New
#1
MSE, restarts before login, missing event log entries
Hi,
I'm quite consternated and I'd love to hear your opinions on this. The story:
I'm experiencing strange restarts but not random, I can routinely replicate it. After a boot IF I leave the logon screen alone (i.e. without logging in), the system restarts itself almost like automatically after about 10 seconds. If I do log in within the 10 seconds interval, the login is successful and the restart won't occur. So no restarts while working.
Logically, I started searching the Event log; that's where I discovered the scary part (after some tests and trials):
The entire "restarted" session is missing!
Like:
20:00 I shutdown the computer (from Windows start menu).
20:10 I start the computer. The log on screen appears. 10 seconds pass and said automatic restart occurs.
20:20 I start the computer, log in within 10 seconds interval and start working (and searching the Event log).
In the Event log around 20:00 there are usual shutdown routine entries.
Around 20:20 there are usual boot up routine entries.
There are absolutely NO log entries indicating the system was run at 20:10 at all!!!
(Only exception is rather cheeky:
"The previous system shutdown at 20:11:03 on 3.12.2009 was unexpected.")
There are NO log entries (Application/Security/System) with any such time.
I find this extremely confusing.
I suspected Microsoft Security Essentials because there was one time that the restart occurred shortly AFTER I logged in, with MSE error - that one was recorded in the event log but unfortunately I cleared it some time ago.
After I uninstalled MSE (Defender automatically kicked in), things got worse. The restart followed shortly even after login no matter what. System was unusable so I restored previous bit copy.
Simply disabling the Microsoft Anti-Malware service does nothing.
I'm running W7 Enterprises (official trial image). Quite new installation without any special settings (I believe).
I certainly appreciate any help or advice...
Last edited by quszquetbaep; 04 Dec 2009 at 06:12.