[seadave77]

At work I'm dealing with a machine that randomly reboots. At first it was a once in a blue moon event that I brushed off thinking it was some buggy software the user was using. Then it became more frequent to the point I had to replace it for the user because she was losing her work.

The machine is a Lenovo 9143-CTO. Here are the specs.

CPU: AMD 64 X2 4400+ @ 2.3 GHz
RAM: 2GB DDR2
Video: Onboard Radeon Xpress
HDD: 160 Gb SATA Seagate
DVD: DVD/CD-RW SATA
NIC: Integrated 10/100/1000
OS: Win XP Pro SP3 fully patched

What I've done so far:

Switched PSU - Still reboots
Checked RAM with Memtest - Passed
Checked CPU - Passed
Updated video driver because bluescreen view showed it in a log file - still reboots

Anything else I can check? I'd hate to get rid of it because it is one of the nicer machines in the office and with budget cuts we won't be able to replace it.

Thanks,
Clint

[SuperMiguel]

do you see a Blue screen flashing before it reboots?

[seadave77]

Originally Posted by SuperMiguel

do you see a Blue screen flashing before it reboots?

No.

[Trap05]

Turn off automatic reboot on system failure if you haven't already. I'd checkdisk the hard drive as a next step. There's also probably a bios update available try that as well.

[seadave77]

I turned off the automatic reboot when I got the machine. It hasn't rebooted itself yet.

I'll run the checkdisk now.

[abarth_1200]

Oh i know I get this all the time, do what I do and call the IT guy...?

No, sorry Im just kidding, I thought it would be funny

[redduc900]

Check the Event Viewer Application and System logs for any errors related to the time of the reboots (Start | Run | Type eventvwr.msc, and hit ENTER)... critical errors are in Red. Copy and paste (use the "Copy to Clipboard" button under the arrow buttons in the "Event Properties" window) the latest critical error message as it appears under the "Description" field, and post it in this thread.

After you hit the "Copy to Clipboard" button in the "Event Properties" dialog, the contents in the Description field will be copied to the ClipBook Viewer (ClipBoard). You can then just paste the contents into your post, as there is no Edit-->Select All-->Copy function in ClipBook. In addition you could type clipbrd in the Run box, which will open the ClipBook Viewer containing the copied text from the Event Properties dialog... then perform a File-->Save As, and save the file with a *.txt extension. You could then perform a Edit-->Select All, then do a copy/paste of the text in your new post... so you have a couple different options.

Also run the System Information tool by typing msinfo32 in the Run box | Expand "Components" | Highlight "Problem Devices", and look for any problems that might be listed there.

[seadave77]

The checkdisk finished with no errors.

From the Application Event Log I found these.

Code:

Event Type:	Error
Event Source:	McLogEvent
Event Category:	None
Event ID:	259
Date:		8/13/2009
Time:		11:19:03 AM
User:		NT AUTHORITY\SYSTEM
Computer:	PBF-BUD-051-211
Description:
C:\Documents and Settings\pbf-ss281\Start Menu\Programs\Startup\prf13.tmp was detected using user defined detection settings, deleted after clean failed.


Event Type:	Warning
Event Source:	Userenv
Event Category:	None
Event ID:	1509
Date:		8/13/2009
Time:		11:18:59 AM
User:		S-1-5-21-1177238915-2111687655-1060284298-114928
Computer:	PBF-BUD-051-211
Description:
Windows cannot copy file C:\Documents and Settings\Default User\Start Menu\Programs\Startup\desktop.ini to location C:\Documents and Settings\pbf-ss281\Start Menu\Programs\Startup\desktop.ini. Possible causes of this error include network problems or insufficient security rights. If this problem persists, contact your network administrator. 

 DETAIL - The system cannot find the file specified. 

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

From the System Event Log I found this.

Code:

Event Type:	Warning
Event Source:	LSASRV
Event Category:	SPNEGO (Negotiator) 
Event ID:	40961
Date:		8/13/2009
Time:		11:19:13 AM
User:		N/A
Computer:	PBF-BUD-051-211
Description:
The Security System could not establish a secured connection with the server DNS/brahma5.dns.gatech.edu.  No authentication protocol was available.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Under system information there were no Problem Devices. I did find this under Hardware Resources - Conflicts/Sharing.

Code:

Memory Address 0xF0000000-0xFED44FFF	PCI bus
Memory Address 0xF0000000-0xFED44FFF	PCI standard PCI-to-PCI bridge
Memory Address 0xF0000000-0xFED44FFF	ATI Radeon X1200 Series
	
I/O Port 0x00000000-0x00000CF7	PCI bus
I/O Port 0x00000000-0x00000CF7	Direct memory access controller
	
I/O Port 0x000003C0-0x000003DF	PCI standard PCI-to-PCI bridge
I/O Port 0x000003C0-0x000003DF	ATI Radeon X1200 Series
	
Memory Address 0xFE900000-0xFEAFFFFF	PCI standard PCI-to-PCI bridge
Memory Address 0xFE900000-0xFEAFFFFF	ATI Radeon X1200 Series
	
IRQ 16	Standard OpenHCD USB Host Controller
IRQ 16	Microsoft UAA Bus Driver for High Definition Audio
	
IRQ 17	Standard OpenHCD USB Host Controller
IRQ 17	Standard OpenHCD USB Host Controller
	
IRQ 18	ATI Radeon X1200 Series
IRQ 18	Standard OpenHCD USB Host Controller
IRQ 18	Standard OpenHCD USB Host Controller
	
Memory Address 0x78000000-0xDFFFFFFF	PCI bus
Memory Address 0x78000000-0xDFFFFFFF	Motherboard resources
	
IRQ 19	Marvell Yukon 88E8071 PCI-E Gigabit Ethernet Controller
IRQ 19	Standard Enhanced PCI to USB Host Controller
	
Memory Address 0xA0000-0xBFFFF	PCI bus
Memory Address 0xA0000-0xBFFFF	PCI standard PCI-to-PCI bridge
Memory Address 0xA0000-0xBFFFF	ATI Radeon X1200 Series
	
I/O Port 0x000003B0-0x000003BB	PCI standard PCI-to-PCI bridge
I/O Port 0x000003B0-0x000003BB	ATI Radeon X1200 Series
	
I/O Port 0x0000D000-0x0000DFFF	PCI standard PCI-to-PCI bridge
I/O Port 0x0000D000-0x0000DFFF	ATI Radeon X1200 Series

Nothing really stands out to me. There is alot of video sharing but that also happens on my PC and it's fine.

[seadave77]

Well the mystery is solved. As it turns out the UPS that the computer was plugged into was bad and when the power in the building flickered (the building is pretty bad about it) the computer would shut off.

I feel like an idiot...