System rebooting, strange Network Connections requests...

Discussion in 'Malware Help (A Specialist Will Reply)' started by ratbert86, Jul 13, 2005.

  1. ratbert86

    ratbert86 Private E-2

    System specs: Compaq M300 Laptop, 600mhzP3, 320MB memory, XP Pro.

    This is my aunt's machine and I got it after GeekSquad at Best Buy couldn't get it to recognize the memory they had installed, told her she needed the BIOS updated and wanted $200 to do that.

    I updated the BIOS and got the memory situation handled and then moved on to the dead internal modem (Geeks couldn't get the PCMCIA modem they sold her working either). $10 used replacement from ebay and I'm connected. For a while anyway...

    Get the "system is shutting down in 60 seconds" screen... Thought it was msblast, but symantec tool says it's not. CWShredder says it is clean as far as it's concerned. Have ran adaware, spybot, hijack this (including the analysis tool here) and fixed as much as I was comfortable with.

    It is also giving me Network Connections dialogue boxes at startup: "you (or a program) have requested information from mail.earthlink.net. Which connection do you want to use?" That didn't suprise me as earthlink is their ISP, but some weird ones like "0xdeadbeef.goingformars.com" are showing up too. I was able to temporarily thwart the shutdown menu to stay online long enough to download adaware and spybot by adjusting the system clock back...

    I have attached the latest HJT log.

    Thanks in advance.
     

    Attached Files:

    ratbert86, Jul 13, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please read the announcement and sticky threads. HJT logs should only be posted when requested. Some of your problems are more than likely occurring because you are way out of date with your Microsoft Updates. You should go to the below link and get your Windows updates installed. You can select Custom Installed which will allow you to do all updates accept Win XP SP2. This is still going to take awhile because you have a lot of updates to get.


    After doing the above, if you still have problems, please run the steps below.

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem, boot into normal mode and make sure you follow these directions:


    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    chaslang, Jul 14, 2005
    #2

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds