XP reboots by itself

XP SP3 reboots by itself
I checked the event viewer the event ID is 1074:

The process winlogon.exe has initiated the restart of COMPUTERNAME for the following reason: No title for this reason could be found
 Minor Reason: 0xff
 Shutdown Type: reboot
 Comment:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
LVL 1
schang626Asked:
Who is Participating?
 
schang626Author Commented:
I found a few virus by using kaspersky virus removal tool
0
 
houssam_balloutCommented:
had you check for spyware & virus,
will system restore resolve the problem?
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
schang626Author Commented:
Ya i did read through that answer before i post.
There's nothing in my schaduled task folder.
0
 
Vaidas911Commented:
try "malware bytes" utility
0
 
schang626Author Commented:
found nothing
0
 
NikSystems SpecialistCommented:
It may be related to your current profile.
Have you tried to login to safe mode?
If you're successful, try to login as Administrator (hopefully you know the password :)
Create a new user, add it to Local Administrators group.
While in safe mode, you could scan for your system files (winlogon.exe) by running sfc /scannow  command from command prompt.
After restart try to login with newly created user and see if problem persists.
You can also try to download and boot with Dr.Web CD to scan your system for malware/viruses
http://www.freedrweb.com/livecd/

Good luck.
0
 
DonNetwork AdministratorCommented:
0
 
schang626Author Commented:
according to http://www.pchell.com/virus/msblast.shtml

mblast adds the value :

windows auto update" = MSBLAST.EXE (variant A)
windows auto update" = PENIS32.EXE (variant B)
Microsoft Inet xp.." = TEEKIDS.EXE (variant C)
"Nonton Antivirus=mspatch.exe" (variant E)
"Windows Automation" = "mslaugh.exe" (variant F)
"www.hidro.4t.com"="enbiei.exe" (variant G)

to the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

But i dont seem to find any of them in my registry.
0
 
optomaCommented:
Run autoruns.
In Autoruns:
Hit options and check "verify code signatures" and rescan (F5 key)
Don't make any other changes...

Within Autoruns,select the file tab and select save(Ctrl+S) and save as AutoRuns Data (*.arn) -Output file is a few megs in size
Once saved then right click autoruns.arn and rename to autoruns.txt to upload

Autoruns http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
0
 
kart4578Commented:
u have to install webroot internet security essential or G-data internet security.i will surely fix ur problem and also try to repair the registry files using Advanced system optimizer(also have inbuild antivirus). for future purpose, install usb Disk security.Thanks kart4578
0
 
optomaCommented:
No valid reason for deletion.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.