Desktop freezing/unable to shut down

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by crystak, Sep 21, 2006.

  1. crystak

    crystak Private E-2

    I have been having some problems with Norton IS 2006 to start off with. At first, it wouldn't load up completely after computer booted, meaning that the "ready green tick" sign wouldn't show up on the taskbar. Symantec re-directed me to a program to remove all the Symantec files/registry keys from my computer as I couldn't un-install it directly so that worked. I then re-installed it hoping that the problem would be fixed.

    Unfortunately it hasn't but it's aggravated. I tried to follow all your instructions in the sticky post but there are some programs I couldn't run.

    S&D froze on a file called "baimac". It froze for over 15 minutes when I decided to end it now. I had the latest definitions installed.
    BitDefender online scan wouldn't work on my IE. It closed with an error after I clicked "Scan now".
    I managed to run CCleaner but not the "Scan for issues" in the registry part as it froze as well when I started the scan.

    Another problem worth mentioning is that the computer freezes from time to time. For example, I'm in Microsoft Word and I click on "Start" on the taskbar. From that point on, when I minimize Microsoft Word, there is no desktop, but it's the image of the Microsoft Word screen, therefore I can't do anything. It wouldn't restart/turn off from Task Manager so I had to force it to turn off :(.
    Also, when I do manage to get it to turn off properly it takes over 10 minutes to do so.

    The Microsft Windows Defender didn't find anything.

    One more thing worth mentioning is that sometimes Norton Internet Security 2006 loads absolutely fine but sometimes it doesn't upon booting. I don't know what the cause of this may be.

    I have attached 3 logs for you to look at, hopefully you will be able to come up with a solution to getting my computer in a usable state again.

    EDIT: Norton just encountered an error while it was performing a full system scan.

    Please look into this as soon as possible,

    Thanks
     

    Attached Files:

  2. matt.chugg

    matt.chugg MajorGeek

    You have only followed part of the instructions.

    You have included a runkeys and a newfiles log but have done none of the online scans

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    Downloading, Installing, and Running HijackThis

    Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.


    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
      • CounterSpy - ONLY IF you were not able to run Windows Defender
      • Bitdefender - from step 6
      • Panda Scan - from step 6
      • runkeys.txt - the log from GetRunKey.bat
      • newfiles.txt - the log from ShowNew.bat
      • HijackThis
    NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!
     
  3. crystak

    crystak Private E-2

    Okay, sorry for the late reply but I was away.

    I scanned the whole computer with Windows Defender and didn't find anything.
    I have attached the Panda log below.

    I have also tried to scan the computer with my Norton 2006 antivirus but the scan won't complete. An error that shuts down the scan module comes up 10-15 minutes after it starts.

    I was also unable to complete the scan with BitDefender. I use Microsoft Internet Explorer and after it updates and downloads everything needed, IE generates an error report and shuts down.

    I downloaded the latest definitions for Spybot S&D, however, it freezes upon coming accross a file called "Baciami". It doesn't actually detect it though, I took a print screen:

    I installed Hijack this correctly in the first log, so that can be used.

    Thanks
     

    Attached Files:

  4. crystak

    crystak Private E-2

    Can anyone help me with this problem then?
     
  5. matt.chugg

    matt.chugg MajorGeek

    Sorry for the delay.

    You have a WareOut infection.

    Please read and follow all the steps here: WareOut Removal

    Once you have completed this please see step 7 of the read and run me again before posting a new HJT log. You need to rename HijackThis as instructed.
     
  6. crystak

    crystak Private E-2

    Okay, I have done everything as instructed without any problems.
    I've attached the HJT and the WareOut removal log below:

    Also, if you think everything is fine from these 2 logs, any idea how it this WareOut infection could have gotten into my computer?

    Thanks,
     

    Attached Files:

  7. matt.chugg

    matt.chugg MajorGeek

    The installed version of Java on this compter is out-dated.
    Install Java Runtime Environment (JRE) 5.0 Update 8 available from http://java.sun.com/javase/downloads/index.jsp.
    Uninstall all older versions of Java on your computer, before installing the latest version of Java.


    Download

    - Pocket KillBox

    Extract to its own folder somewhere that you will be able to locate later.


    Make sure you have rebooted in Normal Mode (do not open any other processes)


    Run HijackThis. Click the 'Do a system scan only' button. Place a checkmark in the box next to the following lines:

    Click on the 'Fix checked' button. Wait for HijackThis to finish; close HijackThis.

    Now run Pocket Killbox:

    Choose Tools -> Delete Temp Files and click the RED X.

    Run Killbox.exe. Paste the below filenames into KILL BOX one at a time. Check mark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot.


    If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

    Now boot into SAFE MODE

    Open Windows Explorer navigate to and DELETE the following: (Some of these may have already been deleted by Pocket Killbox)


    If you have Windows XP delete the contents of C:\WINDOWS\Prefetch.



    REBOOT to Normal Mode.

    Do you still have the alexa toolbar installed ?

    Post a fresh HijackThis log.[/QUOTE]
     
  8. crystak

    crystak Private E-2

    Hey, and thanks for the advice.

    I have completed it all without any problems. Computer restarted when it as supposed to and KillBox deleted those files after restart as I couldn't find them when I went back in Safe Mode.

    Alexa doesn't seem to be installed anymore.

    I still seem to have the problem of the computer taking between 8-10 minutes to shut down. It's basically stuck at the "Shutting Down" screen. If this is not related to software and malware issues, would the hardware be the cause of this?

    Thanks,
     

    Attached Files:


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds