Re: I need help with an annoying problem at shutdown

Hi Frank,

Notepad.exe is normally the Windows text editor, maybe you use it. I use it
all of the time.

Notepad.exe can also be a trojan, like here for example...
http://www.pchell.com/virus/qaz.shtml

Notepad.exe normally exists in these folders:
C:\WINDOWS The Notepad.exe here is included for backwards compatibility for
old Windows 95 programs.

C:\WINDOWS\system32 The Notepad.exe located here is the one that normally
gets used. I.e. Start\Programs\Accessories\Notepad. Though either one is
legitimate and it doesn't really matter which one is used.

And a copy of Notepad.exe here...
C:\WINDOWS\system32\dllcache
or here...
C:\WINDOWS\ServicePackFiles\i386
used for backup purposes for Windows File Protection. In case one of the
others gets messed up some how. Usually you have one folder or the other.

If you type: notepad into Start | Run and click OK an Untitled - Notepad
should open. In fact, I am typing this message in an Untitled - Notepad
right this minute. I will copy this text and paste it into an Outlook
Express message later. ;-)

Normally notepad.exe should *not* be running when you shut down your machine
unless you started it on purpose.

If a legitimate notepad.exe is running (there can be more than one copy
running), you can see Untitled - Notepad listed in the Task Manager under
the Applications tab. To open Task Manager hit Ctrl + Shift + Esc, click on
the Applications tab. Locate Untitled - Notepad, right click it and select
Go To Process. Task Manager should open at the Processes tab with
notepad.exe highlighted.

If a legitimate copy of notepad.exe is running that was started from a *.txt
file, the title in Task Manager under the Applications tab will be listed by
the Name_of_the_file.txt and will be listed as notepad.exe under the
Processes tab.

Notepad.exe can also be running as Name_of_the_file.txt or .log or .ini or
any other of a number of legitimate file extensions.

Doing a Google search for "failed to initialize because Windows is shutting
down" and reading through *many* posts indicates some kind of malware.

Before you shutdown you need to use Task Manager to determine if any copies
of notepad.exe are running. If any are, did you start them? You can use
Task Manager to End Process or End Task.

Open Task Manager....
1. Ctrl + Shift + Esc or Ctrl + Alt + Del.
2. Click the Processes tab.
3. Right click notepad.exe and select End Process.
4. This message will popup:

WARNING: Terminating a process can cause undesired
results including loss of data and system instability. The
process will not be given the chance to save its state or
data before it is terminated. Are you sure you want to
terminate the process?

5. Click on YES and close the Task Manager.

Open Task Manager....
1. Ctrl + Shift + Esc or Ctrl + Alt + Del.
2. Click the Applications tab.
3. Right click Untitled - Notepad and select End Task.
4. This message may popup:

The text in the Untitled file has changed.
Do you want to save the changes?

5. Do whatever and then close the Task Manager.

There may be a legitimate reason that notepad.exe is running that you did
not start on purpose. Here is one example of that. But I would think that
you would notice this when you started your machine.
http://support.microsoft.com/kb/330132

Or if you have this problem...
Clicking the "Open With" or "Choose Program..." option always opens the file
with Notepad
http://windowsxp.mvps.org/openas.htm

I did not include those last two items for confusion, just to show that
there are other legitimate reasons for notepad to open, even if they open
notepad.exe because of some other problem.

You're going to have to play Sherlock Holmes and investigate:
* Why Notepad.exe is open when you shutdown?
* Is it a legitimate Notepad.exe?
* If not legitimate, what is it really?
* If it is legitimate, why is it running in the first place?

Hopefully the information here will help with that. ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:OADXh%23XTHHA.5108@xxxxxxxxxxxxxxxxxxxx,
Frank K. <fkozerski@xxxxxxxxxxx> hunted and pecked:
Thanks, Wes. I ran the scans in Safe and Normal Modes today and there were
no problems noted. Looking for other ideas.

Frank

"Wesley Vogel" <123WVogel955@xxxxxxxxxxx> wrote in message
news:OgtT8oUTHHA.3980@xxxxxxxxxxxxxxxxxxxxxxx
UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and
anti-spyware
software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode
can be a good idea. Some viruses and other malware like to conceal
themselves in areas Windows protects while using them. Safe mode can
prevent those applications access and therefore unprotect the viruses or
other malware allowing for easier removal.

''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''

Because of that some malware does not load in Safe Mode and is easier to
get
rid of.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:Od8bJmTTHHA.388@xxxxxxxxxxxxxxxxxxxx,
Frank K. <fkozerski@xxxxxxxxxxx> hunted and pecked:
Every time I shutdown the computer I get a notice that "Notepad.exe
failed
to initialize because Windows is shutting down". The shutdown then
proceeds as normal.

I'm less than a week into a clean reinstall of XP Pro.

My daughter gets the same message on her computer. I am running XP Pro.
My
daughter has XP Home. I searched the Knowledge base and groups.google
and came up with nothing.

Any help will be appreciated.

Frank

.

Relevant Pages

  • Re: I need help with an annoying problem at shutdown
    ... trying to start Notepad. ... .cmd files are Windows NT ... shows what's in the Task Manager ... either one is legitimate and it doesn't really matter which one is used. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: I need help with an annoying problem at shutdown
    ... I do use notepad almost every day. ... Notepad.exe is normally the Windows text editor, ... If a legitimate notepad.exe is running (there can be more than one copy ... To open Task Manager hit Ctrl + Shift + Esc, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: XP installed twice on same partition - how to uninstall one of the
    ... you can't really have more than one Windows installed on the same ... legitimate ways, like from one of tehtabs hanging off the System ... If you use NOTEPAD, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: DirectDBNotifyWndProc
    ... If you believe the issue is caused by HP's task manager, try uninstalling it or disbaling it if you can to see if it clears it up. ... I really wonder if anybody got irritated by my comments on Windows Defender ... Whenever it runs at the taskbar, ... Upon connection the PopUp window that says "Connected to xxx ...
    (microsoft.public.windowsxp.general)
  • Re: Shut down in Task Manager
    ... If using Classic Logon the Task Manager will not show the Shut Down menu. ... MS-MVP Windows Shell/User ... MD FACS hunted and pecked: ...
    (microsoft.public.windowsxp.help_and_support)