Little Problem

[Boris]

In the past couple of weeks I've had the message below pop up 3 times.

System shutdown

This system is shutting down. 

Please save all ...................  etc.

This shutdown was initiated by NT AUTHORITY\SYSTEM

Then a timed shutdown.

The system process

Message

'C:\WINDOWS\system32\services.exe' terminated unexpectedly with status code -1073741819.  The system will now shut down and restart

I googled and found that the code -1073741819 symptoms can be caused by the Sasser worm ???

- so I turned off System Restore,

- ran the Symantec FxSasser tool - which found nothing,

- rebooted,

- ran the tool again - still nothing.

I'm running XP Pro (fully updated) plus AVG, SpySweeper, Trojan Hunter Guard - all up to date. Ran full AVG scan - nothing. Now trying Ewido.

Any other bright ideas ? :unsure:

[Boris]

I also found the following:

When errors are large negative decimal numbers such as -1073741819, convert the error to hexadecimal then drop the required most significant digits.

In this case, the correct decimal number for the Win32 error would be -1073741819 converted to 0xC0000005 which results in 5.

An error code of 5 indicates the use of a third-party driver that is not compatible with the version of NDIS supplied with Windows XP Embedded.

Also states that an error code of 5 means access denied.

[-pops-]

Have a go with Stinger http://vil.nai.com/vil/stinger/ although a re-install from backup would be best.

[Boris]

Ewido - nothing.

Stinger found nothing either.

+ I'd already restored from a back-up of 3 weeks ago (before this started).

Mysterious !