Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Automatic system shutdown


  • Please log in to reply
7 replies to this topic

#1 Lemmy

Lemmy

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:25 AM

Posted 18 May 2010 - 03:49 AM

Hi,

I've a very strange issue on my system. It happens from time to time and I can't figure out what's the reason. I've recognized the following steps:
- command prompt opens automatically, window title says "shutdown.exe"
- a window opens informing me that the system is going to shutdown in 30 seconds, there is no way to cancel the operation
- the system restarts

I've also figured out that execution of a shutdown.exe -a terminates the shutdown operation if executed within 30 seconds. Antivir (free version) and MC Affee don't find anything.

Thanks for your advise!

Regards,
Lemmy

BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,299 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:25 PM

Posted 18 May 2010 - 06:19 AM

System manufacturer and model?

Have you checked Event Viewer for any errors which might shed some light?

How To Use Event Viewer - http://www.bleepingcomputer.com/forums/t/40108/how-to-use-event-viewer/

Seems that something is triggering the shutdown process built into XP.

Seems to me that this was a behavior associated with Blaster Worm, but any system with SP2/SP3 installed...should not be vulnerable to Blaster.

Louis

#3 Lemmy

Lemmy
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:25 AM

Posted 18 May 2010 - 06:44 AM

Hi,

It's a Lenovo T61 running XP Pro SP 3. There are some entries in the Event Log but they doen't ring a bell in my head e.g.

Google Update
The description for Event ID ( 20 ) in Source ( Google Update ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Network Request Error.
Error: 0x80040801. Http status code: 0.
Url=https://tools.google.com/service/update2
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801..

Regards,
Lemmy

#4 hamluis

hamluis

    Moderator


  • Moderator
  • 56,299 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:09:25 PM

Posted 18 May 2010 - 07:06 AM

Well...based on that, I would have to uninstall any Google software that I might have installed...and I would assume that it's damaged and unable to function appropriately.

If no Google product is installed which might have an update capability...then that detail makes no sense to me.

Louis

#5 Lemmy

Lemmy
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:25 AM

Posted 18 May 2010 - 07:31 AM

I've had Google Crome installed. I've removed it. I'll let you know if this solved the shutdown issue.

#6 MendMyComputer

MendMyComputer

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:25 AM

Posted 18 May 2010 - 08:02 AM

Check that in your start-up folder there isnt a shutdown.exe...

Also, to prevent the shutdown from happening do the following...

start > run > cmd > then type: shutdown -a

#7 Lemmy

Lemmy
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:25 AM

Posted 18 May 2010 - 10:32 AM

There is nothing in the startup folder.
Executing shutdown -a says:

Unable to abort the system shutdown because no shutdown was in progress.

It only works when the shutdown counts down.

#8 Lemmy

Lemmy
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:25 AM

Posted 18 May 2010 - 11:02 AM

Deinstallation didn't solve the issue it just happened again. There weren't any strange events in the log.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users