Go to www.zonealarm.com download the latest issue of the free zone alarm firewall. Close all open programs, using "Ctrl+Alt+ Delete (once), leaving only "Explorer" & "Systray" running, pause the "Task Scheduler" in the systray (by the clock). Install the ZA and tell it you will set program permissions manually. When it comes time for app's. to start getting your permission to access the internet click "Yes" to only those known programs (ones you know to be safe like IE, or your anti-virus, etc.). Say no to the rest! Look especially for Rundll.exe or Rundll32.exe( its a trojan that is used in Denial of Service "DOS" attacks, the 2 ll's are really ii's, but look the same in most windows fonts (is not a normal windows .dll program, but looksvery much like 1), Or "Windows Explorer", or any "strange program" you don't readily recognize as needing to contact the net. (Learn to just say (NO!), unless of course you know specifically what the program is and that it needs access because you asked it to go online!)
After you have that up & running and have given minimum permissions, try to shut down normally. If you can, then you just solved the "call home" & the "anti-shutdown" coding aspect of that nasty bug due to the fact you virtually unplugged it's connection, but you need to get rid of the bug (it's a deadly nasty thing), it will litterally give you a screen message (mine said - NOW SEE WHAT YOU GET FOR CATCHING ME ****?(name deleted). The writer probably used a video benchmark tool rewritten somehow - all kinds of circles & squares, then the typefaced text message, (all in nice pretty colors),if you try to delete the (affected file), and then it sorta melts your DOS sector (only time I'd ever seen that done).
The only way I found then to deal w/ the problem was to reformat (fdisk) the drive (use Norton's AV from the CD first to eradicate the bug first, then format & reinstall Windows.