Windows XP restarts at specific time

D

Dev

Sir -

I think I have a peculiar challenge. My system restarts at a specific
time- 1) at 7:04 AM CST 2) at 11:04 AM CST

I am unable to find which process triggers the restart. These are some
of the things which I tried:

1) Disabled most of the services which are not required
2) Selected Stop using Task Scheduler
3) Installed UPHClean (hive cleanup service).
4) Changed the laptop case thinking it would be heating up
5) Unchecked 'Automatically Restart' in the event of System failure
6) No memory dump is written in the event of restart

7) Tried searching 'shutdown' in registry..thinking that there would
be some 'at' command. but found no luck.

I am unable to figure out the cause for this restart. Any help in this
highly appreciated.

Thank you,
Dev
 
P

Pegasus

Dev said:
Sir -

I think I have a peculiar challenge. My system restarts at a specific
time- 1) at 7:04 AM CST 2) at 11:04 AM CST

I am unable to find which process triggers the restart. These are some
of the things which I tried:

1) Disabled most of the services which are not required
2) Selected Stop using Task Scheduler
3) Installed UPHClean (hive cleanup service).
4) Changed the laptop case thinking it would be heating up
5) Unchecked 'Automatically Restart' in the event of System failure
6) No memory dump is written in the event of restart

7) Tried searching 'shutdown' in registry..thinking that there would
be some 'at' command. but found no luck.

I am unable to figure out the cause for this restart. Any help in this
highly appreciated.

Thank you,
Dev

You left out two items:
- Check c:\Windows\tasks for scheduled tasks.
- Run msconfig.exe and check your startup tasks. Disable the lot, then see
what happens.

Note: You should physically disconnect your machine from the Internet while
your virus scanner / firewall are unticked in msconfig.exe.
 
D

Dev

Thank you ~

1) No entries found in C:\Windows\tasks
2) disabled some of the startup tasks
3) disconnected from network.
4) Manually switched on laptop only after 7:30 am to see what happens
5) But the system rebooted at 11:04 religiously.

Any help?

Thank you,
Dev
 
P

Pegasus [MVP]

Thank you ~

1) No entries found in C:\Windows\tasks
2) disabled some of the startup tasks
3) disconnected from network.
4) Manually switched on laptop only after 7:30 am to see what happens
5) But the system rebooted at 11:04 religiously.

Any help?

Thank you,
Dev

=================

Try this:
- Run regedit.exe.
- Export (File/Export) the keys below to a text file.
- Open these text files with notepad.exe.
- Paste the contents into your reply.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

You should also check if the problem persists while in Safe Mode.
 
D

Dev

Hi - Here are the details as requested.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShStatEXE"="\"C:\\Program Files\\Network Associates\\VirusScan\
\SHSTAT.EXE\" /STANDALONE"
"McAfeeUpdaterUI"="\"C:\\Program Files\\Network Associates\\Common
Framework\\UdaterUI.exe\" /StartedFromRunKey"
"SigmatelSysTrayApp"="stsystra.exe"
"igfxtray"="C:\\WINDOWS\\system32\\igfxtray.exe"
"igfxhkcmd"="C:\\WINDOWS\\system32\\hkcmd.exe"
"AWMON"="\"C:\\Program Files\\Lavasoft\\Ad-Aware SE Professional\\Ad-
Watch.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\OptionalComponents\MSFS]
"Installed"="1"

Thank you,
Dev
 
S

smlunatick

Hi - Here are the details as requested.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShStatEXE"="\"C:\\Program Files\\Network Associates\\VirusScan\
\SHSTAT.EXE\" /STANDALONE"
"McAfeeUpdaterUI"="\"C:\\Program Files\\Network Associates\\Common
Framework\\UdaterUI.exe\" /StartedFromRunKey"
"SigmatelSysTrayApp"="stsystra.exe"
"igfxtray"="C:\\WINDOWS\\system32\\igfxtray.exe"
"igfxhkcmd"="C:\\WINDOWS\\system32\\hkcmd.exe"
"AWMON"="\"C:\\Program Files\\Lavasoft\\Ad-Aware SE Professional\\Ad-
Watch.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\OptionalComponents\MSFS]
"Installed"="1"

Thank you,
Dev

Have you consider any possible sources of this problem outside of
Windows?

Some PCs can have BIOS settings for timed activities.

Also, is this PC on a separate circuit? What else is on the same
power circuit / bar?
 
D

Dev

Hi -

This is a DELL LATITUDE D620 Laptop. At work its docked using a
docking station. At home its connected directly to power outlet.

Good thinking on BIOS Setting. I am not sure on how to identify those
settings.

Thank you,
Dev
 
M

Malke

Dev said:
Yes, I did try in safe mode. The system did not restart.

If the system didn't restart in Safe Mode, then something you have running
in Regular Mode is causing the issue. Do clean-boot troubleshooting to
determine what that program/process is.

Clean boot in Windows XP - http://support.microsoft.com/kb/310353

Clean-boot advanced troubleshooting in Windows XP -
http://support.microsoft.com/kb/316434

How to Troubleshoot By Using the Msconfig Utility in Windows XP -
http://support.microsoft.com/?id=310560

The free Autoruns program is very useful for managing your Startup -
http://www.microsoft.com/technet/sysinternals/default.mspx

Malke
 
P

Pegasus

Did you test Safe Mode too?

Yes, I did try in safe mode. The system did not restart.

Thank you,
Dev

=============

Aha! Using a Safe Mode boot is a simple but highly effective tool in
trouble-shooting. Now follow the hints that Malke gave you, then post again
after locating the culprit. Please do not forget this - sadly enough, many
posters become silent as soon as their problem is solved.
 
D

Dev

This is really going to be learning journey. I will surely probe and
post the details. Just that it would be delayed. But I will surely
share the details.

Thank you,
-Dev
 
J

Jamie Neve

Virus scan? System Restore? The basics sometimes solve the problem, also don't
just use one AV Scanner. Use multiple ones. Malware Bytes is a good one, for
adware, malware and virus.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top