N360 21.6.0.32 Windows XP
This “problem” has been occurring for a while and is not urgent but I would like to find an explanation.
Shutdown is frequently, but not always, delayed. Visual “symptoms” vary. The inconsistent sequence that troubles me the most is after clicking turn-off at point where desktop icons disappear there is a flash of a blue screen similar to the “saving your…” or “logging…” or “shutting down…” that simply shows the windows logo, then the desktop reappears with the icons, and then the icons disappear again and it goes into the usual saving, logging off, shutting down sequence. That sometimes takes several minutes.
Frequently; whether or not the delay occurs, when I look at the N360 history after logging back in I find that AFTER the “User logged out” entry that corresponds to the shutdown there will be a subsequent “User logged in” entry that may or may not be followed by a “User logged out”.
I presume that since N360 logged the entries I am probably still protected but given the odd delay and other factors I would like to know where/who/what that phantom login is coming from and what is transpiring during the shutdown.
Usually I cannot find a corresponding login/logoff in the system events. Occasionally I will find the initial logoff followed by another user initiated logoff and logoff. Somewhat like user logged off twice. I have also checked the last logon info via net user, both in safe mode as admin and in normal mode as myself and for all of the users, and can’t find a date/time corresponding to the phantom login/logoff reported by N360.
If I display full history I usually see the user logged off, logonui accessing internet, wscntfy accessing internet, n360 accessing internet and then the phantom login/logoff. The timing of the phantom login/logoff varies from a few seconds to a minute or more. The delay between the expected logoff and the phantom login varies as well but 20-30 seconds seems to be about average.
At times the shutdown takes several minutes.
I would just like to know what is going on. Any ideas??
Thanks