Yeah, as the title says, I'm having some shutdown problems. When I go to turn off my laptop for the night, I go to hit shutdown. Everything closes down normally, doesn't seem to take a longer amount of time than it has in the past. However, after a shutdown, the computer will restart itself anywhere from 1 to 5 minutes after the shutdown. To keep it off, I have to unplug the power supply, and remove the battery, and then put both back in the next day to use it.

 

 

 

Yesterday, I decided to do a few tests. I scanned with Ad-Aware, found some tracking cookies and one bookmark that was cited as an attempted browser hijacking. I promptly deleted both, and scanned my computer with my antivirus, McAfee. McAfee found nothing.

 

 

 

Then, last night, I decided to try something different after my shutdown didn't work again (which means whatever was found wasn't to blame). I click on my hibernate icon (I have a shortcut on my desktop that does hibernate), and the computer went through and hibernated just fine. Thing is, this time it didn't restart.

 

 

 

So, tl;dr My laptop restarts soon after a successful shutdown, but does not restart after hibernate..Any help?

I think theres a BIOS option that can do something like that, have you checked there for anything odd?

 

I wouldnt go messing with it if you dont know what you're doing though.

You could try reflashing your BIOS but i would do that last of all the steps. Could you state your OS? Is your power light blinking when you shut it down?

Oh, I thought I added the OS: I'm using XP Professional SP2 (just downloaded the SP3 update, but haven't installed it yet, will do it later).

 

 

 

I did check the bios yesterday just to see if there was anything in there, but I didn't find anything odd.

 

 

 

Could it possibly be the RAM upgrade I did about a month ago? The only reason I noticed the problem was because I used to use hibernate all the time, but I wanted to go with full shutdowns.

 

 

 

There is no abnormalities when I shut down the computer. ie no flashing power light, no odd noise, nothing out of the ordinary.

 

 

 

I've even tried to shut down all processes one by one except those vital to keeping the system up, and still the shutdown caused a restart...

 

 

 

The only thing I can think of is I've deleted some viruses on the computer (found and quarantined through McAfee), that were like backdoor trojans. Could it be someone is trying to keep my computer on so they can control it? I've done some googling, and I couldn't find anything about any of this, so I came here.

 

The only thing I can think of is I've deleted some viruses on the computer (found and quarantined through McAfee), that were like backdoor trojans. Could it be someone is trying to keep my computer on so they can control it? I've done some googling, and I couldn't find anything about any of this, so I came here.

 

You said previously that McAfee found nothing. Could you provide the names of the trojans/viruses? You asked if someone could be trying to hijack or is hijacking your pc. It is possible i will tell you that and i am not goign to tell you no but, highly unlikely.

Uhh...damn...I delete things after they are quarentined usually. And FF is set to delete history after closing, so I really cant help you there...

 

 

 

I don't know if anyone can get on my computer though. I've got both McAfee firewall and Windows Firewall set at their highest settings under complete lockdown, and I deleted all program permissions, and redid them all one by one, so nothing is on the list that shouldn't be. Also haven't noted any weird processes, or anything taking up space that shouldn't be (I use Process Explorer [procexp] to check periodically). Also haven't had any odd network activity, no lag or anything.

 

 

 

If it helps, a few were 'mp3 files' that I got through limewire (but they were scanned before playing so nothing could have happened there, or I don't think they could have). A few were found in a jre 1.5 or something like that. They were trojans, I think some ended with .a. A lot seem to have been IRC things, where it would try to connect to a remote serve and wait for commands, stuff like that, or that's what the threat center said.

 

 

 

I looked to see if anything sounded familiar, and I have these results (don't quote me on that these are the exact ones, but they seem likely):

 

 

 

http://vil.nai.com/vil/content/v_125294.htm

 

 

 

http://vil.nai.com/vil/content/v_144503.htm <--- This one was definately one of the ones I removed.

 

 

 

I'm sorry I couldn't provide you with more information, but I try to keep this computer clean if possible, because my other computer got hit with a few bad pieces of malware (win antivirus 2007 or 2008, think it was '08), and is now a fully functional footrest and doorstop...So, I'm trying to keep threats, even quarentined ones, on the computer for the shortest amount of time possible (and for most, that time is about 0 seconds).

If you in fact had the two above it is possible someone is using your computer remotely. As stated before. Do you have a firewall?

Well, I use a router for one.

 

 

 

I also have McAfee firewall running on Stealth mode. The description for this is in the hide tag.

 

 

 

[hide=Stealth description]Blocks all inbound Internet connections, except open ports, hiding your computer's presence on the Internet. The firewall alerts you when new programs attempt outbound Internet connections or receive inbound connection requests. Blocked and added programs appear on the Program Permissions pane.[/hide]

 

 

 

I also have Windows Firewall active.

 

 

 

As I stated in my last post, I haven't noticed anything suspicious, and nothing has come up in any of my scans (aside from the aforementioned programs, some of which were in quarentine for about a year...Yeah, I just started cleaning things up again). Everything seems normal, except for the shutdown problem.

 

 

 

Nothing has been changed on my computer (no settings, new accounts, anything like that), no system or network slowdowns, nothing that would lead me to believe I'm on an infected system. The only oddity I can find is that I can't shutdown, and on occasion I can't hibernate (It comes up with a Windows API and lack of system resources or something like that, but it only happens after I've exited FF or WoW, something like that).

You're running two FireWalls at the same time... bad, bad idea... :wall:

 

 

 

Worse, you're using McAfee's stuff at all... <*DVD 'mega-facepalms'...*>

 

 

 

I suggest you go get ZA Pro 7 and Eset's NOD32 ... (Yes, both are items you will have to spend money on, but it is worth it.) ... After you get them put in and loaded up, if you have a virus left that you can't see, NOD32 will find it. If some hacker is attacking from the outside, ZA Pro 7 will stop them. :ugeek:

 

 

 

Also, have you tried Spybot S&D yet??? :-s

 

 

 

~D. V. Devnull

Get like zonealarm or something.

You're running two FireWalls at the same time... bad, bad idea... :wall:

 

 

 

Worse, you're using McAfee's stuff at all... <*DVD 'mega-facepalms'...*>

 

 

 

I suggest you go get ZA Pro 7 and Eset's NOD32 ... (Yes, both are items you will have to spend money on, but it is worth it.) ... After you get them put in and loaded up, if you have a virus left that you can't see, NOD32 will find it. If some hacker is attacking from the outside, ZA Pro 7 will stop them. :ugeek:

 

 

 

Also, have you tried Spybot S&D yet??? :-s

 

 

 

~D. V. Devnull

 

 

 

I've been contemplating putting together my own anti suite, but I never had a really good guide for it, because every time I thought I would be good one way, some credible source says no, do it another way. I would love to have Zone Alarm and NOD32, but I don't have the money to pay for it. Hell, we're lucky we have internet at all here.

 

 

 

I'm probably going to download Avast! and Comodo. I only have McAfee because it came with our internet subscription, and something is better than nothing, although it being so much of a resource hog is getting frustrating.

 

 

 

Yes, I've tried Spybot, and every time I do, something gets messed up with my computer. Last time I had to spend a few hours trying to get my internet to work again, because it killed something. Damn program is frustrating, which is why I stay away. Y'all can preach about it all you want, I've had nothing but problems with it.

 

 

 

Still not convinced someone is trying to hack me. Think its just Windows being Windows.

 

 

 

While I'm here, anyone reading have a free program that can burn .iso images to a CD? I have a burner and CD, and a few different Linux distros I want to look at, but I can't remember what program I need to burn it.

Alright, I just went to check myspace (yeah, I hate it, but It's easier than calling people), and it said:

 

 

 

"This account has been locked out for 15 minutes due to excessive failed login attempts. Please try again or Click Here to enter a different e-mail and password."

 

 

 

But I've been playing WoW for the past 2 or so hours, and had logged out of MS earlier. Soo....I take it I'm being hacked now, or what?

I would love to have Zone Alarm and NOD32, but I don't have the money to pay for it.

One bright side... If you don't have the $$$ for the Pro Version of ZoneAlarm, you can still get a rather good free version. Head to this spot to download...

 

 

 

http://www.zonealarm.com/store/content/catalog/products/zonealarm_free_firewall.jsp

 

 

 

...and enjoy the nifty firewall protection... After you install the program into your system, that is. :thumbsup:

 

 

 

~Mr. Devnull

 

 

 

 

 

 

 

(Note from Author: I'll catch up with that note about myspace in a little bit...)

I believe someone is trying yes, but I'm not sure that person is succeeding.

 

 

 

As for security, believe me, Devnull is the one to ask.

 

 

 

Avast is not a bad choice, and is becoming decent, and still going uphill, so keep that choice. As for spybot, have you tried a different antispyware, like Ad-Aware?

 

 

 

Edit: Thanks for the link, I downloaded it too since I will change for NOD32 when my subscription with Kaspersky ends.

As for spybot, have you tried a different antispyware, like Ad-Aware?

urbestfreind has already tried Ad-Aware... It didn't find anything in relation to this. That's why I suggested Spybot S&D. :(

 

 

 

~D. V. Devnull

Alright, tomorrow after bowling I'm going to get Avast or Avira (dunno which yet), and Comodo, and I'll concede and use Spybot just because I want to be absolutely sure I'm safe. I hope I don't have to go rootkit hunting this weekend...

 

 

 

I don't get why someone would want to hack my myspace anyways. I have all of 6 people on there (told you I don't use it often). Guess I have to start writing new passwords now...be a good Java program to do, for some practice...

 

 

 

And DVD, do you recommend Zone Alarm over Comodo? (Free vs Free, not paid versions, at least not for a few months).

Alright, tomorrow after bowling I'm going to get Avast or Avira (dunno which yet), and Comodo, and I'll concede and use Spybot just because I want to be absolutely sure I'm safe. I hope I don't have to go rootkit hunting this weekend...

 

 

 

I don't get why someone would want to hack my myspace anyways. I have all of 6 people on there (told you I don't use it often). Guess I have to start writing new passwords now...be a good Java program to do, for some practice...

 

 

 

And DVD, do you recommend Zone Alarm over Comodo? (Free vs Free, not paid versions, at least not for a few months).

 

How does this relate to someone hacking your myspace password? If the person wanted your myspace password there are way easier ways for the person to get it.

And DVD, do you recommend Zone Alarm over Comodo? (Free vs Free, not paid versions, at least not for a few months).

I've actually heard some bad things about Comodo, which has caused me to stick with ZoneAlarm... Thankfully, ZoneAlarm (both Pro AND Free) hasn't let me down... Also, ZoneAlarm is friendly to both Newbies and Advanced users. So, yes, I'm going to recommend ZoneAlarm as your best firewall choice. :thumbsup:

 

 

 

And BTW, here's a link to the FREE Edition of ZoneAlarm...

 

 

 

http://www.zonealarm.com/store/content/catalog/products/zonealarm_free_firewall.jsp

 

 

 

Enjoy! 8-)

 

 

 

~D. V. Devnull

Try disconnecting the Internet cable from the router before you shutdown. This should tell us if WOL is causing this.

I tried the unhooking the network cable, and it didn't restart after shutdown. So now I'm getting Comodo and Spybot.

I tried the unhooking the network cable, and it didn't restart after shutdown. So now I'm getting Comodo and Spybot.

Check your BIOS, shut off the WOL functions, if they happen to be on. :geek:

 

 

 

And BTW, if you want your firewall config to be easy, Comodo ain't your best option. -.-

 

 

 

~D. V. Devnull

WOL?

 

 

 

I don't really care if it's easy, I care about safety. I read up on Zone Alarm, and a lot of people said it causes problems with computers. Nobody said this about Comodo. I'll go with the safer option for now, i may move to ZA, but I've used it before and it was a pain to get off, along with being a bit of a resource hog (more than any firewall should be anyways), and annoying to use.

Just a thought, maybe booting from network is not disable in the BIOS?

 

 

 

I'm just guessing here, maybe what I'm saying has nothing to do with it.

Reboot and enter you bios look in the Power Control area find "Wake on LAN" and/or "Wake on PME." Disable them save and exit.

Just a thought, maybe booting from network is not disable in the BIOS?

 

 

 

I'm just guessing here, maybe what I'm saying has nothing to do with it.

 

I'll bet it isn't. I would sure do that though if i was having issues like this jsut to elimiante if it happens again.