fed up with shutdown

**joshsiao** · December 12th, 2004, 15:00 PM

Ok, since I had gotten fed up with such a long shutdown, I took matters into my own hands and decided to look at the event viewer for some trace of the problem. And lo and behold, I found this log in the Applications log:

Windows saved user DELL8300\Joshua Siao registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I clicked on the link and found a Knowledge Base Article here.
It led me to a program by Microsoft used to pinpoint the app that prevents shutdown. A slow shutdown is apprently casued by Windows not being able to unload the registry due to a app still referencing from it. I got the program here and installed it and rebooted.

Then I looked at the logs again and found this:

DELL8300\Joshua Siao, S-1-5-21-1960408961-115176313-725345543-1004, CTHELPER.EXE (1060)

HKCU (0x74)

HKCU\Software\Classes (0x98)

HKCU\Software\Classes (0x10c)

HKCU\Software\Classes (0x110)

HKCU\Software\Classes (0x118)

HKCU\Software\Classes (0x128)

HKCU\Software\Classes (0x12c)

HKCU\Software\Classes (0x15c)

HKCU\Software\Classes (0x168)

HKCU\Software\Classes (0x16c)

HKCU\Software\Classes (0x178)

HKCU\Software\Classes (0x180)

HKCU\Software\Classes (0x238)

HKCU\Software\Classes (0x244)

HKCU\Software\Classes (0x248)

HKCU\Software\Classes (0x258)

HKCU\Software\Classes (0x2d8)

HKCU\Software\Classes (0x31c)

HKCU\Software\Classes (0x33c)

HKCU\Software\Classes (0x340)

.

In short the program CTHelper.exe is causing the problem. I know this to be from my Creative Sound Blaster driver installation so I ran msconfig and disabled it from startup options. Then I restarted and ha! Instant shutdown.

I think this bcraig can use this app to pinpoint his problem. I also ask any moderator or admin to delete my above post as I can declare it null and viod. Thanks.