SuperNetGo Ninja,Go Ninja Go.. Premium Member join:2002-10-08 Hoffman Estates, IL 1 edit |
SuperNet
Premium Member
2012-Oct-8 11:12 am
The kernel power manager has initiated a shutdown transitionIt seems like every Sunday at 4:00am my server reboots with "The kernel power manager has initiated a shutdown transition". Then I see "The operating system is shutting down at system time 2012-10-07T09:09:06.701405600Z."
It started to do this after I did a windows updates.. (it wasn't done for 1 year and it needed it).
Also I found
The process wininit.exe (127.0.0.1) has initiated the restart of computer FROG on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart Comment:
I can't figure out what is going on... anyone have an idea? |
|
HarryH3 Premium Member join:2005-02-21 |
HarryH3
Premium Member
2012-Oct-8 3:21 pm
The first few hits in google suggest you have a virus on that system. Search string: process wininit.exe (127.0.0.1) has initiated the restart of computer |
|
SuperNetGo Ninja,Go Ninja Go.. Premium Member join:2002-10-08 Hoffman Estates, IL |
SuperNet
Premium Member
2012-Oct-8 4:46 pm
said by HarryH3:The first few hits in google suggest you have a virus on that system.
Search string: process wininit.exe (127.0.0.1) has initiated the restart of computer Really? I can see if it does it often but only once a week |
|
JohnInSJ Premium Member join:2003-09-22 Aptos, CA |
to SuperNet
Check your logs to see what process initiated the shutdown using the older (Legacy) APIs... |
|
|
b45g4b56gw7
Anon
2012-Oct-9 2:59 pm
And how do you do that? |
|
SuperNetGo Ninja,Go Ninja Go.. Premium Member join:2002-10-08 Hoffman Estates, IL |
to JohnInSJ
said by JohnInSJ:Check your logs to see what process initiated the shutdown using the older (Legacy) APIs... The log I see before the shutdown A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CSNodeSvc service. |
|
SuperNet |
SuperNet
Premium Member
2012-Oct-10 12:43 pm
Anyone? |
|
JohnInSJ Premium Member join:2003-09-22 Aptos, CA |
JohnInSJ
Premium Member
2012-Oct-10 4:05 pm
I googled around and didn't find anything definitive. Could be anything - malware, something funky in a task scheduler task, UFOs. No idea what it is. |
|
|
to SuperNet
You can eliminate malware to a large extent by following these steps...then can look to other problems. » Security Cleanup FAQ » Mandatory Steps Before Requesting Assistance |
|