explorer.exe hangs during shutdown

About two week ago, explorer.exe started hanging during shutdown. So far it's happened 9 out of 11 days. Naturally I ran anti-virus and spyware scans which didn't find anything. My HJT logs were also clean. So I used the search function to see what files had been modified, created, and accessed that day. That's when I discovered that my wbemess.lo_ file had been modified and questionable things were in wbemess.log. I suspect these things are related to Intel(R) PRO/100 VE Network Connection but I can't be sure. I don't know what that is exactly but ever since I bought this computer years ago it's had a Red X over the icon.

Then today I noticed that two more logs had been modified with questionable things in them. One is FrameWork.log and the other is Setupapi.log.

The only thing in the Event Viewer related to these problems is this:
The attempt to power off <computer> failed.
Event ID: 1073

But this only appears on 4 of the 9 days explorer.exe hung during shutdown.
------------------------------------------------

So this is what wbemess.log has been showing everyday when I start my computer:

(Thu Oct 23 00:05:03 2008.121562) : NT Event Log Consumer: could not retrieve sid, 0x80041002

---------------------------------------------------------------------------------
This is what wbemess.log shows everyday when I turn off my computer:

(Thu Oct 23 06:34:07 2008.23464843) : Unable to register event source 'Service Control Manager' on server ''. Error code: 6B5
(Thu Oct 23 06:34:07 2008.23464984) : Event consumer provider is unable to instantiate event consumer NTEventLogEventConsumer="SCM Event Log Consumer": error code 0x80041001
(Thu Oct 23 06:34:07 2008.23465015) : Failed the first attempt to retrieve the sink to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 80041001.
WMI will reload and retry.
(Thu Oct 23 06:34:07 2008.23465015) : Unable to register event source 'Service Control Manager' on server ''. Error code: 6B5
(Thu Oct 23 06:34:07 2008.23465046) : Event consumer provider is unable to instantiate event consumer NTEventLogEventConsumer="SCM Event Log Consumer": error code 0x80041001
(Thu Oct 23 06:34:07 2008.23465046) : Failed the second attempt to deliver an event to event consumer NTEventLogEventConsumer="SCM Event Log Consumer" with error code 80041001.
This event is dropped for this consumer.
(Thu Oct 23 06:34:07 2008.23465046) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Thu Oct 23 06:34:07 2008.23465078) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Thu Oct 23 06:34:07 2008.23465109) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Thu Oct 23 06:34:07 2008.23465109) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Thu Oct 23 06:34:07 2008.23465359) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Thu Oct 23 06:34:07 2008.23465390) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Thu Oct 23 06:34:07 2008.23465390) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Thu Oct 23 06:34:07 2008.23465390) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription
(Thu Oct 23 06:34:07 2008.23465390) : Dropping event destined for event consumer NTEventLogEventConsumer="SCM Event Log Consumer" in namespace //./root/subscription

----------------------------------------------------------------------------------------------------------------------------------------------------

FrameWork.log is showing this only for Oct 22:

Login Warning - provider with that name already existed, overridden with latest provider login (root\cimv2:Win32_ComputerSystemWindowsProductActivationSetting) 10/22/2008 06:10:44.122 thread:308 [d:\xpclient\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2235]
Failed to open registry key.
chsAdapterKey=SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\524291
chsLinkField=NetCfgInstanceID
chsLinkKey= 10/22/2008 06:22:10.075 thread:3376 [d:\xpclient\admin\wmi\wbem\providers\win32provider\providers\netadaptercfg.cpp.9531]
Call to fGetNtTcpRegAdapterKey failed 10/22/2008 06:22:10.075 thread:3376 [d:\xpclient\admin\wmi\wbem\providers\win32provider\providers\netadaptercfg.cpp.9464]
Failed to open registry key.
chsAdapterKey=SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\524291
chsLinkField=NetCfgInstanceID
chsLinkKey= 10/22/2008 06:22:10.075 thread:3376 [d:\xpclient\admin\wmi\wbem\providers\win32provider\providers\netadaptercfg.cpp.9531]
Failed to open registry key.
chsAdapterKey=SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\524291
chsLinkField=NetCfgInstanceID
chsLinkKey= 10/22/2008 06:22:10.075 thread:3376 [d:\xpclient\admin\wmi\wbem\providers\win32provider\providers\netadaptercfg.cpp.9531]
Login Warning - provider with that name already existed, overridden with latest provider login (root\cimv2:Win32_ComputerSystemWindowsProductActivationSetting) 10/23/2008 00:40:19.138 thread:3444 [d:\xpclient\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2235]
Login Warning - provider with that name already existed, overridden with latest provider login (root\cimv2:Win32_ComputerSystemWindowsProductActivationSetting) 10/23/2008 00:54:45.591 thread:3864 [d:\xpclient\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2235]
Login Warning - provider with that name already existed, overridden with latest provider login (root\cimv2:Win32_ComputerSystemWindowsProductActivationSetting) 10/23/2008 01:01:00.622 thread:468 [d:\xpclient\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2235]
Login Warning - provider with that name already existed, overridden with latest provider login (root\cimv2:Win32_ComputerSystemWindowsProductActivationSetting) 10/23/2008 01:13:08.747 thread:980 [d:\xpclient\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.2235]

-----------------------------------------------------------------------------------------------

Setupapi.log showed this only for Oct 22:

[2008/10/22 06:24:13 2208.427 Driver Install]
#-019 Searching for hardware ID(s): acpiapic_up
#-018 Searching for compatible ID(s): detectedinternal\acpi_hal,detected\acpi_hal
#-198 Command line processed: "C:\WINDOWS\System32\mmc.exe" C:\WINDOWS\SYSTEM32\devmgmt.msc /s
#I063 Selected driver installs from section [ACPIAPIC_UP_HAL] in "c:\windows\inf\hal.inf".
#I320 Class GUID of device remains: {4D36E966-E325-11CE-BFC1-08002BE10318}.
#I060 Set selected driver.
--------------------------------------------------------------------------------------------------

These files were accessed on Oct 22 at 6:13 am, 6:22 am, and 6:24 am.
iassvcs.dll
traffic.dll
syssetup.dll

I haven't made any changes to the computer. I haven't updated or upgraded anything except for my virus definitions.


Can anyone tell me what's going on here?