unexpected shutdown

Dell / DIMENSION E520
October 22, 2009 at 08:38:25
Specs: Windows XP
Hi there,
I have been having an ongoing problem with a Dell E520 that I got second hand from a friend.
Here's the story
It was very dirty so I cleaned it with a blower. Then I added 4 gigs of RAM (4 Ram cards to 4 slots)
and a new graphics card ATI Raedon 4670
It started to shutdown unexpectedly and automatically reboots on its own. No error messages in Event Log. It's as if I unplugged it. Isn't program specific but usually IE is on.
I suspected overheat or powersupply
replaced powersupply with ANTEC 500w
Can't be heat or it wouldn't reboot on its own.
I updated BIOS. and see nothing unusual in the settings

I put a new SATA 1 terabyte harddrive in. Fresh install of windows. Same problem.
I strarted using only one RAM card in same slot to see if it's bad RAM. Still having same problem with each RAM. I haven't tried other RAM slots. Not sure if that would make a difference.
Then I Loaded Service pack 3 and
It seemed to be better. So I added back the other ram cards. (I have 4 slots and four 1gig Ram cards- even though Windows only shows 3...)
Have gotten a couple recent shutdowns like before. What do I do?

So at this point everything is new except motherboard. Is this a bad motherboard? This didn't happen before I started upgrading - so I'm guessing the motherboard is O.K.
Any ideas on what else it could be?


See More: unexpected shutdown

Report •


#1
October 22, 2009 at 12:14:38
... might be worth having a look in Event Viewer

... you can start the Event Viewer in Windows using the keyboard shortcut [Windows R],

... go to start run (type) eventvwr.msc [press enter]

... Navigate in the Event Manager using the menu on the left side using the following path:

Applications and Services Logs => Microsoft => Windows => Diagnostics-Performance => Operational.

... This will lead directly to the location that contains performance diagnostics not only for the Windows shutdown but also for standby and boot performance issues.

... A good way to start is to sort the columns by Task Category. Click on the Task Category title and look for
Shutdown Performance Monitoring entries. Each entry will contain information about the application or process that was causing problems during shutdown including the time it took to shutdown that process.


.

.

... Posting is provided "AS IS" with no warranties
http://img515.imageshack.us/img515/...
Grrrr... ....more


Report •

#2
October 23, 2009 at 05:22:00
THANKS FOR YOUR HELP WITH THIS!
I don't know if we're running different copies of xp, but my event viewer doesn't seem to have those options on the left side. So I couldn't find the exact thing you were reccomending. here's the options I've got on the left side of my event viewer. application, security, system, internet explorer, microsoft office diagnostic, and microsoft office sessions.
below is the report from the system event log from my most-recent unexpected shutdown. You see it starts (bottom) with a
6009 as if I had shut it down - but I didn't. What else can I provide that would be helpful? THANKS again


10/23/2009 8:07:09 AM Service Control Manager Information None 7036 N/A H2HOME The Universal Plug and Play Device Host service entered the running state.
10/23/2009 8:07:08 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The Universal Plug and Play Device Host service was successfully sent a start control.
10/23/2009 8:06:40 AM Service Control Manager Information None 7036 N/A H2HOME The IMAPI CD-Burning COM Service service entered the stopped state.
10/23/2009 8:06:08 AM Tcpip Information None 4201 N/A H2HOME The system detected that network adapter Intel(R) 82562V 10/100 Network Connection was connected to the network, and has initiated normal operation over the network adapter.
10/23/2009 8:06:07 AM e1express Information None 33 N/A H2HOME Intel(R) 82562V 10/100 Network Connection Link has been established: 100Mbps full duplex.
10/23/2009 8:06:34 AM Service Control Manager Information None 7036 N/A H2HOME The SSDP Discovery Service service entered the running state.
10/23/2009 8:06:34 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The SSDP Discovery Service service was successfully sent a start control.
10/23/2009 8:06:34 AM Service Control Manager Information None 7036 N/A H2HOME The iPod Service service entered the running state.
10/23/2009 8:06:34 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The iPod Service service was successfully sent a start control.
10/23/2009 8:06:33 AM Service Control Manager Information None 7036 N/A H2HOME The IMAPI CD-Burning COM Service service entered the running state.
10/23/2009 8:06:33 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The IMAPI CD-Burning COM Service service was successfully sent a start control.
10/23/2009 8:06:31 AM Service Control Manager Information None 7036 N/A H2HOME The Remote Access Connection Manager service entered the running state.
10/23/2009 8:06:31 AM Service Control Manager Information None 7036 N/A H2HOME The Symantec Password Validation Service service entered the stopped state.
10/23/2009 8:06:29 AM Service Control Manager Information None 7036 N/A H2HOME The ScriptBlocking Service service entered the stopped state.
10/23/2009 8:06:28 AM Service Control Manager Information None 7036 N/A H2HOME The Symantec Password Validation Service service entered the running state.
10/23/2009 8:06:28 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The Symantec Password Validation Service service was successfully sent a start control.
10/23/2009 8:06:28 AM Service Control Manager Information None 7036 N/A H2HOME The Symantec Password Validation Service service entered the stopped state.
10/23/2009 8:06:28 AM Service Control Manager Information None 7035 H2HOME\H2 H2HOME The Remote Access Connection Manager service was successfully sent a start control.
10/23/2009 8:06:28 AM Service Control Manager Information None 7036 N/A H2HOME The Telephony service entered the running state.
10/23/2009 8:06:28 AM Service Control Manager Information None 7036 N/A H2HOME The Symantec Password Validation Service service entered the running state.
10/23/2009 8:06:27 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The Symantec Password Validation Service service was successfully sent a start control.
10/23/2009 8:06:26 AM Service Control Manager Information None 7036 N/A H2HOME The Computer Browser service entered the stopped state.
10/23/2009 8:06:26 AM Service Control Manager Information None 7036 N/A H2HOME The Terminal Services service entered the running state.
10/23/2009 8:06:26 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The Terminal Services service was successfully sent a start control.
10/23/2009 8:06:26 AM Service Control Manager Information None 7036 N/A H2HOME The Application Layer Gateway Service service entered the running state.
10/23/2009 8:06:26 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The Application Layer Gateway Service service was successfully sent a start control.
10/23/2009 8:06:26 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The SAVRT service was successfully sent a start control.
10/23/2009 8:06:26 AM Service Control Manager Information None 7036 N/A H2HOME The Network Location Awareness (NLA) service entered the running state.
10/23/2009 8:06:26 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The NAVEX15 service was successfully sent a start control.
10/23/2009 8:06:26 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The Norton Unerase Protection Driver service was successfully sent a start control.
10/23/2009 8:06:26 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The NAVENG service was successfully sent a start control.
10/23/2009 8:06:26 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM H2HOME The Network Location Awareness (NLA) service was successfully sent a start control.
10/23/2009 8:06:09 AM EventLog Information None 6005 N/A H2HOME The Event log service was started.
10/23/2009 8:06:09 AM EventLog Information None 6009 N/A H2HOME Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.


Report •

#3
October 23, 2009 at 07:23:57
... try "system" and clicking any "yellow" or "red" marker near the shutdown time and look-up/post "stop messages"

... and disable norton firewall for now (if exist) just to check!


.


.

... Posting is provided "AS IS" with no warranties
http://img515.imageshack.us/img515/...
Grrrr... ....more


Report •

Related Solutions

#4
October 23, 2009 at 21:03:41
Thanks again for your help. No warnings at all in eventview (only information) Anyway, I think I'm on the right path with finding the trouble. Remote procedure call seems to have been infiltrated and was set to beboot if service fails. not sure if this is sasser virus that my Norton didn't pick up on or what. In services.msc - remote procedure call - log on - there was a weird username and password (I changed back to "local system account") and recovery was set to reboot the computer. I have erased that log on and am looking to remove virus if that is what it is. I'm running XP pro 2002 service pack 3 and don't see any windows security downloads for that version for lasser. other ideas?
thanks
j

Report •

#5
October 24, 2009 at 02:38:02
"...and recovery was set to reboot the computer..."

... press Win/flag <key> then <pause> key click advanced (tab) and by Starup and Recovery ... "settings" ... uncheck "automatically restart" ... is this what you meant by the above(?)


.

.

... Posting is provided "AS IS" with no warranties
http://img515.imageshack.us/img515/...
Grrrr... ....more


Report •


Ask Question