pc gets swtched off automatically

1437 Views 5 Replies 3 Participants Last post by greyknight17, Aug 24, 2005

hart_vern

Discussion Starter · Aug 18, 2005

hello!
I'm having PIII/Win98SE and since last two weeks I am facing problem with my pc. Earlier it used to hang so frequently that everytime I had to switch it off manually [ ctrl+alt+del won't work].
I scanned it with AVG6, but found no viruses.
Thrice I have reinstalled the OS. When I loaded Bitdefender, it got improperly installed. After reboot, I found that Bitdefender installation has got corrupted.

Everytime I got the message that Rundll32.exe has performed an illegal operation.

Then I scanned my PC in pure dos mode and I found nearly 500 files with Win95.Lorez.1766 and almost 400 files with Win32. Pirite.

All those were removed successfully. then I reloaded the OS, installed AVG6 agained and scanned for viruses. It found kernel.exe infected with Win95.Lorez.1766. It was cleaned successfully.

Now my PC is in temporary working condition, but it gets switched off by itself automatically when I am installing some software or getting the print outs. It restarts only after I first switch off the mains, again switch on and then start the PC.

I have my HJT log here.

Please help. :sad: :sad: :sad:

Hart.

Logfile of HijackThis v1.99.1
Scan saved at 7:21:16 PM, on 8/18/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.00 (5.00.2614.3500)

Running processes:
C:\WINDOWS1\SYSTEM\KERNEL32.DLL
C:\WINDOWS1\SYSTEM\MSGSRV32.EXE
C:\WINDOWS1\SYSTEM\MPREXE.EXE
C:\WINDOWS1\SYSTEM\mmtask.tsk
C:\WINDOWS1\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS1\EXPLORER.EXE
C:\WINDOWS1\TASKMON.EXE
C:\WINDOWS1\SM56HLPR.EXE
C:\WINDOWS1\SYSTEM\IGFXTRAY.EXE
C:\WINDOWS1\SYSTEM\HKCMD.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\WINDOWS1\SOUNDMAN.EXE
C:\WINDOWS1\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\WEBSHOTS\WEBSHOTS.SCR
C:\WINDOWS1\SYSTEM\SPOOL32.EXE
C:\WINDOWS1\SYSTEM\E_S10IC2.EXE
C:\WINDOWS1\SYSTEM\RNAAPP.EXE
C:\WINDOWS1\SYSTEM\TAPISRV.EXE
C:\WINDOWS1\RUNDLL32.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
D:\HIJACHTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sancharnet.in/
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS1\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS1\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS1\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS1\SYSTEM\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS1\SYSTEM\hkcmd.exe
O4 - HKLM\..\Run: [Corel Reminder] "C:\PROGRAM FILES\COREL\GRAPHICS10\REGISTER\NAVBROWSER.EXE" /r /i "C:\PROGRAM FILES\COREL\GRAPHICS10\REGISTER\NavLoad.ini"
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [LaunchAttuneSetup] C:\WINDOWS1\SYSTEM\msiexec.exe /i "D:\CORELDRAW10\Corel\Graphics10\Aveo\09\01\attune.msi" /q
O4 - HKLM\..\Run: [SoundMan] soundman.exe
O4 - HKLM\..\Run: [QuickTime Task] "E:\QUICKTIME\QTTASK.EXE" -atboottime
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS1\SYSTEM\mstask.exe
O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS1\SYSTEM\E_SRCV02.EXE
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS1\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS1\web\related.htm

*********

Please see if anybody can help me.

See less See more

Save

Status: Not open for further replies.

1 - 6 of 6 Posts

MicroBell

· #2 · Aug 20, 2005

You have NO protection in place...so getting this virus over and over will continue to happen.

Please visit Microsoft's Window's Update Page and install the latest service packs, patch’s and security updates for your system.

Recommended Protection Programs

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs:

SpywareBlaster to help prevent spyware from installing in the first place.
SpywareGuard to catch and block spyware before it can execute.
IESpy-Ad to block access to malicious websites so you cannot be redirected to them from an infected site or email.
WinPatrol to monitor any changes that programs make to the registry.

If you do not have a firewall, here are 4 free ones available for personal use:

In today’s world you MUST have an Antivirus program. If you do not have one, here are 3 FREE ones available for personal use:

In light of your recent issue, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles

ONce you read through the info above....

Please run an online scan at http://www.pandasoftware.com/activescan/com/activescan_principal.htm
Once it has finished save the activescan log. Then post that log in your next post.

See less See more

Save

hart_vern

Discussion Starter · #3 · Aug 21, 2005

Thanks for looking into; but....

I am really very much thankful for your reply and I have gone through your reply. But, I still have some doubts.

* Is it due to virus only that the pc switches off automatically?

* I've tried Bitdefender's online scanning but PC gets switched off the moment it goes for scanning C drive. Hence my online scanning could not be performed. What can be done next? :sad:

* Does the formatting the drives remains the only option to make the system clean? Else, you may be having better options, please suggest.

* Yesterday I scanned again in DOS mode, found 630 files with W32.Xorala infection. Earlier it was W32.Perite B and Win95.Lorez.1766 found in large numbers. Is there any good virus cleaning tool in DOS mode, Free to download and use?

* As you have suggested antivirus tools, I can try those; but the present level of infection doesn't allow any installatation. It switches off the pc before completing the installation. Will those tools work even after I install them without prior clean-up? or they might get corrupted due to present infections? :4-dontkno

* If formatting is the only option, how do I get the back of data? I dont have CD writer attached to that pc. The hard disc is partitioned in C & D drives.

* Kindly give me some tips for formatting and reinstalling all the softwares, and also at what point should I install antivirus, anti spyware programmes. Do I need to keep these programmes disabled at the time of installing other softwares? :4-dontkno

I am really greatful to you for your attention towards my problem. Still the above doubts/queries are there. Please help.

(If I am not in the right forum, please inform me that.)

Hart.

See less See more

Save

greyknight17

· #4 · Aug 21, 2005

Try using F-Prot in DOS.

See if you can do this also (in Windows):
Go to Start->Run and type in sfc and hit OK. Choose to do the full scan. Let it scan. If it finds any files missing/corrupted, it may ask for the Windows CD.

Save

hart_vern

Discussion Starter · #5 · Aug 23, 2005

Panda corrupted my.....

Hi, :1angel:
Thanks for your replies.
I've downloaded and installed panda trueprevent. It made the PC hang after every start. I don't know if it installed some worm or cookies with it, but it got my internet connection not working any more. I had to uninstall it , fix the problems with HJT, and LSPfix. Then only I could reconnect to internet.

Plese guide me the steps to format my C drive while shifting the important data to D drive, and reinstalling the softwares. I am seeing formatting and cleanup is the only safe option.

Also plese try to satisfy my previous queries, htose will help me further.

Thankfully

Hart :sad:

See less See more

Save

greyknight17

· #6 · Aug 24, 2005

Hi Hart, I suggest asking this formatting question in the Windows forum instead since only spyware/virus related questions should be asked here.

Save

1 - 6 of 6 Posts

Status: Not open for further replies.

Top Contributors this Month