Weird Shutdown

[Toxcity]

Right, I go down stairs to watch lethal weapon 2 (amazing film) and come back up to find my secondary PC off.

This is weird because it should never be off.

I boot it and log in.

I go straight to the Event viewer looking for errors and find none.

But I did find this:

Title: USER32

Description:

The process winlogon.exe has initiated the power off of computer HANGER18 on behalf of user HANGER18\Administrator for the following reason: No title for this reason could be found

Reason Code: 0x0

Shutdown Type: power off

Comment:

Anyone know what that could be? winlogon.exe tells the PC to shut down.. :eh:

Just did it again..

 

[PV5150]

I take it you have done a virus scan? Is this on XP or 2003?

 

[Toxcity]

2003.

I haven't yet done a scan. For one main reason.. I cannot see anything that is abnormal.

I have been watching the processes like a hawk with process explorer.

Everything is windows..

But why would winlogin shut the PC down..

Ill do a scan now!

 

[MikeEnIke]

If no virus or anything, meh, see if it happens again. If not, oh well. If so, then care lol.

 

[Toxcity]

It has happened twice now...

One time when it was alone.. second time when I was here.

It shutdown like normal. :eh:

 

[PV5150]

Ok are you running the latest service pack for 2003? If you aren't I would suggest that you apply it as there are fixes in it that may cure your problem. Do a thorough virus scan first though. Do you have the Windows screensaver activated (i.e it comes on after a period of time)?

 

[Toxcity]

Ok are you running the latest service pack for 2003? If you aren't I would suggest that you apply it as there are fixes in it that may cure your problem. Do a thorough virus scan first though.

I am running service pack 2.. which I do think is the up to date one.. or is 3 out now?

To the screensaver thing - I have the OC3D one. With the spinning Chip logo.

 

[PV5150]

I think SP3 is available. Disable the screensaver and see if that makes a difference. SP2 should have fixed the bugs associated with WINLOGIN.exe and shutting down your PC. WINLOGIN.exe should only be present in your Windows\System 32 folder...anywhere else and I would be dubious, so check your processes.

 

[Toxcity]

SP3 - 2008...

Screensaver has been disabled for the time being.

And looking at the details of Winlogon.exe it is in the system 32 folder.. seems clean.

Mmm, May sleep on it and see if it is fine in the morning..

Could it have been MSN messenger? That was running at both shutdown.

Now it isn't..

Thanks for the help guys!

 

[PV5150]

SP3 - 2008...

Sorry my bad I was trying to console my son at the same time, so I didn't have time to check.

Screensaver has been disabled for the time being.

And looking at the details of Winlogon.exe it is in the system 32 folder.. seems clean.

Cool mate, see how that goes. If it's only present in the System 32 folder then you are more than likely fine

Mmm, May sleep on it and see if it is fine in the morning..

Could it have been MSN messenger? That was running at both shutdown.

Now it isn't..

Thanks for the help guys!

Possibly, but I wouldn't think so. Have yourself a nice refreshing snooze mate and have another look in the morning. Glad to help mate

 

[Toxcity]

Awwh Cheers PV!

Sleep well everyone!

Night!

 

[PV5150]

Nighty night mate