PC reboots immediatly after first start-up

[madBLUE5]

For the past few weeks, every time I've started my PC, it loads up Windows ME fully. I watch the processor go to 0% and then about 30 seconds later it just reboots itself. This then causes it to have to do a scan disk on the next start up, but then once Windows it’s loaded this time it's fine.


Co-incidences...?
-When it first started happening it did occasionally reboot after an hour or so of been switched on, but I've found if I don't run WinTV this is no longer seems to happen.
-I've tried to do a defrag, but this starts up and then freezes (not the PC)
-Scan disk starts but then keeps restarting itself -never gets more than 10% of the way through.
-Finally, my Symantec anti-Virus software cannot be opened to configure, but it’s running. I can open Live Update and Firewall software. (This did start previous to the rebooting, so might not be connected)

Any ideas ?

[30111987]

go into safe mode and run a full scan disk and defrag
use http://www.cybertechhelp.com/html/do...load.php/id/37 startup list, copy and paste its log here so we can see what's going on

[madBLUE5]

Managed to get both defrag and scan disk working in safe mode.
The log from StartUpList is as follows. Thanks for help !




StartupList report, 26/09/2003, 11:15:37
StartupList version: 1.52
Started from : C:\MY DOCUMENTS\MY DOWNLOADS\STARTUPLIST\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\COMMON FILES\EPSON\EBAPI\SAGENT2.EXE
C:\WINDOWS\SYSTEM\TABLET.EXE
C:\PROGRAM FILES\NORTON PERSONAL FIREWALL\NISSERV.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYSTEM\MOSEARCH\BIN\MOSEARCH.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\PROGRAM FILES\NORTON PERSONAL FIREWALL\NISUM.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NETROPA\MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NETROPA\MULTIMEDIA KEYBOARD\TRAYMON.EXE
C:\WINDOWS\SYSTEM\LVCOMS.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\WINSYSRSR.EXE
C:\PROGRAM FILES\NORTON PERSONAL FIREWALL\IAMAPP.EXE
C:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\POPROXY.EXE
C:\INTEL\INTEL PSNCU\CPUNUMBER.EXE
C:\WINDOWS\SYSTEM\CTFMON.EXE
C:\PROGRAM FILES\CLIE HANDHELD\HOTSYNC.EXE
C:\PROGRAM FILES\CLIE HANDHELD\USBSWT.EXE
C:\WINDOWS\SYSMON.EXE
C:\PROGRAM FILES\STARFISH\TRUESYNC\TSTOOL.EXE
C:\PROGRAM FILES\NORTON PERSONAL FIREWALL\ATRACK.EXE
C:\PROGRAM FILES\ACCESSORIES\MSPAINT.EXE
C:\PROGRAM FILES\ACCESSORIES\MSPAINT.EXE
C:\MY DOCUMENTS\MY DOWNLOADS\STARTUPLIST\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\SYSTEM\E_SRCV02.EXE
HotSync Manager.lnk = C:\Program Files\CLIE Handheld\HOTSYNC.EXE
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
Sony PDA USB Switcher.lnk = C:\Program Files\CLIE Handheld\USBSwt.exe
System Monitor.lnk = C:\WINDOWS\SYSMON.EXE
TrueSync Launcher.lnk = C:\Program Files\Starfish\TrueSync\tstool.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
SystemTray = SysTray.Exe
Hidserv = Hidserv.exe run
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
EM_EXEC = C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
MULTIMEDIA KEYBOARD = C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
reminder.exe = C:\Program Files\BackWeb\tuner\reminder.exe
NAV DefAlert = C:\PROGRA~1\NORTON~1\DEFALERT.EXE
Norton Auto-Protect = C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
DXM6Patch_981116 = C:\WINDOWS\p_981116.exe /Q:A
LVComs = C:\WINDOWS\SYSTEM\LVComS.exe
WinsysRsr = C:\WINDOWS\WinsysRsr.exe
iamapp = C:\Program Files\Norton Personal Firewall\IAMAPP.EXE
MMTray = C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
Norton eMail Protect = C:\PROGRAM FILES\NORTON ANTIVIRUS\POProxy.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
SSDPSRV = C:\WINDOWS\SYSTEM\ssdpsrv.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
SAgent2ExePath = C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
TabletService = C:\WINDOWS\SYSTEM\Tablet.exe
nisserv = C:\Program Files\Norton Personal Firewall\NISSERV.EXE
MOSearch = C:\PROGRA~1\COMMON~1\SYSTEM\MOSEARCH\BIN\MOSEARCH. EXE
MDM7 = "C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE"

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

IntelProcNumUtility = "C:\Intel\Intel PSNCU\CpuNumber.exe" /nosplash
MoneyAgent = "C:\Program Files\Microsoft Money\System\Money Express.exe"
WebCamRT.exe = C:\PROGRAM FILES\LOGITECH\QUICKCAM\WebCamRT.exe /WinStart /regkey=Software\Logitech\QuickCam.5\WebCamSettings
ctfmon.exe = ctfmon.exe

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 21/9/2003, 20:17:12)

[Rename]
C:\WINDOWS\SYSTEM\SHDOCVW.DLL=C:\WINDOWS\SYSTEM\SE TE124.TMP
C:\WINDOWS\SYSTEM\SHLWAPI.DLL=C:\WINDOWS\SYSTEM\SE TE130.TMP
C:\WINDOWS\SYSTEM\URLMON.DLL=C:\WINDOWS\SYSTEM\SET E131.TMP
C:\WINDOWS\SYSTEM\MSHTML.DLL=C:\WINDOWS\SYSTEM\SET E134.TMP
C:\WINDOWS\SYSTEM\jscript.dll=C:\WINDOWS\SYSTEM\js cript.001

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
PCHealth Scheduler for Data Collection.job

--------------------------------------------------

Enumerating Download Program Files:

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.co...782.6183796296

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/s...sh/swflash.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL
UPnPMonitor: C:\WINDOWS\SYSTEM\UPNPUI.DLL
AUHook: C:\WINDOWS\SYSTEM\AUHOOK.DLL

--------------------------------------------------
End of report, 7,175 bytes
Report generated in 2.439 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[tb525]

Hi madBLUE5, This entry is suspicious:
WinsysRsr = C:\WINDOWS\WinsysRsr.exe

Go here and run an online virus scan, if anything is found, copy the report and paste it in a reply.

http://www.ravantivirus.com/scan/

[30111987]

you also have alot of start up programs, it could be they are conflicting with one another, try using msconfig to disable some unecessary startups
guide here: http://www31.brinkster.com/computers.../tutorials.htm

[madBLUE5]

Tried 'ravantivirus.com' and it didn't come up with anything.

'WinstsRsr' is for my portable MP3 player. (This has worked fine for a couple of years, so don't think it's the guilty party !)

I decided that I'd do a system restore back to the stage where it worked ok. For some reason it would only let me pick a date in the middle of Aug and wouldn't go back before that. After three hours it was still only three quarters of the way through and then the power extension got knocked and the PC restarted.

Now it goes past the Windows ME flash page, and then I get a large red screen with an error saying something similar to 'NAV Auto-Protect.. Unable to initialize virus scanning engine database files'

I rebooted it into safe mode and then restored it back to the last restore (yesterday) and get the same error.

I then tried loading it 'step by step' and when I get to 'crogram~1\symantec\symant.386' I'm saying no to run it, and then I get the error 'Error: NAV Auto-Protect is unable to start ! SYMEVNT.386 is not loaded. You may need to reinstall Norton AntiVirus to correct the problem'.

So basically I get told it cannot initialize it on normal boot up, but then when I try to miss it out, it says it still needs it'

Any ideas ?

[madBLUE5]

Think I've sorted it !!!

Plugged in a PS/2 keyboard instead of my USB one and it let me enter past the ''Error: NAV Auto-Protect is unable to start !...."

I then managed to install the recent Symantec definition update, via the Firewall software, removed some things from the start-up, and after a reboot, I didn't get any errors, and the antiVirus is back and working.

Somehow it looks to have sorted out the original re-boot problem, but not entirely sure how, but must importantly it's cured it !

Thanks to all that have helped with this. I've learnt a few tricks along the way !

[dragonsix]

I had similar situation. I found that it was caused by registry damaged. You may do a registry scan and restore the previous registry.