BleepingComputer.com: Computer rebooting itself in normal mode, not sure if its malware or not

Windows 7 operating system. Trying to fix one of my family member's desktops. I have ran malwarebytes and superantispyware already(did remove some files related to pornography), but still havent had luck getting rid of the reboot problem. Just looking for a heads up of where to go from here.

This post has been edited by deadlift425: 16 January 2011 - 10:15 PM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.

Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:

• Download DDS by sUBs from one of the following links. Save it to your desktop.
  • DDS.scr
    
  • DDS.pif
  
  
• Double click on the DDS icon, allow it to run.
  
• A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  
• Notepad will open with the results.
  
• Follow the instructions that pop up for posting the results.
  
• Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

We also need a new log from the GMER anti-rootkit scanner. Please first disable any CD emulation programs using the steps found in this topic:


Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:





Elle

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

This topic has been re-opened at the request of the person who originally posted.

Hi and welcome to the Virus/Trojan/Spyware/Malware Removal forum,

I am thcbytes and I am here to help you!

I ask that you refrain from running tools other than those I suggest to you while I am cleaning up your computer. The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

Please perform all steps in the order received and do not proceed if you need clarification.

Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems please stop and tell me about it. When your computer is clean I will alert you of such. I will also provide you with detailed suggestions for prevention.

In the upper right hand corner of the topic you will see a button called Watch this topic. Click on this then choose Immediate E-Mail notification and then Proceed and you will be advised when I respond to your topic by email.

After 5 days if your topic is not replied I we assume it has been abandoned and I will close it.

I would also like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please be courteous and appreciative for the assistance provided!

Again I would like to remind you to make no further changes to your computer unless I direct you to do so. Your computer fix will be based on the current condition of your computer! Any changes might delay my ability to help you.

==========

Please download ComboFix from one of these locations:

Link 1
Link 2

Save it to your Desktop <-- Important!!!

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Please refer to this link for instructions.
  
  
  
• Right click it and run as admin & follow the prompts.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own.
This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper

==========

Your hard disk displays errors - Let's fix that!

• Press the Windows Logo Key + R simultaneously
  
• Copy/paste chkdsk /f in the run box then click OK
  
• Reboot
  
• Allow the utility to run

==========

You may have corrupt critical system files. Let's see if we can fix that.

• Select
  
  
• Select All Programs
  
  
• Select Accessories
  
  
• Right click Command Prompt and choose Run as administrator

• If you have the User Account Control (UAC) enabled you will be asked for authorization prior to the command prompt opening.
  
• You may simply need to press the Continue button if you are the administrator or insert the administrator password.

• Copy & paste sfc /scannow in the command window and press enter.

• Be patient because the scan may take some time.



• When that has completed then we need to create a logfile.




• Repeat the process but this time copy & paste findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txt in the command window and press Enter.
  
  Note: This will place a sfcdetails.txt file on your desktop with the SFC scan details from the CBS.LOG. Please copy and paste that log into your next reply.

Regards,
thcbytes

Here is the combofix log:  comboxfix.txt (13.56K)
Number of downloads: 2

How is the computer running now? What problems remain?

Still reboots in normal mode on windows 7 after about 5 minutes of being up. Once I put it in safe mode following that, I got a black screen after a couple minutes.

This post has been edited by deadlift425: 02 February 2011 - 05:10 PM

Quote

Does it matter what your doing or does it happen even if your not doing anything? Does it result in a BSOD? Do you get any warning messages? Does it turn off or automatically reboot?

Quote

I am not sure I understand. Will you please elaborate?

thcbytes, on 02 February 2011 - 06:12 PM, said:

I get no BSOD, just a black screen and automatically reboots. Sometimes it reboots, othertimes it doesnt and just gives me a black screen with nothing(I can still hear the computer running when this happens).

Please re-boot your computer. Rapidly tap F8 until the Advanced Boot Options screen appears. Choose Repair Your Computer. Press Enter. Finally choose Startup Repair. Allow it to run then re-boot.

Success?

No success. However, my father has been hearing weird noises coming from inside the computer. We opened up the casing, and the fan on the graphics card(ATI 210) was spinning recklessly for no reason after the computer has been on for a period of time. He said its done this from time to time before.


When it reboots, the fan tends to click back and forth on the graphics card and doesnt rotate much. Would like some insight if this is a potential problem that could be causing the rebooting issue.

This post has been edited by deadlift425: 04 February 2011 - 04:50 PM

It might very well be a hardware issue. Let me see one more log. If it is clean then you should post for help in the appropriate section here at BC related to your OS.

Re-run DDS download it again if need be:

• Download DDS by sUBs from one of the following links. Save it to your desktop.
  • DDS.scr
    
  • DDS.pif
  
  
• Double click on the DDS icon, allow it to run.
  
• A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  
• Notepad will open with the results.
  
• Follow the instructions that pop up for posting the results.
  
• Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

Regards,
thcbytes

Here you go:

It is clear. I think it would be best to post over at the Windows 7 section of BC.