PC reboots on shutdown

I did a search for "reboot on shutdown" and there are a lot here! I don't mind looking at them and I KNOW about the tutorial READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal but (see my first question please)

Here's my questions

1) Is my problem still being caused (or was it ever caused by a trojan -- I had a trojan, but it has been "deleted" and I still have the same problems)?

2) If so, after seeing what I did do...do I start back at http://forums.majorgeeks.com/showthread.php?t=35407 (the tutorial about spyware, etc.) or start somewhere else?

Problem:

A couple weeks ago my dial-up connection would simply dial-up out of the blue when I wasn't online. The pop-up window would not simply appear "asking to connect", it would connect also. (So I'd pick up the phone 2 hours after using the PC and it would be online).

About the same time (could be THE SAME time) I noticed that after I shut-down my computer at night, it would re-boot (I only shut it down once a day). I don't know if it was the exact same day because when I'd come down the next day I just assumed one of the kids had started up the computer earlier in the day.

I have XP with Service Pack 2 (installed a couple months ago, no problems), on a Dell, with Ad-Aware SE Personal, Spy-bot S&D, Spyware Blaster -- all run and updated religiously.

One of my kids mentioned "oh yeah, the 'computer' did have something pop-up and say there could be a virus one day while I was online (this was days earlier)

I have AVAST so I booted into safe mode and I ran a thorough scan and it found
Win32:Trojano-142[Trj]
C:\Documents & Settings\"kids name"\Application Data\Mozilla
VPS version 0452-2

While in safe mode I ran scans with all the other programs too but they didn't find anything at all.

I realize I did NOT have my system restore off.

I have run two more Avast scans and they come up clean. (I did not run them in safe mode)

Whenever I turn off my PC it will reboot in a matter of seconds, so now after it shuts down, I also turn off the power strip it's plugged into and everything is OK.


(I have since read that we SHOULD turn off the power strip like this anyway even if we don't have problems because "viruses can be unleashed while your PC is turned off but plugged in" -- is that what any of you do?)

 

Hi Pegg

There could be a lot of causes for this problem. To rule out malware, it is probably a good idea to run through the tutorial and then send a HijackThis log. Here'smy HJT speech (just in case you need it):

Note that your HijackThis should be up-to-date (v1.99) and MUST be extracted to its own safe folder – C:\Program Files\HijackThis!

Should you need a Fresh Download of HJT, get it HERE: HijackThis v1.99

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.


To rule out a Hardware issue, I've asked Turcoloco to take a look at your thread. He knows far more about that aspect than I. We'll see if we can't get this straightened out!

PP

 

Well, to me it sounded like a trojan infection right at the beginning of your post, later on you did mention Avast finding a virus (a trojan to be more specific) and that made sense and proved my initial thoughts correct.

Now here is what I would recommend:

1) Update your virus scanner.
2) Disable 'Paging File' aka Virtual memory
3) Disable/turn off 'System Restore'
4) Empty out EVERYTHING in these folder:
\Documents and Settings\eachandeveryusername\Local Settings\Temp\

\Documents and Settings\eachandeveryusername\Local Settings\Temporary Internet Files\

\Windows\Temp\

\Windows\Prefetch\

Examine the folders\files in these 3 locations, delete the folders/files that look suspicious (repost if unsure):
\Documents and Settings\eachandeveryusername\Local Settings\Application Data\

\Documents and Settings\eachandeveryusername\Application Data\

\Windows\Downloaded Program Files\

...also I'd recommend using CCleaner to make temporary file deletion an easier process, however you would still need to check the last 3 locations I mentioned.

5) Afterwards, reboot in Safe Mode so 'Paging File' would be disabled, along with system restore and other services/startup applications.

6) Using a program, examine your registry 'startup' entries. This site has many freewares which you could d/l prior to starting this work. I prefer StartupControlPanel this freeware standalone utility shows 5 different folder/registry startup points where you could disable or even delete applications to prevent them loading into memory with Windows. Disable all that you are not sure or repost. Disable or even delete anything that refers to an executable located in \Windows, \Windows\System32 and/or in one of the folders I listed above.

7) Next: Start > Run > msconfig > OK > Startup (tab), clear the boxes next to all suspicious entries, again follow the same tip I mentioned in the above paragraph.

8) run the anti-virus scanner in full/deep mode, set to check all file types.

9) When scanning is complete reboot.

10) Enter the BIOS settings menu and locate the section referring to 'Power', within that section there should be 'wake up' related settings, make sure everyone of them is DISABLED. Repost and ask if need help.
11) Also check the ISP's software settings so that it is configured to ask you for password prior to dialing out. In your browser also check the 'connection' related page for related settings...ask if you need help, specify your browser.

Note: I'd also recommend downloading a solid (free) software firewall to not only prevent but more importantly block any trojans/dialers you might get infected with in the future....

 

Thanks for all your time and effort -- nice meeting you by the way.

Since I posted yesterday I went to the aformentioned tutorial to check that I had updates etc. and realized I didn't have the Spybot DSO fix...did that and it didn't show any problems.

Ran AVAST Virus Cleaner tool and it didn't show anything except it did say that it couldn't scan these 3 places:

Is that a bad thing? After reading your reply...it seems like it might be a problem (temp files, perfdata???)

I ran CWShredder just for the sake of it (offline) and it was clean.

Earlier, AVAST said the infected file that the "trojan" was in was rkc6v54z.exe [or maybe the "54z" is "suz"? can't read my own writing]

It's always uptodate and I double checked yesterday

Sorry - I don't know what you mean by that.

I ran CCleaner last night and also deleted index.dat files -- but not in safe mode so I'll do this again too.

OKAY -- again, "paging file" is disabled because I'm in safe mode??? Or I have to also do something for it to be disabled while I'm in safe mode.

6) 7) 8) 9) -- OK I can do these steps

I went into this before and checked everything...can't remember what it was set to so I'll check again.

I'll look into this too

Sorry, forgot to mention that I do have Zone Alarm and I double checked yesterday that I have red X's in the "server" column...I didn't so I changed that. I checked again right now after turning on my computer and ALL the "?" that I had changed yesterday to "x" were back to "?" === I've never had that happen.

 

Hey Pegg,

Don't forget that HJT Log! Please scan in Normal Windows.

Also, How many active User Accounts are on your machine?

I agree with Turcoloco's initial assessment. Likely a Trojan - perhaps a Porn Dialer of some sort.

PP

 

I figured out "paging file" so no one needs to explain that now, thanks.



I did STEP 4) "empty out EVERYTHING in folders..." but some couldn't be deleted (i.e. C:\Windows\temp\jet786c.tmp -- but that had 0 kb in it -- I didn't try to delete it any other way). Other items were NOT empty folders but they weren't deleted.

re: STEP 7) msconfig...

I have never seen this before and it was checked to be in my startup so I unchecked it...any ideas?
dumprep0 -k [command] %systemroot%\system32\dumprep0 -k
[location] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

I only unchecked it...haven't gone into the registry or anything mentioned in step 6) yet.

Did another FULL DEEP anti-virus scan and it was CLEAN.

RE: STEP 10 (BIOS) the only POWER settings I can find have this:
"Power Management"
Suspend Mode S3 (the only other choice is S1) -- I don't know what this means
AC Power Recovery Off
Low Power Mode Disabled

"Auto Power On" Disabled
"Fast Boot" ON

Is that what you mean? Or am I supposed to be "somewhere else". There wasn't anything there about 'wake up', etc. but I thought I've seen that somewhere else so...

BIG PROBLEM or TYPICAL:

In Safe Mode with Networking: I can't connect using dial-up modem
AND
when I try to type with my keyboard
1) I can't type and
2) the computer freezes and I have to reboot eventually

Any ideas?

There's a few "weird" folders I found in C:\Windows\Temp (seem weird to me) but I gotta go and I'll ask about them later.

 

Oh yeah, I'll do the hijack log later too.

 

Three users (there is also the "Administrator" and "All User" folders under Documents and Settings where the 3 other user accounts are

 

I'm wondering if anyone can answer these before I proceed further and these questions are "lost in the shuffle"?

 

Hi Pegg,

Sorry - Kinda busy

1) Probably a bit paranoid to turn off the power strip. You have Firewall, AV, etc... to deal with most problems.

2) Don't worry about this - just leave it unchecked for now.

3) If you can't do Safe Mode W/ Networking, don't worry about it. It's typical for dialup. Do the scans in Normal Windows.

To be safe, you'll need to run through cleanup procedure for each user account and HJT for each.

Please go ahead with the HJT. I'll try to check back Tuesday. Turcoloco may check back sooner.

PP

 

Thanks -- I have to turn the power strip off NOW as it is the only way to ensure that my computer is turned off, but I never did it before.

I did most scans in Safe Mode -- just couldn't save a log file (like in CCleaner) and a few other steps that required typing.

I already did extensive cleanup for EVERY account 2 ways, manually and again with the Empty Temp Folders program I d/l from here once.

No problem if you (or someone) gets to it on Tuesday -- I've got a couple kids to get in bed....So HJT this has to be run for EACH USER? I have the tutorial printed out but I guess I thought I just ran it once and posted the log file (as an attachment of course!)

 

Here's a HJT log when I was logged in under me -- I had task manager show processes running for everyone (though no one else was logged on -- just in case something weird was going on).

(I typed in a few notes in my "log" - and left spaces before and after them so they'd stand out to you). The one "09" and "016" line that stand alone are ones I'm wondering about because I don't know what they mean.

Do I need to log on under the other 2 users and post other HJT logs? It doesn't seem to me that the PC has been "hijacked" yet it still reboots when I shut it down after everything I've done.

The only thing I haven't done yet (because I haven't had the time) is Turcoloco's advice about going into the registry.

 

I know exactly what is wrong!

You have the "I ain't been on Major Geeks in a while backdoor double-headed highjacking trojan dialer virus infection" take two Stevie's and call us in the morning.

Sorry guy's, had to say hi to Pegg. Glad you are helping her out, she is a nice lady.

Steve

 

Hey, Stevie-Wonder! So, where's your helpful advice, hmmmm?

That's OK -- I'm going to bed anyway. I've been gone too long 'tis true. That's how I missed some of the spyware updates, etc. (but ya know, my friends think I am a 'major geek' so that should count for something)

 

Hi Pegg,
Sorry I have not been feeling well lately and worked even half day today.
I pretty much put in my 2 cents and wanted PP to continue. He knows what he is doing and it is better if just one person helps you out so it wouldnt get confusing or frustrating.
PP should be getting back to you about the HJT log so I won't comment on it but if you had any questions or clarifications about the things I initially mentioned please re-post with those questions in a numbered order and I will try to clarify.
One thing about the BIOS related settings I mentioned, the settings that could reboot a powered off system via LAN/Modem signal would generally be on the Power Management page. Depending on the type of BIOS the wording could be different but I will give you a few examples so scan thru all the BIOS pages to see if you have anything similar set to 'enabled':
~ Power On by Ring
~ Wake up by PCI card
~ Wake up on Ring
~ Wake up on LAN/Modem signal etc.

Also there could be different reasons to why a PC would reboot when the user selects the 'shutdown' option. A missing system patch or a device driver that is misbehaving is not an uncommon cause but I would suggest you start by checking the 'Power Management' settings in the Display Properties > ScreenSaver > Power section.

 

See attached picture...I've never done anything to these settings but it doesn't "look" right to say harddrive NEVER shuts off...but my choices (in drop down menu) don't seem to help me any -- it asks what I want the PC to do when I push the "power button" and I have selected "shut down", but then here it looks like harddrive doesn't shut down.

 

Hi Pegg,

I didn't see anything particularly evil in the first HJT Log. You should still run logs for the other two user accounts, just to be safe and rule out a malware cause.
Does your firewall notify you of anything trying to call out?

Also, I think the above post applies to when the computer is running, but has been inactive for a period of time.

PP

 

I didn't think you'd find anything -- I'll log on to my kids accounts and do a HJT too later.

I can have it tell me EVERY time, but I've "silenced" that. I have Zone Alarm and can go in and see what has been blocked...

I did look a few times and haven't noticed anything weird and nothing was blocked more than once or a few times. Do you want me to search for something in the logs?

 

You're probably right. Just want to rule out some sort of malicious dialer! I would not be surprised if this problem is not malware related.

That's what I meant - Probably should have articulated it better You ought to check log for something trying to get out! Though, it would seem to me that, if computer is on all day, this thing would be trying to connect and/or connecting all of the time.

I would think this would be something you'd notice right away. I'd like to look at the other HJT logs to rule out malware. Hopefully Turcoloco will get over the flu quickly as he is far better acquainted with Hardware issues than I. Upon ruling out a Trojan Dialer or the like, Hardware would be the next area to investigate!

Best

PP

 

You two have been very patient and helpful...thanks. Poor Turcoloco...rest and sleep (if possible). I'm not going anywhere.

Here's the other 2 HJT logs -- I don't think Andrea's is much different than mine but Steph's has something I don't think ours has and I don't recognize it:

See you all tomorrow (maybe)

 

Hi Pegg,

This is harmless -
O4 - Startup: wkcalrem.LNK = C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
It is just a calendar that keeps track of scheduled events in Works.


I have seen nothing in your HJT logs to indicate a malware cause behind your problem!

Perhaps it would be more helpful if you could get a HijackThis log from a scan taken WHILE your computer is acting up? Also, an Ad-Aware log from during the same period might help shed some light on exactly what is running when the behaviour occurs.

Best
PP

 

Yeah -- really, that doesn't surprise me but it's GREAT to know.

Hmmmm...don't think this is possible. The "acting up" is when I'm trying to shut it down at night and it re-starts. How could I do a HJT log if it's when I'm shutting the computer off? Then, once it reboots, everything seems fine, and I've done all the system scans, most in safe mode, that were mentioned at the beginning of this post and -- Everything always shows "clean", fine, etc.

When this happened last night, I let it re-boot then immediately ran Ad-Aware to see if it showed anything -- clean.

Over all these days, the computer has only shut down ONCE and stayed off. Now that's weird.

Can you point me to some other "logs" to check to see if it's continually showing me some problem?

Do you think any of this is related to my previous problem which I posted back in October? I haven't done anything about it yet and the "flickering rectangles" appear if the monitor is in stand-by, if I'm typing in Word, if I'm connected to the internet, etc. -- totally random behavior (and it's not a loose connection to the monitor or to the back of the tower).

http://forums.majorgeeks.com/showthread.php?t=43004&highlight=flickering

 

Hi Pegg,

I was referring to getting a HJT log when your computer was connecting to the internet by itself. That way, we could see the culprit in action.

Is it still self-connecting to the internet? Or just rebooting on shutdown?

Ad-Aware logs do a good job of enumerating the running processes. However, I am starting to wonder if this isn't a hardware/settings issue. I'd like to get Turcoloco's opinion and maybe that of Chaslang as well.
Unfortunately, Spyware is swamped right now and I am not around that much these days due to other obligations. So please be patient with us and we'll try to figure this out!

PP

 

OK -- I can do this -- BUT I'm supposed to "close all running programs including web browser..." before doing a HJT scan...so now you're saying wait for it to connect itself out of the blue, shut down everything else, and do a HJT?

Yep - both...well, the shutdown is every night (except that one time) and the self-connecting has been LESS since I've posted here (maybe since I've done some "clean up"?). But it has self-connect still -- maybe only once a day though instead of once an hour.

I understand everyone's busy-ness...no problem. I'm a patient person.

 

Hi Pegg,

Don't worry about shutting anything down for these scans - We're not playing by the rules, this time

When your computer connects itself to the net, just open HJT and run a scan and attach the log. Try to do the same with Ad-Aware if possible and attach that log. I want to know what is running when it is exhibiting this behavior.

PP

 

Gotcha

it'll be our little secret

Um, well, maybe NOT

 

Sorry Pegg, not to interfer PP but wanted to update my previous post since you posted this image....as PP stated the settings on that screenshot refers to when PC is running but there has not been any acitivity from the user for X amount of time then it ....whatever is listed on that list. What I would like you to check is the settings on the 'Advanced' and 'Hibernate' tabs.
On the 'Advanced' tab you will see the action the PC is set to take upon pressing power button. Make sure it displays "Shut down"...also check the 'Hibernate' tab as enabling the hibernation causes related problems on especially older systems....
...and thank you both, I have started to feel better!

 

Yep -- it did and it does.

OK - the box for HIBERNATE was checked.

Are you saying to UNcheck it so it should look like THIS now and hibernation is NOT enabled?

 

YES, uncheck it. I am not 100% sure if that was the cause but try it and see what happens.

 

Just a reminder...this system was brand new in March 2004 and then I had everything but the monitor replaced in August 2004 -- so it's NEW NEW NEW.

Did you look at the thread I had about "flickering rectangles"? I was wondering about your take on that since mention was made about that this may be related to a hardware issue.
http://forums.majorgeeks.com/showthread.php?t=43004&highlight=flickering (in 1/6/05 post)

I'll turn this on and off a bit to see if it stays off. I know my modem self-connected the other day when I wasn't home and one of my kids dis-connected it, so I wasn't here to run a HJT scan...but it'll happen again, I'm sure.

 

Wow, that was a long thread. Was that issue not resolved?
Are you thinking they are related?

I do agree with Kodo that the problems on that other thread are commonly caused by bad Video card, device drivers and/or display settings that pushes the video gpu to create random issues like that.
First of, I believe you video card is integrated, right? Integrated Video is always a 'eew', would never buy a mobo with an integrated video card.
If that problem still exists then let me get this info from you, even though you might have already answered some, to make a better analysis:
Is the video card integrated? How much RAM the Video has? How much is your system RAM? How big is your current monitor and its type (CRT/LCD)? What is the screen resolution/color depth/refresh rate you are using?

I didn't wanna change threads and get distracted, I rather stay on one issue till it is dealt with but if you still need help with that other one (not sure if I could help at all on top of what others already said but let me have the info I asked for and I will see what I can do, ok).

Keep us updated on your shotdown/reboot situation as well cause PhilliPhan won't let me or himself sleep till it is handled.

 

Not resolved 'cause life got crazy and my system's NEW and I kept thinking, I'm not buying something to replace something NEW, blah, blah, blah

Don't know -- just knew it was "unresolved" -- and keeps happening (flickering rectangles occurred just the other day so....)

I don't have a problem answering those questions here about the "flickering rectangles" -- Or I'll resurrect the thread and answer them there -- I'll do it tomorrow maybe)

Thanks -- it happened twice today - no one was "with the computer" (maybe it gets lonely) so the first log we discovered probably within 1/2 hour after it could have self-connected.

Don't know when it "self-connected" re: the second log -- we've been gone for over 2 hours and I came home and the modem had connected

 

He's right, you know!

I won't be back until Monday night, but will scrutinize the latest logs. (Initial quick glance shows little..... I think the darn machine's possessed!!)

Do you remember what web page was open when it self-connected? I would expect the normal Home page.

My gut still says this is related to some sort of setting or automatic update/maintainance etc. . .

PP

 

Well, yeah, it's a DELL - so it's possessed.

OHHHHH - NO - it only connects my dial-up service and then sits there - doesn't take me to an internet site. In other words, someone uses the computer, logs out (or doesn't log out) so Outlook Express is closed, IE or Firefox is closed, just sitting here on the desk with the log-in screen or my desktop looking at us....walk away, come back after awhile and the PC will be at a log-in screen with notification that "allvantage is now connected" (my dial-up service) but other than that, it's just sitting there.

Does that make sense?

I haven't CHANGED any auto-update, auto-check, auto-scan, etc....but that doesn't mean someTHING hasn't somewhere. I'm not the best at knowing where all that kind of stuff is but I'll keep hunting.

You guys have been so helpful and patient.

 

My thread - my problem - so I can complicate this by bringing in my "flickering rectangles issue". Below are the answers to your monitor/display questions. Out of curiosity, if you don't buy an "integrated video card" with a PC system, what do you buy?

System RAM?
2.8 GHz, 256 MB DDR at 333MHz
40GB 7200 RPM Hard Drive
17 inch Flat Panel Monitor
Intel Integrated 3D AGP

1024 by 768 : True Color : 60 Hz

96 DPI

Under “Adapter” tab
Intel 828656 Graphics Controller
Driver Version: 6.14.10.3762
Driver Date: 2/10/2004

Under “Monitor” tab
Monitor settings: screen refresh rate: 60 Hz
Plug & Play Monitor
Driver Version: 5.1.2001.0
Driver Date: 6/6/2001

INTEL(R) EXTREME GRAPHICS 2 REPORT

Report Date: 09/22/2004
Driver Version: 6.14.10.3762
Operating System: Windows NT* 5.1.2600 Service Pack 1
Default Language: English
DirectX* Version: 9.0
Physical Memory: 253 MB
Min. Graphics Memory: 1 MB
Max. Graphics Memory: 96 MB
Graphics Memory in use: 6 MB
Processor: x86
Processor Speed: 2793 MHZ
Vendor ID: 0x8086
Device ID: 0x2572
Device Revision: 2

* Output Devices Connected to Graphics Accelerator *
Active Monitors:1

 

I am about to hit the sack cause it is like 1am and I gotta be up in 5 hours but a few things I wanted to mention:
as Kodo mentioned at the other thread, the problem could very well be with the LCD (Flat Panel) display. Is it possible for you to borrow a monitor from a friend or neighbor to test this? Because the other possibility would be the Video Adapter which is the integrated Intel Graphics card.

Integrated Video Cards are used by OEMs to cut the cost and the manufacturing time since there is no separate Video card to install. Integrated Video Cards uses the main system memory, so if your system has a physical memory (RAM) of 512MB and your integrated Video is 64MB, then it will take 64MB from the main memory, reducing it to 448MB! Integrated video never provides as good performance as the Video Cards installed separately to a AGP/PCI-Express slots, even a PCI-based Video card could provide better performance. Another downside is future upgrades, you would have to disable the integrated video in the BIOS and install a separate card if the mobo came with an available AGP/PCI-Express slot. One thing really negative I have found out over the years about integrated video cards besides what I already mentioned is if the system RAM has problem, so will your Video! So buying a generic or even less than perfect RAM could cuase various problems from boot to playing games, etc... Anyways...that is all I wanted to say for the integrated graphics (video).

IF you are not able to get another monitor, at least lower your screen resolution to 800x600 (unless the native resolution of the LCD display was 1024x768 to begin with, then don't change the resolution) and increase the refresh rate to 75Hz. On the 2nd screenshot there was a section that listed all the supported modes, was that all it was or can you scroll up/down and see more that the screenshot didn't show?
There was an issue with the LCD displays and the refresh rate but can't remember what it was at the moment, I'll mention it later if I can remember.

Computer connecting to the internet by itself sounds like a service or application causing it due to an update check. I don't believe Windows Update would do that without user interaction, it wait the system to be connected to the Internet first by the user even if the option 'automatically download and install updates' was selected.
Was the HJT log you attached logged right after the system connected to the Internet by itself or some other random time? If it was some other time can you run the log when the same miracle occurs again? Also check the System Tray and Task Manager to see what applications/proceses are running at that moment.
...to be continued....(did you have any doubts?)

 

OK -- I believe all you guys, it's just that it was a brand new monitor (these problems started a couple months after getting it). I'll probably call Dell sometime too (just don't want to be on hold for 4 hours!)

I thought of this after I took the screenshot...no, I double checked and it supported a lot of other modes, including 1024 x 768

I went through and looked at settings for different programs, etc. and couldn't see what might be "set to connect" like this. I've NEVER had Windows Update set to automatically download and install updates (puh-leeze! It will tell me when there are updates)

I tried to explain that it was as soon as we noticed it was connected, but I don't know when it connected either time (the first time it couldn't have been connected for very long, the second time it could have been for up to 2 hours). Remember it never has connected me to e-mail or the internet, just connects up my dial-up service then .... that's all.

When I do a HJT when I'm logged in it shows the processes running...it doesn't show this when I do a HJT under my girls' log in names...but I'll try to look there too.

Thanks for all your help. It still won't shut down when I hit the power button (immediately restarts -- exactly like a "reboot").

 

You got some really bizarre problems, considering it is a new PC, you should really be chewing the ears of Dell Support not MG support!

But seriously considering the number of problems and the type of issues they are and the amount of troubleshooting that had been done by multiple people on this site, I'd say it is time to turn it in for servicing...

 

See if this makes any sense to you guy's. I found the article below using the same Driver Version that pegg has installed.

Issue
Dell C400 Latitude Notebooks running XP Professional. Intel 82830M onboard
graphics controller. Driver version is Intel 6.14.10.3762.

We had no problems up until recently when we rolled out XP SP2. As part of
this rollout, I used the Windows update site to fully update the OS of each
machine. This included rolling out a new Intel driver from the Windowsupdate
site, which left a stamp of "Intel(R) Extreme Graphics Driver" in Add/Remove
programs.

These laptops are now experiencing a strange problem. They are used both
Docked and undocked. Previously there was no problem doing this, but since
the upgrade listed above, the machoines cannot cope with being redocked
gracefully. And goes on with monitor and standby problems.

Reply 1
Visit Dell support and download Dell's Intel Graphics drivers:
http://support.dell.com/support/dow...6&os=WW1&osl=EN

Reply 2
It is NOT in your best interest to download video drivers from the Microsoft
update site. ALWAYS get them from the appropriate manufacturer - motherboard
if built in or ATI, nVidea, etc.

Reply 3
I should have noticed earlier than I had an earlier BIOS. I updated
to A12 and it now works optimally.

Do any of you think this might have something to do with the display problem and possibly shutdown issues.

Steve

 

Yes, I agree with all possibilities. I thought I did mention the BIOS possibility and Video driver issue (may be I am mistaken with another thread?)
Anyhow, I never ever liked the driver updates suggested/offered by Windows update and do NOT use them! Windows simply doesn't know what is good for it (not yet at least)!
It is adviseable to consider Video Drivers update if the system is experiencing related problems.

Bios updates are the same way, anytime before installing an OS and/or after installing OS updates if I was to experience odd problems that could be BIOS related (I know it is not always easy to see the relativity), I'd check the mobo manufacturer's site for available BIOS updates and read about the things each update (newer than my version) was meant to fix to see if I need the update. Again, PhilliePhan believes Pegg is a seasoned PC user but I am not sure if she is up to a BIOS update?
But nonetheless the info MataSteve found made sense to me and very much worth looking into....
...Turco out...

 

I haven't done any updates from Windows for that reason and haven't specifically looked for any other driver updates (that's one reason I included the version # in my info to everyone.)

Thanks Steve for all your info. I'm going to look into it. AND yeah, I'll call Dell soon.

How sweet, PhilliePhan -- if "update" is the same as "flashing the BIOS" I did that on my new Dell before because it was acting so bizarre -- didn't fix the problem (and eventually I got a new tower anyway). I think this is only A7 on this PC

 

Could someone send me the instructions on how to remove a size 12 foot from the mouth?
I guess PP was right about you!

Anyhow, good luck with your 4-hour phone convo with Dell Tech Support...

 

If memory serves, what I said when I asked TL for help was something like this:

"Pegg will ask a lot of questions. Do not let that make you think she doesn't know what she is doing. She is very thorough." - Or something to that effect

Anyhoo, I still see nothing in the HJT logs to point to Malware or renegade software!
I, for one, am stumped. Haven't given up, but stumped nonetheless. Will continue to explore possibilities.

And, BTW, MY Dell is NOT possessed!!!

PP

 

I'll be sure to let you all know how it goes!

 

Hey Pegg,

Do you know what this is?

O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://D:\content\include\XPPatchInstaller.CAB

I do not know what this is. (I could be having a brain-cramp, though. It looks vaguely familiar)

PP

 

No-- I was wondering about that but no one said anything.

I downloaded Windows XP service pack 2 from my D drive using a CD...would it be some component from that?

If not, then I have no idea what it would be. I know DPF means "downloaded program files" and if the D: there mean my D drive, that is the only thing I have purposely put on my computer from the D drive. Other than that it has only had some CD-Roms of kids games.

 

I checked my "Add/Remove Programs" and I have "Intel(R) Extreme Graphics Driver 2" sitting there -- can't think of where it came from and it has the number "2" -- hmmmm?

I tried that site and it won't connect to anything....

 

This is where it took me,

http://support.dell.com/support/dow...emID=LAT_PNT_P3_C400&category=6&os=WW1&osl=EN

Steve

 

Thanks, Stevie-WONDER-ful!