Can't turn off computer

[bexar656]

I can't turn off my computer by the normal way like I've allways done. Start, Turn off computer, Turn off. Nothing happens. I have to shut it off by the switch in back of the CPU. I've been told by a tech support that built the computer that I probably have a virus and to bring it in, ($60.00 an hour). I ran avast through and it came up no virus found. I also ran Spybot and Malware, no virus. The problem started after I downloaded a trial version of a Registery cleaner but then removed it right away. I'm using XP and have no trouble starting it up or running all the programs. Can there still be a virus that avast doesn't detect? Thanks

[normishmael]

bexar656:

The registry cleaner you downloaded,was it a full function trial,
or just one of those that say:
"We have found 1000 bad registry entries,that we will
fix when you buy the software"?.

What I am getting at it is possible if you used a full trial,and allowed it to remove
what it found,it is possible it was over zealous,and removed an important key(s).

There can always be a malware Avast! or any other software does not detect,
but both Avast! and Malwarebytes missing it is getting the highly unlikely range.

[Marc57]

Have you tried using System Restore? Try restoring it to a time before you installed the reg cleaner.

[bexar656]

The registry cleaner you downloaded,was it a full function trial,
or just one of those that say:
"We have found 1000 bad registry entries,that we will
fix when you buy the software"?.[/color]

No it didn't say anything like that it was just a download and try for 30 days. I didn't go any further after download once I saw the price. I uninstalled it by the program and then it was also gone from Add/Remove. Also I tried system restore and it made no change. Well at least it's a shutoff problem and not a turn on one. Thanks

[normishmael]

Someone will come along with a better idea.
The problem is very many hard shutdowns can bork a
Windows install pretty fast.

[mkis]

Taking the case that you dont have a virus -- check Microsoft Event viewer for clues

Start -> Run -> type - "eventvwr.msc" (without quotations) -> press <enter>

I think best check these categories
 
        - Application
        - System

Look for errors and warnings
If you see anything that may indicate where is the problem / may identify the problem

Note down event IDs and search with google
Reply post here

[YoKenny]

Try these tips:
http://www.windowsnetworking.com/articles_tutorials/Troubleshooting-Windows-Shutdown.html
http://www.microsoft.com/downloads/details.aspx?FamilyID=1b286e6d-8912-4e18-b570-42470e2f3582&displaylang=en&Hash=DP6HHR9
http://www.zdnetasia.com/insight/software/0,39044822,39086135,00.htm

[bexar656]

UPDATE: MKIS: I went to eventvwr.msc and it came up with a ton of error listings. One I found was "Hanging application, RegMech.exe." This might refer to the Registery cleaner I mentioned before. I clicked it to open and it said is it OK to send it to the internet. Not knowing what that ment I said OK and that was that. Also in system it came up with another ton of Warnings. It would have taken me all day to get through all of the errors and warnings so I just stopped there.

YOKenny: The sites listed many questions on shutdown but they all refered to the system rebooting at shutdown. But I finally found a question with the exact shutdown problem I'm having where nothing happens at shutdown. I signed up with the site thinking it then would give me an answer to this persons problem but I can find no way to get to an answer. Reply only brings up a blank box for someone to reply. In the dark on how to find an answer.

Well thanks to all and I'll keep looking.

[normishmael]

Ref:"Hanging application, RegMech.exe."

Was the Registry cleaner you downloaded PC Tools Registry mechanic?
And was the event error time stamped after you uninsulated the program?

Maybe you can do a windows explorer search for "registry Mechanic" and delete what you find.
you might also check for "PC Tools" and delete them as well.
(providing of course you do not have any PC Tools software you want to keep!!)

Another option would be reinstall registry cleaner,download Revo uninstaller,
and use Revo to uninstall the registry cleaner.

If you are knowledgeable in such things you can also do a regedit search for
"registry Mechanic" and "PC Tools" keys.

[mkis]

Important to know this --

Was the Registry cleaner you downloaded PC Tools Registry mechanic?
And was the event error time stamped after you uninsulated the program?

What are the time frames?
Does it show you are still having problems with reg cleaner you uninstalled?

[bexar656]

Was the Registry cleaner you downloaded PC Tools Registry mechanic?
And was the event error time stamped after you uninsulated the program?

Maybe you can do a windows explorer search for "registry Mechanic" and delete what you find.
you might also check for "PC Tools" and delete them as well.
(providing of course you do not have any PC Tools software you want to keep!!)

First two questions answer No. It was just listed as Registry Cleaner from Hippo.
Second sentences. Did a search and came up with nothing. I believe it's uninstalled and not even sure if it was the prolem.

Nothing shows registry cleaner anywhere or if it is causing the problem. I think it's all something else.

[mkis]

Bexar we need to know whether among your error warnings in Event viewer, there are entries that occurred after your problem began / are still occuring now. In the detail of the error, there will be the times that these error warnings occurred. You need to supply this information. (Bear in mind, no disrespect intended).

obviously, then we will have some idea of whether or perhaps to what extent Regtech.exe is still possible causing your problem. You may not have completely uninstalled yr reg cleaner or may have inadvertently actioned some other reg outcome. And if you can still otherwise use yr PC then take some time looking around the issue without actual taking any actions. You are our key resource in helping to solve problem.

Also.
You may have infection. You may have intrusion by rouge. And other malware type possibilities. We can get to that as well.

Also.
YoKenny's reply provides very good start points. Dont disregard these avenues just yet.


Edit - see if you can shut down using Task Manager. See if that helps.

[slayer2009]

Combo fix is a great malware remover. I highly recommend it.

Download from the bleeping computer forum , and run it.  Rarely have I seen combo fix not remove malware.

[bexar656]

Bexar we need to know whether among your error warnings in Event viewer, there are entries that occurred after your problem began / are still occuring now. In the detail of the error, there will be the times that these error warnings occurred. You need to supply this information[/color]

I hope this is what you want: I installed and uninstalled Registery Cleaner on 10/6 after that I get the following from event viewer.

Error  10/6 Application hang
Error  10/8  Service control Mgr. (three of these all on the 8th)
Warning  10/8  User 32 about a dozen of these
Warning  10/8  User32 time
Warning 10/7   User 32

Also I tried Combo Fix and it said do not use this unless you have been advised to do so by a profesional. I tried it and my Porno blocker kept blocking it. I guess I can get around it by accepting it.

Hope this all helps.

[normishmael]

Hi bexar656!

ref:Error  10/6 Application hang
     Error  10/8  Service control Mgr. (three of these all on the 8th)

If you go back to the event viewer and click on the first one,"Error  10/6 Application hang" does the pop-up box say anything about what "The Faulting Application" is?

on this expanded pop-up box,you can click the button below the two arrow buttons
in the top right corner,and it it will copy the error message.
You can then paste it to note pad,and copy paste it here.
We will get there in the end!! Sounds like we are getting closer!

(Combo-Fix is pretty hardcore.I really do not THANK your problem is malware related at this point,and if not Combo-fix would do no good.and the risk is not justified. Wiser heads may thank differently.)