[Dunnsdale]

Following on from my Monitor thread,where I coundn't install the manufacturers disc without my pc shutting down,I tried a music cd to see whether that played or not.It didn't.....my pc just shut down as soon as I inserted it.Any ideas guys?

[danzil]

Hi there
have you tried running a virus/malware scan. you may have an autorun/play virus.
what anti virus do you use.....
try an online scan if you are unsure.
Free Virus Scan - Kaspersky Lab
How many drives do you have, if you have more then one, does it do the same in the other.....are usb pens and the like functioning correctly
regards
danzil.

[Dunnsdale]

Originally Posted by danzil

Hi there
have you tried running a virus/malware scan. you may have an autorun/play virus.
what anti virus do you use.....
try an online scan if you are unsure.
Free Virus Scan - Kaspersky Lab
How many drives do you have, if you have more then one, does it do the same in the other.....are usb pens and the like functioning correctly
regards
danzil.

I have AVG running.If a drive is a slot where you insert a disk.....then I have 2..In the second one it doesn't shut down,but the disc doesn't play either.My usb devices seem ok.

[Plastic Nev]

Hi,
to stay with the malware side first as suggested by Danzil, it may be the cause.

AVG on its own is not really enough protection any way so have a go at our procedure, if followed exactly it usually gets shut of most problems.

Can you also make sure you post the log from Malwarebytes for us to look at too.

Your computer appears to be infected with Malware. Malware is software designed to infiltrate or damage a computer system without the owner's informed consent. It is a combination of the words malicious and software. The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

It is in your best interest to note the following:

1. Please disable your resident security applications (such as AVG, Spybot, WinPatrol, etc.) before performing the below procedure so that they do not interfere with the process.
2. Perform all the steps in the order listed to avoid any conflicts.
3. If unsure, please stop and voice your doubts.
4. You might be required to go offline during the disinfection process. Therefore, it is recommended to print off the instructions below for ease of reference.

If you stick to the above guidelines, all should go smoothly.

================================================

STEP 1

1. Download ATF-Cleaner by Atribune.
2. Save the file to your Desktop.
3. Double-click on the file to run the program.
4. On the Main tab, check the Select All button.
5. Next, click on the Firefox tab (if applicable) and check the Select All button.
   
   Note: If you would like to preserve your saved passwords in Firefox, then click No at the corresponding prompt.
6. Now, click on the Opera tab (if applicable) and check the Select All button.
   
   Note: If you would like to preserve your saved passwords in Opera, then click No at the corresponding prompt.
7. Press the Empty Selected button and click OK to acknowledge the corresponding prompt.
8. Click on the Exit button to quit the program.

================================================

STEP 2

1. Please click here to download Malwarebytes' Anti-Malware.
2. Save the file to your Desktop.
3. Double-click mbam-setup.exe and follow the prompts to install the program.
4. At the end, make sure a check mark is placed next to:
   1. Update Malwarebytes' Anti-Malware
   2. Launch Malwarebytes' Anti-Malware
5. Click Finish.
6. The program will download and update itself if it finds the necessity to do so. Please allow this.
7. Once the program has loaded, select Perform full scan, then click Scan.
   
   
   Note: Depending on your computer specifications, the scan may take some time to complete. Please wait patiently and do not interrupt the process.
8. When the scan is complete, click OK, and then Show Results to view the results.
9. Make sure that every entry is selected, and click Remove Selected.
10. Restart your computer.

================================================

STEP 3

1. Please click here to download SUPERAntiSpyware (Free Version).
2. Save the file to your Desktop.
3. Double-click SUPERAntiSpyware.exe and follow the prompts to install the program.
4. Open SUPERAntiSpyware.
5. Under Configuration and Preferences, click the Preferences button.
6. Click the Scanning Control tab.
7. Under Scanner Options make sure the following fields checked:
   1. Close browsers before scanning
   2. Scan for tracking cookies
   3. Terminate memory threats before quarantining
8. Click the Close button to leave the control center screen.
9. On the main screen, under Scan for Harmful Software click Scan your computer.
10. On the left, make sure you check mark All the Fixed Drives.
11. On the right, under Complete Scan, choose Perform Complete Scan.
12. Click Next to start the scan. Please be patient while it scans your computer.
13. After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.
14. Make sure every entry has a check mark next to it and click Next.
15. A notification will appear that Quarantine and Removal is Complete. Click OK and then Finish to return to the main menu.
16. Restart your computer.

================================================

STEP 4

1. Please visit the ESET Online Scanner, using Internet Explorer to initiate the scan.
   
   Note: If you are running Windows Vista, then you will need Administrative privileges to complete the latter part of the procedure. To do so, right-click on the Internet Explorer icon in the Start Menu and select the Run As Administrator option in the shell context menu.
2. Check mark the YES, I accept the Terms of Use box.
3. Click the Start button.
4. Click the Install button on the following screen.
5. Click Start. This will will initialize and update the scanner engine.
6. Check mark the box beside Remove found threats.
7. Click the Scan button. This will start the scan. Please be patient while it is in progress.
8. Restart your computer.

================================================

STEP 5

1. Click on Start > Programs > Accessories > System Tools and select System Restore.
2. Choose the radio button marked Create a Restore Point on the first screen and click Next. Give the restore point a name then click Create. The new point will be stamped with the current date and time. Keep a note of this so you can find it easily should you need to use System Restore.
3. Next, click on Start > Run, type Cleanmgr and click on OK.
4. Click on the More Options tab.
5. Click the Clean Up button in the System Restore section to remove all previous restore points except the most recent one.

This will remove any infected files that have been backed up by Windows. The files in "System Restore" are protected to prevent any programs changing those files. This is the only foolproof way to ensure the deletion of those files.

Note: Do not clear restore points on a regular basis as doing so will clear all previous restore points even those that you may need. System Restore is a useful tool to revert your computer back to a working condition if something goes wrong.

Re-enable all your security applications and please return here and tell us how the computer seems to be operating.

Happy Safe Computing!

[Dunnsdale]

Thanks Danzil and Plastic Nev.

I've disabled Spyware Guard.Not sure I've disabled AVG,instructons not as clear with AVG.

Got as far as step 1 which found 706 errors.Prompted me to download and buy,or fix 20 errors.I opted for the latter.Now onto step 2.Many thanks guys.

[RandyL]

STOP

Nothing suggested by us needs purchased.

Please slow down and explain exactly what you are doing before proceeding.

[Dunnsdale]

Originally Posted by RandyL

STOP

Nothing suggested by us needs purchased.

Please slow down and explain exactly what you are doing before proceeding.

Hi RandyL

I'm following the step by step guide posted by Plastic Nev.

Now on step 2.....I didn't purchase anything during step 1.

Being born in Yorkshire I'm allergic to anything purchase related

[Tootech]

Just following on from Randy's instructions,

Is your Spyware Guard this one

SpywareGuard

or this one

How to remove Spyware Guard 2008 and Spyware Guard 2009 (Uninstall Instructions)

The second one being rogue antispyware software that will require removal using the process Plastic Nev posted

[Dunnsdale]

Originally Posted by Tootech

Just following on from Randy's instructions,

Is your Spyware Guard this one

SpywareGuard

or this one

How to remove Spyware Guard 2008 and Spyware Guard 2009 (Uninstall Instructions)

The second one being rogue antispyware software that will require removal using the process Plastic Nev posted

Hi Tootech....It's the first one.

[RandyL]

OK carry on. I was just a bit concerned as I wasn't sure is all.

Free is good Dunnsdale. I agree.

[Dunnsdale]

Ok step 2 completed.How do I post the log from Malwarebytes?

[Plastic Nev]

Hi Dunnsdale, no problem,
Just highlite it with the curser or mouse pointer, right click on it then choose copy, open a reply box, write what you need to introduce it, then another right click and choose paste.
Hope that helps,
Nev.

[Dunnsdale]

Originally Posted by Plastic Nev

Hi Dunnsdale, no problem,
Just highlite it with the curser or mouse pointer, right click on it then choose copy, open a reply box, write what you need to introduce it, then another right click and choose paste.
Hope that helps,
Nev.

Thanks Nev

Malwarebytes' Anti-Malware 1.38
Database version: 2371
Windows 5.1.2600 Service Pack 3
04/07/2009 12:05:38
mbam-log-2009-07-04 (12-05-38).txt
Scan type: Full Scan (C:\|)
Objects scanned: 205076
Time elapsed: 2 hour(s), 2 minute(s), 58 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntiVirus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6} (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

[Plastic Nev]

Hi again, there were two pretty nasty rogues there hopefully now gone.
The Malwarebytes and the Superantispyware programs I recommend you keep now and use them regularly as well as the AVG, though we now recommend other anti virus software instead of AVG. Have a look at our list here-
http://www.freepchelp.co.uk/forum/ma...-products.html

Only a matter of personal preference here but I use Avast.
I have the Comodo firewall and of course the two previously mentioned Malwarebytes and SAS. as well as the Spywareblaster.

Try your disk drives now and see if it will run OK.
If not, there are more things for us to look at and try yet.
Nev.

[Dunnsdale]

Originally Posted by Plastic Nev

Hi again, there were two pretty nasty rogues there hopefully now gone.
The Malwarebytes and the Superantispyware programs I recommend you keep now and use them regularly as well as the AVG, though we now recommend other anti virus software instead of AVG. Have a look at our list here-
http://www.freepchelp.co.uk/forum/ma...-products.html

Only a matter of personal preference here but I use Avast.
I have the Comodo firewall and of course the two previously mentioned Malwarebytes and SAS. as well as the Spywareblaster.

Try your disk drives now and see if it will run OK.
If not, there are more things for us to look at and try yet.
Nev.

Thanks Nev......Have now completed steps 1-5.

First thing I did was insert a music disc.....it played..Eureka!

Enboldened I tried the installation disc for my new monitor...PC shut down again.

Tried the music disc again........shut down again.

Dunnsdale

Re-read post 4 with regard to the malware aspect, we do not ask for logs.

Run the programs and delete what they find and then get back to us.

[Dunnsdale]

Originally Posted by Wolfeymole

Dunnsdale

Re-read post 4 with regard to the malware aspect, we do not ask for logs.

Run the programs and delete what they find and then get back to us.

Sorry Wolfey I'm not quite with you here.

I've re read post 4 from Nev and it contained this line..."Can you also make sure you post the log from Malwarebytes for us to look at too"

P.S.I've know gone back to the new restore point and the music disc is playing again.Not sure I'll risk the monitor installation disc again though.

Many thanks.

[Plastic Nev]

This seems strange, I can only assume there is something wrong with that monitor installation disk so perhaps taking or at least sending it back to the retailer is my recommendation.

I think maybe a crossed wire on the log aspect, Wolfey was right, we don't normally ask for any logs, but in this case I asked in case there was anything out of the ordinary.

[Dunnsdale]

Originally Posted by Plastic Nev

This seems strange, I can only assume there is something wrong with that monitor installation disk so perhaps taking or at least sending it back to the retailer is my recommendation.

I think maybe a crossed wire on the log aspect, Wolfey was right, we don't normally ask for any logs, but in this case I asked in case there was anything out of the ordinary.

Thanks for all your help Nev,really appreciate it.I've now binned AVG and downloaded Avast.

Many thanks guys.

[Dunnsdale]

Nah......still doing it.Audio plays occasionally.Tried a Sony registration disc for a TV I bought ages ago........Shut the pc down again.Bugger.

I did get an error message pop up for a Nikon View 4 program I no longer use.When I tied to delete the program I just got a cannot find specified file message.Any clues?