Results 1 to 21 of 21
-
02-17-2007, 02:37 AM #1Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
Computer shuts off at 10:30 every night?
So one of my computers just randomly shuts down at 10:30 at night...seems to be every night. It was at 10:30, 10:29, and 10:33. There is no program set to shut down the computer...it's doing it by itself.
Why would this be? If it was windows update, it would have a pop-up screen/installing new updates. There isn't a warning or anything....so I am guessing it's not that.
Thanks
-
02-17-2007, 07:17 AM #2Aspiring Evangelist
- Join Date
- Jan 2007
- Posts
- 356
Does it shut down at any other time other than around 10:30? My first thought was the MyDoom virus but I'm pretty sure that'll randomly shut down your computer, not at a specific time.
<<Please see rules for signature setup>>
-
02-17-2007, 12:55 PM #3Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
Well, for some reason it doesn't want to boot up after it's shut off itself.
The computer turns on, but the monitor doesn't show anything.
Somedays the computer works....it's not like the HD died, it just sometimes works and sometimes doesn't.
-
02-17-2007, 01:22 PM #4Web Hosting Evangelist
- Join Date
- Apr 2005
- Posts
- 503
That's the time I switch my lights off at night. Hmmmm.
Seriously, iirc, there is a setting to do that in Windows, I think. If you right click on the desktop and go to properties. Under screensaver or something you can set power management and hibernate and so on. Isn't there a setting for power down? I don't use Windows anymore so I'm going from memory.IE7 is nine years behind the standards or wrong.
But it works in IE!
"IE is a cancer on the web" -- Paul Thurott
"Avoid hacker-bait apps like Internet Explorer" -- Kevin Mitnick
-
02-17-2007, 01:34 PM #5Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
Yes, but that setting really doesn't mean anything now IMO. That is the turn off monitor/hard disks/system standby after an X amount of minutes of inactivity.
When I just try and start the computer nothing shows up...so it's not inactivity.
I'll be doing something on my computer and then it'll just die.
-
02-17-2007, 02:12 PM #6Web Hosting Master
- Join Date
- Feb 2003
- Location
- AR
- Posts
- 2,382
By chance are you doing something intensive on the computer when it shuts off? Video Editing? Gaming? If so, the extra load could be causing the shutdown and nonrestart problem..
Kevin
-
02-17-2007, 02:56 PM #7Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
Nope, actually just playing a flash game.
-
02-17-2007, 03:16 PM #8Web Hosting Guru
- Join Date
- Oct 2006
- Location
- Ontario, Canada
- Posts
- 302
Consider burning a LiveCD, and run scans from there.
Knoppix is a very good one, and will work fine if you're running XP. If you're using 2k, or have less than 256MB of RAM, go for Xubuntu, which I think has the scanning tools, too...
You can leave Knoppix running as long as you want, and it doesn't affect Windows unless you specificly tell it to go "rm rf ~/*" in the terminal (command lines). If the PC still shuts off at 10:30ish, it's a hardware problem. If not, it's a software problem.
-
02-17-2007, 04:03 PM #9Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
So run knoppix, and see if it crashes at 10:30?
-
02-17-2007, 07:09 PM #10Newbie
- Join Date
- Aug 2004
- Location
- Boston, MA
- Posts
- 19
check the event logs to see if anything funky is going on at that time.
-
02-17-2007, 09:25 PM #11Web Hosting Guru
- Join Date
- Oct 2006
- Location
- Ontario, Canada
- Posts
- 302
@Mark: Yeah. Knoppix running as a LiveCD is an entire operating system, so you can continue to do your work from it while waiting. You might have some problems if you're using Dialup, but it should workout fine.
You'll need to burn the 680MB~ file to a CD or DVD (at x4 speed prefferably) and then boot up your PC with the CD in the drive. The .iso file (don't open it at all, just save and burn) will take a while to download. I think even via Bittorent it can take something like 6 hours. You can buy a burnt CD from some stores, or get one from a Linux User's Group near you for the cost of a CD.
If it doesn't work, restart, but hold DEL, F2, F3, F4, or something at bootup, when you should see a logo or some general info. It will bring you to the BIOS. From there you set CDROM/DVDROM/DVDRW/CDRW as boot point 2, floppy as boot point 1, and hard drive(s) as boot point 3+. Then reboot, and it should bring you to the Knoppix login page.
And if it fails at 10:30, I suggest calling up a hardware technician and inspecting everything. Otherwise, it's just Windows with an infection/malfunctioning setting.
-
02-18-2007, 04:37 PM #12Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
Alright, what's happening now is that it's just dieing, but it keeps running.
Haven't done the knoppix thing yet, but the monitor just dies, everything shuts off (I assume, I go offline MSN etc)...but the case is still "running".
-
02-18-2007, 05:56 PM #13Web Hosting Guru
- Join Date
- Oct 2006
- Location
- Ontario, Canada
- Posts
- 302
That's an odd event. Since the power supply unit isn't dying, but the monitor is and the OS crashes, I guess the only thing that could happen is that something is cutting the power from the motherboard to the PSU?
-
02-18-2007, 09:18 PM #14Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
Well I've never heard of that happening...and this is a new computer too...like 2 months old. So you think a cable is loose/damaged between the motherboard + PSU?
-
02-18-2007, 10:22 PM #15Newbie
- Join Date
- Apr 2005
- Posts
- 29
Most important question..
Does this only happen at around 10:30pm?
Do you only play your flash game at around 10:30pm?
If no does it happen at other times?
Could be your graphics card overheating or a virus.(If this only happens at around 10:30pm)
Im leaning toward a virus. or someone controlling your computer and shutting things down.(ie Remote Desktop)
-
02-18-2007, 10:26 PM #16Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
Does this only happen at around 10:30pm? No, happens randomly now.
Do you only play your flash game at around 10:30pm? No, that was only the most recent time.
If no does it happen at other times? Just randomly surfing the web, doing nothing critical.
It's probably not remote desktop...it might be a virus, but I scanned once and nothing showed up.
-
02-18-2007, 11:14 PM #17WHT Addict
- Join Date
- Nov 2006
- Posts
- 168
I would guess malware - possibly a trojan. Someone remotely can easily shutdown your pc with the click of a button. They may also have installed a scheduler to shutdown your computer when they are not connected to your pc.
I am good at checking HijackThis logs if you want to post one. You could download from: http://www.merijn.org/files/hijackthis.zip
You may also wish to try a different anti-virus scan - Personally I think that kaspersky.com has the best detection rate. They have an online scan you could try. It doesn't fix the problems found (The online scan), but will let you know if there are any, and which if any malware you have. Again, I would be happy to check your hijackthis log if you wish to post one.
-
02-18-2007, 11:19 PM #18Managed Hosting Expert
- Join Date
- Jan 2004
- Location
- North Yorkshire, UK
- Posts
- 4,164
Your best bet is to get hold of a copy of sysinternals tcpview.exe, look for weird applications that are connecting out, etc. As others have said it is likely some form of virus.
Dan█ Dan Kitchen | Technical Director | Razorblue
█ ddi: (+44) (0)1748 900 680 | e: dkitchen@razorblue.com
█ UK Intensive Managed Hosting, Clusters and Colocation.
█ HP Servers, Cisco/Juniper Powered BGP Network (AS15692).
-
02-20-2007, 08:35 AM #19WHT Addict
- Join Date
- Jan 2007
- Posts
- 112
It may be a virus issue. You can check the log of HijackThis as zwolf told.
█ █ ComfortHost.NET Web Hosting Solutions
█ █ Shared, Reseller, VPS, and Dedicated Solutions
█ █ Blazing Fast Servers, 24/7 Live Chat & Ticket Support
-
03-02-2007, 05:26 PM #20Web Hosting Master
- Join Date
- Jun 2004
- Posts
- 2,853
Hijack this log -
Logfile of HijackThis v1.99.1
Scan saved at 1:25:37 PM, on 02/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\Pure Networks\Network Magic\nmapp.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pure Networks\Network Magic\nmsrvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\eHome\ehmsas.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\DISC\DISCover.exe
C:\Program Files\DISC\DiscUpdMgr.exe
C:\Program Files\DISC\DiscStreamHub.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.google.com/mail/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TY...RIO&pf=desktop
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [D-Link RangeBooster G WDA-2320] C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.trymedia.com (HKLM)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10...I.cab53083.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10...y.cab53083.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10...t.cab53083.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/.../GAME_UNO1.cab
O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames...1.cab53984.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewor...o.cab53083.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10...y.cab53852.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\puresp3.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Pure Networks Net2Go Service (nmraapache) - Unknown owner - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe" -k runservice (file missing)
O23 - Service: Pure Networks Network Magic Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\nmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
-
03-03-2007, 12:47 PM #21Web Hosting Master
- Join Date
- Dec 2004
- Location
- Toronto
- Posts
- 1,100
There's a program called Anti-Porn I installed on my cousins computer that does all these things to prevent him from breaking it again. It's hidden from program files folder even when hidden folders are turned on. Its not in processes and not in any toolbars. Maybe your parents/wife/husband secretly installed it?
Rene K.