CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Random shut down

 
Post new topic   Reply to topic       All -> FavForums -> Windows NT/2000/2003/XP [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
mcrodgers

Sergeant
Sergeant


Joined: Aug 07, 2004
Posts: 114
Location: USA

PostPosted: Sat Jan 05, 2008 1:36 pm    Post subject: Random shut down
Reply with quote

No matter what I'm doing, computer will just shut down. What's up with that??

Back to top
View users profile Send private message
John B.

1st Responder


Joined: Dec 03, 2006
Posts: 843
Location: Netherlands
1st Responders

PostPosted: Sat Jan 05, 2008 2:06 pm    Post subject:
Reply with quote

Hi mcrodgers,

Some more information on your system would be nice.

What brand is it? What are the specifications?

Did you install any new software, hardware or drivers recently? Do you get any errors?

Do you know if it could be the temperature of the system? How long has it been since you cleaned your system on the inside (dusted out)?

What security software are you running?

Greets, John.


_________________
Trained by MalWare Removal

Proud member of ASAP - Alliance of Security Analysis Professionals

Proud member of UNITE - Unified Network of Instructors and Trusted Eliminators
Back to top
View users profile Send private message
mcrodgers

Sergeant
Sergeant


Joined: Aug 07, 2004
Posts: 114
Location: USA

PostPosted: Sat Jan 05, 2008 2:23 pm    Post subject:
Reply with quote

I've tried to answer this post three time, but keep getting an "invalid verification code" message. Hope this goes through.

Pentium II, XP, no new hardware/software/drivers. Zone Alarm free, AVG free, SpyBlaster. I don't know how to gauge the internal temperature and I dust out the interior every three months like clockwork.

Back to top
View users profile Send private message
grsamf

1st Responder
Site Moderator

Joined: Oct 08, 2006
Posts: 1275

1st Responders Moderators Premium

PostPosted: Sat Jan 05, 2008 4:52 pm    Post subject:
Reply with quote

Go to Start > Control Panel > Performance and Maintenance > System. Click on the "Advanced" tab and under "Startup and Recovery", click on "Settings". Under "System Failure" uncheck “Automatically Restart”. Be sure that “Write an event to the system log” is checked. That will force a BSOD and will give you error codes and messages that will be useful in diagnosing your problem. Copy them down and include them in your next post.


_________________
How to be wise in two easy steps: 1) Think of something really stupid to say. 2) Don't say it.

The better I get to know my fellow lawyers, the more I love my dog.
Back to top
View users profile Send private message
mrsugg

Special Response Team
Premium Member

Joined: Aug 15, 2006
Posts: 2758
Location: Somewhere, over the rainbow...
Premium SRT Team F@H

PostPosted: Sat Jan 05, 2008 5:42 pm    Post subject:
Reply with quote

Hi mcrodgers,
Those suggestions are all good and here are some more. The more information we have, the better.

Open task manager (CTRL+ALT+DEL) and see if anything is using a large percentage of your cpu. If so, let us know what it is.

Click on start > run. Type eventvwr in the box and press "Enter". Check the system and application logs and let us know if there are any that have X's by them.

Download Process Explorer. Look at the top of the main screen and let us know if you are getting any hardware interrupts or default procedure calls (and what the numbers are).

Back to top
View users profile Send private message
mcrodgers

Sergeant
Sergeant


Joined: Aug 07, 2004
Posts: 114
Location: USA

PostPosted: Sat Jan 05, 2008 6:13 pm    Post subject:
Reply with quote

Another shut down. Here is the error message:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 1/5/2008
Time: 12:58:34 PM
User: N/A
Computer: YOUR-6EQRFTH4NU
Description:
The following boot-start or system-start driver(s) failed to load:
SAVRT
SAVRTPEL
SYMTDI

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Back to top
View users profile Send private message
mrsugg

Special Response Team
Premium Member

Joined: Aug 15, 2006
Posts: 2758
Location: Somewhere, over the rainbow...
Premium SRT Team F@H

PostPosted: Sat Jan 05, 2008 6:27 pm    Post subject:
Reply with quote

Did you follow that link and did it tell you anything useful?

Those drivers are all associated with a Symantec Product. Are you having any troubles with it?


_________________
"We hold these truths to be self-evident, that all men are created equal, that they are endowed by their Creator with certain unalienable Rights, that among these are Life, Liberty and the pursuit of Happiness." -- Thomas Jefferson
Back to top
View users profile Send private message
mcrodgers

Sergeant
Sergeant


Joined: Aug 07, 2004
Posts: 114
Location: USA

PostPosted: Sat Jan 05, 2008 8:18 pm    Post subject:
Reply with quote

Interesting. I have no Symantec products installed. However, this was a hand me down that I've had for several years. The prior owner may have had a Sym product. The programs were uninstalled, but the disk was not reformatted. No problems like this until now.

Back to top
View users profile Send private message
johnlgalt

Special Response Team
Premium Member

Joined: Feb 27, 2007
Posts: 1419

Premium SRT

PostPosted: Sat Jan 05, 2008 8:49 pm    Post subject:
Reply with quote

That is weird. You have had this product for several years, and yet you just now start having problems - because those files are (the first 2 anyway) specific to Symantec AntiVirus Corporate Editions (SAVRT = Symantec AntiVirus Real Time) (perhaps among other Symantec programs).

To me, it sounds like either one of two things has happened - a System Restore has brought back Registry entries for a previously installed SAV (Symantec Antivirus Product) or else a Malware has installed itself that targets SAV and is trying to load / misload (sorry, can't think of a better word Razz) a non existent SAV installation. Now, I have not heard of anything remotely like the second animal I just described, but I would not be all that surprised is something like that exists.

Have you recently performed a System Restore for any other problems?


_________________
<img src="http://www.castlecops.com/zx/johnlgalt/johnlgalt%20sig.png">

<img src="http://www.castlecops.com/zx/johnlgalt/John%20L.%20Galt%20%20CPU-Z.png">
Back to top
View users profile Send private message Visit posters website Yahoo Messenger MSN Messenger
mrsugg

Special Response Team
Premium Member

Joined: Aug 15, 2006
Posts: 2758
Location: Somewhere, over the rainbow...
Premium SRT Team F@H

PostPosted: Sun Jan 06, 2008 4:53 am    Post subject:
Reply with quote

If you do not have any Symantec products on your computer, then you need to get rid of what has been left over. Even though they may have been "uninstalled" Symantec products do not like to go nicely and leave lots of crud around in the registry.

To completely delete all traces of Symantec, download and run the Norton Removal Tool.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Windows NT/2000/2003/XP All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer