Complete Computer Lockup - Security Center - I.D. 1800

[hech54]

We're sorry There is no additional information about this issue in the Error and Event Log Messages or Knowledge Base databases at this time. You can use the links in the Support area to determine whether any additional information might be available elsewhere.

Like the topic says...COMPLETE system lockup...nothing except reset/power button responds.
Event Viewer shows (Windows) Security Center as the last "event" before the lockup.
At first the event was (I thought) tied to Norton(I only had Ghost 9.0 on the computer) since
a Norton Ghost event was recorded at virtually the same time....I uninstalled Ghost (properly with
Norton removal tool) and the lockup still occurs without any mention of Ghost.

Anyone have any knowledge of this one?
Any ideas?
I'm using Avast Home with the standard Windows firewall.

[Nelson37]

Not NEARLY enough information for a specific answer, not even enough to say that something is wrong.

Frequency of lockup, running time, age of PC, usage pattern?

Changes to the PC, OF ANY KIND, recently? Any unusual events?

Describe Ghost event? An update from Symantec?

Registry cleaned of Ghost and LiveUpdate entries?

Screen activity during lockup, beeps, did you try multiple Crtl-Alt-Del?

Power supply, RAM, mobo, heat, HDD, add-on card, shorted wire, virus, just about anything could be in play.

[hech54]

Frequency of lockup, running time, age of PC, usage pattern?
Random, Random, 3 months old, huh?
Changes to the PC, OF ANY KIND, recently? Any unusual events?

Describe Ghost event? An update from Symantec?
Ghost is no longer on my system.

Registry cleaned of Ghost and LiveUpdate entries?
If CCleaner removes such things.....yes.

Screen activity during lockup, beeps, did you try multiple Crtl-Alt-Del?
COMPLETE LOCKUP - ONLY RESET/POWER DOWN works(as already stated).

Power supply, RAM, mobo, heat, HDD, add-on card, shorted wire, virus, just about anything could be in play
With the same event over and over prior to the lockup?.....highly doubtful.

[mgh]

security center or security center extension?
if the second, it is definitely a trojan

[Nelson37]

Need accurate and complete answers.

How many locks in a day, a week, an hour? What is the longest, and shortest, time of successful operation? Be precise.

What do you do with the PC in a typical day? Encoding, games, surf the net? What have you been doing when it works, and when it fails? Different patterns of operation stress different components, stressed components more likely to fail. Do you visit porn, gambling, or game sites?

Have you run a SEARCH on the hard drive, AND on the Registry, for any GHOST or SYMANTEC entries? Removal anc Cleaning software is simply not an adequate answer.

WHAT IS ON THE SCREEN AT LOCKUP??? DOES THE SYSTEM BEEP, ONCE OR OTHERWISE, WHEN LOCKING?
Did you try MULTIPLE, meaning 5-10 rapid, Ctrl-Alt-Del keystrokes? There is a difference between a hard lockup and a system that is extremely busy.

EXTREMELY IMPORTANT unanswered question which requires some careful thought - Describe ANY changes to the PC, new software, hardware, updates, was it moved, power events, used by a teenage boy, ANYTHING.

This same event which has happened many times - what EXACTLY was it? Describe in DETAIL. Lightning strike to the home, components catching fire, addition of a raid array, recent virus infection, shipped in a truck, these are all causal events which others have failed to note in my experience.

INFORMATION will point to the solution. Lack of information allows only random guesses.

Have you done a thorough virus scan, with updated software, and two different progs? Same with anti-spyware? Run a Chkdsk, and a Defrag? Boot to the BIOS and let sit for twice the time of the longest running period since the lockup? Monitored temps and voltages? Checked System32 for recent or suspiciously named files? Cleaned all Temp directories, manually in Safe Mode?

If you are CERTAIN that none of the mentioned components can cause the failure, then you should have all the information needed to fix the problem without any outside intervention. Components can change, that is the nature of a failure. It's only three months old, barely past a good burn-in. Everything, and I mean EVERYTHING, is in play until eliminated. ISOLATE and IDENTIFY.

There is a new virus making the rounds which does relate to Security center, though it usually manifests with multiple pop-ups. It does cause hard locks, but with a BSOD. Windows Antivirus XP 2008 or 2009. Malwarebytes AntiMalware is the only freebie I have found which will clean this puppy. AVG, Norton, Spybot, adaware, Mcaffee, Panda, Trend, all fail to even identify it. Manual cleaning extremely difficult.

[hech54]

It's the same thing every time, it is random, and apparently
it doesn't always crash the system because that same event
happened today with no crash.

[Nelson37]

I'm sorry to waste your time, I thought you had a problem you wanted to solve.

No specific information, no specific answers.

Others are free to submit random guesses.

[hech54]

No specific information, no specific answers.

How many different "flavors" of RANDOM do you need to hear?
How many times to I need to tell you (and others) that EVERY SINGLE TIME...
the log shows Security Center - I.D. 1800 when it does lock up?
The exact same time on the Security Center - I.D. 1800 log is the exact same time of the computer lockup....every time.

I don't need surgery....I'm asking if someone else has ever had this type of hangnail.
That was also painfully and clearly spelled out in the very first post:

Anyone have any knowledge of this one?

[Bjs]

You can always disable the security centers services for trouble shooting purposes, with it out of the way, should the fault regenerate, it might point to whats actually causing the problem... just one idea, or

Grab a spare hd, and do a test os reload with the latest drivers for just the systems hardware, no camera's, printers, scanners, ect, just keep it to the basics required for system to operate.

If it can stay running without problems in this state, and the problem dose not involve malware on the original system os hd, then it's more likely to be a problem deep in the systems registry causing the fault.

Also look at ms updates that have installed since problem evolved as well, some have caused nightmares.

[SLK001]

I take it that you just "ghosted" your new PC with files from another machine?

Did you try a complete reinstall of Windows (I'm assuming that this PC is being setup)? I've seen this when the registry doesn't jibe with what is on the machine.

Also, have you tried getting your Windows up-to-date with SP3?

[hech54]

Sorry.....this is a new system.....new XP install. It can't be something carried over from my old computer.
I've gone through my startup items with a fine tooth comb.....nothing out of the ordinary....except Norton and it's call-home-to-mommy additive that was removed.

Now that you mention it....I supposedly have Automatic updates activated....but I haven't received any lately and I'm still on SP2.
I manually overrode MS Update yesterday....that's how i found out
that I'm stuck between SP2 and SP3(the download was only 66MB)
I didn't download it because my wife needed what little speed we have for her work laptop.
HHmmmmm.....you guys gave me an idea. MS Update.....I don't think it is working properly anymore. Either something is stopping it.....or it is in itself damaged.

[Malicious]

It is possible that it could be a bad install of windows. Try disabling the security center service in services. Try that out and see how it handles. If that does nothing, reinstall windows.

[hech54]

It is possible that it could be a bad install of windows. Try disabling the security center service in services. Try that out and see how it handles. If that does nothing, reinstall windows.

I just "unleashed" Automatic updates yesterday. I had it set to update at a time
when my computer is never on....now it is back to normal.
Disabling Security Center will be next.

[mgh]

from microsoft data base
Details
Product: Windows Operating System
ID: 1800
Source: RPC
Version: 5.0
Component: System Resources
Symbolic Name: ERROR_INVALID_PRIORITY
Message: The specified priority is invalid.

Explanation

An application tried to use a document or printer priority outside the range of 1 to 99.

User Action

Unless you can specify a valid priority through the user interface of the application, you will have to contact the supplier of the running application.

imho, you got a virus/trojan as error seems to be from something other than the security center.

[hech54]

Sorry....
That is not the same "source" as my event.
My source is and always has been Security Center...not RPC.

[GKar]

Have you tried system-restore to a date before this started happening?

[hech54]

Have you tried system-restore to a date before this started happening?

That's an idea.
System restore is non-destructive right?

[fredfillis]

What did you mean by "stuck between SP2 and SP3".

FWIW, my Dad's older XP machine got hosed when trying install XP SP3. It may have been recoverable but I wasn't there to assist. I've heard of others having similar problems with SP3.

[hech54]

What did you mean by "stuck between SP2 and SP3".

FWIW, my Dad's older XP machine got hosed when trying install XP SP3. It may have been recoverable but I wasn't there to assist. I've heard of others having similar problems with SP3.

I've read that SP3 is quite large...66 to 134MB....my
estimated download size through Windows Update was
26MB....and it said my only update necessary was SP3.

[GKar]

Have you tried system-restore to a date before this started happening?

That's an idea.
System restore is non-destructive right?

I wouldn't know, I use ghost. System-restore is disabled on my system. My guess is you would lose anything installed after the date you restore it to, which is what you want right?

[fredfillis]

Yes, non destructive. It can be undone. My experience is about 50-50 for fixing problems.

[Malicious]

I have also seen system restore cause more problems then it fixes. Use it with caution. You can also try a soft restore and just reinstall windows components without losing your data. Though it will basically remove all programs installed.

[hech54]

I use an old piece of software called CPR Suite/ConFigSafe as a snapshot or system restore program. I know for a fact that one is non destructive. It came installed on an OLD Windows 98 computer of mine many years ago and surprisingly still works with XP.
My only problem is that I can't pinpoint when my lockup problem started. I've had no lockups since my original post either.
Yesterday I ran a boot scan with Avast Home and it again found nothing. Updated Spybot withing the past few days and it also found nothing.

[fatbloke88]

If you think its service pack 3 have you tried uninstalling it,if you go to add and remove programs and check the box at the top of the page"show updates"it will appear in the add/remove program list.As the install is corrupt I would back up first incase it trashes anything.If it removes it from the pc I suggest downloading the iso version from

http://www.microsoft.com/downloads/details.aspx?familyid=2fcde6ce-b5fb-4488-8c50-fe225...displaylang=en

then burning to disk,that way you can install it as many times as you like and only download it once

Also if you suspect a trojan download the free version of superantispyware and the trial of malwarebytes anti
-malware as they tend to find the stuff spybot misses

[hech54]

If you think its service pack 3 have you tried uninstalling

Nope...I "officially" still have SP2.

I suggest downloading the iso version from

http://www.microsoft.com/downloads/details.aspx?familyid=2fcde6ce-b5fb-4488-8c50-fe225...displaylang=en

then burning to disk,that way you can install it as many times as you like and only download it once

Thank You for the link....good idea. I have an official Microsoft SP2 disc as well.

Also if you suspect a trojan download the free version of superantispyware and the trial of malwarebytes anti-malware as they tend to find the stuff spybot misses

I'm 99% convinced it's not a trojan...but I will look into these two.
Thanks again.

[TBoneit]

If you think its service pack 3 have you tried uninstalling it,if you go to add and remove programs and check the box at the top of the page"show updates"it will appear in the add/remove program list.As the install is corrupt I would back up first incase it trashes anything.If it removes it from the pc I suggest downloading the iso version from

http://www.microsoft.com/downloads/details.aspx?familyid=2fcde6ce-b5fb-4488-8c50-fe225...displaylang=en

then burning to disk,that way you can install it as many times as you like and only download it once

Also if you suspect a trojan download the free version of superantispyware and the trial of malwarebytes anti
-malware as they tend to find the stuff spybot misses

The Malwarebytes' Anti-Malware works pretty good at removing some of the harder to remove things that put fake security center alerts and such into windows. Super Antispyware is pretty good too.

http://www.malwarebytes.org/
http://www.superantispyware.com/
http://www.spybot.info/en/home/index.html

Some of what I Use for cleaning.

Also Look for HostFileReader and
HiJackThis Now from Trend Micro.

[fatbloke88]

And for the fake dlls that the bugger puts everywhere in windows that none of the programs will delete note down where the files are, boot up with an ubuntu live cd and delete the files from there.
I've had 3 friends computers in the last 2 weeks all with different varations of the same Trojan one had beetles crawling across the screen that ate the desktop,but the last one on a laptop had disabled the cd drive ,usb,removed the icon in my computer for the c drive and start/all programs.
All had antivirus/firewalls but java had not been updated and none were running service pack 3.

[hech54]

Also Look for HostFileReader and
HiJackThis Now from Trend Micro.

HiJackThis has been in my arsenal for many years.
Have you seen the new automated log file analyzer at
www.hijackthis.de ?

[jeffreyawisler]

Hech 54,

Are you still having this issue? I have exactly the same thing as you happening on my computer right now. I have a Gateway laptop with Windows XP Media Center Edition. I was using internet explorer 7.0 last week and I believe I got something through windows update that changed the way 7.0 runs. It goes to this same page you have on your event viewer on the earlier post. When you go to look for support...internet explorer say no further information is available. I even tried to reformat my computer with the disk that came with it when I purchased my laptop in 2006. I downloaded everything new now with all the latest updates. I figure it has to be something in one of the updates that is causing it to crash. I tried internet explorer 8.0, 7.0, and even went back to 6.0 and the same thing keeps happening. I do not know where to go to fix this issue. if you have any info on it...i would greatly appreciate it! I am racking my brain trying to stop my computer from crashing. This just started last week...locks up 3-4 times a day....and at different times. I have noticed though if i leave my computer on and sitting idle....when you come back to it later it locks it up. I had an internet radio playing all night. It worked fine...but this morning when I moved the mouse to turn the screen back on....it locked up immediately.

[hech54]

Hech 54,

Are you still having this issue? I have exactly the same thing as you happening on my computer right now. I have a Gateway laptop with Windows XP Media Center Edition. I was using internet explorer 7.0 last week and I believe I got something through windows update that changed the way 7.0 runs. It goes to this same page you have on your event viewer on the earlier post. When you go to look for support...internet explorer say no further information is available. I even tried to reformat my computer with the disk that came with it when I purchased my laptop in 2006. I downloaded everything new now with all the latest updates. I figure it has to be something in one of the updates that is causing it to crash. I tried internet explorer 8.0, 7.0, and even went back to 6.0 and the same thing keeps happening. I do not know where to go to fix this issue. if you have any info on it...i would greatly appreciate it! I am racking my brain trying to stop my computer from crashing. This just started last week...locks up 3-4 times a day....and at different times. I have noticed though if i leave my computer on and sitting idle....when you come back to it later it locks it up. I had an internet radio playing all night. It worked fine...but this morning when I moved the mouse to turn the screen back on....it locked up immediately.

I've switched from using the Windows firewall to Comodo firewall and haven't
had a lockup since. I still haven't been able to pinpoint exactly what Comodo is blocking
that Windows firewall was not....but....so far so good.