Windows is being turned off

[X111]

Every so often a box pops up saying that Windows is being turned of, and then counts down 30 seconds and turns my computer off. Norton anti-virus is installed, but has not dealt with it. Does anyone know how I can stop this, please?

[darth vader]

Can you tell us what operating system it is please? i.e. 95/98/NT/2K/XP...... if one of the latter three can you check the event viewer for error messages. Ruling out viruses and joke programs which shut down your system, windows is getting "peeved" by something and shutting itself down to try rectify this - it should log the fault first in the event viewer.

[lisaj]

Since what you're describing is part of the RPC functionality within NT, you must be on NT, 2000 or XP. Now, anything can invoke a 'remote shutdown' of a machine, including itself if it has administrator rights, which I'm guessing your username does on your own machine. What you have to do is figure out what's invoking this action... something that's easiest done if you turn on full audit and event logging. After it next happens, use event viewer to see what process caused the shutdown to occur.

[X111]

I'm running XP Home. Where do I find the Event Viewer, please?

[lisaj]

Go to Start... Run.... and type "eventvwr"

[X111]

Thank you. Should the event causing close-down be logged under "system error records"? If so, there is nothing there. If not, where, please. Should I try the "System Restore" facility and pick a date a month or so back when the machine was working without trouble?

[Katiebee]

Sounds a bit like a trojan virus I had a couple of months ago, called Magicon. I have Norton anti-virus installed, but it still got through. I followed the instructions for removal as per the link I will leave at the end of this post, but even that didn't cure the problem. I ended up asking for help from a good friend who knows everything about anything where PCs are concerned, and we got it sorted. Sadly, though, I couldn't begin to tell you how we did it. It might not be the trojan in your case, but I thought I'd mention it as a possible cause of your problems. Good luck. http://www.securityresponse.symantec.com/avcenter/
venc/data/download.magicon.html

[powerless]

Hi Nadia, I'm afraid you are infected with the "Blaster Worm". The symptons you describe are a classic example of such an infection. To stop your computer from shutting down, if you click Start, Run and Type: shutdown -a and Click OK, this should terminate the shutdown. What you then have to do is install a a "patch" from Microsft, you can get the patch from here >> http://tinyurl.com/is2b << Now what you have to do is, well delete this infection, Norton should have picked it up so i would ask have you updated the Virus definitions? Anyway there is a removal tool from here >> http://tinyurl.com/jqdf << or here >> http://vil.nai.com/vil/stinger/ << If you have system restore ON then you will have to turn it off as the removal tools will not be able to delete an infectiom the System Volume Information folder (these are protected operating system folders).

[Katiebee]

Hey powerless! I think that's the one I meant - Blaster worm, not Magicon! Doh! Ah well, my link might prove useful for someone else! Sorry Nadia for the duff info, but hope you get it sorted soon!

[X111]

Thank you very much indeed, powerless. Thats cured it. I'm very grateful. Thank you for the attempt, Katiebee, much appreciated. Best wishes. Dee.