[WinXP sp2] Forced reboot after shutting down Services and Controller app

[treanir]

I was using Firefox (2.0.0.2) and WMP (11), when my system shut down c:\Windows\system32\services.exe, forcing it to restart. Since then, I have been getting three errors:

1) Right after logging in to Windows XP (SP2), I get the following message:

Microsoft Visual C++ Runtime Library

Runtime error!
Program: c:\Apps\Powercinema\PCMService.exe
This application has requested the Runtime to terminate it in an unusual way. Please contact the application’s support team for more information.

(Powercinema is a DVD-reading program that was installed on my computer before buying it. Never had any issues with it.)
Everything seems fine after I click ‘ok’, but lo and behold.


2) About five minutes after the first message, I get:

Services and Controller app

Services and Controller app has encountered a problem and needs to close.

I once again click ‘ok’ and here it comes:


3) A few seconds after the second message:

The system process: “c:\Windows\system32\services.exe” terminated unexpectedly with status code – 1073741819. The system will now shut down and restart.

After which I have one minute to start scrambling and poof. Gone. System reboot.

Since then I have tried the following:
- Ran virus scan on c:\Apps\Powercinema\PCMService.exe (error 1).
- Deleted that file after finding out there was no virus.
- Tried to access services.exe (Control Panel > Administrative Tools), but couldn’t, even while logging in as an Administrator in Safe Mode. Got the following error message: MMC cannot open the file c:\Windows\system32\services.mdc. This may be because the file doesn’t exist, because it’s not an MMC console, or was created by a later version of MMC. This may also be because you do not have sufficient access rights to the file.
- Did a Google search on the second and third error message, but didn’t come up with something.

I will do a complete virus scan in a few minutes, after I posted this.


I presume it’s a fairly standard issue, but seeing as I only have five minutes per go, it’s difficult to find the exact cause of the the problem and a fitting solution. I hope someone out there can help me.

 

[_AJ_]

at start up after the first screen press F8 and choose to start up in last know good configuration would be easiest try that first and see if it works

 

[treanir]

at start up after the first screen press F8 and choose to start up in last know good configuration would be easiest try that first and see if it works

Tried it (sorry for not including it) and it didn't work. Thanks though

Sounds like a virus to me DutchECK though it could just be corrupted files.

Try McAfee's Stinger.

Apply the Security Update for Windows XP (KB899588).

It wasn't a virus (at least not according to AVG Free). I'll give the two links a try. Thanks

 

[treanir]

If I try to apply the security update, I get a blank screen with only my pointer (with hourglass). After twenty seconds or so, it stalls and my computer goes silent. I don't think the update is installed.

 

[lonestar]

I had a similar problem some years ago. It was because of a corrupt harddrive. The files were becoming corrupt and that led to strange behaviors. I would try chkdsk with scanning for bad clusters.

If it still doesn't work, try booting from a recovery cd from an antivirus producer and scan your PC this way. It might be more accurate, then scanning under Windows.

 

[treanir]

I had a similar problem some years ago. It was because of a corrupt harddrive. The files were becoming corrupt and that led to strange behaviors. I would try chkdsk with scanning for bad clusters.

I certainly hope that's not it. I'll have a look.

 

[treanir]

Chkdsk didn't come up with anything. Thanks though


Got a nice tip from another message board though: as soon as the 'Windows will be terminated in 00:00:59" message pops up, I enter SHUTDOWN -a in the Run prompt. That stops the reboot (without actually making the system crash or behave differently.
It's not a solution, but I am able to look for a solution without being disturbed every few minutes.

 

[Corny]

does this also happen when you leave the computer disconnected from your router/dsl modem?

 

[treanir]

I'll give it a go, see what happens.

(I did notice a difference in the way my computer connects to the internet - it now needs to acquire the network address three times instead of twice)

 

[treanir]

Dingdingdingding!

We have a winner.


(or: no forced reboot with the modem disconnected. Now I know where the problem lies. That gives me a lot more to go with.)

 

[Corny]

ok .. please first check that your windows version is absolutely patched and up2date after that run a virus scanner not just on that file but on all drives (and check that you have one with the newest definitions)

 

[lonestar]

DutchEck, you do have got SP2 and a firewall, don't ya?

 

[treanir]

I do have SP2. If the standard Windows firewall is good enough, then yes, I also have a firewall.

 

[lonestar]

Well, I'm not an expert, but it sounds like a bug discovered years ago, but patched.

http://www.mvps.org/marksxp/WindowsXP/rpc.php

I'm not shure what it could be though

 

[treanir]

I found references to Sasser (and Blaster) on other boards as well. Ran a Symantec tool, but they came up with nothing.

While I was gone, I removed my internet connection and re-installed it. For some reason connecting to the wireless modem is a lot faster now and I didn't need to install anything from the CD-ROM my ISP gave me, even though they say it's required. Weird, that.

Now I'm just waiting to see if I get the same error message and forced reboot.

 

[lonestar]

What's your ISP by the way?

 

[treanir]

Planet Internet. (Dutch, of course)


Hmmm... the problem seems to have disappeared. Neat-o

 

[_AJ_]

Good to hear everything ok