Windows Vista/acer Automatically Rebooting

[WarpSpeed]

I have an Acer Aspire approximately 2 years old with OE Windows Vista basic. I wanted to install a specific driver updated version for a video tape conversion hardware I have to see if it would operate.

I had my missus ask her IT dept at work if one of them could download this driver from one of those online companies that have it listed because I didn't want to pay for a service I rarely use when most of them have unlimited access.

They did (supposedly) and she brought me her thumb drive and I downloaded it but was reluctant for some reason but didn't follow through because it was supposed to be a trusted professional and source but as it turns out I should have been more vigilant..

I did a couple of other downloads around the same time but this one jumps out at me most and I have checked my downloaded programs file and one is listed there that has no access, no info of any kind and only shows "Unknown" properties etc. with a date relative the day I began having issues..

It brought my attention because my computer began acting up, working constantly you know?? and slowing down like it is doing exactly that and it also automatically reboots about 20 seconds after shut down and has to be unplugged..

My antivirus software has noticed nothing, I have Avast with Windows back up and firewall and had no problems to this point, but no suprise as I accepted this program so it has bypassed my safeties as it were.

Last night after reading another thread here I downloaded and ran Eset and it shows no problems either..But again the same problem when I shut down...I seldom download software and it is too ironic the timing of the related problems. I know the program in question but can't locate it anywhere with any search, here it is; {8FFBE65D-2C9C-4669-84BD-5829DCOB603C} it's an active X file too that threw up another red flag.. I am intermediate level in computer experience so any help accordingly would be greatly appreciated.. WS

[hercemer75]

I have an Acer Aspire approximately 2 years old with OE Windows Vista basic. I wanted to install a specific driver updated version for a video tape conversion hardware I have to see if it would operate.

I had my missus ask her IT dept at work if one of them could download this driver from one of those online companies that have it listed because I didn't want to pay for a service I rarely use when most of them have unlimited access.

They did (supposedly) and she brought me her thumb drive and I downloaded it but was reluctant for some reason but didn't follow through because it was supposed to be a trusted professional and source but as it turns out I should have been more vigilant..

I did a couple of other downloads around the same time but this one jumps out at me most and I have checked my downloaded programs file and one is listed there that has no access, no info of any kind and only shows "Unknown" properties etc. with a date relative the day I began having issues..

It brought my attention because my computer began acting up, working constantly you know?? and slowing down like it is doing exactly that and it also automatically reboots about 20 seconds after shut down and has to be unplugged..

My antivirus software has noticed nothing, I have Avast with Windows back up and firewall and had no problems to this point, but no suprise as I accepted this program so it has bypassed my safeties as it were.

Last night after reading another thread here I downloaded and ran Eset and it shows no problems either..But again the same problem when I shut down...I seldom download software and it is too ironic the timing of the related problems. I know the program in question but can't locate it anywhere with any search, here it is; {8FFBE65D-2C9C-4669-84BD-5829DCOB603C} it's an active X file too that threw up another red flag.. I am intermediate level in computer experience so any help accordingly would be greatly appreciated.. WS

GO TO ACER .COM AND THAN GO TO THERE FREE DOWNLOADS.THAT SHOULD WORK FOR YOU.

[lopburi3]

I would try to restore to a point earlier than this happening. That thumb drive may well be infected. If restore does not help it is probably best to take out and have someone who knows search for the problem.

[Suzy]

I have had two Acer Aspire models in the past 24 months. Both are absolute crap. They constantly crash, give me a blue screen, reboot, close programmes I am running and if switched off, cannot open again for around 3 hours. In one day I returned one computer 5 times to the technician to fix. Acer themselves were unable to solve the problem when it first occurred and since that time have refused to offer help claiming there is nothing wrong. The Acer shop in Fashion Island only help customers who have purchased from them and don't have an engineer on site. My local IT specialist told me (too late) DON"T touch ANYTHING from Acer. He refuses to recommend, install or sell their machines. I am looking forward to the end of the year when I can happily throw this machine in the dustbin and invest in something more reliable.

[WarpSpeed]

Ok well that was helpful, thanks all.. Have I stumped the computer guru's here?? What's the prize for that? Though I must say it doesn't seem to be unique for me as I always seem to have similar unique issues no one has ever seen before or has answers to...

So does anyone have any REAL help to offer? I can't see this being such a major issue.. But as Suzy says bringing it to a local Thai shop is far more risk than it's worth. From my experience much of her problems have more than likely been caused by those shops rather than her computer being junk. If it isn't a regular PC with Regular Xp software my experience has been that they haven't a clue and screw up more then they fix while trying or just walk away saying it's "junk" to save face for the fact that they don't know....

How would one restore to a previous time if that were the course of action I would want to take? I booted it the other day after I had it unplugged and that option came up on the screen initially and I choose it but I don't recollect seeing any options offered on a choice of date of restoration in which I could choose from?

[lopburi3]

System restore (use start bar search if needed) and it should provide a listing of available dates. On start-up it probably only provided the most recent unless you selected older.

If that does not help believe you do need to take out as those thunb drives can install some very deep infections that will probably require safe mode operations to remove (if indeed that is the problem).

You have unplugged any/all USB devise (you mentioned hardware driver) and that did not correct the problem?

[WarpSpeed]

System restore (use start bar search if needed) and it should provide a listing of available dates. On start-up it probably only provided the most recent unless you selected older.

Ok probably, as I didn't change any dates as I said there was no options on start up, I'll try to restore prior to the date but let's say I do, where will this program go?? Will it be deleted? What happens and what keeps it from activating again? So should I be doing this search in safe mode? *edit* I just figured out what you suggested, never mind, I'll try that..Thanks

If that does not help believe you do need to take out as those thunb drives can install some very deep infections that will probably require safe mode operations to remove (if indeed that is the problem).

You have unplugged any/all USB devise (you mentioned hardware driver) and that did not correct the problem?

The thumb drive was removed some time ago almost immediately and yes all the other hardware was removed also and has been for some days now...

I forgot to add that when my wife brought it back (thumb drive) and showed to her IT dept, they had some difficulty getting it to delete from there too.. Though there it is 'isolated' so they finally used Alt/delete and it deleted but now that I think about it, where did it go? Into their computers trash bin? Anyway that's not my problem maybe they'll get it, it's karma...

This also turned out to be from a Chinese driver site too and when I figured that out after the fact I was definitely not happy..

Edited August 25, 2009 by WarpSpeed

[WarpSpeed]

ok so tried that and no luck either, still rebooting and painfully slow like never before..

Also approximately the same time I loaded a recommended online program to remove SOL cookies called 'better privacy' has anyone had any experience with this program good or bad? Could this be the issue do you think? I can not locate this program either...

[lopburi3]

SOL? I would not run any program that says I am going to be xxxt outa luck. The only program that I find with Google is a flash 0.21 for Mac system

[welo]

ok so tried that and no luck either, still rebooting and painfully slow like never before..

Also approximately the same time I loaded a recommended online program to remove SOL cookies called 'better privacy' has anyone had any experience with this program good or bad? Could this be the issue do you think? I can not locate this program either...

I googled for 'better privacy' and found a Firefox extension. If this is what you installed I consider it safe to use, since it is hosted on mozilla.org and chances that one of those contain a virus are very very close to 0%.

[welo]

I guess it all comes down to two possible problems:

• a driver issue
  
• a virus
  

Found this on the internet about immediate restarts after shutting down Vista

Usually that is a sign that a driver is hanging on shutdown. Windows

senses the crash and restarts rather than shutting down.

Try booting into Safe Mode and then shut down to see if it does it

properly. If so, you'll have to isolate the driver that is hanging.

source:http://social.technet.microsoft.com/Forums/en-US/itprovistaannouncements/thread/a6ce1a7a-7cf3-44bd-96b0-8573adadf1d9

Can you tell us more about the 'driver' you installed. I re-read your post but still can't figure out for sure whether you talk about a hardware driver or a normal software that you installed.

If a hardware driver was installed, you might reconnect the device, and go to Device Manager to remove it. Not sure how this works in Vista, I still use XP

A System Restore however should eliminate any hardware driver you installed since that time, solving your problem anyway.

To check for a virus I recommend to download a standalone rescue CD (available from Avira, Kaspersky and others). Boot from CD and start the scan, will take a couple of hours.

welo

[WarpSpeed]

Ok thanks all, So far no luck but today I'm searching my active programs to see what is running in the background, got 2 suspicious programs running that I can see..

The download was supposed to be a software/driver update program but that's where I think it all went pear shaped as it seems that maybe that was just a front for something more sinister, I located the driver portion and deleted it but not much has changed. It was supposed to be an update of drivers and software to Xp for hardware/software Dazzle DM5000 video tape conversion to digital, then I was going to try to use my compatibility program on my Vista to make it compatible with Vista if it was possible? But never got that far as I have been unable to even locate it anywhere after download to access it.. Does that make any sense??

The LOS cookies removal tool was supposed to be from a recommended source, having checked now you're right it is a Firefox add on, so that does give me some piece of mind now and even strengthens my suspicion of the other program/driver especially being from a Chinese source.

To check for a virus I recommend to download a standalone rescue CD (available from Avira, Kaspersky and others). Boot from CD and start the scan, will take a couple of hours.

What will this do to my other files or programs?? Anything?

[welo]

What will this do to my other files or programs?? Anything?

A 'Rescue CD' is just the antivirus software on a bootable CD. Most antivirus vendors offer bootable rescue CDs for several reasons:

• The CD brings its own operating system to run the antivirus software, hence the infected system is not started and any virus that has infected the system not run. The antivirus program just accesses the hard drive and scans for viruses - this way it is much more difficult for the virus to interfer with the scan and 'hide'. (For the same reason it is sometimes recommended to scan in Safe Mode if a virus cannot be removed otherwise.)
  
• In case the infected system has no antivirus software installed yet, the virus might interfer with the installation of the antivirus software, preventing a working installation.
  
• Of course somtimes the operating system just doesn't start up properly anymore, then the bootable CD is the only way to run the antivirus software. (After the virus has been removed you can try a repair install.)
  

The antivirus software on the CD will do a virus scan (read-only) and if it finds any virus will try to clean the file, or many times just delete it. This is basically the same as if running the antivirus software from Windows.

Of course it might always happen that the virus attacked an important system file and the antivirus software can only delete it, eventually damaging the windows installation so - in the worst case - it cannot start anymore. However, it is always better to get rid of the virus and - in case of the windows installation being damaged - just do a repair install which will preserve your configuration and installed programs.

welo

Edited August 26, 2009 by welo

[WarpSpeed]

What will this do to my other files or programs?? Anything?

A 'Rescue CD' is just the antivirus software on a bootable CD. Most antivirus vendors offer bootable rescue CDs for several reasons:

• The CD brings its own operating system to run the antivirus software, hence the infected system is not started and any virus that has infected the system not run. The antivirus program just accesses the hard drive and scans for viruses - this way it is much more difficult for the virus to interfer with the scan and 'hide'. (For the same reason it is sometimes recommended to scan in Safe Mode if a virus cannot be removed otherwise.)
  
• In case the infected system has no antivirus software installed yet, the virus might interfer with the installation of the antivirus software, preventing a working installation.
  
• Of course somtimes the operating system just doesn't start up properly anymore, then the bootable CD is the only way to run the antivirus software. (After the virus has been removed you can try a repair install.)
  

The antivirus software on the CD will do a virus scan (read-only) and if it finds any virus will try to clean the file, or many times just delete it. This is basically the same as if running the antivirus software from Windows.

Of course it might always happen that the virus attacked an important system file and the antivirus software can only delete it, eventually damaging the windows installation so - in the worst case - it cannot start anymore. However, it is always better to get rid of the virus and - in case of the windows installation being damaged - just do a repair install which will preserve your configuration and installed programs.

welo

Ok thanx,

What about Eset? I ran it in normal mode without results would it be wise to give it a try again and run it in safe mode? or is that just wasting time or additional steps for nothing, or is it virtually the same thing?..

I also noticed that not only does it reboot after shut down, it also does not restart after I put it into sleep mode, it requires a shut down and reboot it seems to want to avoid anything that suspends it's activity..

[welo]

Here some links to download Rescue CDs.

Kaspersky

http://devbuilds.kaspersky-labs.com/devbuilds/RescueDisk/

last updated 23 June 2009 (note that the file name states 2008 but this is the program verison not the virus definition update date)

CD supports virus defintion update via Internet

Avira

http://www.free-av.com/en/products/12/avir...cue_system.html

Vendor claims it is updated 'several times daily'

Bit Defender

http://download.bitdefender.com/rescue_cd/

last updated 3rd August 2009

F-Secure

http://www.f-secure.com/linux-weblog/2008/...d-300-released/

CD supports virus defintion update via Internet

I have used Kaspersky and Avira before. Kaspersky's Rescue CD has a nice UI and excellent detection rates (at least used to have), but is not updated daily. The internet update feature from the UI did not always work for me.

Avira is my favorite Antivirus software and I usually install the full program on my computers and those I fix. The Rescue CD is claimed to be updated daily. The EXE download will write the CD image to an empty CD when you start it, for the ISO file you will need a CD writer software.

welo

welo

Edited August 26, 2009 by welo

[welo]

What about Eset? I ran it in normal mode without results would it be wise to give it a try again and run it in safe mode? or is that just wasting time or additional steps for nothing, or is it virtually the same thing?..

Hm, I honestly don't know. However, why not give it a try and start the scan in Safe Mode before you go to sleep. No time wasted

I recommended the Rescue CD so you can scan with a second antivirus software without needing to install it on your system, maybe (or probably) causing conflicts with your NOD32 installation. Besides there is several other advantages as I pointed out. Again, just start the scan before you go to sleep...

I also noticed that not only does it reboot after shut down, it also does not restart after I put it into sleep mode, it requires a shut down and reboot it seems to want to avoid anything that suspends it's activity..

I just want to remind you that there is two possible 'main reasons' for your problem, a virus infection or a hardware driver issue. The trick with booting into safe mode and then shutting down to see whether the restart still occurs, is to check whether an invalid/incompatible/faulty driver might cause your troubles. So nothing to do with running the antivirus software from Safe Mode (just want to make sure to avoid confusion).

Did you try to do that? Do you know how to boot into Safe Mode? (F8 before Windows Logo Screen comes up). What is the result?

My experience with Standby and Hibernation mode is that often Hardware drivers do not properly support either of these sleep modes and either prevent the system of entering the sleep mode (usually followed by a more or less meaningful windows warning stating exactly that), or might also prevent the system from 'waking up' again.

I personally consider a hardware driver issue more likely from what you tell me, but just because I didn't encounter any virus in the past that would affect a system in that way. I've been also reading about some pretty nasty viruses just recently on the board, so this is why I would go with one or two more antivirus scans just to be more confident on ruling that out.

welo

[WarpSpeed]

What about Eset? I ran it in normal mode without results would it be wise to give it a try again and run it in safe mode? or is that just wasting time or additional steps for nothing, or is it virtually the same thing?..

Hm, I honestly don't know. However, why not give it a try and start the scan in Safe Mode before you go to sleep. No time wasted

I recommended the Rescue CD so you can scan with a second antivirus software without needing to install it on your system, maybe (or probably) causing conflicts with your NOD32 installation. Besides there is several other advantages as I pointed out. Again, just start the scan before you go to sleep... Yep that would've been the way to go if I only knew better what I was doing.......

I also noticed that not only does it reboot after shut down, it also does not restart after I put it into sleep mode, it requires a shut down and reboot it seems to want to avoid anything that suspends it's activity..

I just want to remind you that there is two possible 'main reasons' for your problem, a virus infection or a hardware driver issue. The trick with booting into safe mode and then shutting down to see whether the restart still occurs, is to check whether an invalid/incompatible/faulty driver might cause your troubles. So nothing to do with running the antivirus software from Safe Mode (just want to make sure to avoid confusion).

Did you try to do that? Do you know how to boot into Safe Mode? (F8 before Windows Logo Screen comes up). What is the result? Not yet......fumbling around... I guess that's next, but I'm thinking now it should have been first...

My experience with Standby and Hibernation mode is that often Hardware drivers do not properly support either of these sleep modes and either prevent the system of entering the sleep mode (usually followed by a more or less meaningful windows warning stating exactly that), or might also prevent the system from 'waking up' again. But this was seldom ever an issue previously, but on rare occasions, and never any warnings...

I personally consider a hardware driver issue more likely from what you tell me, but just because I didn't encounter any virus in the past that would affect a system in that way. I've been also reading about some pretty nasty viruses just recently on the board, so this is why I would go with one or two more antivirus scans just to be more confident on ruling that out.

welo

Thanx Welo for all your suggestions and time to help out a bit of a novice.. I wasn't sure how long to get an answer from you so I initiated downloading and running Eset NOD 32 free trail which sucks a bit since I had to uninstall my Avast, but if it does the trick I'll deal with it..I guess in any case I'll deal with it actually for at least the month...

It said that I must uninstall all fire walls and AV software to avoid potentially big problems but I didn't attempt anything with my Windows Vista AV and firewalls except disable them as I don't want to uninstall them I'm not sure if I can even do that?

Would this cause me any problems with my NOD32? So far the Nod has informed me of a sharing network, yes....and that I was missing some updates, makes sense, since I've not allowed my computer to go online much. It was impressive that it notified on this and required me to update before continuing nothing else has ever done that..

Thanx for the xpress info on safe mode start up it did save me a significant amount of research..I ended up with Nod32 when I searched for a rescue CD and it came up, maybe it wasn't exactly what I was seeking and maybe I caused myself another step? We'll see, hope not..

As I type this it just updated and rebooted to install my updates and now it says my firewall is not working but it won't activate no matter what I do and it isn't scanning either.....arrrgggghhhh!! D%^& female computers!!

[welo]

OK, I see we have to slow down a bit not to make things worse

Did you figure out how to run System Restore? From a previous message I understand you followed lopburi's advise and 'rolled back' to a previous date. If you go back to a date before this driver was installed, this should eliminate any program and driver installed since this date. Of course a virus would try to find ways around that and probably stay on your computer even after that.

System Restore is a powerful tool that can help you a lot if things went wrong. Make sure you understand this tool and you use it.

E.g. if something went wrong with your ESET installation you can easily 'roll back' your system to the state before uninstalling AVAST and installing NOD32. Your computer would just look like you never even tried to change anything there

Unfortunetaly I am offline now until evening, so you will need some patience...

welo

[WarpSpeed]

OK, I see we have to slow down a bit not to make things worse

Did you figure out how to run System Restore? From a previous message I understand you followed lopburi's advise and 'rolled back' to a previous date. If you go back to a date before this driver was installed, this should eliminate any program and driver installed since this date. Of course a virus would try to find ways around that and probably stay on your computer even after that.

System Restore is a powerful tool that can help you a lot if things went wrong. Make sure you understand this tool and you use it.

E.g. if something went wrong with your ESET installation you can easily 'roll back' your system to the state before uninstalling AVAST and installing NOD32. Your computer would just look like you never even tried to change anything there

Unfortunetaly I am offline now until evening, so you will need some patience...

welo

again thanx, NOD32 didn't pick anything up last night in normal mode.. The Eset firewall won't come up now since the required updates last night but I'm just not going online with that computer for the moment.. I have enough to do with the tips I've been given.

Last night it wouldn't even start in safe mode, I followed your directions but it wouldn't start that way, the key board is not functional until the Windows logo comes up and from there it seems to be too late. So I forced the issue and unplugged during reboot and it was too late to screw with it anymore so I just rebooted it this morning and in safe mode.. Now I'm going through the motions that have been suggested in seeing if it shuts down like you suggested and then running NOD32 in safe mode.. I don' think these steps will screw anything up worse and your suggestion of restoring afterwards is a good idea too but obviously not if I finally solve the problem as I might restore the problem in that case too as I understand it....Again I appreciate your patience, time and assistance..

*edit* just tried shut down in safe mode and it auto-booted again..

Edited August 27, 2009 by WarpSpeed

[WarpSpeed]

Can't run NOD 32 from safe mode.. I get this message...... "ESET Smart Security- Shell Extension Error" "Communication with Eset Smart Security Kernel failed!"

[welo]

Plan has changed (as usual), and I'm back online, hurray!

Have NOD32 scan in safe mode, just to make sure. It should have current virus updates though (a couple of days outdated is OK).

I googled more and found a website dedicated to Windows shutdown problems, this is Windows XP though. Some of the reasons/solutions mentioned here might apply to Vista too.

Eventually the 'automatic' restart may be a result of an error during shutdown, often caused by an outdated hardware driver (does this ring a bell?)

because, by default, XP executes an automatic restart in the event of a system failure. Therefore, more or less anything compromising the operating system during the shutdown process could force this reboot.

Windows displays this error message only for a very brief moment. It might not even be seen at all, e.g. if your monitor switches resolutions.

In XP you can disable the automatic reboot which will make it possible for you to see an eventual error message.

Right-click on My Computer, click Properties, click the Advanced tab. Under “Startup & Recovery,” click Settings. Under “System Failure,” uncheck the box in front of “Automatically restart.”

Just checked and found a tutorial for doing this in Vista:

http://pcsupport.about.com/od/windowsvista...estartvista.htm

I would check this out before anything else now (keep the virus scan for tonight). Hopefully we get to see some error message!

welo

[welo]

Can't run NOD 32 from safe mode.. I get this message...... "ESET Smart Security- Shell Extension Error" "Communication with Eset Smart Security Kernel failed!"

Sorry, didn't see your message this afternoon on your safe mode troubles.

Google says

Safe Mode will only load a minimal set of services and drivers on your sytem, as it is a diagnostic mode for Windows. The NOD32 Kernel Service does not start in safe mode, so the Control Center will not launch while you are in there. The On-Demand Scaner (nod32.exe) will run in Safe Mode and can perform a full scan and clean while in safe-mode.

I don't have NOD32 and cannot give you more detailed instructions on this. The additional virus scan is not that important though. Rather go with my post from this afternoon, disable the auto-reboot and try to find whether there is any error message.

welo

[WarpSpeed]

Can't run NOD 32 from safe mode.. I get this message...... "ESET Smart Security- Shell Extension Error" "Communication with Eset Smart Security Kernel failed!"

Sorry, didn't see your message this afternoon on your safe mode troubles.

Google says

Safe Mode will only load a minimal set of services and drivers on your sytem, as it is a diagnostic mode for Windows. The NOD32 Kernel Service does not start in safe mode, so the Control Center will not launch while you are in there. The On-Demand Scaner (nod32.exe) will run in Safe Mode and can perform a full scan and clean while in safe-mode.

I don't have NOD32 and cannot give you more detailed instructions on this. The additional virus scan is not that important though. Rather go with my post from this afternoon, disable the auto-reboot and try to find whether there is any error message.

welo

Ok I'll give it a go...I thought I understood that if it does reboot that, that pointed to a virus and not a driver problem, but based on what is happening and what you've pointed out so far it sure seems to point towards a driver which is sensible, logical and what I suspected all along but thought I deleted it maybe it wasn't thorough though..

I was hoping that attempting to run in Safe mode was the problem with not being able to run the NOD32 as that's how I understand safe mode to operate but so many people suggested running it that way I thought it was just me... I didn't have NOD32 either until this happened and I've been trying anything and everything.. Hopefully not too much, I am a diagnostician in another trade and it's always good not to make wholesale changes as once you've actually corrected the problem it's easy to loose track of where you've been and what solved the problem causing you to run in circles chasing your own tail..

all this googling your doing and such, I really appreciate the time you're putting into helping me with my problem... I think I'm going to owe you a beer or 2 when I finally resolve this issue...

Edited August 27, 2009 by WarpSpeed

[welo]

Ok I'll give it a go...I thought I understood that if it does reboot that, that pointed to a virus and not a driver problem, but based on what is happening and what you've pointed out so far it sure seems to point towards a driver which is sensible, logical and what I suspected all along but thought I deleted it maybe it wasn't thorough though..

It's more like: if it does NOT reboot after shutdown from safe mode, it points to a driver problem - if it reboots even then we learn nothing (but it still can be a driver issue, or a virus, or ...).

I see it like that: Safe Mode does load only essential drivers and services, so if the faulty driver is not loaded Windows should not crash when shutting down, hence not triggering the automatic restart.

But this all applies only in the case when the reboot is triggered because of a crash during shutdown. I later found the hint with disabling the automatic restart on a system error, and this should be the better way to check if the reboot is actually triggered by Windows because of a crash during shutdown. Please try disabling this feature as described here. You then should see if the shutdown fails by seeing an error message, this would appear just at the point where before your computer would trigger the restart, which should then of course no longer happen.

About removing the faulty driver: a hardware driver is usually placed in the Windows systems folders during installation. Any files located under 'Program Files' or anywhere else are usually just additional tools. So if the uninstaller does not clean up the drivers properly it is often not so easy to find the files and remove them. Again, this is why System Restore is really handy in such cases.

What steps did you actually do to remove the driver/program?

I was hoping that attempting to run in Safe mode was the problem with not being able to run the NOD32 as that's how I understand safe mode to operate but so many people suggested running it that way I thought it was just me... I didn't have NOD32 either until this happened and I've been trying anything and everything..

NOD32 has a really good reputation, excellent detection rates, good UI and does have a good history of smooth integration with Windows. I just don't use it because there is free antivirus software which is good enough for me (Avira or Avast). But I did come across it on other computers.

Switching antivirus installations sometimes brings troubles because this kind of software has to hook deep into the system, and sometimes this just doesn't work as it should for various reasons (e.g. the previous antivirus software did not uninstall cleanly, conflicting software, etc).

If you were happy with Avast I encourage you to switch back. The System Restore should do the trick, in a very clean way. I would prefer System Restore to a uninstall/reinstall especially now that maybe sometimes is already unstable since NOD32 seems not to fully startup (you mentioned something about the firewall).

The only disadvantage of System Restore is that it will undo all the changes done to the system (note: NOT the data such as documents, mp3s, pictures..). This means all the programs, drivers, Windows updates that were installed in the meantime will be undone. But in your case this is actually a benefit

I didn't use System Restore myself too many times because I was always suspicious that it would mess up my system, but when I did, it actually always worked as expected and it is just so perfect for a situation like this (a antivirus installation that went wrong). It could take you hours to fix, downloading special uninstaller software etc etc.

So I would recommend to

1. Try to disable the auto-restart on error feature in Windows (see link above)

2. If NOD32 doesn't work properly in normal mode, revert back to Avast via System Restore

Hopefully not too much, I am a diagnostician in another trade and it's always good not to make wholesale changes as once you've actually corrected the problem it's easy to loose track of where you've been and what solved the problem causing you to run in circles chasing your own tail..

Exactly!

Good Luck!

welo