3 minute Shutdowns w Immediate Sartups.

[Guest]

About 3 wks ago in Add/Remove, I deleted Roxio Creator v 6 and One Note
(Office 2003). Since then I'm experiencing slow shutdowns.

My Desktop Icons disappear real fast, then a Hang is most evident while
looking at a clean desktop.
Next it hangs at "Logging Off".

The other stages, Saving your Settings and Windows is shutting down, go
lickety Split.

I have one red X in Device Mgr being a disabled "1394 Net Adapter" .

After each Shutdown I can see new entries made at the same time in
Computer Mgmt\Event Viewer\Application there's two reoccurring Warnings,
Source USERENV, Category None, Event 1517 User System and 1524 User Owner.

Event Viewer\System\ Warning: Source IMAPI, Category None, Event 54, User N/A.

What do these warnings mean and are they related to my still unknown cause
of slow shutdowns.

In searching through the Registry there's still a nbr of Roxio entries,
Handler, Associate with, specifically under DEBUG there's 4 Roxio .DLL
entries.

In Windows\Debug, there's a luserenv.log 168KB which too bears the same time
as a shut down.
The last entries being:

USERENV(3d4.3d8) 03:51:03:343 MyRegUnLoadKey: Failed to unmount hive 00000005
USERENV(3d4.3d8) 03:51:03:359 DumpOpenRegistryHandle: 23 user registry
Handles leaked from
\Registry\User\S-1-5-21-1060284298-823518204-725345543-1003
USERENV(3d4.3d8) 03:51:03:359 UnloadUserProfileP: Didn't unload user profile
<err = 5>
USERENV(3d4.3d8) 03:51:03:359 MyRegUnLoadKey: Failed to unmount hive 00000005
USERENV(3d4.3d8) 03:51:03:359 UnLoadClassHive: failed to unload classes key
with 5
USERENV(3d4.3d8) 03:51:03:359 DumpOpenRegistryHandle: 71 user registry
Handles leaked from
\Registry\User\S-1-5-21-1060284298-823518204-725345543-1003_Classes
USERENV(3d4.3d8) 03:51:03:359 ReportError: Impersonating user.
USERENV(3cc.3d0) 03:51:47:421 CUserProfile::CleanupUserProfile: Ref Count is
not 0
USERENV(3cc.3d0) 03:51:47:421 CUserProfile::CleanupUserProfile: Ref Count is
not 0
USERENV(3cc.3d0) 03:51:47:421 CUserProfile::CleanupUserProfile: Ref Count is
not 0

Does any of this give anyone some ideas as to what might be causing slow
shutdowns and if so any suggestions to rectify the problem??
I'd like to BKU my Registry and delete ALL the Roxio entries but I'm
hesitant unless being advised. Perhaps a recommendation of a safe Registry
Cleaner I can buy.

I've bought Roxio V8 but didn't want to install it until I found the reason
or a solution for this problem. I've read there's a RoxioZap Cleaner but I
was unable to find it on their site. If indeed it even is Roxio leftovers
that causing this. Thx for any suggestions.

 

[Gerry Cornell]

Edna

For Event ID: 1517 download and install the User
Profile Hive Cleanup Service
Download details: User Profile Hive Cleanup Service
http://snipurl.com/5b61

UPHClean v1.5e readme.txt
http://snipurl.com/ko8m


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

WXP Pro SP2 ... Gerry I installed UPHClean 27Feb06 and the one Handler in
S-1-5-21 long nbr ending in 1003, that I thought was causing the problem is
being remapped by this program. I no longer see Event 1517. Hence, I no
longer have the slow shutdowns. I'd like to delete it but unsure if I delete
the main folder or the 0000 subfolder. It's the only named program in the
folder.
I tried this morning to reinstall the program that hangs 20-30 mins but no
improvement so I'll be deleting it again. I've deleted and installed so
often without success. There must be something missing in my WXP as UPHClean
is active often indicating events 1001, 1010, 1201, 1401, and 1412 all
remapping.
In Information Properties for this 1003 Handler, UPHClean is Event 1401 and
shows a file scshost.exe HKCU (0x33c).

I've now got easily a hundred of Warnings for IMAPI Event 54. Have u got any
suggestions on this one too? LOL Can't blame me for asking - u fixed the
first one! Thx VM for your excellent assistance Gerry.

 

[Gerry Cornell]

Edna

Please a copy of the Error Report for Event ID: 54.

A tip for posting copies of Error Reports! Run Event Viewer and double click
on the error you want to copy. In the window, which appears is a button
resembling two pages. Double click the button and close Event Viewer. Now
start your message (email) and do a paste into the body of the message. This
will paste the info from the Event Viewer Error Report complete with links
into the message. Make sure this is the first paste after exiting from Event
Viewer.


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

Neat! In case it's useful: I'm working on my Desktop. I've got a wireless
Linksys Router to my Notebook which presently has lost it's connection to the
INet or email. I'll have to ph Linksys T/S because clicking Repair doesn't
help.

Event Type: Warning
Event Source: Imapi
Event Category: None
Event ID: 54
Date: 3/2/2006
Time: 3:31:03 PM
User: N/A
Computer: SHARK
Description:
The description for Event ID ( 54 ) in Source ( Imapi ) cannot be found. The
local computer may not have the necessary registry information or message DLL
files to display messages from a remote computer. You may be able to use the
/AUXSOURCE= flag to retrieve this description; see Help and Support for
details. The following information is part of the event: .
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 36 00 04 80 ....6..€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Gerry, The following Error report appears say every 12 hrs. I haven't
followed the link pending my call to Linksys -
Event 54, etc has taken precedence.

Event Type: Error
Event Source: ipnathlp
Event Category: None
Event ID: 30013
Date: 3/2/2006
Time: 3:26:03 PM
User: N/A
Computer: SHARK
Description:
The DHCP allocator has disabled itself on IP address 192.168.1.100, since
the IP address is outside the 192.168.0.0/255.255.255.0 scope from which
addresses are being allocated to DHCP clients. To enable the DHCP allocator
on this IP address, please change the scope to include the IP address, or
change the IP address to fall within the scope.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Also, I was getting loads of Automatic Liveupdate Scheduler entries even
though I turned it off in Norton AV. I changed that to disable Profile 1,
Service Status" Stopped, Results: Service Status is on Automatic. One of
the Event problems said this was an interference which prompted me to change
the settings.

Good Luck and Thx for considering this assistance.

 

[Guest]

Gerry, I've just discovered I can reproduce that Warning Event 54 by clicking
on the Acronis desktop icon and Proceed to start the Image. However, It
doesn't start.

It goes into "Not Responding" mode, if left untouched it eventually, 20-30
mins later, becomes active again. I click Proceed and away it goes doing
it's thing as if nothing different had happened.
I've got every Roxio file out of the registry. When I delete Acronis,
presently installed, these two Registry areas have an Acronis entry (no other
named programs are in there) .. they don't delete (using A/Remove):

HKEY_LOCAL_MACHINE\System\ControlSet001\Enum\Root\LEGACY_TIFSFILTER\0000
HKEY_LOCAL_MACHINE\System\ControlSet003\Enum\Root\LEGACY_TIFSFILTER\0000

(Default) REG_SZ (Value not set)
Class Legacy REG_SZ Driver
Class GUID REG_SZ {8ECC0550-11D1-A537-0000F8753D1}
Config Flags REG_DWORD 0x00000000 (0)
Device desc REG_SZ Acroni TrueImage
Legacy REG_DWORD 0x00000001 (1)
Service REG_SZ tifsfilter

I don't know whether to delet the
LEGACY_TIFSFILTER folder or
just the 0000 folder or,
just remove the name as I did last time.

Sorry Gerry, I didn't know until now experimenting with a suspicion that the
Warning Event 54 was being produced by clicking on Acronis to make an Image.
....

As u won't know what to do to get this device driver to release, perhaps u
would tell me which folder to delete to get it outta here! Whatta a
disappointment!

 

[Guest]

Gerry: I erred in calling it a Device Driver. It's a Legacy Driver.