📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Virus. Pc keeps shutting down

Options
2456

Comments

  • ,hills
    ,hills Posts: 136 Forumite
    After typing shutdown -a when the error message came up, I finaly managed to run a full scan of Malwarebytes.

    After numerous virus's found and removed and 30+ moved to the chest, this is the log file.

    Please advise any further things I should do

    Files Infected: 3
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    (No malicious items detected)
    Registry Keys Infected:
    HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{3446af26-b8d7-199b-4cfc-6fd764ca5c9f} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{4776c4dc-e894-7c06-2148-5d73cef5f905} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{3446af26-b8d7-199b-4cfc-6fd764ca5c9f} (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{4776c4dc-e894-7c06-2148-5d73cef5f905} (Backdoor.Bot) -> Quarantined and deleted successfully.
    Registry Values Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\uid (Malware.Trace) -> Quarantined and deleted successfully.
    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Spyware.Zbot) -> Data: c:\windows\system32\sdra64.exe -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Spyware.Zbot) -> Data: system32\sdra64.exe -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,) Good: (Userinit.exe) -> Quarantined and deleted successfully.
    Folders Infected:
    C:\WINDOWS\system32\lowsec (Stolen.data) -> Delete on reboot.
    Files Infected:
    C:\WINDOWS\system32\lowsec\local.ds (Stolen.data) -> Delete on reboot.
    C:\WINDOWS\system32\lowsec\user.ds (Stolen.data) -> Delete on reboot.
    C:\WINDOWS\system32\sdra64.exe (Spyware.Zbot) -> Delete on reboot.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Whats the DATABASE version of the malwarebytes log (Right at the top)
    :idea:
  • ,hills
    ,hills Posts: 136 Forumite
    Version is 1.44

    Anyone have any ideas on the above report ?

    Well, after giving up finally last night in the hope that all virus's had been fixed, I turned on the pc this morning to find the same error message and timer counting down.

    After typing shutdown -a which halted the re boot, I ran a full Spybot which found several virus's. I removed them, rebooted and yet again the error message comes up with he timer clicking down to reboot !!!

    Any ideas ???

    I am just about to run a full Avast and then I'm out of ideas.

    Thanks
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Thats the MALWAREBTES version
    DATABASE is around 3600+
    :idea:
  • ,hills
    ,hills Posts: 136 Forumite
    Thanks

    Version 3609

    Any help ?
  • ian2211
    ian2211 Posts: 88 Forumite
    http://www.techsupportforum.com/microsoft-support/windows-nt-2000-2003-server-2008-server/439708-solved-have-no-idea-how-fix.html
    It said on the box requires Windows 7 or better, so I bought a MAC
  • ,hills
    ,hills Posts: 136 Forumite
    As per suggested post

    Have tried the 'shutdown -a' which works great and stops the shutdown.

    Run malwarebytes, avast and spybot then cc cleaner and then still get the clock ticking down.

    Anymore advice please.

    Thank you.
  • davb
    davb Posts: 1,293 Forumite
    Part of the Furniture Combo Breaker
    Have you tried the fix posted in ian2211's posts which links to this:
    http://www.logos.com/ArticleViewer/561
  • ian2211
    ian2211 Posts: 88 Forumite
    edited 21 January 2010 at 10:50PM
    As I posted previously a link to a forum where somebody was having the same issue. Here is the picture of his screen that he posted.

    45679097.jpg
    He was asked to post log from event viewer which he did


    Error 10/12/2009 11:29:38 PM Service Control Manager None 7026 N/A TONY
    Error 10/12/2009 11:29:36 PM Service Control Manager None 7000 N/A TONY
    Error 10/12/2009 11:29:36 PM Service Control Manager None 7000 N/A TONY
    Error 10/12/2009 3:01:50 PM Service Control Manager None 7034 N/A TONY
    Error 10/12/2009 3:01:50 PM Service Control Manager None 7031 N/A TONY
    Error 9/12/2009 11:20:11 PM Service Control Manager None 7026 N/A TONY
    Error 9/12/2009 11:20:11 PM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 11:20:11 PM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 11:16:52 PM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 11:16:52 PM Service Control Manager None 7031 N/A TONY
    Error 9/12/2009 11:09:40 PM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 11:05:03 PM Service Control Manager None 7032 N/A TONY
    Error 9/12/2009 4:34:41 AM Service Control Manager None 7026 N/A TONY
    Error 9/12/2009 4:34:41 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 4:34:41 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 4:28:43 AM Service Control Manager None 7026 N/A TONY
    Error 9/12/2009 4:28:43 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 4:28:43 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 4:25:07 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 4:02:31 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 3:55:50 AM Service Control Manager None 7026 N/A TONY
    Error 9/12/2009 3:55:47 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 3:55:47 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 3:52:43 AM Service Control Manager None 7026 N/A TONY
    Error 9/12/2009 3:52:43 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 3:52:43 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 3:50:33 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 3:50:33 AM Service Control Manager None 7031 N/A TONY
    Error 9/12/2009 3:50:15 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 3:20:45 AM Service Control Manager None 7026 N/A TONY
    Error 9/12/2009 3:20:42 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 3:20:42 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 3:18:22 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 3:18:22 AM Service Control Manager None 7031 N/A TONY
    Error 9/12/2009 3:15:31 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 3:15:29 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 3:13:34 AM Service Control Manager None 7026 N/A TONY
    Error 9/12/2009 3:13:34 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 3:13:34 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 3:08:59 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 3:08:59 AM Service Control Manager None 7031 N/A TONY
    Error 9/12/2009 12:26:15 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 12:26:15 AM Service Control Manager None 7009 N/A TONY
    Error 9/12/2009 12:26:15 AM DCOM None 10005 SYSTEM TONY
    Error 9/12/2009 12:25:50 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 12:25:50 AM Service Control Manager None 7009 N/A TONY
    Error 9/12/2009 12:22:21 AM Service Control Manager None 7026 N/A TONY
    Error 9/12/2009 12:22:18 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 12:22:18 AM Service Control Manager None 7000 N/A TONY
    Error 9/12/2009 12:19:12 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 12:19:12 AM Service Control Manager None 7031 N/A TONY
    Error 9/12/2009 12:02:55 AM Service Control Manager None 7034 N/A TONY
    Error 9/12/2009 12:02:48 AM Service Control Manager None 7034 N/A TONY
    Error 8/12/2009 11:59:57 PM Service Control Manager None 7034 N/A TONY
    Error 8/12/2009 11:59:55 PM Service Control Manager None 7034 N/A TONY
    Error 8/12/2009 11:58:30 PM Service Control Manager None 7026 N/A TONY
    Error 8/12/2009 11:58:30 PM Service Control Manager None 7000 N/A TONY
    Error 8/12/2009 11:58:30 PM Service Control Manager None 7000 N/A TONY
    Error 8/12/2009 11:39:51 PM Service Control Manager None 7034 N/A TONY
    Error 8/12/2009 11:39:45 PM Service Control Manager None 7034 N/A TONY
    Error 8/12/2009 11:35:33 PM Service Control Manager None 7026 N/A TONY
    Error 8/12/2009 11:35:30 PM Service Control Manager None 7000 N/A TONY
    Error 8/12/2009 11:35:30 PM Service Control Manager None 7000 N/A TONY
    Error 8/12/2009 11:33:04 PM Service Control Manager None 7026 N/A TONY
    Error 8/12/2009 11:33:04 PM Service Control Manager None 7000 N/A TONY
    Error 8/12/2009 11:33:04 PM Service Control Manager None 7000 N/A TONY
    Error 8/12/2009 4:36:06 PM Service Control Manager None 7026 N/A TONY
    Error 8/12/2009 4:36:06 PM Service Control Manager None 7000 N/A TONY
    Error 8/12/2009 4:36:06 PM Service Control Manager None 7000 N/A TONY
    Error 6/12/2009 10:17:32 PM DCOM None 10010 Compaq_Administrator TONY
    Error 6/12/2009 10:17:02 PM Service Control Manager None 7024 N/A TONY
    Error 6/12/2009 5:09:09 AM sr None 1 N/A TONY
    Error 5/12/2009 9:49:45 PM Service Control Manager None 7034 N/A TONY
    Error 5/12/2009 9:49:26 PM Service Control Manager None 7034 N/A TONY
    Error 5/12/2009 9:49:23 PM Service Control Manager None 7034 N/A TONY
    Error 30/11/2009 5:12:25 AM Service Control Manager None 7026 N/A TONY
    Error 30/11/2009 5:12:23 AM Service Control Manager None 7000 N/A TONY
    Error 30/11/2009 5:12:23 AM Service Control Manager None 7000 N/A TONY
    Error 27/11/2009 10:19:46 AM Service Control Manager None 7034 N/A TONY
    Error 27/11/2009 10:19:43 AM Service Control Manager None 7034 N/A TONY
    Error 27/11/2009 10:18:27 AM Service Control Manager None 7000 N/A TONY
    Error 27/11/2009 10:18:27 AM DCOM None 10005 SYSTEM TONY
    Error 27/11/2009 10:18:24 AM Service Control Manager None 7009 N/A TONY
    Error 27/11/2009 10:17:48 AM Service Control Manager None 7026 N/A TONY
    Error 27/11/2009 10:17:48 AM Service Control Manager None 7000 N/A TONY
    Error 27/11/2009 10:17:48 AM Service Control Manager None 7000 N/A TONY
    Error 27/11/2009 9:53:56 AM Service Control Manager None 7034 N/A TONY
    Error 27/11/2009 9:53:53 AM Service Control Manager None 7034 N/A TONY
    Error 23/11/2009 1:35:47 PM sr None 1 N/A TONY
    Error 22/11/2009 2:14:17 PM sr None 1 N/A TONY
    Error 22/11/2009 5:56:47 AM sr None 1 N/A TONY
    Error 19/11/2009 8:16:47 PM Service Control Manager None 7026 N/A TONY
    Error 19/11/2009 8:16:47 PM Service Control Manager None 7000 N/A TONY
    Error 19/11/2009 8:16:47 PM Service Control Manager None 7000 N/A TONY
    Error 16/11/2009 11:58:11 AM sr None 1 N/A TONY
    Error 14/11/2009 11:31:30 PM Service Control Manager None 7000 N/A TONY
    Error 14/11/2009 11:31:29 PM Service Control Manager None 7009 N/A TONY
    Error 14/11/2009 11:30:40 PM Service Control Manager None 7026 N/A TONY
    Error 14/11/2009 11:30:26 PM Service Control Manager None 7000 N/A TONY
    Error 14/11/2009 11:30:26 PM Service Control Manager None 7000 N/A TONY
    Error 13/11/2009 5:26:00 AM Service Control Manager None 7000 N/A TONY
    Error 13/11/2009 5:26:00 AM Service Control Manager None 7009 N/A TONY
    Error 13/11/2009 5:25:57 AM DCOM None 10005 SYSTEM TONY
    Error 13/11/2009 5:24:46 AM Service Control Manager None 7026 N/A TONY
    Error 13/11/2009 5:24:38 AM Service Control Manager None 7000 N/A TONY
    Error 13/11/2009 5:24:38 AM Service Control Manager None 7000 N/A TONY
    Error 13/11/2009 5:19:48 AM Service Control Manager None 7026 N/A TONY
    Error 13/11/2009 5:19:17 AM Service Control Manager None 7000 N/A TONY
    Error 13/11/2009 5:19:17 AM Service Control Manager None 7000 N/A TONY
    Error 11/11/2009 3:47:30 AM Service Control Manager None 7000 N/A TONY
    Error 11/11/2009 3:47:30 AM Service Control Manager None 7009 N/A TONY
    Error 11/11/2009 3:47:29 AM System Error (102) 1003 N/A TONY
    Error 11/11/2009 3:46:27 AM DCOM None 10005 SYSTEM TONY
    Error 11/11/2009 3:44:54 AM Service Control Manager None 7026 N/A TONY
    Error 11/11/2009 3:44:54 AM Service Control Manager None 7000 N/A TONY
    Error 11/11/2009 3:44:54 AM Service Control Manager None 7000 N/A TONY
    Error 9/11/2009 3:20:54 AM Service Control Manager None 7026 N/A TONY
    Error 9/11/2009 3:20:51 AM Service Control Manager None 7000 N/A TONY
    Error 9/11/2009 3:20:51 AM Service Control Manager None 7000 N/A TONY
    Error 5/11/2009 3:20:59 AM Service Control Manager None 7026 N/A TONY
    Error 5/11/2009 3:20:59 AM Service Control Manager None 7000 N/A TONY
    Error 5/11/2009 3:20:59 AM Service Control Manager None 7000 N/A TONY
    Error 3/11/2009 5:32:57 PM DCOM None 10010 Compaq_Administrator TONY
    Error 25/10/2009 4:41:50 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 4:41:50 PM Service Control Manager None 7009 N/A TONY
    Error 25/10/2009 4:40:24 PM DCOM None 10005 SYSTEM TONY
    Error 25/10/2009 4:39:23 PM Service Control Manager None 7026 N/A TONY
    Error 25/10/2009 4:39:21 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 4:39:21 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 4:36:32 PM Service Control Manager None 7026 N/A TONY
    Error 25/10/2009 4:36:32 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 4:36:32 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 3:59:53 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 3:59:53 PM DCOM None 10005 SYSTEM TONY
    Error 25/10/2009 3:59:53 PM Service Control Manager None 7009 N/A TONY
    Error 25/10/2009 3:59:18 PM Service Control Manager None 7026 N/A TONY
    Error 25/10/2009 3:59:18 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 3:59:18 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 3:26:12 PM Service Control Manager None 7026 N/A TONY
    Error 25/10/2009 3:26:12 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 3:26:12 PM Service Control Manager None 7000 N/A TONY
    Error 25/10/2009 4:19:49 AM Schannel None 36882 N/A TONY
    Error 24/10/2009 11:02:05 PM sr None 1 N/A TONY
    Error 23/10/2009 10:34:28 PM Schannel None 36882 N/A TONY
    Error 23/10/2009 9:28:52 PM Schannel None 36882 N/A TONY
    Error 23/10/2009 3:25:09 AM Service Control Manager None 7000 N/A TONY
    Error 23/10/2009 3:25:08 AM DCOM None 10005 SYSTEM TONY
    Error 23/10/2009 3:25:08 AM Service Control Manager None 7009 N/A TONY
    Error 23/10/2009 3:25:07 AM Service Control Manager None 7000 N/A TONY
    Error 23/10/2009 3:25:06 AM Service Control Manager None 7009 N/A TONY
    Error 23/10/2009 3:20:48 AM Service Control Manager None 7026 N/A TONY
    Error 23/10/2009 3:20:48 AM Service Control Manager None 7000 N/A TONY
    Error 23/10/2009 3:20:48 AM Service Control Manager None 7000 N/A TONY
    Error 21/10/2009 6:04:38 PM Service Control Manager None 7006 N/A TONY
    Error 21/10/2009 6:04:03 PM Service Control Manager None 7006 N/A TONY
    Error 21/10/2009 6:03:59 PM Service Control Manager None 7006 N/A TONY
    Error 18/10/2009 11:58:10 PM Service Control Manager None 7034 N/A TONY
    Error 18/10/2009 11:58:07 PM Service Control Manager None 7034 N/A TONY
    Error 18/10/2009 11:54:21 PM Service Control Manager None 7026 N/A TONY
    Error 18/10/2009 11:53:46 PM Service Control Manager None 7000 N/A TONY
    Error 18/10/2009 11:53:46 PM Service Control Manager None 7000 N/A TONY
    Error 17/10/2009 3:25:31 AM Service Control Manager None 7026 N/A TONY
    Error 17/10/2009 3:25:31 AM Service Control Manager None 7000 N/A TONY
    Error 17/10/2009 3:25:31 AM Service Control Manager None 7000 N/A TONY
    Error 17/10/2009 12:11:57 AM sr None 1 N/A TONY

    He was then directed here http://www.logos.com/ArticleViewer/561

    The OP then reported back that the fix worked, Like so

    It Worked Thanks so much







    user_offline.gifreport.gif digg.gifdelicious.giftechnorati.giffurl.gifreddit.gif
    quote.gif
    It said on the box requires Windows 7 or better, so I bought a MAC
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Please run COMBOFIX
    http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    Shut down your anti virus
    Follow the simple instructions it gives
    Post the COMPLETE log it creates here (Split into sections if need be)

    If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download
    :idea:
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351.1K Banking & Borrowing
  • 253.1K Reduce Debt & Boost Income
  • 453.6K Spending & Discounts
  • 244.1K Work, Benefits & Business
  • 599K Mortgages, Homes & Bills
  • 177K Life & Family
  • 257.4K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture