system reboots after starting gui

[clqrq]

a friend of mine has a little problem with his computer... he told me
that that everything was fine until he did a reinstall and connected
with a xp sp1 system to internet. Now every time he starts his system,
it boots until showing up the gui ("desktop") and then reboots.

Sounds like sasser? ... was my first thought! But there was no
shutdown-message and no opportunity to enter "shutdown -a" because the
reboot happens without warning approx. 3sec. after showing the
desktop-icons.

So i took his harddrive with me and put it into my system for
scanning....

ad-aware: nothing.
stinger: nothing.
bitdefender: nothing.

googling after it, i found the following usenet-post:
[http://groups.google.com/group/micr...es\NtmsSvc\Parameters&rnum=1#d429dd435370dedf]
___

john wrote:
I am using Windows XP Home, and I recently edited my registry,
after having backed it up. i edited at:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NtmsSvc\Parameters,
changing the value in "ShutdownTimeout" to a quantity, smaller than the
default value. I was thinking this area of the registry, referred to the amount
of time that elapses before the computer shuts down, after selecting
'shut down' from the start menu shut down menu. Well, after changing the
value and later restarting my computer, the computer now only goes as far
as trying to load my settings. Then, the harddrive powers down, and the
computer restarts back to bios post. This process repeats endlessly.

___

happy thinking that i have solved the problem i checked for the above
key in HKLM\sys\... and found the same entry as posted by john, but i
found it also on two other systems that dont show the described
symptoms.

now i dont know what to do....

is there a new sasser variant able to do the above? am i looking in the
wrong place?
booting the drive directly in my computer (of course with my harddrives
disconnected) reboots even after boot-menu and i cant even start
"save-mode" (abgesicherter modus... don't know the english term).


....any help welcome;-\

-.rhavin

 

[Guest]

It can't be Sasser. Sasser is when the file LSASS.exe fails (Trust me, I've
had it before). Try running the Windows Malicious Software tool to see if it
is any other knid of malicious software. Or else, do a system restore to a
date where you did not have this kind of problem.

a friend of mine has a little problem with his computer... he told me
that that everything was fine until he did a reinstall and connected
with a xp sp1 system to internet. Now every time he starts his system,
it boots until showing up the gui ("desktop") and then reboots.

Sounds like sasser? ... was my first thought! But there was no
shutdown-message and no opportunity to enter "shutdown -a" because the
reboot happens without warning approx. 3sec. after showing the
desktop-icons.

So i took his harddrive with me and put it into my system for
scanning....

ad-aware: nothing.
stinger: nothing.
bitdefender: nothing.

googling after it, i found the following usenet-post:
[http://groups.google.com/group/micr...es\NtmsSvc\Parameters&rnum=1#d429dd435370dedf]
___

john wrote:
I am using Windows XP Home, and I recently edited my registry,
after having backed it up. i edited at:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NtmsSvc\Parameters,
changing the value in "ShutdownTimeout" to a quantity, smaller than the
default value. I was thinking this area of the registry, referred to the amount
of time that elapses before the computer shuts down, after selecting
'shut down' from the start menu shut down menu. Well, after changing the
value and later restarting my computer, the computer now only goes as far
as trying to load my settings. Then, the harddrive powers down, and the
computer restarts back to bios post. This process repeats endlessly.

___

happy thinking that i have solved the problem i checked for the above
key in HKLM\sys\... and found the same entry as posted by john, but i
found it also on two other systems that dont show the described
symptoms.

now i dont know what to do....

is there a new sasser variant able to do the above? am i looking in the
wrong place?
booting the drive directly in my computer (of course with my harddrives
disconnected) reboots even after boot-menu and i cant even start
"save-mode" (abgesicherter modus... don't know the english term).


....any help welcome;-\

-.rhavin

 

[Wowbagger]

Reboot to safe mode and delete the video driver. Reboot and reload an
updated driver.

a friend of mine has a little problem with his computer... he told me
that that everything was fine until he did a reinstall and connected
with a xp sp1 system to internet. Now every time he starts his system,
it boots until showing up the gui ("desktop") and then reboots.

Sounds like sasser? ... was my first thought! But there was no
shutdown-message and no opportunity to enter "shutdown -a" because the
reboot happens without warning approx. 3sec. after showing the
desktop-icons.

So i took his harddrive with me and put it into my system for
scanning....

ad-aware: nothing.
stinger: nothing.
bitdefender: nothing.

googling after it, i found the following usenet-post:
[http://groups.google.com/group/micr...es\NtmsSvc\Parameters&rnum=1#d429dd435370dedf]
___

john wrote:
I am using Windows XP Home, and I recently edited my registry,
after having backed it up. i edited at:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NtmsSvc\Parameters,
changing the value in "ShutdownTimeout" to a quantity, smaller than the
default value. I was thinking this area of the registry, referred to the
amount
of time that elapses before the computer shuts down, after selecting
'shut down' from the start menu shut down menu. Well, after changing the
value and later restarting my computer, the computer now only goes as far
as trying to load my settings. Then, the harddrive powers down, and the
computer restarts back to bios post. This process repeats endlessly.

___

happy thinking that i have solved the problem i checked for the above
key in HKLM\sys\... and found the same entry as posted by john, but i
found it also on two other systems that dont show the described
symptoms.

now i dont know what to do....

is there a new sasser variant able to do the above? am i looking in the
wrong place?
booting the drive directly in my computer (of course with my harddrives
disconnected) reboots even after boot-menu and i cant even start
"save-mode" (abgesicherter modus... don't know the english term).


...any help welcome;-\

-.rhavin