erik77
asked on
Machine rebooting every night
Hi,
I have a users' machine that reboots every night. The event log shows that every night at 1145PM the machine attempts a reboot. The event log shows User32 as the source and 1074 as the event ID. The description of the event is listed below:
"The process winlogon.exe has initiated the restart of TVHOF24 for the following reason: No title for this reason could be found
Minor Reason: 0xff
Shutdown Type: reboot
Comment: "
What could be causing this restart every night? The scheduled tasks folder is empty. The Anti Virus software is up to date.
thanks all,
E-Z-E
I have a users' machine that reboots every night. The event log shows that every night at 1145PM the machine attempts a reboot. The event log shows User32 as the source and 1074 as the event ID. The description of the event is listed below:
"The process winlogon.exe has initiated the restart of TVHOF24 for the following reason: No title for this reason could be found
Minor Reason: 0xff
Shutdown Type: reboot
Comment: "
What could be causing this restart every night? The scheduled tasks folder is empty. The Anti Virus software is up to date.
thanks all,
E-Z-E
Darn, reread that and you had the time smack dab in front of my face....
Need to read slower...
Need to read slower...
I found a few links that reference winlogon.exe and reboots to virus/worm activity. (Sasser)
You stated that your anti-viurs is up to date. Have you performed a scan in Safe Mode?
You stated that your anti-viurs is up to date. Have you performed a scan in Safe Mode?
ASKER
I am curious why you suggested I check the registry for .....\Winlogon\notify?
What could winlogon have to do with the problem?
Thanks for the promptness!!
What could winlogon have to do with the problem?
Thanks for the promptness!!
http://www.eventid.net/display.asp?eventid=1074&eventno=1783&source=USER32&phase=1
Just a quick search pulled that up, with some basic info...
And this is an article on the Shutdown Event Tracker
http://support.microsoft.com/default.aspx?scid=kb;[LN];293814
(not applicable to XP Home)
Just a quick search pulled that up, with some basic info...
And this is an article on the Shutdown Event Tracker
http://support.microsoft.com/default.aspx?scid=kb;[LN];293814
(not applicable to XP Home)
Oops, wrong thread, disregard the Shtdown event tracker link, doesnt apply to your problem....
Im on a roll, sheesh...
As for the Winlogon Key, I would be curious to see whats loaded by Winlogon each time it boots, to see if something is perhaps dormant...
Im on a roll, sheesh...
As for the Winlogon Key, I would be curious to see whats loaded by Winlogon each time it boots, to see if something is perhaps dormant...
ASKER
How can I access that infomation? The registry I assume since it not in the event log.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
John,
Thank you so much for your help. Unfortunately, I have yet to get access to the machine again.
I will write back with the registry info tomorrow.
Thank you so much for your help. Unfortunately, I have yet to get access to the machine again.
I will write back with the registry info tomorrow.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Also, what is listed under this key in regedit?
HKEY_LOCAL_MACHINE\SOFTWAR