to fully load the activeX components, so do not give up, it will eventually let you scan. It seems to hang up at 95% for the updating part, but will finish, when you see the SCAN button darken, it will let you scan...do the entire hard drive.
    AND: after you get a clean scan....is this the Sknkers you have on there? http://www.skinkers.com/faq.html
    This is a new one on me....I don't know if SS&D detects it, either. There are some directions for uninstalling it. It just cannot be good to use these little "gems"...they do more than you realize, even though they seem to be a lot of fun.

    http://www.antivirus-online.de/english/online.php
     
  12. RBG

    RBG Thread Starter

    Joined:
    Mar 22, 2003
    Messages:
    120
    SUCCESS!!

    AFTER RUNNING THE SPYBOT AND NORTON SCAN DISC PROGRAMS AND
    THE FIXKLEZ PROGRAM, EVERYTHING IS BACK TO NORMAL. MY COMPUTER IS NOW SHUTTING DOWN AND MY UPDATED PROGRAM IS LOADING UP PROPERLY EVERY TIME.

    MANY MANY THANKS TO YOU GUYS!!

    RBG
     
  13. RBG

    RBG Thread Starter

    Joined:
    Mar 22, 2003
    Messages:
    120
    I FORGOT,

    I ALSO USED THE "HOUSECALL" VIRUS SCANNER AND IT REPORTED IT FIXED MANY PROBLEMS.

    THANKS AGAIN!! RBG
     
  14. Byteman

    Byteman Moderator Malware Specialist

    Joined:
    Jan 24, 2002
    Messages:
    17,727
    Hi, Glad all seems to be OK now. If you are using file sharing programs, you really need to keep your antivirus program updated and scan the system often. Goes for email, too.
    SpyBot as you may have read, does not keep junkware from being installed, it is only a detection and remover tool.
    SpyBot also needs updating regularly. Good luck, stop back to the forums if you need to.
     
  15. Steppinstone

    Steppinstone

    Joined:
    Aug 18, 2002
    Messages:
    2,798
    Glad your up and running again!


    Also RGB, just wanted to let you know that when you use all caps that it considered internet yelling so please turn off the caps locks, also hard on the ole eyes ! Take care! Chari
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/125067