<div dir="ltr">Crashes like that _are_ common with a malware infection. To rule that out, take one of your problem computers and run a set of online virus scans on it. You mentioned you have SEP installed, so you can skip the Symantec scans. Do a Google search for "online virus scan" and hit up some of the well-known names: AVG, Kapersky, TrendMicro, bitdefender, eset, etc. and run their on-line scans. You're not looking to install anything permanently; just the online tools. Often, just relying on one scanner isn't enough to ferret out everything that infects a computer. If you run three or four online scans in addition to your resident anti-virus software, and you show up clean, then you're probably ok and can rule that out.<div><br></div><div>FWIW, also, the quality of Microsoft patches has been decreasing over the last year or so, according to some security experts. I've only run into a couple of minor things myself, but it seems to be a somewhat downward trend. There have been several patches that were initially released, broke something, and then were either soon retracted or soon(/eventually) re-patched to fix the things the first patch broke. You could be running into an issue where a patch has introduced instability into your environment. (Good luck with that one!)</div><div><br></div><div>With nothing specific to go on, you're left with basic troubleshooting. Check your Windows Event logs and find the first errors that occur after a reboot. Those will be the most relevant. Google can help for anything you find. Also try to figure out what's common among the problem computers. For instance, if you're having the same problems on the staff computers, then you can rule out Deep Freeze unless you have it installed on staff computers too.</div><div><br></div><div>Additionally, assuming you don't make mistakes with Deep Freeze by accidentally leaving it thawed with a patron using it, you can make some more educated guesses. The problem has developed with DF enabled. So what's changed? You probably didn't upgrade DF itself, so that's not it. You may have auto-Windows Updates installed, so that's a candidate. LPTOne, PCReservation, etc. probably haven't changed, so you can rule them out, etc. My guess is that you'll have a very limited scope of changes between when you didn't have the problem and when it started to become noticed. It may be limited to as little as Symantec LiveUpdates and Windows Updates. Between the two, it's unlikely to be Symantec.</div><div><br></div><div>Good luck!</div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div>______________________________<br><b>Chad Neeper</b><br><font size="1">Senior Systems Engineer</font><br><br><b>Level 9 Networks</b><br><font size="1">740-548-8070 (voice)<br>866-214-6607 (fax)</font><br><br><font size="1"><i>Full IT/Computer consulting services -- Specialized in libraries and schools</i></font><br></div></div></div></div>
<br><div class="gmail_quote">On Tue, Mar 3, 2015 at 9:37 AM, Greg Ricker <span dir="ltr"><<a href="mailto:RickerG@wtcpl.org" target="_blank">RickerG@wtcpl.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Hi all,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">We have seen a drastic increase in the number of windows services shutting down or freezing and we are at a loss as to what is causing them.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">It started with our public computers. We would notice that frequently and randomly, we would lose LPTOne and PCReservation. Sometimes the computer would require booting up 4-5 times before the service would start properly and be stable.
It wasn’t all the computers, it would happen randomly. We initially thought there might be an issue in LPTOne/PCRes so we contacted Envisionware. Then we started getting SchoolVue crashes and then DeepFreeze’s client began locking up on random computers. Then
a short time later, we began having issues with staff computers. Now we keep losing print spoolers and have to go in and restart that service. It doesn’t happen all the time and it’s random machines.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I’m not even sure where to start looking for a cause. Is this a Windows Update that caused this issue or possibly a program we installed/upgraded or could this be a virus of some odd type that doesn’t show up on the scans? We have been
going into Administrative > Services and setting the services that crash on a regular basis to restart on first/second and subsequent failures. We never had to go into each computer and change these settings before.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Here is a list of the various software we use on our computers:<u></u><u></u></p>
<p class="MsoNormal">Symantic Endpoint Protection 12 (Staff/Public PCs)<u></u><u></u></p>
<p class="MsoNormal">Deep Freeze (Public PCs)<u></u><u></u></p>
<p class="MsoNormal">SchoolVue (Public/Handful of Staff PCs)<u></u><u></u></p>
<p class="MsoNormal">PC Reservation (Public PCs)<u></u><u></u></p>
<p class="MsoNormal">LPTOne (Public PCs)<u></u><u></u></p>
<p class="MsoNormal">Windows 7 w/ SP1<u></u><u></u></p>
<p class="MsoNormal">LogMein (Public/Staff PCs)<br>
Express Metrics (Public/Staff PCs)<u></u><u></u></p>
<p class="MsoNormal">Updating computers with Ninite Pro in the mornings (Staff/Public PCs) – No client or anything like that, it gets pushed out from a console via active directory.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I guess I’m just hoping maybe someone else has had this issue and successfully resolved their issue or point me to some log files that would be helpful. Maybe someone remembers reading something about one of these programs we use causing
this kind of issue that might lead to a resolution.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thanks in advance for any tips/hints/experience anyone shares.
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">-----<u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:14.0pt">Greg Ricker</span></b><b><span style="font-size:14.0pt"><u></u><u></u></span></b></p>
<p class="MsoNormal"><b>Warren-Trumbull County Public Library<u></u><u></u></b></p>
<p class="MsoNormal">Assistant Department Manager, Information Technology <u></u><u></u></p>
<p class="MsoNormal">444 Mahoning Ave. NW Warren, Ohio 44483<u></u><u></u></p>
<p class="MsoNormal"><a href="mailto:rickerg@wtcpl.org" target="_blank"><span style="color:blue">rickerg@wtcpl.org</span></a> |
<a href="http://www.wtcpl.org/" target="_blank"><span style="color:blue">http://www.wtcpl.org/</span></a><u></u><u></u></p>
<p class="MsoNormal"><a href="tel:330.399.8807%20x144" value="+13303998807" target="_blank">330.399.8807 x144</a><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><img border="0" width="332" height="85" src="cid:image001.gif@01D05593.2E242AA0" alt="email_signature"><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>_______________________________________________<br>
OPLINTECH mailing list<br>
<a href="mailto:OPLINTECH@lists.oplin.org">OPLINTECH@lists.oplin.org</a><br>
<a href="http://lists.oplin.org/mailman/listinfo/oplintech" target="_blank">http://lists.oplin.org/mailman/listinfo/oplintech</a><br>
<br>
<br></blockquote></div><br></div>