Virus on RAM

[JustAnotherDud]

Hi!

Whenever I log on to Windows XP and try to open any document or run any program, I get an error message stating that a buffer overflow has been blocked. Then a 60 second timer starts counting down and I get a message saying: "This system is shutting down. Please save all work in progress and logoff. Any unsaved change will be lost. This shutdown was initiated by NT AUTHORITY/SYSTEM."

However, if I run a virus scan (McAfee) before running any other programs after the computer has been restarted, it detects 2 trojans within the first minute:

1.) Name: (UNKNOWN):0x00BC2EFF->Memory\CreateProcessA
Detected As: Generic Rootkit.d!rootkit
2.) Name: (UNKNOWN):0x00162F34->Memory\CreateProcessW
Detected As: Generic Rootkit.d!rootkit

McAfee deletes these viruses and then I am able to use my computer normally. Unfortunately, anytime after shutting down my comp/restarting it, the same issue occurs where I am unable to use any program. Of course, if I run the virus scan and it deletes the same trojans, I am once again able to do everything. This is what makes me think that this is a RAM virus.

Could you guys please help me with this...do I have another option than to have to replace the RAM? Thank you!

[amateur]

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a

Having problems with spyware and pop-ups? First Steps

link at the top of each page.

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

To help with the shutdown in 60 seconds...

Open notepad and copy/paste the text in the quotebox below into it:

@shutdown -a

Save this as fix.bat Choose to "Save type as - All Files"
It should look like this:

Each time your machine threatens to shutdown, double click on fix.bat & it shall abort the shutdown procedure. That should ease some of your current difficulties.