Application Failed to initialize because the windows station is shutting down

Posted 2/21/2005 10:24 AM
User avatar

TacoBelle Member

Date Joined Nov 2016
Total Posts: 3
I have a clean install of Win XP with the service pack installed (have used 98 till now). I have AdAware, Spybot, CWShredder and the Microsoft Spyware scanner installed and up-to-date and have been running them. I have the Microsoft firewall, but haven't even had a chance to install anything else yet, it's so new. I also have AVG virus scanner. None of them indicate a specific problem (in fact the MS Spyware doesn't even find the regular spyware that AdAware and Spybot find). All my Windows Updates are up-to-date. I've been working on installing my software over the past 5 days when suddenly I began to get the following message:

"The application failed to initialize because the windows station is shutting down" when I shut down or reboot the computer.

It goes by so fast that it could be different than that, but that's what I've been able to see.

I searched around for solutions to this and have read that it's a trojan...Frustrating when I've never had one before and then suddenly on a brand fresh hard drive. Why?

Anyway I read some info on the Symantec page but couldn't find all of the things they said I'd find, when I looked. So I've run Hijackthis and am including a log. If you can help me, I certainly would appreciate it.


Logfile of HijackThis v1.97.7
Scan saved at 4:48:01 AM, on 2/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\DLMage\DnloadMage.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\ICQ\ICQ.exe
C:\Bin\Spyware Scanners\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NVIDIA nForce APU1 Utilities] NVATray.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [USRpdA] C:\WINDOWS\SYSTEM32\USRmlnkA.exe RunServices \Device\3cpipe-USRpdA
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [Mirabilis ICQ] C:\Program Files\ICQ\ICQNet.exe
O4 - HKLM\..\Run: [SpyHunter] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter.exe
O4 - HKCU\..\RunOnce: [ICQ] C:\Program Files\ICQ\ICQ.exe -trayboot
O4 - Startup: Download Mage.lnk = C:\Program Files\DLMage\DnloadMage.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download Links As... -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{60FF2FE1-B305-4D7F-AAAC-1A657AE4B329}: NameServer =
Posted 2/22/2005 3:34 AM
User avatar

Smiley_wiz02 Member

Date Joined Nov 2016
Total Posts: 1
my friend is having the same problem. That thing appears saying the exact same thing, and here is what she did to fix the trojan. Shes still in the process of fixing it, so email me if u have any questions (

On My Computer icon, right click, and go to Properties
Go to System Restore tab, and check the turn off system restore
click apply, and ok

restart ur computer in safe mode (when u restart, constantly press the F8 key)
start in safe mode, and then run a full scan.

once it finds it, delete the virus, and restart in normal mode.

Lets see if this help, hopefully it will
Posted 2/23/2005 4:09 AM
User avatar

TacoBelle Member

Date Joined Nov 2016
Total Posts: 3
I have been doing some more reading on this topic and I am not convinced this is a virus at all. I went to and did a search in the Knowledge Base and although the specifics weren't the same, they didn't indicate that it was a virus at all. I am not sure what to do. I thought the log would tell if there truly is a trojan or not. Since I don't know what to delete, the advice doesn't really help me. I will continue to research till I know for sure. Thanks for trying to help.
Posted 2/23/2005 5:08 PM
User avatar

anthonywest Member

Date Joined Nov 2016
Total Posts: 1
I agree with TacoBelle's hypothesis.

I also had a clean, well-protected WinXP Pro SP2 setup.
I stalled some software (actually Blackberry Desktop Manager 4.0).
Norton Antivirus complained that the install was about to mess with Windows.
I allowed this (in retrospect, not good).

Now, Windows won't stay up -- every time I reboot, it starts up, gets to a point where it's starting the services, then says "Can't start application because the windows station is shutting down".

It does start and run in SAFE mode with networking.
I have run Norton Antivirus (I have the latest LiveUpdated virus definitions). No virus found.
I also found references to the possibility that my machine might have become infected with the Sasser Work or variation (on the Microsoft Windows XP support center site). Downloaded and ran both Symantec's and Microsoft Sasser Worm removal tools. Neither tool found any worm.

So, at this point, it's highly unlikely that it's a known virus. Instead, my theory is that something has changed something in the c:\windows directory.
Oh, and, also, reverting to a previous known-good system restore point was done successfully, but didn't fix the problem. So it's not a registry issue, but a base file issue.

OK, any ideas?

Posted 2/23/2005 9:40 PM
User avatar

TacoBelle Member

Date Joined Nov 2016
Total Posts: 3
I wonder if uninstalling the program that was installed before the error message started would help. I'm considering that myself. It doesn't always help, but it's possible. If you try it, let me know if it works! I can do without the programs I installed or buy a newer version.
Posted 9/3/2006 5:35 AM
User avatar

mell423 Member

Date Joined Nov 2016
Total Posts: 1
I'm having the same problem but a bit different. Whenever the computer shuts down or restarts I get the same message "the application has failed to initialize because windows is shutting down" but I havent recently installed anything to the computer to have caused the problem and just as everyone else said Ive ran virus software and no virus is found. I have no clue how to get rid of the message or what is causing it. Has anyone fixed this with their computer yet?? Thanks! :smile:
  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Monday, January 22, 2018, 1:25 PM (GMT +1)
There are a total of 61,550 posts in 13,546 threads.
In the last 3 days there were 0 new threads and 4 reply posts.

Who's online

This forum has 38,190 registered members. Please welcome our newest member, ashutoshweb3.
There are currently no users on-line.
We use cookies to ensure that we give you the best experience on our website. By continuing to browse, we are assuming that you have no objection in accepting cookies. You can change your cookie settings at any time.