dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
37752

SuperNet
Go Ninja,Go Ninja Go..
Premium Member
join:2002-10-08
Hoffman Estates, IL

1 edit

SuperNet

Premium Member

The kernel power manager has initiated a shutdown transition

It seems like every Sunday at 4:00am my server reboots with
"The kernel power manager has initiated a shutdown transition".
Then I see
"The operating system is shutting down at system time 2012-10-07T09:09:06.701405600Z."

It started to do this after I did a windows updates.. (it wasn't done for 1 year and it needed it).

Also I found

The process wininit.exe (127.0.0.1) has initiated the restart of computer FROG on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown
Reason Code: 0x80070000
Shutdown Type: restart
Comment:

I can't figure out what is going on... anyone have an idea?
HarryH3
Premium Member
join:2005-02-21

HarryH3

Premium Member

The first few hits in google suggest you have a virus on that system.

Search string: process wininit.exe (127.0.0.1) has initiated the restart of computer

SuperNet
Go Ninja,Go Ninja Go..
Premium Member
join:2002-10-08
Hoffman Estates, IL

SuperNet

Premium Member

said by HarryH3:

The first few hits in google suggest you have a virus on that system.

Search string: process wininit.exe (127.0.0.1) has initiated the restart of computer

Really? I can see if it does it often but only once a week

JohnInSJ
Premium Member
join:2003-09-22
Aptos, CA

JohnInSJ to SuperNet

Premium Member

to SuperNet
Check your logs to see what process initiated the shutdown using the older (Legacy) APIs...

b45g4b56gw7
@associationsplus.ca

b45g4b56gw7

Anon

And how do you do that?

SuperNet
Go Ninja,Go Ninja Go..
Premium Member
join:2002-10-08
Hoffman Estates, IL

SuperNet to JohnInSJ

Premium Member

to JohnInSJ
said by JohnInSJ:

Check your logs to see what process initiated the shutdown using the older (Legacy) APIs...

The log I see before the shutdown

A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CSNodeSvc service.
SuperNet

SuperNet

Premium Member

Anyone?

JohnInSJ
Premium Member
join:2003-09-22
Aptos, CA

JohnInSJ

Premium Member

I googled around and didn't find anything definitive. Could be anything - malware, something funky in a task scheduler task, UFOs. No idea what it is.

dandelion
MVM
join:2003-04-29
Germantown, TN

dandelion to SuperNet

MVM

to SuperNet
You can eliminate malware to a large extent by following these steps...then can look to other problems. »Security Cleanup FAQ »Mandatory Steps Before Requesting Assistance