[Warrenisit]

Hey there. I just got done getting my comp cleaned out with the help of evilfantasy but there are still some issues unrelated to viruses and spyware I guess. When I try to call someone through my yahoo IM as soon as I click call my computer restarts. I've uninstalled and reinstalled it already and no change.

[serverguy]

We need to find out what causes it to restart.

Start—Control Panel—(Performance and Maintenance)—Administrative Tools—Event Viewer

Begin by looking at your Application log, then System Log. This will show you any errors that are occurring and shutting your system down.

Look especially for ones with an or . These are created when Windows has a problem.

Please post back with any errors there may be. A screen shot with as much of the text showing about the error as possible would be great.

[MJM]

What are your comp specs?

[serverguy]

Originally Posted by MJM What are your comp specs?

Why would that make his computer restart?

[MJM]

Originally Posted by serverguy Why would that make his computer restart?

If it isn't good enough it just isn't good enough.

[mrdaveyk]

Originally Posted by MJM If it isn't good enough it just isn't good enough.

i doubt that would cause a restart though

any success with serverguy's idea?

[serverguy]

Originally Posted by MJM If it isn't good enough it just isn't good enough.

But it is not going to help with sorting the problem out.

[Warrenisit]

Hey Serverguy, I saved a logfile of the application event viewer and system event viewer but it looks hard to read when opened with word pad. You want it anyway?

[serverguy]

Yes, the logfile would be great. I forgot you could make a logfile in event viewer. Post it as an attachment here.

[Warrenisit]

Application event log 1/3

1/11/2008 6:15:09 AM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 9:36:27 PM crypt32 Error None 8 N/A WARREN1 Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.

1/10/2008 9:36:00 PM crypt32 Error None 8 N/A WARREN1 Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.

1/10/2008 9:36:00 PM crypt32 Error None 8 N/A WARREN1 Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.

1/10/2008 9:36:00 PM crypt32 Error None 8 N/A WARREN1 Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.

1/10/2008 9:36:00 PM crypt32 Error None 8 N/A WARREN1 Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.

1/10/2008 9:36:00 PM crypt32 Error None 8 N/A WARREN1 Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.

1/10/2008 9:36:00 PM crypt32 Error None 8 N/A WARREN1 Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The specified server cannot perform the requested operation.

1/10/2008 9:35:44 PM crypt32 Error None 8 N/A WARREN1 Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.

1/10/2008 9:05:07 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 9:03:04 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 8:15:23 PM MsiInstaller Information None 11728 WARREN1\Owner WARREN1 Product: MSXML 4.0 SP2 (KB936181) -- Configuration completed successfully.
1/10/2008 7:55:58 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 6:51:10 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 6:48:35 PM Application Hang Error None 1001 N/A WARREN1 Fault bucket 126637809.
1/10/2008 6:48:19 PM Application Hang Error (101) 1002 N/A WARREN1 Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
1/10/2008 6:45:34 PM Application Error Error None 1001 N/A WARREN1 Fault bucket 580918024.
1/10/2008 6:45:19 PM Application Error Error None 1000 N/A WARREN1 Faulting application firefox.exe, version 1.8.20071.12718, faulting module firefox.exe, version 1.8.20071.12718, fault address 0x0043f24c.
1/10/2008 6:22:39 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 5:22:54 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 12:43:22 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 12:33:52 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM WARREN1 Windows saved user WARREN1\Owner registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
1/10/2008 12:33:52 PM Userenv Warning None 1524 WARREN1\Owner WARREN1 Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.


1/10/2008 12:33:27 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 12:29:46 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 12:26:41 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 6:34:32 AM MsiInstaller Information None 11728 NT AUTHORITY\SYSTEM WARREN1 Product: MSXML 4.0 SP2 (KB936181) -- Configuration completed successfully.
1/10/2008 6:19:10 AM Winlogon Information None 1002 N/A WARREN1 The shell stopped unexpectedly and Explorer.exe was restarted.
1/10/2008 6:19:08 AM Application Hang Error (101) 1002 N/A WARREN1 Hanging application explorer.exe, version 6.0.2900.3156, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
1/10/2008 6:18:58 AM Application Error Error (100) 1000 N/A WARREN1 Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.
1/10/2008 6:18:21 AM Application Error Error None 1000 N/A WARREN1 Faulting application explorer.exe, version 6.0.2900.3156, faulting module xvid.ax, version 0.0.0.0, fault address 0x0003d928.
1/10/2008 5:48:45 AM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/10/2008 5:45:31 AM Application Error Error (100) 1000 N/A WARREN1 Faulting application services.exe, version 5.1.2600.2180, faulting module services.exe, version 5.1.2600.2180, fault address 0x00008e40.
1/10/2008 5:45:19 AM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/9/2008 8:36:10 PM Winlogon Information None 1002 N/A WARREN1 The shell stopped unexpectedly and Explorer.exe was restarted.
1/9/2008 8:24:53 PM MsiInstaller Information None 11724 WARREN1\Owner WARREN1 Product: SpyZooka -- Removal completed successfully.
1/9/2008 8:23:56 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/9/2008 8:22:19 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM WARREN1 Windows saved user WARREN1\Owner registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
1/9/2008 8:21:55 PM Application Error Error None 1000 N/A WARREN1 Faulting application superantispyware.exe, version 3.9.0.1008, faulting module ntdll.dll, version 5.1.2600.2180, fault address 0x000012b4.
1/9/2008 8:18:17 PM MsiInstaller Information None 11707 WARREN1\Owner WARREN1 Product: Microsoft Visual C Runtime -- Installation operation completed successfully.
1/9/2008 7:06:03 PM MsiInstaller Information None 11707 WARREN1\Owner WARREN1 Product: SpyZooka -- Installation completed successfully.
1/9/2008 6:15:12 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/9/2008 6:13:59 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM WARREN1 Windows saved user WARREN1\Owner registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
1/9/2008 6:03:17 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/9/2008 5:55:05 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/9/2008 12:28:34 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/9/2008 12:06:08 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/8/2008 9:05:01 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/8/2008 8:17:04 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/8/2008 8:14:05 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/8/2008 8:12:39 PM VBRuntime Information None 1 N/A WARREN1 The VB Application identified by the event source logged this Application VundofixSVC: Thread ID: 3476 ,Logged: VundoFix Service stopped
1/8/2008 8:12:16 PM VBRuntime Information None 1 N/A WARREN1 The VB Application identified by the event source logged this Application VundofixSVC: Thread ID: 3476 ,Logged: VundoFix Service Running
1/8/2008 7:59:13 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/8/2008 7:51:49 PM Application Hang Error (101) 1002 N/A WARREN1 Hanging application firefox.exe, version 1.8.20071.12718, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
1/8/2008 7:50:04 PM MsiInstaller Information None 1005 WARREN1\Owner WARREN1 The Windows Installer initiated a system restart to complete or continue the configuration of 'BitDefender Total Security 2008'.
1/8/2008 7:50:04 PM MsiInstaller Information None 11724 WARREN1\Owner WARREN1 Product: BitDefender Total Security 2008 -- Removal completed successfully.
1/8/2008 7:36:49 PM Application Hang Error None 1001 N/A WARREN1 Fault bucket 580248065.
1/8/2008 7:35:36 PM Application Hang Error (101) 1002 N/A WARREN1 Hanging application firefox.exe, version 1.8.20071.12718, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
1/8/2008 7:35:22 PM Application Hang Error None 1001 N/A WARREN1 Fault bucket 580248065.
1/8/2008 7:35:20 PM Application Hang Error (101) 1002 N/A WARREN1 Hanging application firefox.exe, version 1.8.20071.12718, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
1/8/2008 7:35:14 PM Application Hang Error None 1001 N/A WARREN1 Fault bucket 580248065.
1/8/2008 7:35:12 PM Application Hang Error (101) 1002 N/A WARREN1 Hanging application firefox.exe, version 1.8.20071.12718, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
1/8/2008 7:34:15 PM Application Hang Error None 1001 N/A WARREN1 Fault bucket 506723909.
1/8/2008 7:34:12 PM Application Hang Error (101) 1002 N/A WARREN1 Hanging application YahooMessenger.exe, version 8.1.0.421, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
1/8/2008 7:12:37 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/8/2008 6:52:57 PM MsiInstaller Information None 11728 WARREN1\Owner WARREN1 Product: MSXML 4.0 SP2 (KB936181) -- Configuration completed successfully.
1/8/2008 6:51:47 PM MsiInstaller Error None 11704 WARREN1\Owner WARREN1 Product: MSXML 4.0 SP2 (KB936181) -- Error 1704. An installation for BitDefender Total Security 2008 is currently suspended. You must undo the changes made by that installation to continue. Do you want to undo those changes?
1/8/2008 6:36:26 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/8/2008 6:30:25 AM Application Error Error None 1001 N/A WARREN1 Fault bucket 615704349.
1/8/2008 6:30:22 AM Application Error Error None 1000 N/A WARREN1 Faulting application yahoomessenger.exe, version 8.1.0.421, faulting module unknown, version 0.0.0.0, fault address 0x062c50db.
1/8/2008 4:23:06 AM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 10:27:14 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 10:20:27 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 9:45:01 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 9:32:29 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 9:28:35 PM Application Error Error (100) 1000 N/A WARREN1 Faulting application services.exe, version 5.1.2600.2180, faulting module services.exe, version 5.1.2600.2180, fault address 0x00008e40.
1/7/2008 9:28:20 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 9:16:47 PM LoadPerf Information None 1000 N/A WARREN1 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.
1/7/2008 9:16:46 PM LoadPerf Information None 1001 N/A WARREN1 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.
1/7/2008 9:02:37 PM Winlogon Information None 1002 N/A WARREN1 The shell stopped unexpectedly and Explorer.exe was restarted.
1/7/2008 9:02:35 PM Application Error Error None 1001 N/A WARREN1 Fault bucket 486979537.
1/7/2008 9:02:24 PM Application Error Error None 1000 N/A WARREN1 Faulting application explorer.exe, version 6.0.2900.3156, faulting module xvid.ax, version 0.0.0.0, fault address 0x0003d928.
1/7/2008 9:02:11 PM Winlogon Information None 1002 N/A WARREN1 The shell stopped unexpectedly and Explorer.exe was restarted.
1/7/2008 9:02:08 PM Application Error Error None 1001 N/A WARREN1 Fault bucket 486979537.
1/7/2008 9:02:05 PM Application Error Error None 1000 N/A WARREN1 Faulting application explorer.exe, version 6.0.2900.3156, faulting module xvid.ax, version 0.0.0.0, fault address 0x0003d928.
1/7/2008 8:52:45 PM scan Information None 0 N/A WARREN1 The description for Event ID ( 0 ) in Source ( scan ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service stopped.
1/7/2008 8:36:20 PM scan Information None 0 N/A WARREN1 The description for Event ID ( 0 ) in Source ( scan ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.
1/7/2008 8:31:06 PM scan Information None 0 N/A WARREN1 The description for Event ID ( 0 ) in Source ( scan ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.
1/7/2008 8:31:00 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 8:29:38 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM WARREN1 Windows saved user WARREN1\Owner registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
1/7/2008 8:24:55 PM scan Information None 0 N/A WARREN1 The description for Event ID ( 0 ) in Source ( scan ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.
1/7/2008 8:24:46 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 8:22:30 PM MsiInstaller Information None 1005 WARREN1\Owner WARREN1 The Windows Installer initiated a system restart to complete or continue the configuration of 'BitDefender Total Security 2008'.
1/7/2008 8:22:30 PM MsiInstaller Information None 11707 WARREN1\Owner WARREN1 Product: BitDefender Total Security 2008 -- Installation completed successfully.
1/7/2008 8:18:07 PM scan Information None 0 N/A WARREN1 The description for Event ID ( 0 ) in Source ( scan ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.
1/7/2008 8:10:49 PM SecurityCenter Information None 1800 N/A WARREN1 The Windows Security Center Service has started.
1/7/2008 8:09:13 PM MsiInstaller Information None 1005 WARREN1\Owner WARREN1 The Windows Installer initiated a system restart to complete or continue the configuration of 'BitDefender Total Security 2008'.
1/7/2008 8:09:13 PM MsiInstaller Information None 11724 WARREN1\Owner WARREN1 Sa?n phâ?m: BitDefender Total Security 2008 -- Hoa`n tâ´t viê?c gu~ bo?.
1/7/2008 8:08:03 PM MsiInstaller Information None 1005 WARREN1\Owner WARREN1 The Windows Installer initiated a system restart to complete or continue the configuration of 'BitDefender Total Security 2008'.
1/7/2008 8:08:00 PM MsiInstaller Information None 11707 WARREN1\Owner WARREN1 Sa?n phâ?m: BitDefender Total Security 2008 -- Hoa`n tâ´t tha`nh công viê?c ca`i da?t.
1/7/2008 8:06:21 PM scan Information None 0 N/A WARREN1 The description for Event ID ( 0 ) in Source ( scan ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.
1/7/2008 8:01:16 PM MsiInstaller Information None 11708 WARREN1\Owner WARREN1 Product: BitDefender Total Security 2008 -- Installation failed.
1/7/2008 7:52:46 PM MsiInstaller Information None 1005 WARREN1\Owner WARREN1 The Windows Installer initiated a system restart to complete or continue the configuration of 'BitDefender Internet Security 2008'.
1/7/2008 7:52:46 PM MsiInstaller Information None 11724 WARREN1\Owner WARREN1 Product: BitDefender Internet Security 2008 -- Removal completed successfully.
1/7/2008 7:49:36 PM Winlogon Information None 1002 N/A WARREN1 The shell stopped unexpectedly and Explorer.exe was restarted.
1/7/2008 7:49:34 PM Application Error Error None 1001 N/A WARREN1 Fault bucket 486979537.
1/7/2008 7:49:30 PM Application Error Error None 1000 N/A WARREN1 Faulting application explorer.exe, version 6.0.2900.3156, faulting module xvid.ax, version 0.0.0.0, fault address 0x0003d928.
1/7/2008 7:44:02 PM Winlogon Information None 1002 N/A WARREN1 The shell stopped unexpectedly and Explorer.exe was restarted.
1/7/2008 7:43:58 PM Application Error Error None 1001 N/A WARREN1 Fault bucket 486979537.
1/7/2008 7:43:47 PM Application Error Error None 1000 N/A WARREN1 Faulting application explorer.exe, version 6.0.2900.3156, faulting module xvid.ax, version 0.0.0.0, fault address 0x0003d928.
1/7/2008 7:40:20 PM scan Information None 0 N/A WARREN1 The description for Event ID ( 0 ) in Source ( scan ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.
1/7/2008 7:39:03 PM MsiInstaller Information None 1005 WARREN1\Owner WARREN1 The Windows Installer initiated a system restart to complete or continue the configuration of 'BitDefender Internet Security 2008'.
1/7/2008 7:39:03 PM MsiInstaller Information None 11707 WARREN1\Owner WARREN1 Product: BitDefender Internet Security 2008 -- Installation completed successfully.
1/7/2008 7:33:50 PM scan Information None 0 N/A WARREN1 The description for Event ID ( 0 ) in Source ( scan ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Service started.
1/7/2008 7:33:36 PM crypt32 Information None 2 N/A WARREN1 Successful auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
1/7/2008 7:33:31 PM crypt32 Information None 7 N/A WARREN1 Successful auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>