HELP!!! Computer shutting off on it's own

Discussion in 'Malware Help (A Specialist Will Reply)' started by miles_kenn, May 2, 2008.

  1. miles_kenn

    miles_kenn Private E-2

    Not sure what to do tried using spybot search and destroy but computer will turn off before scan finishes. Here is a scan from hijackthis. Would deffinitly appreciate the help....
     

    Attached Files:

    Last edited by a moderator: May 3, 2008
  2. abri

    abri MajorGeek

    Hi miles kenn,
    Welcome to Major Geeks!


    You have some malware problems and your HijackThis was run from the Desktop which won't help you. I will ask you to do one thing for starters (it takes several steps) and then I want you to work through the instructions in the READ & RUN ME FIRST and attach the requested logs. HijackThis gives us a surface view of what's infecting your computer, but to actually help you, we need the logs provided by the scans in the READ ME. Only then can we give you the right instructions to get things out of your computer.

    Before you do the READ ME, please do the following:


    1) To begin with, please disable Spybot's TeaTimer. This can be done two ways.
    First:
    • Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)
    • If you have the new version 1.5, Click once on Resident Protection, then Right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.
    • If you have Version 1.4, Click on Exit Spybot S&D Resident
    or Second, For Either Version :
    • Open Spybot S&D
    • Click Mode, choose Advanced Mode
    • Go To the bottom of the Vertical Panel on the Left, Click Tools
    • then, also in left panel, click Resident shows a red/white shield.
    • If your firewall raises a question, say OK
    • In the Resident protection status frame, Uncheck the box labeled Resident "Tea-Timer"(Protection of over-all system settings) active
    • OK any prompts.
    • Use File, Exit to terminate Spybot

    2) Go to USING MG TOOLS and download and install them as per the instructions. Go ahead and run them as instructed.

    3) Go to Start / Run and type in services.msc
    Look for Remote Procedure Call (RPC) Helper (make sure the word Helper is on there!)
    Click Properties and under Service Status click Stop, then under Startup Type change it to Disabled.

    4) Now go to the C:\MGTools folder and open it. Inside you'll find a file called analyse.exe (this is HijackThis which has been renamed) Double-click on it to open the program. Rather than having it scan your computer, click on the None of the above, just start the program button at the bottom of the choices.

    Click Config -> Misc Tools -> Delete an NT service.
    In the Delete window, type (O?’ŽrtñåȲ$Ó) and press OK.
    OK any prompts.

    After you complete the above, have HijackThis (analyse.exe) Do a system scan. When it's finished, look at the entries and see if the following entry is gone. If not, put a checkmark in the box, close all browser windows and then click on FIX.

    O23 - Service: Remote Procedure Call (RPC) Helper (O?’ŽrtñåȲ$Ó) - Unknown owner - C:\WINDOWS\system32\iedp.exe (file missing)

    Now please continue by following the instructions in the READ & RUN ME link above.

    Thanks.
    abri
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds