Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer Keeps Restarting And Will Only Run In Safe Mode


  • This topic is locked This topic is locked
8 replies to this topic

#1 MondiBlue

MondiBlue

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:59 AM

Posted 06 March 2008 - 08:32 PM

My parent's computer kept restarting without getting completely loaded. The only way to keep it from endlessly restarting is to put it in Safe Mode. I scanned the computer with AVG Anti-Spyware and it was infected with a couple of Trojan viruses.

They were Trojan.Kolweb.j located at C:\WINDOWS\system32\durvilz.dll and Trojan.Small located at C:\WINDOWS\system32\wtstr.exe. I deleted both of them. The computer continued restarting unless I went to Safe Mode.

Then I tried to run some other spyware scans on it, but they wouldn't without getting updated Virus Definitions, which required getting connected to the internet. I still cannot get connected to the internet because it won't let me start Safe Mode with Networking.

Anyone have any suggestions on how to remedy this problem? Thanks in advance.

BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,958 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:09:59 AM

Posted 07 March 2008 - 09:20 PM

Hello MondiBlue,

In order to assist you we need additional information.

What is your operating system: Windows XP, Vista, etc.?

Then I tried to run some other spyware scans on it


What were the names of these programs?

What other security programs, besides AVG AntiSpyware are installed? Please name them.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 MondiBlue

MondiBlue
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:59 AM

Posted 09 March 2008 - 05:32 PM

Hello MondiBlue,

In order to assist you we need additional information.

What is your operating system: Windows XP, Vista, etc.?

Then I tried to run some other spyware scans on it


What were the names of these programs?

What other security programs, besides AVG AntiSpyware are installed? Please name them.

Orange Blossom :thumbsup:


The operating system is Windows XP. The other security programs I tried to run are Spybot and Ad-Aware.

#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,958 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:09:59 AM

Posted 09 March 2008 - 06:56 PM

Hello MondiBlue,

Thanks for the additional information. Are you running the Home or Pro edition of Windows XP? Do you have Service Pack 1 installed? Do you have Service Pack 2 installed?

I would like you to run a scan with SUPERAntiSpyware in Safe Mode. You will, of course, install it in Normal Mode. You may wish to print out these directions or copy them to notepad so you have them available in Safe Mode.

Download and install SUPERAntiSpyware free found here: SUPERAntiSpyware

Be sure to click on the download button to the left, not on the free trial download on the right.

Install it and double-click the icon on your desktop to run it.
It will ask if you want to update the program definitions, click Yes.
Under Configuration and Preferences, click the Preferences button.
Click the Scanning Control tab.
Under Scanner Options make sure the following are checked:
  • Close browsers before scanning
  • Scan for tracking cookies
  • Terminate memory threats before quarantining.
o Please leave the others unchecked.
o Click the Close button to leave the control center screen.
Reboot into Safe Mode
On the main screen, under Scan for Harmful Software click Scan your computer.
On the left check C:\Fixed Drive.
On the right, under Complete Scan, choose Perform Complete Scan.
Click Next to start the scan. Please be patient while it scans your computer.
After the scan is complete a summary box will appear. Click OK.
Make sure everything in the white box has a check next to it, then click Next.
It will quarantine what it found and if it asks if you want to reboot, click Yes.
Reboot into Normal Mode
To retrieve the removal information for me please do the following:
o After reboot, double-click the SUPERAntispyware icon on your desktop.
o Click Preferences. Click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o It will open in your default text editor (such as Notepad/Wordpad).
o Please highlight everything in the notepad, then right-click and choose copy.
Click close and close again to exit the program.

Please post the log in your next reply.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#5 MondiBlue

MondiBlue
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:59 AM

Posted 10 March 2008 - 12:41 PM

I can't run the computer in anything but Safe Mode. I tried to download that software onto a laptop and put it on my parent's computer with a flash drive, but you can't install software in Safe Mode, so that didn't work.

I hadn't been over to look at their computer this weekend, so the computer is doing something different. Instead of restarting when it logging into any mode other than Safe Mode it is just keeping a completely black screen up.

The computer is running Microsoft XP Home Edition with Service Pack 1. It seems to be getting worse off with slower loading times in Safe Mode than it was last week.

#6 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,958 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:09:59 AM

Posted 10 March 2008 - 05:45 PM

Okay MondiBlue. Somehow the fact that the computer works only in Safe Mode slipped my mind when I wrote my last post. Sorry about that.

I'm going to consult with some malware removal experts, one of whom may take over this thread.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#7 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,958 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:09:59 AM

Posted 10 March 2008 - 10:54 PM

Hello MondiBlue,

I'm glad that you have a flash drive and that your parents' computer can use them. This is the advice I received. First, in brief: Download HiJack This to the flash drive, then go to your parents computer and run it from the flash drive on their computer. HiJack This doesn't have to go onto the hard drive to work.

Here are the full directions.

Skip to step 9 in this guide which explains where to download HiJack This from, how to install it, in your case on the flash drive, how to run it and produce the required log.

Create a new topic in this forum, not here and give it a good descriptive title. Briefly summarize what the problems are, what you have done to try to solve it, and what worked and didn't work and paste in your HJT log. Please include a link to this thread and tell them we sent you there.

After you post your log, DO NOT make any further changes to your computer: deleting files, editing the registry, using special fix tools, installing or uninstalling software etc. as this will make it more difficult for the HJT team to help you.

Please be patient as the HJT team is extremely busy. DO NOT bump your log as the team may think that someone is already helping you. If you have not had a response in five days, add a response to the five days no response topic and paste in the link to your thread.

Once you have posted your log, please let us know in this thread and paste in the link so that we know the HJT team is helping you.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#8 MondiBlue

MondiBlue
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:59 AM

Posted 11 March 2008 - 04:14 PM

Thanks for your help. I've posted in the HijackThis Logs and Malware Removal forum. Here's the link to my new thread:
http://www.bleepingcomputer.com/forums/t/135786/computer-keeps-restarting-and-will-only-run-in-safe-mode/

#9 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,958 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:09:59 AM

Posted 11 March 2008 - 07:53 PM

Thanks MondiBlue,

To avoid confusion, I'm closing this thread. If you need it reopened once the HJT team has cleared you, please PM a moderator. Good luck with your log.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users