> it wasn't caused by any virus
Good news!
> as far as i know the only application that was
> running at that time were vee and excel
There's usually a *ton* of stuff running. Press Ctrl+Atl+Del, "t" (to select
Task Manager) and click the "Processes" tab. All that stuff is running.
> only my colleague and i have an access to the reskit
> for NT/win2000 in which the gui for shutdown is found.
Oh heck, you don't need that. Any stock NT can remotely shutdown any NT that
it has any kind of connection with. You won't find a whole lot of people
that know how to do this, but it can be done. The only way to prevent that
is to explicitly disallow remote shutdown with the Local Security Policy.
As for processes that crash... user mode code that crashes cannot hurt the
system. Kernel mode code that crashes can reset the system. Usually you'll
get a BSOD, but that's not guaranteed. Sometimes when kernel mode code
crashes your screen goes dark and then you get your BIOSs' sign on message.
As your computer boots up you're left with slack jaw, wondering what just
happened to that program you've been working on all night. If you didn't hit
Ctrl+S, it's gone!
SICL has occasionally crashed in the past, but I've never personally seen it
reset a machine. I do have a few reports from customers that the machine
reset for no apparent reason. All the logs seem to indicate this is the case
too, so it's not just customers getting grumpy. In the one case of this
behavior that was solved (so far anyway) we replaced an old HPIB card with a
newer Agilent card. The problem hasn't recurred in over two years now.
Which points out another potential possibility: hardware. Malfunctioning
hardware that hits the reset line will indeed reset the computer. Of course
if this is on more than one machine then it probably is some software cause.
-SHAWN-
---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".
Good news!
> as far as i know the only application that was
> running at that time were vee and excel
There's usually a *ton* of stuff running. Press Ctrl+Atl+Del, "t" (to select
Task Manager) and click the "Processes" tab. All that stuff is running.
> only my colleague and i have an access to the reskit
> for NT/win2000 in which the gui for shutdown is found.
Oh heck, you don't need that. Any stock NT can remotely shutdown any NT that
it has any kind of connection with. You won't find a whole lot of people
that know how to do this, but it can be done. The only way to prevent that
is to explicitly disallow remote shutdown with the Local Security Policy.
As for processes that crash... user mode code that crashes cannot hurt the
system. Kernel mode code that crashes can reset the system. Usually you'll
get a BSOD, but that's not guaranteed. Sometimes when kernel mode code
crashes your screen goes dark and then you get your BIOSs' sign on message.
As your computer boots up you're left with slack jaw, wondering what just
happened to that program you've been working on all night. If you didn't hit
Ctrl+S, it's gone!
SICL has occasionally crashed in the past, but I've never personally seen it
reset a machine. I do have a few reports from customers that the machine
reset for no apparent reason. All the logs seem to indicate this is the case
too, so it's not just customers getting grumpy. In the one case of this
behavior that was solved (so far anyway) we replaced an old HPIB card with a
newer Agilent card. The problem hasn't recurred in over two years now.
Which points out another potential possibility: hardware. Malfunctioning
hardware that hits the reset line will indeed reset the computer. Of course
if this is on more than one machine then it probably is some software cause.
-SHAWN-
---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".
i wouldn't jump into conclusion that VEE might have cause the issue
mentioned above; apparently the only event log at that instance (before or
during) is from VEE (USB); and the details are as follows;
Event ID: 2
First event: 05/07/2004 17:59:00
Last event: 05/07/2004 17:59:00
Source: SICL Log
Type: Information
User: -
Log: Application
Computer: XXXXXXXXXXXX
Description:
ag357i[Pid/Tid=708/1448]: Note, Agilent USB/GPIB, SN[MY43286962], using
IoBufferSize=[65536], TimeoutFloorMsec=[2000], TimeoutUsbFlushMsec=[2000],
TimeoutWrCompleteFlushMsec=[15000]
is this somewhat a bug or something and hopefully its not a virus or
trojan, anyway, all the equipment are "ON" at that moment, while i'm trying
to write some codes... then a POP-UP message saying windows is shutting
down and i have about a minute to save all my work. SWELL!!!!!!!!
though here's the last three(3) events before the above event happened
Event ID: 14
First event: 05/07/2004 17:58:35
Last event: 05/07/2004 17:58:35
Source: Norton AntiVirus
Type: Information
User: -
Log: Application
Computer: XXXXXXXXXXXX
Description:
Norton AntiVirus services startup was successful.
Event ID: 105
First event: 05/07/2004 17:58:25
Last event: 05/07/2004 17:58:25
Source: WMDM PMSP Service
Type: Information
User: -
Log: Application
Computer: XXXXXXXXXXXX
Description:
The service was started.
Event ID: 4097
First event: 05/07/2004 17:58:13
Last event: 05/07/2004 17:58:13
Source: MSDTC
Type: Information
User: -
Log: Application
Computer: XXXXXXXXXXXX
Description:
MS DTC has started.
as I have mentioned above, "not jumping to conclusion" but I need to
further look in this matter for any parasite/s that might have caused this
issue - and also possibly if someone from agilent to verify why the event
occured above.
Regards to all,
Enrique "IKE" Velasco, Jr.
Engineer/IT
Delta Energy Systems (Arizona), Inc.
4400 E. Broadway Blvd., Suite 803, Tucson, AZ, 85715, USA
T +1 520 326 8401, F +1 520 326 8366
M +1 520 370 4537
enrique.velasco@delta-es.com
www.deltaenergysystems.com
---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".