Results 1 to 21 of 21
  1. #1
    Join Date
    Jun 2004
    Posts
    2,853

    Computer shuts off at 10:30 every night?

    So one of my computers just randomly shuts down at 10:30 at night...seems to be every night. It was at 10:30, 10:29, and 10:33. There is no program set to shut down the computer...it's doing it by itself.

    Why would this be? If it was windows update, it would have a pop-up screen/installing new updates. There isn't a warning or anything....so I am guessing it's not that.


    Thanks

  2. #2
    Join Date
    Jan 2007
    Posts
    356
    Does it shut down at any other time other than around 10:30? My first thought was the MyDoom virus but I'm pretty sure that'll randomly shut down your computer, not at a specific time.
    <<Please see rules for signature setup>>

  3. #3
    Join Date
    Jun 2004
    Posts
    2,853
    Well, for some reason it doesn't want to boot up after it's shut off itself.

    The computer turns on, but the monitor doesn't show anything.

    Somedays the computer works....it's not like the HD died, it just sometimes works and sometimes doesn't.

  4. #4
    Join Date
    Apr 2005
    Posts
    503
    That's the time I switch my lights off at night. Hmmmm.

    Seriously, iirc, there is a setting to do that in Windows, I think. If you right click on the desktop and go to properties. Under screensaver or something you can set power management and hibernate and so on. Isn't there a setting for power down? I don't use Windows anymore so I'm going from memory.
    IE7 is nine years behind the standards or wrong.
    But it works in IE!
    "IE is a cancer on the web" -- Paul Thurott
    "Avoid hacker-bait apps like Internet Explorer" -- Kevin Mitnick

  5. #5
    Join Date
    Jun 2004
    Posts
    2,853
    Yes, but that setting really doesn't mean anything now IMO. That is the turn off monitor/hard disks/system standby after an X amount of minutes of inactivity.

    When I just try and start the computer nothing shows up...so it's not inactivity.

    I'll be doing something on my computer and then it'll just die.

  6. #6
    Join Date
    Feb 2003
    Location
    AR
    Posts
    2,382
    By chance are you doing something intensive on the computer when it shuts off? Video Editing? Gaming? If so, the extra load could be causing the shutdown and nonrestart problem..
    Kevin

  7. #7
    Join Date
    Jun 2004
    Posts
    2,853
    Nope, actually just playing a flash game.

  8. #8
    Join Date
    Oct 2006
    Location
    Ontario, Canada
    Posts
    302
    Consider burning a LiveCD, and run scans from there.

    Knoppix is a very good one, and will work fine if you're running XP. If you're using 2k, or have less than 256MB of RAM, go for Xubuntu, which I think has the scanning tools, too...

    You can leave Knoppix running as long as you want, and it doesn't affect Windows unless you specificly tell it to go "rm rf ~/*" in the terminal (command lines). If the PC still shuts off at 10:30ish, it's a hardware problem. If not, it's a software problem.

  9. #9
    Join Date
    Jun 2004
    Posts
    2,853
    So run knoppix, and see if it crashes at 10:30?

  10. #10
    Join Date
    Aug 2004
    Location
    Boston, MA
    Posts
    19
    check the event logs to see if anything funky is going on at that time.

  11. #11
    Join Date
    Oct 2006
    Location
    Ontario, Canada
    Posts
    302
    @Mark: Yeah. Knoppix running as a LiveCD is an entire operating system, so you can continue to do your work from it while waiting. You might have some problems if you're using Dialup, but it should workout fine.

    You'll need to burn the 680MB~ file to a CD or DVD (at x4 speed prefferably) and then boot up your PC with the CD in the drive. The .iso file (don't open it at all, just save and burn) will take a while to download. I think even via Bittorent it can take something like 6 hours. You can buy a burnt CD from some stores, or get one from a Linux User's Group near you for the cost of a CD.

    If it doesn't work, restart, but hold DEL, F2, F3, F4, or something at bootup, when you should see a logo or some general info. It will bring you to the BIOS. From there you set CDROM/DVDROM/DVDRW/CDRW as boot point 2, floppy as boot point 1, and hard drive(s) as boot point 3+. Then reboot, and it should bring you to the Knoppix login page.

    And if it fails at 10:30, I suggest calling up a hardware technician and inspecting everything. Otherwise, it's just Windows with an infection/malfunctioning setting.

  12. #12
    Join Date
    Jun 2004
    Posts
    2,853
    Alright, what's happening now is that it's just dieing, but it keeps running.

    Haven't done the knoppix thing yet, but the monitor just dies, everything shuts off (I assume, I go offline MSN etc)...but the case is still "running".

  13. #13
    Join Date
    Oct 2006
    Location
    Ontario, Canada
    Posts
    302
    That's an odd event. Since the power supply unit isn't dying, but the monitor is and the OS crashes, I guess the only thing that could happen is that something is cutting the power from the motherboard to the PSU?

  14. #14
    Join Date
    Jun 2004
    Posts
    2,853
    Well I've never heard of that happening...and this is a new computer too...like 2 months old. So you think a cable is loose/damaged between the motherboard + PSU?

  15. #15
    Most important question..

    Does this only happen at around 10:30pm?
    Do you only play your flash game at around 10:30pm?
    If no does it happen at other times?

    Could be your graphics card overheating or a virus.(If this only happens at around 10:30pm)

    Im leaning toward a virus. or someone controlling your computer and shutting things down.(ie Remote Desktop)

  16. #16
    Join Date
    Jun 2004
    Posts
    2,853
    Does this only happen at around 10:30pm? No, happens randomly now.
    Do you only play your flash game at around 10:30pm? No, that was only the most recent time.
    If no does it happen at other times? Just randomly surfing the web, doing nothing critical.

    It's probably not remote desktop...it might be a virus, but I scanned once and nothing showed up.

  17. #17
    Join Date
    Nov 2006
    Posts
    168
    I would guess malware - possibly a trojan. Someone remotely can easily shutdown your pc with the click of a button. They may also have installed a scheduler to shutdown your computer when they are not connected to your pc.

    I am good at checking HijackThis logs if you want to post one. You could download from: http://www.merijn.org/files/hijackthis.zip

    You may also wish to try a different anti-virus scan - Personally I think that kaspersky.com has the best detection rate. They have an online scan you could try. It doesn't fix the problems found (The online scan), but will let you know if there are any, and which if any malware you have. Again, I would be happy to check your hijackthis log if you wish to post one.

  18. #18
    Join Date
    Jan 2004
    Location
    North Yorkshire, UK
    Posts
    4,164
    Your best bet is to get hold of a copy of sysinternals tcpview.exe, look for weird applications that are connecting out, etc. As others have said it is likely some form of virus.

    Dan
    █ Dan Kitchen | Technical Director | Razorblue
    █ ddi: (+44) (0)1748 900 680 | e: dkitchen@razorblue.com
    █ UK Intensive Managed Hosting, Clusters and Colocation.
    █ HP Servers, Cisco/Juniper Powered BGP Network (AS15692).

  19. #19
    It may be a virus issue. You can check the log of HijackThis as zwolf told.
    ComfortHost.NET Web Hosting Solutions
    Shared, Reseller, VPS, and Dedicated Solutions
    Blazing Fast Servers, 24/7 Live Chat & Ticket Support

  20. #20
    Join Date
    Jun 2004
    Posts
    2,853
    Hijack this log -

    Logfile of HijackThis v1.99.1
    Scan saved at 1:25:37 PM, on 02/03/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16414)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe
    C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    C:\Program Files\Pure Networks\Network Magic\nmapp.exe
    C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
    C:\WINDOWS\arservice.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Pure Networks\Network Magic\nmsrvc.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\eHome\ehmsas.exe
    c:\windows\system\hpsysdrv.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\DISC\DISCover.exe
    C:\Program Files\DISC\DiscUpdMgr.exe
    C:\Program Files\DISC\DiscStreamHub.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\System32\svchost.exe
    C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.google.com/mail/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
    O4 - HKLM\..\Run: [D-Link RangeBooster G WDA-2320] C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe
    O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O15 - Trusted Zone: http://*.trymedia.com (HKLM)
    O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10...I.cab53083.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
    O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10...y.cab53083.cab
    O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10...t.cab53083.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/.../GAME_UNO1.cab
    O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames...1.cab53984.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
    O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewor...o.cab53083.cab
    O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10...y.cab53852.cab
    O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\puresp3.dll
    O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Pure Networks Net2Go Service (nmraapache) - Unknown owner - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe" -k runservice (file missing)
    O23 - Service: Pure Networks Network Magic Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\nmsrvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

  21. #21
    Join Date
    Dec 2004
    Location
    Toronto
    Posts
    1,100
    There's a program called Anti-Porn I installed on my cousins computer that does all these things to prevent him from breaking it again. It's hidden from program files folder even when hidden folders are turned on. Its not in processes and not in any toolbars. Maybe your parents/wife/husband secretly installed it?
    Rene K.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •