XP reboots by itself

XP SP3 reboots by itself
I checked the event viewer the event ID is 1074:

The process winlogon.exe has initiated the restart of COMPUTERNAME for the following reason: No title for this reason could be found
 Minor Reason: 0xff
 Shutdown Type: reboot

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Who is Participating?
schang626Author Commented:
I found a few virus by using kaspersky virus removal tool
had you check for spyware & virus,
will system restore resolve the problem?
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

schang626Author Commented:
Ya i did read through that answer before i post.
There's nothing in my schaduled task folder.
try "malware bytes" utility
schang626Author Commented:
found nothing
NikSystems SpecialistCommented:
It may be related to your current profile.
Have you tried to login to safe mode?
If you're successful, try to login as Administrator (hopefully you know the password :)
Create a new user, add it to Local Administrators group.
While in safe mode, you could scan for your system files (winlogon.exe) by running sfc /scannow  command from command prompt.
After restart try to login with newly created user and see if problem persists.
You can also try to download and boot with Dr.Web CD to scan your system for malware/viruses

Good luck.
DonNetwork AdministratorCommented:
schang626Author Commented:
according to http://www.pchell.com/virus/msblast.shtml

mblast adds the value :

windows auto update" = MSBLAST.EXE (variant A)
windows auto update" = PENIS32.EXE (variant B)
Microsoft Inet xp.." = TEEKIDS.EXE (variant C)
"Nonton Antivirus=mspatch.exe" (variant E)
"Windows Automation" = "mslaugh.exe" (variant F)
"www.hidro.4t.com"="enbiei.exe" (variant G)

to the registry key:

But i dont seem to find any of them in my registry.
Run autoruns.
In Autoruns:
Hit options and check "verify code signatures" and rescan (F5 key)
Don't make any other changes...

Within Autoruns,select the file tab and select save(Ctrl+S) and save as AutoRuns Data (*.arn) -Output file is a few megs in size
Once saved then right click autoruns.arn and rename to autoruns.txt to upload

Autoruns http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
u have to install webroot internet security essential or G-data internet security.i will surely fix ur problem and also try to repair the registry files using Advanced system optimizer(also have inbuild antivirus). for future purpose, install usb Disk security.Thanks kart4578
No valid reason for deletion.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.