any key on keyboard = system restart? Yahoo chat rooms cause shutdown?

no way i did that.  (hitting ctrl+alt+del twice senquentially).
my left hand was on my phone.

I am 99.9% sure, all I did was left click my mouse on the "submit' button after entering the security code to enter the Yahoo chat room. I've not tried again, fearing something there caused this. Some virus immediately got onto my system thru the chat room, etc.
Not sure. it happened sudden and fast.
It rebooted and everything seems fine except AVG is doing it's regular Friday 5pm scan so things are slow. this is normal for using AVG.

When you say the computer "immediately cutoff", did it do a proper shutdown of windows or just lost power and then started booting back up?

lost power and started boot back, nothing normal about it, my screen went blank as I was clicking the submit button. I can go back to that chat room and repeat the process. I've got an old keyboard. There are keys here, two odd looking keys between ALT and CTRL, but I am very clear I was left clicking my mouse on the word "submit" under the security code. And "immediate blackness". AVG is through and it found nothing as usual.

If this is a coincidence and there was some system failure like power supply, etc. what could it be.

This is the first time I've entered those chat rooms on this machine.

well, maybe not lost power, my computer shutdown and rebooted.
Would a power failure cause it to reboot itself?
I thought of a power failure but how could it reboot itself.

nickg5--Perhaps of help http://www.pcworld.com/article/166587/keyboard_shortcuts_for_shutting_down_rebooting_and_going_to_sleep.html

I did not have time or enough hands to do those mutliple tasks to get reboot.

I'll get brave and try that same chat room over the weekend.

I use two hands on the keyboard for text. I entered the letter and numeric codes, and my right hand went to the mouse to click submit. Positive.

nickg5--Those suggestions really do not seem that difficult.  Shutdown: WIN, U, U  means hold down WinKey+U+U
I can do it with one hand if pressed, but two are easy.

nickg5--It does not work on my PC anyway.

I'm sure the shutdown occurred when I was clicking submit with my mouse.
The security code was maybe 7 characters. I'd have done that with one hand, left hand.
Only possibility is as I was moving my right hand away from the keyboard my palm hit alt, or control, or one of those other keys, some Windows symbol I think and the other one looks like a notepad with an arrow on it. Possibly, remotely my palm touched one or more of those keys, but letters like U and R were not near there.
I'll join that chat room again and hope it does not happen again.
I'll make sure nothing is near the keyboard when submit is clicked.

I know my laptop has a power on button but you have told it down a few seconds to get it to shut off, but it does not reboot by itself.

I'm sure there are skeptics unless I can reproduce the event.

Is there any other way for a "restart" other than from the start button, as you proceed to a normal shutdown? (other than some multiple key engaging) That link the keys you press are not near each other, it is made that way I guess so you have to go out of your way to do the process and can not manage that by accident.

I do have my entire system plugged into a surge protector with one switch for turning everything off.........off but not reboot. Impossible. I've accidentally hit this button with my left knee before. It's there in case of a virus attack, I can immediately turn things off.

dbrunton:
Power supply.
Motherboard fault.
Windows having a hissy fit.
Yahoo chat room virus?
...............ok my power supply and motherboard are out of warranty I think. I'll check on it.
.............hopefully it was a Windows moment.
............I'll try to enter some chat rooms tomorrow.

harryhelp:
corrupt Windows installation
ESET Smart Security
...................do you mean  a corrupt version of Windows XP, or try to re-install the same disc I have if the problem persists?
.................I'll see if ESET can find something

if it was a one time event and the fault of equipment failure, etc, the timing was one in a million, the instant I clicked "submit" as if clicking that button caused the problem.

the event was re-created.
I went into my Yahoo messanger to enter a chat room.
I entered the security code.
My left hand was below my desk. My right hand was on my mouse. I left clicked the submit button.
I held it down for 3 seconds, and when I released it, bingo, my screen went black and system re-booted.

Anyone believe me?

I wish I had a witness....an EE member.

Microsoft and Yahoo aren't the best of friends.

Could there be something in my Windows software that rejects my attempts to enter a Yahoo chatroom?
I can try again using Firefox but I don't want to damage my machine though re-boots should be harmless.

I know people in those chat rooms. Any ideas?

Check you have the latest version of Yahoo messenger.

Check your event logs (but I'm not expecting anything).

Download NOD32 http://www.eset.com/ the trial version (good for a month I believe).  Disable your AVG and install NOD32 and do a thorough scan.

ESET won't download
it gave me a password and user name for the authenicated log in but
I get this:
Authorization Required
This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.

my browser is IE 7.0

where to check event logs?
my yahoo messenger is version 9.0.0.2034

I can tell you this....after each of these events, once I rebooted, some unknown Yahoo member asked for permission to chat or use instant messaging. I said NO to permission both times.

You may have clicked on the wrong link.

Try http://download.eset.com/eval/win/eav/eav_nt32_enu.msi

jcimarron:
event log for today had two entries that were red: both at 7:15 pm. The time of my thread was 4:23 but I think that is pacific time so that may have been 7:23 pm so the event occurred after the red balls. They were labelled as service control manager and net logon.

There are dozens of red balls going back to Aug. 4th. Most said error, some were DCOM, whatever that is. There were yellow "warnings" and some of those were DHCP, print, and others.

dbrunton:
I got the download using Firefox. The scan found and deleted 11 items. 2 were Hoax.renos and the rest were bagle.gen.zip.worm. However all were in a SmitFraud fix file and Smitfraud is supposed to be "friendly"?

There were dozens of files it labelled as "bad archive". Alot were AOL or AIM related or temp files.

I saw nothing that resembled Yahoo or IM. Since I'm accessing the chat rooms from within Yahoo messenger, my browser has nothing to do with it I guess.

I know a lady down the street that uses the same chat rooms.
Why would my 2 attempts result in immediate shutdown.

I did notice, both times, upon re-boot there is someone trying to initiate chat. They were denied since they were unknown.

If other people were having the same problem there would surely be info out there. I can go to Yahoo Answers and ask if anyone has been shutdown trying to enter the chatrooms.

Bad archive is probably ignorable.  See http://forums.techguy.org/general-security/660239-solved-nod32-scan-many-files.html

I still think there may be a virus or something else lurking in the area.

Get HijackThis http://free.antivirus.com/hijackthis/ and post the log here.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:27:14 PM, on 9/26/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.experts-exchange.com
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1229558451509
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Audio Service (STacSV) - Unknown owner - c:\docume~1\owner\locals~1\temp\cdm\{dbcca0ca-53b5-43bb-b983-9d097bcb333f}\STacSV.exe (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 6464 bytes

nickg5--Your HiJackThis log looks pretty clean
A small quibble would be O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime  which is certainly not needed to start at boot.  But I do not think it does more than slow things down.
In any event, I doubt it would have caused the shutdown process you initially posted on.

nickg5--Maybe I should have also mentioned C:\Program Files\Common Files\Real\Update_OB\realsched.exe  and  O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
Again, not needed to start at boot.  Maybe not needed at all.  Up to you.
http://www.bleepingcomputer.com/forums/topic120989.html

There's nothing obvious there.

I've seen a thread where a virus was attached to Yahoo Messenger and cause this problem but I can't find it anymore.  Didn't bookmark and that's what I've been working on.

Suggestions only.  Uninstall and reinstall Yahoo.  Save any data such as names and passwords first before you do this.

I think Trillian http://www.trillian.im/learn/ will get into Yahoo chat.  You can try that instead.

>> I did notice, both times, upon re-boot there is someone trying to initiate chat. They were denied since they were unknown.

I still don't like that.

Yes - I mean you'd want you may need to reinstall if this persists.

I'm having to remove that virus program ESET. It is really bogging down my system.
NO browsers will open from a shortcut to a webpage or from a short cut to in IE icon, and it is struggling to screen e-mails for virus. I do not need the e-mail scan since my ISP provides that. Turning NOD32 off temporarily only last until the next bootup. I can not find a way to totally disable it until desired.
jcimarron is aware of this issue from another thread.

I'll re-install Yahoo Messenger and see what happens.

>> I'm having to remove that virus program ESET. It is really bogging down my system.

No problem with that.  Make sure you enable AVG.

Strange though.  NOD is usually a very lightweight antivirus application.

I need to start another thread on my IE issues. Today, first bootup no shortcut to IE or a shortcut to a webpage in an e-mail would open a browser. Then after being shutdown by Yahoo again, ALL browsers from all sources work fine. See below on Yahoo.

With NOD32, when an e-mail arrives, this single line message that it is scanning the e-mail starts at the bottom right of my screen and shoots up the entire right side of my screen. Is this normal? I'm seeing duplicates, not duplicates or triplets but maybe 10-15 of these single messages saying the e-mail is being scanned. Normal?

I decided to try to join a Yahoo chat room again since NOD had already removed 11 items. Maybe one of those 11 items was the cause. I did not use my mouse this time to click on "submit" after entering the security code. I used my "enter" key. I acutally got further into the room than the previous two times, I was given a message at the top of the chat box that my login info had been accepted, or something like that, but then my computer shutoff.

I'll now do a new NOD scan and see if it finds the same 11 items or other items. Then try a new installation of Yahoo messenger and also Trillian.

I know jcimarron was involved with my thread on IE browesr problem. I'll post a new thread on that if anyone here wants to take a look.

nickg5--Set ESET to no long scan incoming email.  Little to lose.

jcimarron:
.......ok...........

i've got a new thread on the browser thing which was very bad my first bootup this morning but fine since, all sources for webpages works............

and someone has suggested malwarebytes and combofix which I have used before. If you wish to look in on that thread, please do.

after running malwarebytes and disabling some things in MsConfig and un-install and re-install of sp3 and a new copy of IE 8.0 and a new copy of Yahoo Messenger, I'm able to enter yahoo chat rooms without being shutdown when trying to enter the chat room.
Exactly which of the above solved the problem, not sure, since all was done to solve some IE problems.