Computer Hope

Software => Computer viruses and spyware => Topic started by: temurik on September 27, 2008, 07:29:07 AM

Title: Computer shuts itself down when it connects to the internet
Post by: temurik on September 27, 2008, 07:29:07 AM
Help please !

Each time I try to connect to the internet via a WiFi connection, it immediately shuts itself down. It also shuts down automatically every time I try to use the cmd dos prompt (start>run...)

I can use the computer for as long as I like provided I don't do either of the above, so i'm sure it's not an overheating issue or anything like that.

I've tried reading up on some sites for fixes and it sounded like I had the sasser worm, but I've downloaded some software to scan for it and it found nothing, the same went for Blaster worm.

Anyway, any help wound be greatly appreciated!  ;D
Title: Re: Computer shuts itself down when it connects to the internet
Post by: Carbon Dudeoxide on September 27, 2008, 08:20:18 AM
If you suspect a virus, I suggest starting here:
http://www.computerhope.com/forum/index.php/topic,46313.0.html

Post the three logs and our Malware Specialists will assist you. ;)
Title: Re: Computer shuts itself down when it connects to the internet
Post by: temurik on September 27, 2008, 09:26:16 AM
Thanks a lot, will get on it right away :)
Title: Re: Computer shuts itself down when it connects to the internet
Post by: Carbon Dudeoxide on September 27, 2008, 09:27:04 AM
Good Luck!

In the mean time, I will move this to the Computer Virus and Spyware Section.
Title: Re: Computer shuts itself down when it connects to the internet
Post by: temurik on September 28, 2008, 07:30:59 AM
Sorry for the delay, I had to buy a pen drive to transfer the logs between the infected computer and laptop since I can't get onto the internet on the other.

I forgot to mention it before, but I already formatted my hard drive and re-installed windows.

Thanks again in advance.

Logs as follows:

Superantispyware

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 09/28/2008 at 02:24 PM

Application Version : 4.21.1004

Core Rules Database Version : 3555
Trace Rules Database Version: 1543

Scan type       : Complete Scan
Total Scan Time : 00:03:27

Memory items scanned      : 314
Memory threats detected   : 0
Registry items scanned    : 3000
Registry threats detected : 0
File items scanned        : 6358
File threats detected     : 0


Malwarebytes

Malwarebytes' Anti-Malware 1.27
Database version: 1127
Windows 5.1.2600 Service Pack 2

9/28/2008 2:27:00 PM
mbam-log-2008-09-28 (14-27-00).txt

Scan type: Full Scan (C:\|)
Objects scanned: 40949
Time elapsed: 1 minute(s), 29 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:27:58 PM, on 9/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\btbb_wcm\McciTrayApp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wpabaln.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ptec/defaults/sb/*http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ptec/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ptec/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
O4 - HKLM\..\Run: [btbb_wcm_McciTrayApp] C:\Program Files\btbb_wcm\McciTrayApp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4055 bytes
Title: Re: Computer shuts itself down when it connects to the internet
Post by: evilfantasy on September 28, 2008, 03:42:03 PM
Nothing indicating a malware problem.

I suggest making a new topic in the Windows forum here at Computer Hope.
Title: Re: Computer shuts itself down when it connects to the internet
Post by: temurik on September 29, 2008, 10:57:09 AM
Will do. Thanks a lot for looking into it :)
Title: Re: Computer shuts itself down when it connects to the internet
Post by: tazzy on October 02, 2008, 09:33:04 PM
I saw a thing on youtube that teaches people to go into your settings and change you icons and put shut down computer in place of your IE if you have pranksters you might consider that.