| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 103885 | 2009-10-09 14:23:00 | Please help - "End Program - n" on Shut Down | skelseyc (15318) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 818647 | 2009-12-17 16:10:00 | I have been racking my brains over this same problem for several weeks. It started out as an occasional hangup in my Firefox browser, but gradually worsened till I too started getting the "End Program - n" message when I shut down my system. I tried Opera and Internet Explorer :yuck: and the same problem occurred with them as well. I thought it was a virus at first and ran various program checks to find it. I used spybot, avg, malwarebytes, anvir task manager. Nothing showed up. Searched through my folders for n.exe or n.dll and nothing was found. Even searched through my registry for suspicious entries and again nothing showed up. I was about to format my hard drive and reinstall my operating system when I saw this forum and read the message from PPp about AVG being a common denominator. I suspected the problem might be in a buggy program and thought that it could be AVG--I have HarvEx installed (ebay sniper program) and it was locking up as well. But I ignored that possibility because there are so many users of that program that one would think that there would be a lot more postings of this problem. Anyway, I removed AVG. Ran CCleaner and installed Avast. So far everything is running fine. I don't know why AVG would effect some computers and not others--maybe it's a conflict between programs (I do have ZoneAlarm as my firewall and that has given me problems in the past) Thanks PPp for the heads up. Saved me a lot of work.:thanks P.S. As I am not a New Zealander, I took a guess on the registry question on "What's the national bird of New Zealand" The only dang bird I know of in those parts of the world is the Kiwi bird.:D |
BrianLee (15322) | ||
| 818648 | 2010-01-22 17:40:00 | Hey there, new to the forum, NOT new to computers. I've got a computer (belongs to a good family friend) that has developed the SAME problem that been discussed in this long thread, thought I'd continue it here. I've done the HJT, will endeavor to get a log from the machine posted here, as the internet is just plain messed up, in IE8, Firefox 3.5.7, and now 3.6, and in all profiles on the computer. I've also run Trojan Remover, came up clean. In the past, they've run Spybot, and have Vipre installed all the time. I'm going to run CCleaner next, just to do a cleanup run on the system. I'll post back with the hjt log file, but at least wanted to see if anyone else has had other suggestions as to what might be going on with these issues? The symptoms are that after loading the first set of pages, trying to go to an additonal page, just stalls. Sites that are text only, appear to be fine. I also did a netstat -a, after closing the browser, and found several suspicious connections. I did a reverse IP lookup, and one of them pointed to a server in Holland, one to a site in Germany. Quite odd. I've also done the QOS changes mentioned earlier in the thread, no change. I've brought the computer from these peoples house (Comcast Cable with solid hardware firewall/router in the middle), to my office, with even more solid firewall, and 10mb/sec bandwidth, so THAT's not an issue of bottleneck. I'm about to reapply the windows patch linked earlier as well, to see if the TCPIP stack is broken. Anyway, that's what I've done so far, and am planning to do next. Other suggestions welcomed. Glenn |
recordmaker (15323) | ||
| 818649 | 2010-01-22 17:49:00 | I had the same problem.Registered only to post this, since it took me some time to find out a solution.Firefox after closing the window still appeared in task manager using 99% of the CPU, so I had to kill the proccess.Also, when attempting to shut down the system, I got a message about the "n-program" which could not be ended, so I had to select "End now" on every system shut down. After a research, I found out that it is a firefox problem.I'm using v3.5.7.After disabling the winamp toolbar the problem disappeared.It seems to be a problem with firefox conflicting with certain types of add-ons.So, try disabling one by one every add-on installed and I think that would do it, until the next firefox update fixes this bug and you are able to use the disabled add on again. |
vagabond (15324) | ||
| 818650 | 2010-01-22 17:59:00 | Thanks Vagabond, BUT, the issue has also been a problem with IE as well. I've been doing some plugin removals in Firefox, but they really didn't have many installed. One thing I'm thinking of doing, is fully uninstalling FF, clear all references to it and starting over again and see if that clears it up. One other thing I'm considering, is replacing the network interface. This is a Dell Desktop, with a built-in ethernet connection, so it's not hard to open the case, and drop in a new NIC, just to see if something has gone funky there. I've seen stranger things in my network admin life. This one just baffles me, I usually can nail this stuff. <grrrr>. I HATE it when stuff like this happens. Glenn |
recordmaker (15323) | ||
| 818651 | 2010-01-22 19:24:00 | FF was updated the other day to 3.6. 3.5.7 had an annoying prob (bug - or something, hopefully 3.5.6 fixed it), if you close it then opened it, it brought up a message saying its not responding / it was already running ( it was like it took its time closing properly, then it froze - you couldnt open it again, until you end its process in task manager, on the other PC here). Strange that it didnt appear / never happened on this PC tho (using 64 bit). | Speedy Gonzales (78) | ||
| 818652 | 2010-01-22 19:44:00 | Thanks, Speedy. Yea, I knew that, I've personally been running the 3.6 beta's since they came out, and I updated this computer to 3.6 last night. Had to burn a CD with the installer on it, as I could NOT download from the internet. Very frustrating. The more I'm digging, the more I believe there is something DEEPLY rooted in this machine, that just does NOT want to go away or be found. I've installed the Comodo Free Firewall, and have been using it to monitor various connections, and am finding some odd things. When I open the browser, I get connections to the following IP's: 94.228.209.172 213.174.149.74 216.133.246.157 69.90.103.153 209.17.178.195 95.211.101.143 At the moment, I've added those to the single IP block list, but STILL there is now ability to download anything. I go to the Adobe.com site, to download Flash Installer, and I get the DLM install download just hanging, nothing happens (one of the above COULD be the reason, BUT these connect even before I go to the Adobe site). I have replaced the NIC. IE won't even load on this machine. I'm getting REALLY close to nuking it, and doing a re-install, BUT there are a gazillion photos on this machine, he's a sports photographer, and they use this machine to do all their photoshop work, as well, so there will be a ton of time needed just to copy off to an external HD, all the photos and such before getting near being able to re-work it. <sigh>. Below is the latest HJT log: Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 1:37:40 PM, on 1/22/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\s wg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [SBAMTray] C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - webdl.symantec.com O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - www.taxsimple.com O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - www.crucial.com O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - cdn2.zone.msn.com O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - platformdl.adobe.com O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildTangent\Apps\Dell Game Console\GameConsoleService.exe O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: VIPRE Antivirus + Antispyware (SBAMSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe -- End of file - 5913 bytes |
recordmaker (15323) | ||
| 818653 | 2010-01-22 19:57:00 | You can tick these then tick fix checked Close browsers O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" O4 - HKLM\..\Run: [SBAMTray] C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe Download malwarebytes (dw.com.com 4252%26part%3Ddl-10804572) <- direct download, update it, then do a full scan I would install a better AV program, than sunbelt. Open IE, and go to addons. Disable the 'DriveLetterAccess entry. This can cause probs |
Speedy Gonzales (78) | ||
| 818654 | 2010-01-22 20:22:00 | Thanks Speedy. I'll take the 2 out, not the SBMTray. We'll have to agree to disagree, we've been using Vipre as our corporate AV/Malware with zero problems. At work, we've been though them all, and I've re-built many machines because the AV/Malware missed stuff. The more I dig in this, I suspect there is a core issue with Windows at this point, or he's gotten hit by some very nefarious ZDE, as part of last night, was to put on Malware Bytes, and I've run that. I will run it again, just for the heck of it. I do believe in multiple malware removal tools, as not all of them detect everything. What one misses, another might get. Are you familiar with SuperAntiSpyware? I've used that in the past with moderate success, as well. One of the nice things on Vipre, is how "light weight" it is on system resources, and how doesn't slow down systems. When we rolled it out in place of Symantec Corporate, I think 90% of the staff asked if I'd added more ram to their computers, as everything just ran faster. Where as I'd have 1 or 2 malware infections a week (we're a record company, and the staff goes to some of the most bizzare sites every day), with Vipre in place for the past 6 months, we've not had 1 malware on any computer. I check the corporate monitor console every morning, after overnite scans. Quick on Monday/Friday, and Deep on one day of the weekend. All that show up now are cookies. Oh, Can't really get into IE, to clear the DLA add-on, as IE just won't load <sigh>. Maybe in another user it might, I'll check. Glenn |
recordmaker (15323) | ||
| 818655 | 2010-01-22 20:31:00 | Nothing wrong with having multiple anti-malware software programs. Just dont have them running at the same time. They may conflict with each other. I cant see what maybe stopping IE from opening. Unless one of those ips you blocked are stuffing things up. Or comodo is causing it. Is it the latest version of comodo? | Speedy Gonzales (78) | ||
| 818656 | 2010-01-22 21:07:00 | Been there, done that (multiple AV/Malware Pgms). My career is mostly in IT management, so I get all the peoples home computers with "it's running REALLY slow, can you take a look at it please". Many times I've found 4 different AV programs running, all trying to do a realtime scan, or some other such malarkey. The biggest time waster is just wading through all the uninstalls because everything is like an old 8086 at 60 mhz <smile>. This particular box has had "issues" with IE starting, going to MS sites as default home pages, one of the reasons I was able to get them over to FF several months ago. I think the best route at this point, is copy off all important information, and use the builtin System Re-build function on this Dell (blue bar during boot, I think it's hit F11 to take it into the restore partition, and let it rebuild itself. I've got full copies of XP SP3 on my memory stick, just for this type of situation, so I don't have to download 10 gazillion updates after the restore. I tried unblocking those IP's, no joy. It's data extract/nuke time, just got an email from the owners, they're going to consider an iMac for their photo work, and then restore this beast to "out of box" status. Glenn |
recordmaker (15323) | ||
| 1 2 3 4 5 6 7 8 9 10 11 12 | |||||