Re: XP Locks on Shutdown & Can't Run WIndows Update

From: Jim (Jim_at_discussions.microsoft.com)
Date: 12/06/04


Date: Sun, 5 Dec 2004 16:31:03 -0800

GREAT post Malke! Your inputs will be extermily helpful. I do use on a
weekly/daily basis Spybot, Ad-Aware as well as SpywareBlaster, SpywareGuard,
AVG Free and Norton Antivirus to boot.

But after much nashing of teeth I was able to figure out and fix this
particular problem. Solution: Through AOL, I had enabled IE Internet access
control to protect/monitor the kids. Went back into AOL and swithed it off
and like magic everything works perfectly. What is so confusing was that
after having signed on, it was blocking (by locking up) only secure sites and
affecting Windows Automatic Updates button. Go figure.

Again - Thanks for all your input. I will print and use in the future.
Best regards.

Jim
Tucson, AZ

"Malke" wrote:

> Jim wrote:
>
> > "Please Help!
> >
> > When I shutdown XP Home (or Restart) the system locks on the "Windows
> > Shutting Down" screen - Always (100%). In addition, if I click on the
> > "Windows Update" button under "Start" - IE loads with the correct URL
> > and
> > than locks - I have to execute a Ctrl-Alt-Del to recover. Along with
> > the IE lock-up, if instead I go to "Control Panel - Security Center",
> > I have access (can click and pull up the pop ups) to "Internet
> > Options" and "Windows Firewall", but when I click on "Automatic
> > Updates" - Nothing happens!!
> >
> > I have a feeling the three issues are related in that they seem to
> > have
> > started all at the same time. Any help on this would greatly be
> > appreciated.
>
> Here is a great shutdown troubleshooter:
> http://www.aumha.org/win5/a/shtdwnxp.htm
>
> Very often shutdown problems are caused by programs and/or processes
> running in the background that are refusing to exit gracefully. More
> often than not, those programs are malware. Run through these malware
> troubleshooting/removal steps:
>
> 1) Scan in Safe Mode with current version (not earlier than 2003)
> antivirus using updated definitions.
>
> 2) Remove spyware with Spybot Search & Destroy and Ad-aware. These
> programs are free, so use them both since they complement each other.
> There is a new version of CWShredder from Intermute. I would not
> install the other Intermute programs, however. Alternately, there are
> CoolWebSearch malware removal steps at SilentRunners.
>
> Be sure to update these programs before running, and it is a good idea
> to do virus/spyware scans in Safe Mode. Make sure you are able to see
> all hidden files and extensions (View tab in Folder Options).
>
> HijackThis is an excellent tool to discover and disable hijackers, but
> it requires expert skill. See below for HijackThis links. A combination
> of HijackThis and About:Buster works well in removing the About:Blank
> homepage hijacker. Again, this is an expert tool and novices should get
> help with it.
>
> 3) If you are running Windows ME or XP, you should disable/enable System
> Restore because malware will be in the Restore Points. With ME, you
> must disable System Restore completely. With XP, you can delete all but
> the most recent (presumably clean) System Restore point from the More
> Options section of Disk Cleanup (Run>cleanmgr).
>
> 4) Make sure you've visited Windows Update and applied all security
> patches. Do not install driver updates from Windows Update.
>
> 5) Run a firewall.
>
> Links to help with malware:
>
> Software/Methods:
> http://www.safer-networking.org - Spybot Search & Destroy
> http://www.lavasoftusa.com - Ad-aware
> http://www.majorgeeks.com - good download site
> http://www.intermute.com/spysubtract/cwshredder_download.html
> http://www.silentrunners.org/sr_cwsremoval.html. - SilentRunners
>
> HijackThis:
> http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Jim
> Eshelman
> http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
> forum
> http://www.wilderssecurity.com/
> http://forums.tomcoyote.org/
> http://www.spywareinfo.com/forums/
>
> General:
> http://forum.aumha.org/ - look under "Security" for various forums
> http://rgharper.mvps.org/cleanit.htm
> http://mvps.org/winhelp2002/unwanted.htm
> http://www.aumha.org/a/parasite.htm - The Parasite Fight
> http://www.spywarewarrior.com/rogue_anti-spyware.htm
>
> Malke
> --
> MS MVP - Windows Shell/User
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
>



Relevant Pages

  • Re: Taskbar disappearing and reappearing
    ... >> After reading the HP web pages, I set my System Restore memory usage ... See below for HijackThis links. ... > Restore because malware will be in the Restore Points. ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)
  • Re: Dodgy Desktop!
    ... Here are malware removal steps. ... See below for HijackThis links. ... > the most recent System Restore point from the More ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)
  • Re: windowsXPpro explorer crash
    ... > CoolWebSearch malware removal steps at SilentRunners. ... See below for HijackThis links. ... > the most recent System Restore point from the More ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)
  • Re: removing infected files
    ... > Restore point and delete all but that System Restore point from the ... > Here are general malware removal steps. ... > scan with HijackThis. ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 0we1rpr.exe
    ... > CoolWebSearch malware removal steps at SilentRunners. ... See below for HijackThis links. ... > the most recent System Restore point from the More ... Do not install driver updates from Windows Update. ...
    (microsoft.public.windowsxp.general)