HELP! I cannot scan with Norton, PC shuts off

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by rosenna, Jul 9, 2006.

  1. rosenna

    rosenna Private E-2

    Ughhhh I am thisclosetothrowingmycomputer across the room!

    I confess... I was lapse in renewing my Norton Virus 2005 as I was trying to decide what else I could use... (I so hate Norton, they so bog down your computer and seem to mess everything UP!!!) Consequently I am wondering if I did indeed pick up a virus along the way?

    My computer will - for no apparent reason - shut itself down into a lock down mode, where you actually have to cut power to it and then reboot. If you just try to click the on off/reset button nothing happens - it remains a yellow glow.

    I've since reinstalled Norton, but cannot scan a complete scan. It starts, does scan for a while, then shuts itself down. I got all the way to about 130,000 files and then poof. I can't scan anything in safe mode because I get that error message NMAin caused a problem with ASCOMPBR.DLL please close, etc etc. I just want to get rid of whatever is doing this? Is my hardware malfunctioning or is it a virus? How am I supposed to get to the virus if I can't scan a full system scan?

    Any info/suggestion is greatly appreciated. I have an older gateway and my operating system is ME.

    Thanks in advance,
    Rose
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  3. rosenna

    rosenna Private E-2

    Unfortunately I've tried the symantec suggestions you've sent. Got anything else?

    I am trying to follow the thread and instructions you have listed "before asking for help" scanning with all the tools, etc. I got halfway through the spy bot scan and it shut me down again. I'll try to plug along again tonight... SIGH

    HELP HELP HELP

    Has anyone heard of anything like this?

    Rose
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Try running a scan with no cable connected to the internet and also shutdown all other unnecessary applications.

    Running as much as you possibly can of the READ ME is you best bet. Just report back on what you could and could not run. Attach the logs that are requested (at least the ones that you could get).

    You may want to try uninstall Norton completely and see how things run without it.
     
  5. rosenna

    rosenna Private E-2

    Hello... it's me again! Ok so as I said before, I'm trying to work my way through the "READ ME" and finally got through the following:

    Ad aware: found nothing (done during safe mode)

    Spy bot: (had to scan during normal mode, shut down 2 times on me during safe mode) found nothing

    Counter Spy: Started scanning successfully during safe mode but shut down after a while. Before it shut down it found the following items:

    - Ad Rotator Adware
    - Xupiter (2 obj)
    - Memory Meter Browser hijacker
    - Massaker Rat

    Scanned a while more - then shut down by itself again. This time, when I tried to turn it back on, it took several times - it would shut right off. I'd press the on button - it would start to go on, then went right off.

    I give up - will try to scan the Counter Spy again but wondered if there is anything else I should try first? Can I try to get rid of anything? Of course I can't attach the log because it shut down first and is now saying 'you haven't scanned anything yet' and there is no log to send. Before I try again I wanted to at least get this out in case I can't get back here because it shuts down.

    Still bumming big time,
    Rose
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  7. rosenna

    rosenna Private E-2

    FINALLY!!! Here is my hijack this log - good luck!
     

    Attached Files:

  8. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    HijackThis is not installed correctly, you are running it from a temporary location. INstall HijackThis to C:\Program Files\HJT.

    Due to a new variant of Vundo detecting the execution of hijackthis.exe by name it is crucial that you rename hijackthis.exe before using it or Vundo will hide itself from HJT. To rename the exe right click on it and choose "rename". Your cursor will be blinking in the file name box. Tap your back space key then type analyse.exe then click your mouse outside of the box where you were typing. HJT is now renamed.
     
  9. rosenna

    rosenna Private E-2

    Sigh... oops. Ok - I did everything you said - and tried it again? Here is the new hijack log?

    Thanks again for the help!

    Rose :rolleyes:
     

    Attached Files:

  10. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Download
    - Pocket Killbox

    Download DelDomains and unzip it to your desktop.

    Find the files from deldomains.zip on your Desktop and RightClick on the deldomains.inf file and select Install.

    Afterwards run Spybot and make sure you re-Immunize immediately. Then run a full system scan. If you get any reported problems, attach the log from Spybot.

    Run HijackThis. Click the 'Do a system scan only' button. Place a checkmark in the box next to the following lines:
    Click on the 'Fix checked' button. Wait for HijackThis to finish; close HijackThis.

    Now run Pocket Killbox:

    Choose Tools -> Delete Temp Files and click the RED X.

    Run Killbox.exe. Paste the below filenames into KILL BOX one at a time. Check mark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot. Note many of the file list below may not exist but we need to check for them anyway.
    If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

    Now boot into SAFE MODE

    Open ExplorerXP navigate to and DELETE the following: (Some of these may have already been deleted by Pocket Killbox)
    Now run CCleaner.

    REBOOT to Normal Mode.

    Post a fresh HijackThis log.
     
  11. rosenna

    rosenna Private E-2

    Good morning... another day - another hijack log lol (trying to keep the humor during this mess!) ;)

    Anyways, I followed your directions with deldomains, killbox, etc from above. Here is my new log!

    Thanks,
    Rose
     

    Attached Files:

  12. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Your HIjackThis log is clean.

    How is your computer running?
     
  13. rosenna

    rosenna Private E-2

    After I sent the log, I did a few things on it and am happy to say my computer is now running 100 times better than it was - actually allowing me to go to places it didn't/stopped before - yayyyyy!!!

    Once I saw it running better, I tried again to scan the full system with Norton. I was almost thinking it was going to complete the scan but after quite a while it turned itself off again into that yellow light caution mode. I don't know why it does that. Any clue? Works great otherwise - just won't let me do a complete system scan. Does that mean there is something lurking in the shadows still?

    By the way - thank you, thank you, thank you, thank you SOOOOO much for helping out. Big friendly smooches to ya!

    Rose
     
  14. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    You may need to uninstall Norton then install it again.
     
  15. rosenna

    rosenna Private E-2

    Actually we tried to completely wipe out the computer and reinstall the ME operating system with the disks that came with the computer many years ago...

    Everything worked... It looked as though everything was going/went ok until we tried to install the EZ Armor Security program. The majority of the package installed but the anti virus portion refuses to work or be installed. ALSO whenever you try to connect to the net to UPDATE the virus portion it refuses to connect and says it can't find the server or whatever when it is normally fine (connects without a problem to the net, any website, etc etc).

    This leads me to believe that there is something on the drive that is prohibiting any anti virus program to work/scan the machine??? Other than that it works completely fine. It just refuses any and all ANTI VIRUS programs? What do you think? HELP!

    Thanks in advance,
    Rose :confused:
     
  16. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

  17. rosenna

    rosenna Private E-2

    Okie Doke - here are the logs you requested...

    Thanks again!

    Rose
     

    Attached Files:

  18. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Everything looks fine, your system appears to be Malware free.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds