Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer Restarts On It's Own :(


  • Please log in to reply
23 replies to this topic

#1 Deanemachine

Deanemachine

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:04:01 PM

Posted 27 August 2006 - 12:08 AM

My computer has an annoying habit of restarting itself whenever it pleases. I could be in the middle of typing up a document and it restarts. This is a problem I have always had with this computer (been 2 and a half years). I have an AMD Athlon processor running on windows xp. The problem tends to go away once the computer has been on for a couple of days, but if I am just turning it on, it can restart itself upwards of 5-10 times in a day! The fan seems to be working ok, and a friend of mine suggested it could be a memory dump problem. Any clues?

P.S. Kudos to bleepingcomputer. Several months ago I had major problems with an aggresive trojan horse that made my life a living hell. Thanks to the step by step help I recieved here, my computer has been back to normal

I created a HJ This log. Haven't had any restart problems in a few days, but trust me, they will be back without help

Logfile of HijackThis v1.99.1
Scan saved at 1:05:02 AM, on 8/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Common Files\AOL\1154319636\ee\AOLSoftware.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\hijack this\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1154319636\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O15 - Trusted Zone: www.aim.com
O15 - Trusted Zone: http://www.download.com
O15 - Trusted Zone: http://www.jayloden.com
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O15 - Trusted Zone: http://www.snapfiles.com
O15 - Trusted Zone: http://www.windowsupdate.com
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as...rl/LSSupCtl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1121703115842
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as...rl/SymAData.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

BC AdBot (Login to Remove)

 


m

#2 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:01:01 PM

Posted 27 August 2006 - 12:38 AM

Can you provide any error messages that you may be getting when your computer restarts?
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#3 fleamailman

fleamailman

  • Members
  • 200 posts
  • OFFLINE
  •  
  • Location:geneva switzerland
  • Local time:10:01 PM

Posted 27 August 2006 - 01:17 AM

Often the comp goes too fast to see the error message so this will help for that then.

1. Go to Start -> Control Panel -> System (Windows+Pause works, too)
2. Go to Advanced
3. Under the Startup and Recovery section, click Settings...
4. Under System Failure un-check "Automatically restart"

Edited by fleamailman, 27 August 2006 - 01:19 AM.

everyday is a gift

#4 Deanemachine

Deanemachine
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:04:01 PM

Posted 27 August 2006 - 09:53 AM

I used to get an error message saying that my computer has recovered from a serious error, but I don't get that anymore. I unchecked "automatically restart". Will this solve things? Or will this just cause for another problem?

#5 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:04:01 PM

Posted 27 August 2006 - 10:52 AM

Will this solve things? Or will this just cause for another problem?

Wow. I don't think the advice you get here at BC will cause more problems, do you?

If you have followed the directions correctly the automatic reboot feature will be turned off. What that means is that the next time (if there is a next time) the computer encounters a fatal error instead of rebooting it will present you with a blue screen with a message on it.

The 'Blue Screen of Death' (or BSOD) is refered to by Microsoft as a Stop Message. They can occur for many reasons. In order to diagnose it's cause we need as much info as you can give about the stop message. Please write it down and post it back here the next time it happens. In particular, it helps to have the somewhat cryptic series of numbers about half way down the blue screen that have this sort of format:

0x0000008E (Followed by four other sets of numbers in parenthesis.)

It is also helpful to know the answers to these questions:
  • What are you doing when this happens (are you on line, starting the computer, etc).
  • Does it always happen at the same time?
  • Is it always the same message, or is it a different set of numbers each time?
  • Have you added any hardware or software lately?
  • Are you experiencing any other buggy behavior from this computer (such as it runs slower than it used to, etc)?

ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!


#6 Deanemachine

Deanemachine
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:04:01 PM

Posted 04 September 2006 - 05:27 PM

OK so my computer restarted by itself twice today. This is the first time it has happened since my original post which is odd since it usually happens more often. Here is the message I recieved upon my first blue screen..

IRQL NOT LESS OR EQUAL

0x0000000A(0x00008EE1, 0x00000002, 0x00000001, 0x804EDCF4)

Begin physical memory dump
Memory dump complete

-Then my computer restarted itself AGAIN just a couple minutes later, the message was similar, but the numbers were a bit different the second time around

0x0000000A (0x227c20000, 0x00000002, 0x00000000, 0x804DC25D)

I don't have any new hardware on my computer, but this is a problem I have had for a couple of years now. Any ideas?

Edited by Deanemachine, 04 September 2006 - 05:28 PM.


#7 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:04:01 PM

Posted 04 September 2006 - 07:37 PM

It would appear then to be a driver issue. You can read the following article, see if anything in there applies to your situation.

http://support.microsoft.com/kb/314063/
ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!


#8 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:03:01 PM

Posted 04 September 2006 - 09:29 PM

Go to your device manager and look through the various categories to see if there is a yellow or red warning icon present.

If there is, update the driver if there is a newer one available or rollback the driver if there is not. If neither a newer or older driver is available delete the device, reboot and let Windows find and reinstall it uising Windows Updates as one of the sources to look for the driver.

To access the device manager go to the control panel, click system, click hardware, then click on device manager.

Edited by Enthusiast, 04 September 2006 - 09:29 PM.


#9 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,072 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:03:01 PM

Posted 05 September 2006 - 09:44 AM

Since this is a continuing problem, please check this how-to out and let us know what you find: http://www.bleepingcomputer.com/forums/t/40108/how-to-use-event-viewer/

Next, search your hard drive for .dmp or .mdmp files. If you find any, pick the newest one and use this link to generate an analysis of it: http://forums.majorgeeks.com/showthread.php?t=35246 (FYI - when it asks for "!analyze -v", it goes in the blank area at the bottom of the debugger window.)

Then copy and paste the results into your next post. This may help us to isolate the driver that's causing this problem.

And, if all else fails, here's my driver update sequence that I use when I can't figger out which one it is:

Windows Update
motherboard/chipset drivers
video drivers
network drivers
sound drivers
any other drivers for devices built into the motherboard
any other drivers for devices plugged into the motherboard inside the case
any other drivers for devices plugged into the computer (USB/1394, Serial, etc).
any other drivers that I may have forgotten.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#10 Deanemachine

Deanemachine
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:04:01 PM

Posted 07 September 2006 - 11:26 AM

My drivers all look updated and I didn't see anything that would indicate there were any problems with any of them. I don't want to roll-back to any previous settings because this is an old problem. My computer just restarted again and this is what I got:
0x000000D1 (0xF042cc68, 0x00000002, 0x00000001, 0xF79BBEE7)
HIDCLASS.SYS - Address F79BEE7 base a F79B9000, Datestamp 41107d52

I checked in the event viewer and had several events that happened around the time of shutdown, one of which under System being
System- The computer has rebooted from a bugcheck. The bugcheck was 0x100000d1 (0xf042cc68, 0x00000002, 0x00000001, 0xf79bbee7) A dump was saved in C:\\Windows\Minidump\Mini090706-01.dmp

Under Application I get

The symantec settings manager service is starting

Gotta post quick before I restart again..ideas?

#11 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:03:01 PM

Posted 07 September 2006 - 12:04 PM

Being that it mentioned Symantec, what Symantec programs are you running?

#12 Deanemachine

Deanemachine
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:04:01 PM

Posted 07 September 2006 - 01:41 PM

I believe the only Symantec product I have on here is Norton Antivirus 2006, but this is a problem that dates back to before I had Norton

#13 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:03:01 PM

Posted 07 September 2006 - 01:50 PM

Do you have a RAID controller installed on this computer?

STOP:0xD1" Error Message When You Start Your Windows XP-Based Computer
http://support.microsoft.com/?kbid=316208&sd=RMVP

#14 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,072 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:03:01 PM

Posted 08 September 2006 - 10:25 AM

HIDCLASS.SYS is a USB driver file for your USB ports. Does this problem occur when anything is plugged into the USB ports? Does it occur when nothing is plugged in? Can you see if it's a particular device that causes this?

So, I'd suggest updating your motherboard/chipset drivers (and the drivers for your USB hardware). You can locate these at the manufacturer's website in the Support section.

Also, you can go here: C:\\Windows\Minidump\Mini090706-01.dmp and copy that file to your Desktop (or another computer if yours won't stay up for that long). Then, go and read this link: http://forums.majorgeeks.com/showthread.php?t=35246

Download the program (it's free) and run it according to their directions. Post the results here - it will probably confirm that it's the USB driver.

I believe that the Symantec entry is a normal one and not related to the crash (unless, when it started was when the computer crashed).

Because of what the Symantec products do, it's possible that this could cause the problem. The solution for that is to uninstall the Symantec products and see if it fixes it. A good, free antivirus is AVG Free (available here: http://free.grisoft.com/ IMO it's better than Norton.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#15 Deanemachine

Deanemachine
  • Topic Starter

  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:04:01 PM

Posted 11 September 2006 - 03:25 PM

Sorry for the late reply, I haven't had much time at home with work and all. I ran the command dump program, and you were right, it came up with the USB driver
Probably caused by HIDCLASS.SYS ( HIDCLASS ! HidpCopyInputReportToUser+5b )
I always have something plugged in to my USB ports. My wireless keyboard and mouse are plugged in there, although I didn't really use the USB ports much at the time of the start of the problem. I don't have a RAID controller, or any other controller, hooked up, as previously suggested. I have an AMD processor and I went to the website for driver updates, but the program I downloaded on there said I need Windows XP to run it, but thats what I have! I dont get that, but I'll keep looking around for updates. Should I post more information from the debugger program, or did I give enough?

Edited by Deanemachine, 11 September 2006 - 06:21 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users