Solved

computer starts rebooting on its own, every two weeks to the day

Posted on 2011-03-04
30
638 Views
Last Modified: 2012-05-11
I have an XP sp3 machine that will start randomly rebooting on its own every 2 weeks to the day.  I do a rollback and it works fine again for 2 weeks...

What I have already tried:
I did memtest, flashed the mb bios, chkdsk on the hd, updated all device drivers, changed AV programs from symantec to microsoft security essentials, used spybot and several AV to check the machine for virus/spyware, All microsoft updates and current on the computer, and the machine does not give me a BSOD when it does this.  This is just a desktop and not a server and it gets rebooted often so probably not a memory leak issue.  TOTALLY baffled by this.

What is so incredibly strange is that his happens exactly 2 weeks after I rollback the machine to an earlier date, (doesn't matter when I roll it back to prior to the problem.)

Any suggestions would be appreciated.
0
Comment
Question by:FASP
  • 7
  • 5
  • 5
  • +6
30 Comments
 
LVL 8

Expert Comment

by:MarkieS
Comment Utility
Any scheduled tasks intefering?
0
 
LVL 16

Expert Comment

by:sjklein42
Comment Utility
Strange, indeed.

First question is:  Are there any messages in the System Event log?
0
 
LVL 7

Assisted Solution

by:njxbean
njxbean earned 200 total points
Comment Utility
Yes, definitely check the Event viewer log and see what is showing up right before the reboot.  

Have you checked the machine for malware?  I would turn system restore off, do a virus scan and scan for malware(malwarebytes, combofix), update, then run again.  And see if the issue returns.  Sometimes malware hides in system restore, only to return later.  
0
 
LVL 6

Expert Comment

by:davy999
Comment Utility
Check the harddisk it could be the problem
0
 
LVL 4

Expert Comment

by:innovatorengineer
Comment Utility
Clarification please.  When you say it starts randomly rebooting two weeks to the day do you mean that it reboots for no apparent reason at random intervals AFTER the two weeks is up and that prior to the two weeks elapsing it runs fine and does not reboot.  Or it reboots every two weeks?  

If you do not do a system restore, what happens after two weeks?

0
 
LVL 6

Expert Comment

by:davy999
Comment Utility
0
 

Author Comment

by:FASP
Comment Utility
The only error in the event log was ati2mtg (I2c return failed,) but these do not correspond with the reboots.

The machine works fine for exactly 2 weeks...then starts randomly rebooting at random intervals...I restore the machine and it runs fine for exactly 2 weeks...then starts randomly rebooting at random intervals.

I have already done a chkdsk

There are no scheduled events.
0
 
LVL 6

Expert Comment

by:davy999
Comment Utility
what about the psu??
0
 
LVL 7

Expert Comment

by:njxbean
Comment Utility
Definitely do a restore, then disable system restore, then follow the instructions in my post above.  If you have any malware of a virus hiding in the system restore, this should help get rid of it.  
0
 
LVL 4

Expert Comment

by:innovatorengineer
Comment Utility
Curious problem.  Are Windows updates scheduled to occur at a regular interval, say two weeks?  
0
 

Author Comment

by:FASP
Comment Utility
Windows updates are daily, not on two week intervals, so doubtful there.

I restored the machine to 2/1, updated patches, turned off system restore, and running a malware scan now.

Seems unlikely to be psu because this happens every 2 weeks exactly, (this is the 3rd time it has happens and each time on Friday exactly 2 weeks after last occurance.)  
0
 
LVL 47

Expert Comment

by:dbrunton
Comment Utility
So the rebootings occur on Friday and are not dependent on the day you do the restore?  

For example if you do a restore on say Sunday then the rebooting will occur on the Friday 2 weeks after the last occurrence.
0
 

Author Comment

by:FASP
Comment Utility
I don't know that one, because I need this machine I restore it the day it happens...which as always been Friday
0
 
LVL 47

Expert Comment

by:dbrunton
Comment Utility
Then try restoring it again in the next few days and see whether the problem occurs on a Friday or two weeks after you've restored it.

Looking to see if rebooting is dependent on a Friday or two weeks after restoration.
0
Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

 

Author Comment

by:FASP
Comment Utility
will do
0
 
LVL 91

Expert Comment

by:nobus
Comment Utility
check the bios - in the boot priority options - disable all but disk drive
could be it receives something over lan
0
 
LVL 4

Expert Comment

by:BGTSLLC
Comment Utility
Couple of additional suggestions:

1.  Check the Regional Settings and ensure they are English US and the time zone, etc are correct.
2.  Have you tried replacing the CMOS battery?
0
 

Author Comment

by:FASP
Comment Utility
Since this happens on every other Friday exactly I did a preemptive rollback today (Wednesday,) since it was due to start doing the rebooting thing again this Friday.  I will continue to monitor it.

I removed everything from the boot options except the hard drive as per suggested above and I the time settings are correct.

I did not replace the cmos battery and I will continue to test if anything seems to be working here.  It takes 2 weeks for the problem to manifest making testing this somewhat time consuming.

Thanks
0
 
LVL 7

Expert Comment

by:njxbean
Comment Utility
did you turn off system restore and run a scan?
0
 
LVL 7

Expert Comment

by:njxbean
Comment Utility
remember, without doing that, your restore could essentially be reinfecting yourself.  
0
 

Author Comment

by:FASP
Comment Utility
Yes, sorry I forgot to mention last.  The Friday before last I did turn off system restore and do a full scan but nothing was found.  I then patched the box back up to current.  Reinstalled the AV software and made a restore point then and that point is what I just restored back to today.
0
 
LVL 7

Expert Comment

by:njxbean
Comment Utility
ok great.  
0
 
LVL 91

Expert Comment

by:nobus
Comment Utility
let's hope Harry Potter does not invade your pc..
0
 
LVL 4

Accepted Solution

by:
BGTSLLC earned 300 total points
Comment Utility
Couple of other questions/suggestions:

1.  Is this machine in a domain environment or stand-alone?  I'm wondering if some sort of Global Policy has been enabled and while I've personally never seen one cause what you're experience it's a possibility.
2. I didn't see this mentioned so: Download and run Dial A Fix.  Click on policies and uncheck the box for not scanning (holding my 11mo old) so bare with me if this is fully accurate but there is a box - uncheck that then run the scan for any hidden registry/policy entries.
3. If possible:  pull the hdd and install another with XP into this machine.  If it's hardware; the problem will reoccur; if software then it won't but at least you'll be able to isolate it further.
Another way to accomplish this if you don't have another OS copy would be to simply clone the problem drive on to a spare but working hdd.  If the same problem occurs it's obviously software related.

And finally - if you're still unable to resolve; I'd either start over with a new hdd and fresh install or save the critical data and do a wipe.  

Let us know and thanks.
0
 

Author Comment

by:FASP
Comment Utility
I did a preemptive rollback on Wednesday of this week, (as this problem was due to manifest today (Friday) morning.)  At 11:15 the machine starting random reboots....

Checked event logs, no errors prior to this.  

This machine is joined to a domain and is effected by some GPO's, (no computer-specific policies,) and none of the other users in that OU are effected.

I am trying Dial A Fix nowl  I also figured in 2 weeks I would fire up Wireshark and sniff the traffic in and out of that machine on Friday and see if I can find anything.  Still baffled and of course I can wipe the machine and start over but I'm looking for an actual fix first because I want to know what the heck is causing it for future reference.)
0
 
LVL 4

Expert Comment

by:BGTSLLC
Comment Utility
I would be very curious to see what would occur if you swapped the HDD out; joined it to the domain, etc and let it run.  

Biggest thing is trying to isolate if it's Hardware or Software [i.e. - Potential Hack, etc] related as I would suspect hardware would be easier on your nerves then the latter.

Keep us updated.
0
 
LVL 4

Expert Comment

by:BGTSLLC
Comment Utility
One more thing I'd suggest as well if possible:  

Isolate the machine from your domain/network environment [i.e. - pull the cord out] and let it sit.
0
 
LVL 4

Expert Comment

by:BGTSLLC
Comment Utility
I'm curious as to if he was ever able to resolve it.  If he didn't all suggestions are technically valid but in my opinion no points should be awarded simply because we have no further direction from the OP as to what he ultimately did or at least steered him/her in the right direction.
0
 
LVL 8

Expert Comment

by:MarkieS
Comment Utility
As long as it got fixed, great.  Would just be nice to know what the problem was.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Most PC repair technicians (if not all) always start their cleanup process by emptying the temp folders before running any removal tools. It makes sense because temp folders are common places for malware installers to lurk and removing all the junk …
Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The viewer will learn how to successfully download and install the SARDU utility on Windows 8, without downloading adware.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now