What should I do with the list of malware?

juhluo · 06-03-2008, 02:46 AM

Dear IT Experts,

My computer was always shutdowned (... shut down is initiated by NT AUTHORITY/SYSTEM the system process C/:WINDOWS/SYSTEM32/SERVICE.exe terminated unexpectedly with status code 1073741819 ...
), right after a message "services and controller app has encountered a problem and need to close".

Today I just activescaned my computer. Attached please find the results reported by Activescan.

I would really appreciate if you could help to fix this problem. Thank you very much!

Best regards,

Luo

chauffeur2 · 06-11-2008, 08:29 PM

Hello Luo, Welcome to TSF!

I have removed your other thread posted in the Windows XP Support Forum, as it is more appropriate being here.

Please read this article… "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum.
(Simply, click on the coloured links to be re-directed.)

Please ensure that you create a new thread in the HiJackThis Log Help Forum; not back here in this one.

When carrying out The 5 Steps, if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.

Good Luck with it.

Kind Regards,

tetonbob · 06-11-2008, 11:30 PM

@ juhluo -

Run Disk Cleanup before performing the rest of the steps, or use a tool such as ATF Cleaner to remove the cookies and temp internet files, which is all that's in the Panda scan.

EvIDPatch.exe you probably know about...it's used (mostly by gamers or users of torrent/P2P apps) to increase the number of connections allowed by Windows default.

=============================

Clean other Temporary files + Recycle bin

Go to start > run and type: cleanmgr and click ok.
Let it scan your system for files to remove.
Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.
Press OK to remove them.

Or........

Please download ATF Cleaner by Atribune.

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

---------------------------------------------------------------------------------------------

You can perform this step to avoid a shutdown when you see that message:

Open notepad and copy/paste the text in the quotebox below into it:

Code:

@shutdown -a

Save this as fix.bat Choose to "Save type as - All Files"
It should look like this:

Each time your machine threatens to shutdown, double click on fix.bat & it shall abort the shutdown procedure. That should ease some of your current difficulties.

------------------------------------------------------------------------------------------

Or, just go to Start > Run and type shutdown -a then press Enter.

That can be indicative of infection....

For more complete assistance, if required, follow the steps outlined by chauffeur2.

06-11-2008, 08:29 PM	#2 (permalink)
chauffeur2 Manager Emeritus Join Date: Feb 2006 Location: Adelaide, South Australia Posts: 10,180 OS: Xp Sp3 with all updates + Vista™ Ultimate SP1. My System	Re: What should I do with the list of malware? Hello Luo, Welcome to TSF! I have removed your other thread posted in the Windows XP Support Forum, as it is more appropriate being here. Please read this article… "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum. (Simply, click on the coloured links to be re-directed.) *Please ensure that you create a new thread in the HiJackThis Log Help Forum; not* back here in this one. When carrying out The 5 Steps*, if you cannot* complete any of them for whatever reason, just continue on with the next one until they are all completed. However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds. Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can. Good Luck with it. Kind Regards, __________________ Dave T. Submit New Articles If it works, Don't fix it! Especially if Bill Gates had anything to do with it!!

06-11-2008, 11:30 PM	#3 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,536 OS: 2000 Pro; XP Pro; XP Home	Re: What should I do with the list of malware? @ juhluo - Run Disk Cleanup before performing the rest of the steps, or use a tool such as ATF Cleaner to remove the cookies and temp internet files, which is all that's in the Panda scan. EvIDPatch.exe you probably know about...it's used (mostly by gamers or users of torrent/P2P apps) to increase the number of connections allowed by Windows default. ============================= Clean other Temporary files + Recycle bin Go to start > run and type: cleanmgr and click ok. Let it scan your system for files to remove. Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked. Press OK to remove them. Or........ Please download ATF Cleaner by Atribune. Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. If you use Firefox browser Click Firefox at the top and choose: Select All Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt. If you use Opera browser Click Opera at the top and choose: Select All Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt. Click Exit on the Main menu to close the program. For Technical Support, double-click the e-mail address located at the bottom of each menu. --------------------------------------------------------------------------------------------- You can perform this step to avoid a shutdown when you see that message: Open notepad and copy/paste the text in the quotebox below into it: Code: @shutdown -a Save this as fix.bat Choose to "Save type as - All Files" It should look like this: Each time your machine threatens to shutdown, double click on fix.bat & it shall abort the shutdown procedure. That should ease some of your current difficulties. ------------------------------------------------------------------------------------------ Or, just go to Start > Run and type shutdown -a then press Enter. That can be indicative of infection.... For more complete assistance, if required, follow the steps outlined by chauffeur2. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009