Author Topic: Shutdown/Then Restart Problem  (Read 776 times)

Offline Bandane

  • Newbie
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Shutdown/Then Restart Problem
« on: March 05, 2005, 11:33:33 AM »
Hi all. Hope you can help me with this recent problem my system has developed. (System is WinXP Pro, IE 6, with SP-2.) When I connect to _directly_ to IE via my desktop, I get my homepage fine, but after about 3 seconds, the 'puter shuts down and restarts. However, if I connect "indirectly" to the Internet thru one of my several desktop specific-site shortcuts, I don't have any shut down problems. I am not having any problems with OE--email is working fine. The other "anomoly" is that the 'puter also exhibits the same sudden shutdown behavior when I try to run my AVG antivirus program--program runs for about 15 seconds, then the 'puter suddenly shuts down and reboots. (This is the only virus program I have installed.) I can successfully run my Spybot, Ad-Aware, and MS Antispyware programs for spyware/malware, and nothing is detected. I have the "free" version Zone Alarm firewall installed, with the XP firewall turned off. I checked my Event record to see if I could find out what "Event" might be causing this problem, and I see that I am getting various event IDs at different shutdowns, but they all reference that the "database engine stopped". Some of the specific event ID's are 100, 101, 102, 103, 300, 301, & 302. I can post a "Hijack This" log if requested, but I don't see anything on there myself that might be causing this problem. Any help in diagnosing and fixing this problem would be greatly appreciated!! I am on line right now, and can respond back immediately, unless the system totally shuts down on me! Thanks. (PS: Have cable internet connection.)

Offline Bandane

  • Newbie
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Shutdown/Then Restart Problem
« Reply #1 on: March 06, 2005, 02:12:30 PM »
Hi all. I never received any responses on my original post, so I decided to add my "HijackThis" report so maybe someone can help me figure this problem out. Thanks. Bandane

Logfile of HijackThis v1.99.0
Scan saved at 1:05:46 PM, on 3/6/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Offline Markm

  • Newbie
  • *
  • Posts: 9
  • Karma: +0/-0
    • View Profile
Shutdown/Then Restart Problem
« Reply #2 on: March 06, 2005, 02:17:01 PM »
I just downloaded the AVG program.  Computer restarts during the virus scan too.  Tried it 3 times, seems to restart at about the same time everytime.  I don't know what the hell is going on.  Computer restarts when I try to open IE too.

Guest_Bandane_*

  • Guest
Shutdown/Then Restart Problem
« Reply #3 on: March 06, 2005, 08:19:18 PM »
EXACTLY!! My AVG gets to about 3 minutes into the scan each time, and the 'puter shuts down and reboots!! I'm thinking it's gotta be a virus or highjacker, or something like that. I think I will try installing a different antivirus program and see what happens. It's weird that none of my spyware/malware programs find anything, though! Let me know if you figure it out, and I'll do the same for you. Later.

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Shutdown/Then Restart Problem
« Reply #4 on: March 06, 2005, 08:21:30 PM »
Have you tried running AVG in Safe mode?
What version of AVG are you running?
I don't even see it running in your processes from your Hijackthis log
« Last Edit: March 06, 2005, 08:23:52 PM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Bandane

  • Newbie
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Shutdown/Then Restart Problem
« Reply #5 on: March 06, 2005, 08:39:57 PM »
I was using the AVG7.0 Free Version. Yes, I tried it in safe-made. I have since uninstalled it (and several other programs to simplify my hunt for the possible sourceof the problem), so that's why you don't see it in my running processes. I'm getting ready to install another AV program (either or both Panda and Kapersky) to see what they find.

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Shutdown/Then Restart Problem
« Reply #6 on: March 06, 2005, 08:47:37 PM »
Why not try the free version of AVAST

It comes with 6 scanners, most of which you may want to shut down
But make sure to keep the Standard shield
and Internet mail scanner running
If you use Outlook you will want to run the Outlook scanner
Outlook Express uses the Normal Internet Email scanner

Let me know if you decide on it and if it stops when scanning
Here's a link if you decide to use it
http://www.avast.com/eng/down_home.html

Supply them with a legit email address when registering
They will email you a Registration number
That I believe you have 3 months to initiate

If you have any questions let me know

By the way, you may want to update to the latest version of Hijackthis 1.99.1
You can get it from my Signature below
And post the log from it
May or may not show something new

One last thing
Right click MyComputer>>Left click Properties>>
Under the Advanced tab
Startup and Recovery>>Settings>>Uncheck Automatically Restart

Maybe when an error happens the system won't restart and give you a clue to what's going on
« Last Edit: March 06, 2005, 08:51:36 PM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline Bandane

  • Newbie
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Shutdown/Then Restart Problem
« Reply #7 on: March 06, 2005, 08:56:17 PM »
Okay, Avast it will be. And thanks for letting me know that there's a new version of Highjack This. I will do as you say regarding the auto restart. Unfortunately, I have to get ready for some people coming over, so I won't be able to do more on the 'puter today. Will get back on it first thing tomorrow. Talk to you later, and thanks for the help!!!!

Offline Markm

  • Newbie
  • *
  • Posts: 9
  • Karma: +0/-0
    • View Profile
Shutdown/Then Restart Problem
« Reply #8 on: March 07, 2005, 12:59:14 AM »
I ran AVAST.  It told me to run a boot check upon startup.  I did that, it identified 5 bad files that I deleted.  Virus is still detected by AVG.  AVG comes up with a message that says Virus Detected! while opening file C_\\WINDOWS\system32\vtd_16.exe
Trojan horse BackDoor.Small.18.AP.  AVG won't let me heal or delete this file.  When I run the regular AVAST or the AVG, it still restarts the computer when I do a regular scan.  My computer gave me this message when it forced me to restart:

Technical Info:  STOP: 0X0000008E (OXCOOOOOO5, OXF88F64BF, OXEF9F1B58, 0X00000000)

vdnt32sys-Address F88F64B4 base at F88F6000, Datestamp 4206816f

Beginning dump of Physical Memory
Physical memory dump complete

Offline Markm

  • Newbie
  • *
  • Posts: 9
  • Karma: +0/-0
    • View Profile
Shutdown/Then Restart Problem
« Reply #9 on: March 07, 2005, 01:03:50 AM »
forgot to add that I searched for the vtd_16 file in the folder and with the search function and was unable to locate it.

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Shutdown/Then Restart Problem
« Reply #10 on: March 07, 2005, 01:57:11 AM »
Markm, check your other post

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here