переиодически
выскакивает окно что компьютер будет перезагружен через 1 минуту, в журнале такая запись
выскакивает окно что компьютер будет перезагружен через 1 минуту, в журнале такая запись
Имя журнала: System
Источник: USER32
Дата: 19.03.2012 12:36:58
Код события: 1074
Категория задачи:Отсутствует
Уровень: Сведения
Ключевые слова:Классический
Пользователь: COMP-161\Дмитрий
Компьютер: COMP-161
Описание:
Процесс C:\Windows\SysWOW64\shutdown.exe (COMP-161) инициировал действие "Завершить работу" для компьютера COMP-161 от имени пользователя COMP-161\Дмитрий по причине: Причина на перечислена
Код причины: 0x800000ff
Тип выключения: Завершить работу
Комментарий:
Xml события:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="USER32" />
<EventID Qualifiers="32768">1074</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-03-19T10:36:58.000000000Z" />
<EventRecordID>904961</EventRecordID>
<Channel>System</Channel>
<Computer>COMP-161</Computer>
<Security UserID="S-1-5-21-1563715513-3271714329-2236921975-1000" />
</System>
<EventData>
<Data>C:\Windows\SysWOW64\shutdown.exe (COMP-161)</Data>
<Data>COMP-161</Data>
<Data>Причина на перечислена</Data>
<Data>0x800000ff</Data>
<Data>Завершить работу</Data>
<Data>
</Data>
<Data>COMP-161\Дмитрий</Data>
<Binary>FF00008000000000000000000000000000000000000000000000 ПоказатьПо теме из базы знаний
- А теперь, перезагружаем удаленные компьютеры , завершаем сеансы пользователей Windows и выключаем удалённые машины совсем…
- Установка и настройка Сервера взаимодействий 9 на Windows Server 2019 (для Windows подойдет)
- Android на Windows 11 стандартными средствами [Шпаргалка]
- Разворачиваем на Windows 11: Hyper-V, Microsoft Hyper-V Server 2019 и SQL Server 2019 Dev [Шпаргалка]
- Установка 1С и подключение ККТ Атол на IMac 2021 с процессором M1 через Parallels и Windows 11 (ARM)
Ответы
Подписаться на ответы
Инфостарт бот
Сортировка:
Древо развёрнутое
Свернуть все
(12) У меня тоже нод с актуальными базами. Еженедельно сканирую Malwarebytes Anti-Malware - от одной до трех зараз вылавливаю. Правда шарюсь по всяким помойкам сети...
Кстати, это совсем не значит, что нод - плохой антивирус. Это значит, что ни один антивирус не бьет 100% встречаемых вирусов.
Кстати, это совсем не значит, что нод - плохой антивирус. Это значит, что ни один антивирус не бьет 100% встречаемых вирусов.
Source: USER32
Type: Information
Description:
The process <process> has initiated the restart of <computer name> for the following reason: No title for this reason could be found.
Minor Reason: <reason>
Shutdown Type: <type>
English: This information is only available to subscribers. An example of English, please!
Comments:
EventID.Net
As a general statement, this event records a system shutdown or restart in order for the administrators of that system to have a better understanding on how often and for what reasons the computer is shutdown or restarted. The event contains details about the process (the program) that performed this task, the computer that was affected and when applicable, the reason for the restart or shutdown. Also, the type of operation is recorded: restart when a user or an application initiates a system restart, shutdown when the system is sent a shutdown request or power off when the power button is pressed (and that initiates a shutdown).
The process listed in the event provides an important clue as to who or what initiated the shutdown or the restart. Processes related the user's environment such as Exlorer.exe or Winlogon indicate that the shutdown was initiated by a user while other type of processes such as svchost.exe.
The comment shown in the event description is something that can be specified by the process that initiates the shutdown. For example, if an application is installed and the installer script requires a restart one may see a comment like "The Windows Installer initiated a system restart to complete or continue the configuration of <application name here>". Users of shutdown.exe command can also specify a text to be recorded as comment.
Click if the comment is good! x 11
Anonymous
- Proccess: Lsass.exe - In my case, M818080 helped me solve the problem.
Click if the comment is good!
EventID.Net
- Process: Lsass.exe - See M897648, M911185 and M915335 for three hotfixes applicable to Microsoft Windows Server 2003.
Click if the comment is good! x 1
EventID.Net
- Reason: 0x2 - I received this event after the automatic installation of KB900485 through Windows Update Agent. Therefore, this can be translated to: updates that require reboot were installed.
Click if the comment is good! x 4
Anonymous
I am using Microsoft SUS (Software Update Services) to push Windows updates and this message is generated when a machine is automatically rebooted, once an update that requires a reboot is installed.
Click if the comment is good! x 1
Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here!
Anne Jan Elsinga
This also happens when you manually kill the process "Remote Procedure Calls" also know as svchost.
Click if the comment is good! x 2
EventID.Net
- Process: Explorer.exe - As per Microsoft: "Shutdown Event Tracker is a Microsoft Windows Server 2003 and Microsoft Windows XP feature that you can use to consistently track the reason for system shutdowns. You can then use this information to analyze shutdowns and to develop a more comprehensive understanding of your system environment. Shutdown Event Tracker logs events that are similar to this one in the system event log". See M293814 and MSW2KDB for more details.
Click if the comment is good!
Brendan Stephens
This error may be contributed to security issue identified, or virus known as W32.Blaster.Worm. The Virus brodcasts from the local machine, and may cause a buffer overrun in RPC, allowing code execution, or RCP may terminate unexpectedly.
See the link to the Symantec Virus information and removal tool, MS03-026 and RPC DCOM WORM (MSBLASTER).
Click if the comment is good! x 6
Type: Information
Description:
The process <process> has initiated the restart of <computer name> for the following reason: No title for this reason could be found.
Minor Reason: <reason>
Shutdown Type: <type>
English: This information is only available to subscribers. An example of English, please!
Comments:
EventID.Net
As a general statement, this event records a system shutdown or restart in order for the administrators of that system to have a better understanding on how often and for what reasons the computer is shutdown or restarted. The event contains details about the process (the program) that performed this task, the computer that was affected and when applicable, the reason for the restart or shutdown. Also, the type of operation is recorded: restart when a user or an application initiates a system restart, shutdown when the system is sent a shutdown request or power off when the power button is pressed (and that initiates a shutdown).
The process listed in the event provides an important clue as to who or what initiated the shutdown or the restart. Processes related the user's environment such as Exlorer.exe or Winlogon indicate that the shutdown was initiated by a user while other type of processes such as svchost.exe.
The comment shown in the event description is something that can be specified by the process that initiates the shutdown. For example, if an application is installed and the installer script requires a restart one may see a comment like "The Windows Installer initiated a system restart to complete or continue the configuration of <application name here>". Users of shutdown.exe command can also specify a text to be recorded as comment.
Click if the comment is good! x 11
Anonymous
- Proccess: Lsass.exe - In my case, M818080 helped me solve the problem.
Click if the comment is good!
EventID.Net
- Process: Lsass.exe - See M897648, M911185 and M915335 for three hotfixes applicable to Microsoft Windows Server 2003.
Click if the comment is good! x 1
EventID.Net
- Reason: 0x2 - I received this event after the automatic installation of KB900485 through Windows Update Agent. Therefore, this can be translated to: updates that require reboot were installed.
Click if the comment is good! x 4
Anonymous
I am using Microsoft SUS (Software Update Services) to push Windows updates and this message is generated when a machine is automatically rebooted, once an update that requires a reboot is installed.
Click if the comment is good! x 1
Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here!
Anne Jan Elsinga
This also happens when you manually kill the process "Remote Procedure Calls" also know as svchost.
Click if the comment is good! x 2
EventID.Net
- Process: Explorer.exe - As per Microsoft: "Shutdown Event Tracker is a Microsoft Windows Server 2003 and Microsoft Windows XP feature that you can use to consistently track the reason for system shutdowns. You can then use this information to analyze shutdowns and to develop a more comprehensive understanding of your system environment. Shutdown Event Tracker logs events that are similar to this one in the system event log". See M293814 and MSW2KDB for more details.
Click if the comment is good!
Brendan Stephens
This error may be contributed to security issue identified, or virus known as W32.Blaster.Worm. The Virus brodcasts from the local machine, and may cause a buffer overrun in RPC, allowing code execution, or RCP may terminate unexpectedly.
See the link to the Symantec Virus information and removal tool, MS03-026 and RPC DCOM WORM (MSBLASTER).
Click if the comment is good! x 6
Source: USER32
Type: Information
Description:
The process <process> has initiated the restart of <computer name> for the following reason: No title for this reason could be found.
Minor Reason: <reason>
Shutdown Type: <type>
English: This information is only available to subscribers. An example of English, please!
Comments:
EventID.Net
As a general statement, this event records a system shutdown or restart in order for the administrators of that system to have a better understanding on how often and for what reasons the computer is shutdown or restarted. The event contains details about the process (the program) that performed this task, the computer that was affected and when applicable, the reason for the restart or shutdown. Also, the type of operation is recorded: restart when a user or an application initiates a system restart, shutdown when the system is sent a shutdown request or power off when the power button is pressed (and that initiates a shutdown).
The process listed in the event provides an important clue as to who or what initiated the shutdown or the restart. Processes related the user's environment such as Exlorer.exe or Winlogon indicate that the shutdown was initiated by a user while other type of processes such as svchost.exe.
The comment shown in the event description is something that can be specified by the process that initiates the shutdown. For example, if an application is installed and the installer script requires a restart one may see a comment like "The Windows Installer initiated a system restart to complete or continue the configuration of <application name here>". Users of shutdown.exe command can also specify a text to be recorded as comment.
Click if the comment is good! x 11
Anonymous
- Proccess: Lsass.exe - In my case, M818080 helped me solve the problem.
Click if the comment is good!
EventID.Net
- Process: Lsass.exe - See M897648, M911185 and M915335 for three hotfixes applicable to Microsoft Windows Server 2003.
Click if the comment is good! x 1
EventID.Net
- Reason: 0x2 - I received this event after the automatic installation of KB900485 through Windows Update Agent. Therefore, this can be translated to: updates that require reboot were installed.
Click if the comment is good! x 4
Anonymous
I am using Microsoft SUS (Software Update Services) to push Windows updates and this message is generated when a machine is automatically rebooted, once an update that requires a reboot is installed.
Click if the comment is good! x 1
Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here!
Anne Jan Elsinga
This also happens when you manually kill the process "Remote Procedure Calls" also know as svchost.
Click if the comment is good! x 2
EventID.Net
- Process: Explorer.exe - As per Microsoft: "Shutdown Event Tracker is a Microsoft Windows Server 2003 and Microsoft Windows XP feature that you can use to consistently track the reason for system shutdowns. You can then use this information to analyze shutdowns and to develop a more comprehensive understanding of your system environment. Shutdown Event Tracker logs events that are similar to this one in the system event log". See M293814 and MSW2KDB for more details.
Click if the comment is good!
Brendan Stephens
This error may be contributed to security issue identified, or virus known as W32.Blaster.Worm. The Virus brodcasts from the local machine, and may cause a buffer overrun in RPC, allowing code execution, or RCP may terminate unexpectedly.
See the link to the Symantec Virus information and removal tool, MS03-026 and RPC DCOM WORM (MSBLASTER).
Click if the comment is good! x 6
Type: Information
Description:
The process <process> has initiated the restart of <computer name> for the following reason: No title for this reason could be found.
Minor Reason: <reason>
Shutdown Type: <type>
English: This information is only available to subscribers. An example of English, please!
Comments:
EventID.Net
As a general statement, this event records a system shutdown or restart in order for the administrators of that system to have a better understanding on how often and for what reasons the computer is shutdown or restarted. The event contains details about the process (the program) that performed this task, the computer that was affected and when applicable, the reason for the restart or shutdown. Also, the type of operation is recorded: restart when a user or an application initiates a system restart, shutdown when the system is sent a shutdown request or power off when the power button is pressed (and that initiates a shutdown).
The process listed in the event provides an important clue as to who or what initiated the shutdown or the restart. Processes related the user's environment such as Exlorer.exe or Winlogon indicate that the shutdown was initiated by a user while other type of processes such as svchost.exe.
The comment shown in the event description is something that can be specified by the process that initiates the shutdown. For example, if an application is installed and the installer script requires a restart one may see a comment like "The Windows Installer initiated a system restart to complete or continue the configuration of <application name here>". Users of shutdown.exe command can also specify a text to be recorded as comment.
Click if the comment is good! x 11
Anonymous
- Proccess: Lsass.exe - In my case, M818080 helped me solve the problem.
Click if the comment is good!
EventID.Net
- Process: Lsass.exe - See M897648, M911185 and M915335 for three hotfixes applicable to Microsoft Windows Server 2003.
Click if the comment is good! x 1
EventID.Net
- Reason: 0x2 - I received this event after the automatic installation of KB900485 through Windows Update Agent. Therefore, this can be translated to: updates that require reboot were installed.
Click if the comment is good! x 4
Anonymous
I am using Microsoft SUS (Software Update Services) to push Windows updates and this message is generated when a machine is automatically rebooted, once an update that requires a reboot is installed.
Click if the comment is good! x 1
Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here!
Anne Jan Elsinga
This also happens when you manually kill the process "Remote Procedure Calls" also know as svchost.
Click if the comment is good! x 2
EventID.Net
- Process: Explorer.exe - As per Microsoft: "Shutdown Event Tracker is a Microsoft Windows Server 2003 and Microsoft Windows XP feature that you can use to consistently track the reason for system shutdowns. You can then use this information to analyze shutdowns and to develop a more comprehensive understanding of your system environment. Shutdown Event Tracker logs events that are similar to this one in the system event log". See M293814 and MSW2KDB for more details.
Click if the comment is good!
Brendan Stephens
This error may be contributed to security issue identified, or virus known as W32.Blaster.Worm. The Virus brodcasts from the local machine, and may cause a buffer overrun in RPC, allowing code execution, or RCP may terminate unexpectedly.
See the link to the Symantec Virus information and removal tool, MS03-026 and RPC DCOM WORM (MSBLASTER).
Click if the comment is good! x 6
Source: USER32
Type: Information
Description:
The process <process> has initiated the restart of <computer name> for the following reason: No title for this reason could be found.
Minor Reason: <reason>
Shutdown Type: <type>
English: This information is only available to subscribers. An example of English, please!
Comments:
EventID.Net
As a general statement, this event records a system shutdown or restart in order for the administrators of that system to have a better understanding on how often and for what reasons the computer is shutdown or restarted. The event contains details about the process (the program) that performed this task, the computer that was affected and when applicable, the reason for the restart or shutdown. Also, the type of operation is recorded: restart when a user or an application initiates a system restart, shutdown when the system is sent a shutdown request or power off when the power button is pressed (and that initiates a shutdown).
The process listed in the event provides an important clue as to who or what initiated the shutdown or the restart. Processes related the user's environment such as Exlorer.exe or Winlogon indicate that the shutdown was initiated by a r while other type of processes such as svchost.exe.
The comment shown in the event description is something that can be specified by the process that initiates the shutdown. For example, if an application is installed and the installer script requires a restart one may see a comment like "The Windows Installer initiated a system restart to complete or continue the configuration of <application name here>". Users of shutdown.exe command can also specify a text to be recorded as comment.
Click if the comment is good! x 11
Anonymous
- Proccess: Lsass.exe - In my case, M818080 helped me solve the problem.
Click if the comment is good!
EventID.Net
- Process: Lsass.exe - See M897648, M911185 and M915335 for three hotfixes applicable to Microsoft Windows Server 2003.
Click if the comment is good! x 1
EventID.Net
- Reason: 0x2 - I received this event after the automatic installation of KB900485 through Windows Update Agent. Therefore, this can be translated to: updates that require reboot were installed.
Click if the comment is good! x 4
Anonymous
I am using Microsoft SUS (Software Update Services) to push Windows updates and this message is generated when a machine is automatically rebooted, once an update that requires a reboot is installed.
Click if the comment is good! x 1
Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here!
Anne Jan Elsinga
This also happens when you manually kill the process "Remote Procedure Calls" also know as svchost.
Click if the comment is good! x 2
EventID.Net
- Process: Explorer.exe - As per Microsoft: "Shutdown Event Tracker is a Microsoft Windows Server 2003 and Microsoft Windows XP feature that you can use to consistently track the reason for system shutdowns. You can then use this information to analyze shutdowns and to develop a more comprehensive understanding of your system environment. Shutdown Event Tracker logs events that are similar to this one in the system event log". See M293814 and MSW2KDB for more details.
Click if the comment is good!
Brendan Stephens
This error may be contributed to security issue identified, or virus known as W32.Blaster.Worm. The Virus brodcasts from the local machine, and may cause a buffer overrun in RPC, allowing code execution, or RCP may terminate unexpectedly.
See the link to the Symantec Virus information and removal tool, MS03-026 and RPC DCOM WORM (MSBLASTER).
Click if the comment is good! x 6
Type: Information
Description:
The process <process> has initiated the restart of <computer name> for the following reason: No title for this reason could be found.
Minor Reason: <reason>
Shutdown Type: <type>
English: This information is only available to subscribers. An example of English, please!
Comments:
EventID.Net
As a general statement, this event records a system shutdown or restart in order for the administrators of that system to have a better understanding on how often and for what reasons the computer is shutdown or restarted. The event contains details about the process (the program) that performed this task, the computer that was affected and when applicable, the reason for the restart or shutdown. Also, the type of operation is recorded: restart when a user or an application initiates a system restart, shutdown when the system is sent a shutdown request or power off when the power button is pressed (and that initiates a shutdown).
The process listed in the event provides an important clue as to who or what initiated the shutdown or the restart. Processes related the user's environment such as Exlorer.exe or Winlogon indicate that the shutdown was initiated by a r while other type of processes such as svchost.exe.
The comment shown in the event description is something that can be specified by the process that initiates the shutdown. For example, if an application is installed and the installer script requires a restart one may see a comment like "The Windows Installer initiated a system restart to complete or continue the configuration of <application name here>". Users of shutdown.exe command can also specify a text to be recorded as comment.
Click if the comment is good! x 11
Anonymous
- Proccess: Lsass.exe - In my case, M818080 helped me solve the problem.
Click if the comment is good!
EventID.Net
- Process: Lsass.exe - See M897648, M911185 and M915335 for three hotfixes applicable to Microsoft Windows Server 2003.
Click if the comment is good! x 1
EventID.Net
- Reason: 0x2 - I received this event after the automatic installation of KB900485 through Windows Update Agent. Therefore, this can be translated to: updates that require reboot were installed.
Click if the comment is good! x 4
Anonymous
I am using Microsoft SUS (Software Update Services) to push Windows updates and this message is generated when a machine is automatically rebooted, once an update that requires a reboot is installed.
Click if the comment is good! x 1
Why bother deciphering Event logs when GFI EventsManager can do everything for you? Free trial here!
Anne Jan Elsinga
This also happens when you manually kill the process "Remote Procedure Calls" also know as svchost.
Click if the comment is good! x 2
EventID.Net
- Process: Explorer.exe - As per Microsoft: "Shutdown Event Tracker is a Microsoft Windows Server 2003 and Microsoft Windows XP feature that you can use to consistently track the reason for system shutdowns. You can then use this information to analyze shutdowns and to develop a more comprehensive understanding of your system environment. Shutdown Event Tracker logs events that are similar to this one in the system event log". See M293814 and MSW2KDB for more details.
Click if the comment is good!
Brendan Stephens
This error may be contributed to security issue identified, or virus known as W32.Blaster.Worm. The Virus brodcasts from the local machine, and may cause a buffer overrun in RPC, allowing code execution, or RCP may terminate unexpectedly.
See the link to the Symantec Virus information and removal tool, MS03-026 and RPC DCOM WORM (MSBLASTER).
Click if the comment is good! x 6
Для получения уведомлений об ответах подключите телеграм бот:
Инфостарт бот