Re: Window Sudden ShutDown, without any saving steps.!!

From: Joshua Heslinga (jheslinga@attbi.com)
Date: 06/29/02 

From: "Joshua Heslinga" <jheslinga@attbi.com>
Date: Sat, 29 Jun 2002 10:18:26 -0400

John,

If I were you, I'd look at 2 things-- your drivers and possible
environmental factors (heat). If you want to rule out environmental, boot
into Safe Mode and leave your computer there for 8+ hours. If you don't
experience the problem, it must be drivers/software. If you do, it could be
hardware (possibly memory).

Also, ask some basic questions. When did this start? Has anything about the
system (hardware, drivers, software) changed in that time frame?

As for the error messages, a quick look at them shows that they're from
various IIS services. IIS's vulnerabilities (and the fixes/preventative
measures for them) are well-known at this point. You're not giving anyone
any news. Do you have to run IIS on this system? If not, remove it.

Joshua Heslinga
MCSE, CISSP

"john y." <jty202@yahoo.com> wrote in message
news:134e401c21f21$43b48100$9ae62ecf@tkmsftngxa02...
> I have experience my computer sudden shutdown and reboot
> without by action. This has happenned twice in two days.
> And it happens after I have come back to the computer
> after leaving it on for a few hours (5-8 hours). I have a
> DSL connection on.
>
> I am very concern if its hackers actions. I have look up
> the logs and see service failures that deals with the
> internet. Here is a listing.
>
> Perhaps these are well know problems with the drivers or
> files that are targeted by hackers. For now I have
> disabled the services that I can find.
> (I know ZipToA is vulnerability b/c I did a search and
> found it indeed causes errors among other users and its
> pretty well known.)
>
>
>
> Here are the errors. I hope Microsoft would look at them
> and look for some vulnerabilities with the services and
> their underlining files.
>
>
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7023
> Date: 6/28/2002
> Time: 11:20:52 PM
> User: N/A
> Computer: COMPUTER
> Description:
> The Simple Mail Transport Protocol (SMTP) service
> terminated with the following error:
> The system cannot find the path specified.
>
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7022
> Date: 6/28/2002
> Time: 11:20:49 PM
> User: N/A
> Computer: COMPUTER
> Description:
> The Simple Mail Transport Protocol (SMTP) service hung on
> starting.
>
>
> Event Type: Error
> Event Source: SMTPSVC
> Event Category: None
> Event ID: 116
> Date: 6/28/2002
> Time: 11:19:27 PM
> User: N/A
> Computer: COMPUTER
> Description:
> The service metabase path '/LM/SMTPSVC/' could not be
> opened. The data is the error code.
> For additional information specific to this message please
> visit the Microsoft Online Support site located at:
> http://www.microsoft.com/contentredirect.asp.
> Data:
> 0000: 03 00 00 00 ....
>
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7023
> Date: 6/28/2002
> Time: 11:19:27 PM
> User: N/A
> Computer: COMPUTER
> Description:
> The World Wide Web Publishing Service service terminated
> with the following error:
> The system cannot find the path specified.
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7023
> Date: 6/28/2002
> Time: 11:19:25 PM
> User: N/A
> Computer: COMPUTER
> Description:
> The FTP Publishing Service service terminated with the
> following error:
> The system cannot find the path specified.
>
> Event Type: Error
> Event Source: MSFTPSVC
> Event Category: None
> Event ID: 116
> Date: 6/28/2002
> Time: 11:19:25 PM
> User: N/A
> Computer: COMPUTER
> Description:
> The service metabase path '/LM/MSFTPSVC/' could not be
> opened. The data is the error code.
> For additional information specific to this message please
> visit the Microsoft Online Support site located at:
> http://www.microsoft.com/contentredirect.asp.
> Data:
> 0000: 03 00 00 00 ....
>
> Event Type: Error
> Event Source: W3SVC
> Event Category: None
> Event ID: 116
> Date: 6/28/2002
> Time: 11:19:25 PM
> User: N/A
> Computer: COMPUTER
> Description:
> The service metabase path '/LM/W3SVC/' could not be
> opened. The data is the error code.
> For additional information specific to this message please
> visit the Microsoft Online Support site located at:
> http://www.microsoft.com/contentredirect.asp.
> Data:
> 0000: 03 00 00 00 ....
>
> Event Type: Warning
> Event Source: Dhcp
> Event Category: None
> Event ID: 1007
> Date: 6/28/2002
> Time: 11:19:15 PM
> User: N/A
> Computer: COMPUTER
> Description:
> Your computer has automatically configured the IP address
> for the Network Card with network address 00A0CC64B925.
> The IP address being used is 169.254.202.163.
> Data:
> 0000: 00 00 00 00 ....
>
>
>
> Event Type: Warning
> Event Source: Dhcp
> Event Category: None
> Event ID: 1007
> Date: 6/28/2002
> Time: 11:19:15 PM
> User: N/A
> Computer: COMPUTER
> Description:
> Your computer has automatically configured the IP address
> for the Network Card with network address 00A0CC64B925.
> The IP address being used is 169.254.202.163.
> Data:
> 0000: 00 00 00 00 ....
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7000
> Date: 6/28/2002
> Time: 11:18:54 PM
> User: N/A
> Computer: COMPUTER
> Description:
> The ZipToA service failed to start due to the following
> error:
> The service did not respond to the start or control
> request in a timely fashion.
>
>
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7009
> Date: 6/28/2002
> Time: 11:18:53 PM
> User: N/A
> Computer: COMPUTER
> Description:
> Timeout (30000 milliseconds) waiting for the ZipToA
> service to connect.
>
>
>
>
>

Relevant Pages