Why is my computer restarting itself?!

[¤I Love Clay Aiken¤]

Last week or so, I was online when all of a sudden my computer restarted itself. I thought I had hit a key by accident, so I thought nothing of it. Well, it has since happened 3 more times, one of them being about 5 minutes ago and I dont know why. I got rid of all my computer crap last week [virus, spyware, ads...], so I dont know whats wrong? It also seems to erase my history of the day and the day before. :cuss:

[robyrob]

Last week or so, I was online when all of a sudden my computer restarted itself. I thought I had hit a key by accident, so I thought nothing of it. Well, it has since happened 3 more times, one of them being about 5 minutes ago and I dont know why. I got rid of all my computer crap last week [virus, spyware, ads...], so I dont know whats wrong? It also seems to erase my history of the day and the day before. :cuss:
that is definately virus-like behavior, reboot into safemode (tap the F8 function key as it is starting up) and run HijackThis! and create a log, then run your antivirus program and do a scan - make sure that the definitions are up-to-date

you will probably need to clean out all of your temp files (use CCleaner (http://www.ccleaner.com/)) and purge your System Restore information look here for instructions (basically you turn it OFF, then clean everything and turn it back ON afterwards) http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;310405 http://support.microsoft.com/?kbid=831829

[¤I Love Clay Aiken¤]

Thanks, Rob! Ill def. do that asap.

[robyrob]

I should also mention that this could just be a software problem - a Windows or application error; follow these steps to disable the "automatically restart on errors" setting:

1. Right-click My Computer, and then click Properties.

2. Click the Advanced tab.

3. Under Startup and Recovery, click Settings to open the Startup and Recovery dialog box.

4. Clear the Automatically restart check box, and click OK the necessary number of times.

5. Restart your computer for the settings to take effect.

this will force windows to give you an error message when this happens, write down the error information and I can research it for you.

[¤I Love Clay Aiken¤]

I should also mention that this could just be a software problem - a Windows or application error; follow these steps to disable the "automatically restart on errors" setting:

1. Right-click My Computer, and then click Properties.

2. Click the Advanced tab.

3. Under Startup and Recovery, click Settings to open the Startup and Recovery dialog box.

4. Clear the Automatically restart check box, and click OK the necessary number of times.

5. Restart your computer for the settings to take effect.

this will force windows to give you an error message when this happens, write down the error information and I can research it for you.
Thanks Rob, I just did that! It just restarted and lastnight I ran my virus scan and cleaned everything out.

[The Chauffeur]

MAN! why can't he fix my computer so easily:lol:

[robyrob]

MAN! why can't he fix my computer so easily:lol:
what are you complaining about - I DID fix it :cuss:

its not my fault you burnt up your mouse :eek:

[Mr. Stefani]

I told you to stop downloading all that porn!

[The Chauffeur]

what are you complaining about - I DID fix it :cuss:

its not my fault you burnt up your mouse :eek:
:stooges:

[¤I Love Clay Aiken¤]

I told you to stop downloading all that porn!
Youre never home anymore!

[Courtnee]

Youre never home anymore!
:brent :brent :brent

[¤I Love Clay Aiken¤]

So I set it so my computer doesnt restart itself. But it still shutsdown and doesnt let me do anything. Anyways, I took a screencap of what it said [because Im lazy].. so here it is. Also below is my HiJack This! Logfile and the numbers or whatever thats listed in the 'error' box when it restarts.

C:\WINDOWS\Minidump\Mini110805-01.dmp
C:\DOCUME~1\Crystal\LOCALS~1\Temp\WER1.tmp.dir00\sysdata.xml



BCCode : 1000008e BCP1 : C0000005 BCP2 : 84D4F07B BCP3 : F1CEF928
BCP4 : 00000000 OSVer : 5_1_2600 SP : 1_0 Product : 768_1


Logfile of HijackThis v1.99.1
Scan saved at 7:47:43 PM, on 11/8/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-us\msnappau.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLServiceHost.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLServiceHost.exe
C:\WINDOWS\System32\dwwin.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Windows NT\Accessories\wordpad.exe
C:\Documents and Settings\Crystal\My Documents\My Pictures\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
O2 - BHO: (no name) - {7A1693A1-AFAF-4F1E-9B05-EEC38A85FBF3} - C:\WINDOWS\system32\ethe03.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\en-us\msntb.dll
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-us\msnappau.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [16e3n.exe] C:\WINDOWS\System32\16e3n.exe /k
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [NetZero_uoltray] C:\Program Files\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE

[PZelda]

Ahhh yes...the memory dump screen. I got that all the time I had my last computer. There's a way to turn it off so you don't get that screen. I believe it's Start > Settings > Control Panel > System > Advanced tab -- under the Settings and Recovery section at the bottom, click on the Settings button and under Write debugging information, choose (none) from the drop-down menu. :)

[¤I Love Clay Aiken¤]

It restarted again. It hasnt even been three HOURS, before it was doing it every three DAYS. Anyways, the message was a bit different this time. I screencapped it. Now this is really starting to piss me off.

[EmoJoe]

So I set it so my computer doesnt restart itself. But it still shutsdown and doesnt let me do anything. Anyways, I took a screencap of what it said [because Im lazy].. so here it is. Also below is my HiJack This! Logfile and the numbers or whatever thats listed in the 'error' box when it restarts.

C:\WINDOWS\Minidump\Mini110805-01.dmp
C:\DOCUME~1\Crystal\LOCALS~1\Temp\WER1.tmp.dir00\sysdata.xml



BCCode : 1000008e BCP1 : C0000005 BCP2 : 84D4F07B BCP3 : F1CEF928
BCP4 : 00000000 OSVer : 5_1_2600 SP : 1_0 Product : 768_1


Logfile of HijackThis v1.99.1
Scan saved at 7:47:43 PM, on 11/8/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-us\msnappau.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLServiceHost.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLServiceHost.exe
C:\WINDOWS\System32\dwwin.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Windows NT\Accessories\wordpad.exe
C:\Documents and Settings\Crystal\My Documents\My Pictures\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
O2 - BHO: (no name) - {7A1693A1-AFAF-4F1E-9B05-EEC38A85FBF3} - C:\WINDOWS\system32\ethe03.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\en-us\msntb.dll
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-us\msnappau.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [16e3n.exe] C:\WINDOWS\System32\16e3n.exe /k
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [NetZero_uoltray] C:\Program Files\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXEThats what my old computer did, and it just wouldnt start anymore so we got rid of it.

My computer sometimes blinks and it looks like its gonna shut down, but it just comes back up and all the stuff I had open comes back again.

[¤I Love Clay Aiken¤]

Thats what my old computer did, and it just wouldnt start anymore so we got rid of it.

My computer sometimes blinks and it looks like its gonna shut down, but it just comes back up and all the stuff I had open comes back again.
Well my computer is barely a year old so it better not be anything major. If I have to, Ill redo it.

[robyrob]

So I set it so my computer doesnt restart itself. But it still shutsdown and doesnt let me do anything. Anyways, I took a screencap of what it said [because Im lazy].. so here it is. Also below is my HiJack This! Logfile and the numbers or whatever thats listed in the 'error' box when it restarts.

C:\WINDOWS\Minidump\Mini110805-01.dmp
C:\DOCUME~1\Crystal\LOCALS~1\Temp\WER1.tmp.dir00\sysdata.xml

BCCode : 1000008e BCP1 : C0000005 BCP2 : 84D4F07B BCP3 : F1CEF928
BCP4 : 00000000 OSVer : 5_1_2600 SP : 1_0 Product : 768_1

Logfile of HijackThis v1.99.1
Scan saved at 7:47:43 PM, on 11/8/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-us\msnappau.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLServiceHost.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\Common Files\AOL\1124398566\ee\AOLServiceHost.exe
C:\WINDOWS\System32\dwwin.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Windows NT\Accessories\wordpad.exe
C:\Documents and Settings\Crystal\My Documents\My Pictures\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
O2 - BHO: (no name) - {7A1693A1-AFAF-4F1E-9B05-EEC38A85FBF3} - C:\WINDOWS\system32\ethe03.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\en-us\msntb.dll
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-us\msnappau.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [16e3n.exe] C:\WINDOWS\System32\16e3n.exe /k
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [NetZero_uoltray] C:\Program Files\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE


as much as I've looked into this problem you are having there are a number of possible explanations for it, according to MS:

Stop 0xD1 messages can occur after installing faulty drivers or system services. If a driver is listed by name, disable, remove, or roll back that driver to confirm that this resolves the error. If so, contact the manufacturer about a possible update. Using updated software is especially important for backup programs, multimedia applications, antivirus scanners, DVD playback, and CD mastering tools.
this could be a bad or dislodged RAM chip, a corrupted or incompatible driver, an overheating problem, a bad update or software install... or it still could be a virus that isn't getting completely removed

let me ask,
- did you install anything or add/change anything just before this happened?
- did the antivirus program find anything when you ran it in SAFEMODE?
- are there any drivers in the Device Manager that have errors - big red question mark in front of them? (to open the Device Manager, hold the Windows key and press the PauseBreak key, click on the Hardware tab, then click on the Device Manager button) ifso, right-click and uninstall them, then let Windows redetect and reload them after you reboot, then check for updated drivers
- do you get the dump screen/crash when you are in SAFEMODE?
- can you check your RAM with Memtest86 (http://www.memtest86.com/)
- can you check for unsigned/incompatible drivers (http://support.microsoft.com/kb/q308514/)

if all this fails, you could try a repair installation of XP (http://support.microsoft.com/support/kb/articles/q315/3/41.asp)

but... I'm still not comfortable with some of the stuff in your HijackThis log, if you can try run it again in SAFEMODE and "fix" these items, if they come back after a reboot, I would say that it is still a virus or trojan causing the problem:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
O2 - BHO: (no name) - {7A1693A1-AFAF-4F1E-9B05-EEC38A85FBF3} - C:\WINDOWS\system32\ethe03.dll

O4 - HKLM\..\RunOnce: [16e3n.exe] C:\WINDOWS\System32\16e3n.exe /k

[¤I Love Clay Aiken¤]

as much as I've looked into this problem you are having there are a number of possible explanations for it, according to MS:


this could be a bad or dislodged RAM chip, a corrupted or incompatible driver, an overheating problem, a bad update or software install... or it still could be a virus that isn't getting completely removed

let me ask,
- did you install anything or add/change anything just before this happened?
- did the antivirus program find anything when you ran it in SAFEMODE?
- are there any drivers in the Device Manager that have errors - big red question mark in front of them? (to open the Device Manager, hold the Windows key and press the PauseBreak key, click on the Hardware tab, then click on the Device Manager button) ifso, right-click and uninstall them, then let Windows redetect and reload them after you reboot, then check for updated drivers
- do you get the dump screen/crash when you are in SAFEMODE?
- can you check your RAM with Memtest86 (http://www.memtest86.com/)
- can you check for unsigned/incompatible drivers (http://support.microsoft.com/kb/q308514/)

if all this fails, you could try a repair installation of XP (http://support.microsoft.com/support/kb/articles/q315/3/41.asp)

but... I'm still not comfortable with some of the stuff in your HijackThis log, if you can try run it again in SAFEMODE and "fix" these items, if they come back after a reboot, I would say that it is still a virus or trojan causing the problem:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
O2 - BHO: (no name) - {7A1693A1-AFAF-4F1E-9B05-EEC38A85FBF3} - C:\WINDOWS\system32\ethe03.dll

O4 - HKLM\..\RunOnce: [16e3n.exe] C:\WINDOWS\System32\16e3n.exe /k
WHEW! Thanks Rob! I havent installed anything since.. just the virus and spyware destroyers, etc. As for the drivers, nothing with a red ! came up. HOWEVER I know that my audio driver is messed up and needs to be reinstalled because you told me so a while ago. I just havent gotten around to it yet because I dont listen to music and such on the computer :blush:. My computer got messed up a few months ago when it was turned on and the power went out.. did something to the computer and nothing worked. My dad redid it and I started from scratch. The audio worked for a while, then I noticed one day it went out. I should probably fix that :bonk:, but how come the ! doesnt show up for the audio? Yesterday when I checked for viruses and stuff, nothing came up. And I did it in safe mode a couple days ago, and it was fine too. Ill get rid of that crap though from HiJack This! - I wouldve before, but Im not sure what to keep and what to get rid of. Im thinking sometime next week or so Im going to save EVERYTHING and delete it all and have my Dad redo my computer again. Even if I can get this fixed, I have a lot of crap on my computer and it could use a good cleaning out.

Thanks a bunch Rob, I really appreciate this! :hug: