Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

60 Second Shutdown Warning *please Help Me*


  • Please log in to reply
13 replies to this topic

#1 CyberDoug

CyberDoug

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Teh Internetz
  • Local time:10:04 PM

Posted 10 April 2008 - 06:49 AM

Posted Image
That is the message i get.
But first i shall explain in detail what is happening.
When i am not connected to my wireless the computer runs fine, but once i connect to the network, that box comes up. I have alreadly used the shutdown -a cmd to stop the count down, but once i do that, the entire computer slows up to the point where it takes 3 minutes for the start menu to appear.


System Specs -
Posted Image

Here is a quick screenshot summary of what is happening -
Posted Image
The computer runs perfectly while the network card is disabled.
Posted Image
Posted Image
I have enabled the adapter and then the message comes up.

These were all the running processes -
Posted Image

I have ran several full system scans from a variety of programs.
Spyware S+D, Norton Anti Virus, Microsoft Malicious Software Scanner and Super Anti Spyware.
All of which came up with results, and due action was taken.
But yet the problem still remains.

Please help me bleepingcomputer users, your my only hope! :thumbsup:
:flowers: :trumpet:

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:04 PM

Posted 10 April 2008 - 07:19 AM

I have seen this status code message several times when machines were infected with a rootkit so I suggest you start by investigating for that possibility.

Please download ATF Cleaner by Atribune & save it to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main "Select Files to Delete" choose: Select All.
  • Click the Empty Selected button.
  • If you use Firefox browser click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • If you use Opera browser click Opera at the top and choose: Select All
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • Click Exit on the Main menu to close the program.
Please download AVG Anti-Rootkit and save to your desktop
  • Double click avgarkt-setup-1.1.0.42.exe to begin installation.
  • Click Next to select the Normal interface.
  • Accept the license and follow the prompts to install. (By default it will install to C:\Program Files\GRISOFT\AVG Anti-Rootkit)
  • You will be asked to reboot to finish the installation so click "Finish".
  • After rebooting, double-click the icon for AVG Anti-Rootkit on your desktop.
  • You will see a window with three buttons at the bottom.
  • Click "Search For Rootkits" and the scan will begin.
  • You will see the progress bar moving from left to right. The scan will take some so be patient and let it finish.
  • When the scan has finished, if anything was found, click "Remove selected items"
  • If nothing is found, a message will appear "Congratulations! There were no installed rootkits found on your computer."
  • Click close, then select "Perform in-depth Search".
  • When the scan has finished, if anything is found, click "Remove selected items"
  • Again, if nothing was found, you will see the message "Congratulations! There were no installed rootkits found on your computer."
  • Exit AVG ARK.
Note: Before performing a scan it is recommended to do the following to ensure more accurate results and avoid common issues that may cause false detections.
  • Disconnect from the Internet or physically unplug you Internet cable connection.
  • Close all open programs, scheduling/updating tasks and background processes that might activate during the scan including the screensaver.
  • Temporarily disable your anti-virus and real-time anti-spyware protection. (Re-enable when done)
  • After starting the scan, DO NOT not use the computer until the scan has completed.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 CyberDoug

CyberDoug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Teh Internetz
  • Local time:10:04 PM

Posted 10 April 2008 - 07:26 AM

I have seen this status code message several times when machines were infected with a rootkit so I suggest you start by investigating for that possibility.

Please download ATF Cleaner by Atribune & save it to your desktop.

  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main "Select Files to Delete" choose: Select All.
  • Click the Empty Selected button.
  • If you use Firefox browser click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • If you use Opera browser click Opera at the top and choose: Select All
  • Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • Click Exit on the Main menu to close the program.
Please download AVG Anti-Rootkit and save to your desktop
  • Double click avgarkt-setup-1.1.0.42.exe to begin installation.
  • Click Next to select the Normal interface.
  • Accept the license and follow the prompts to install. (By default it will install to C:\Program Files\GRISOFT\AVG Anti-Rootkit)
  • You will be asked to reboot to finish the installation so click "Finish".
  • After rebooting, double-click the icon for AVG Anti-Rootkit on your desktop.
  • You will see a window with three buttons at the bottom.
  • Click "Search For Rootkits" and the scan will begin.
  • You will see the progress bar moving from left to right. The scan will take some so be patient and let it finish.
  • When the scan has finished, if anything was found, click "Remove selected items"
  • If nothing is found, a message will appear "Congratulations! There were no installed rootkits found on your computer."
  • Click close, then select "Perform in-depth Search".
  • When the scan has finished, if anything is found, click "Remove selected items"
  • Again, if nothing was found, you will see the message "Congratulations! There were no installed rootkits found on your computer."
  • Exit AVG ARK.
Note: Before performing a scan it is recommended to do the following to ensure more accurate results and avoid common issues that may cause false detections.
  • Disconnect from the Internet or physically unplug you Internet cable connection.
  • Close all open programs, scheduling/updating tasks and background processes that might activate during the scan including the screensaver.
  • Temporarily disable your anti-virus and real-time anti-spyware protection. (Re-enable when done)
  • After starting the scan, DO NOT not use the computer until the scan has completed.

Ok i've downloaded and shall run the scan soon.
Thanks for the quick reply i appreciate the help =]
:thumbsup:

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:04 PM

Posted 10 April 2008 - 07:31 AM

Your welcome. Post back and lets us know if anything was found.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:11:04 PM

Posted 10 April 2008 - 07:38 AM

In reading his other threads I suspect the problem may go deeper than a rootkit.
Chewy

No. Try not. Do... or do not. There is no try.

#6 CyberDoug

CyberDoug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Teh Internetz
  • Local time:10:04 PM

Posted 10 April 2008 - 09:35 AM

In reading his other threads I suspect the problem may go deeper than a rootkit.

I suppose you may be referring to the SID change a few years back.
My computer had been running fine since my last problem.
But then around 3 days when i had been extracting a file (genuine file) the internet had been disabled. So i re-enabled it and *pop* the message came up.
So since then if i want to do anything involving the internet then i have to boot up in safe mode.
Which is how i am currently corresponding with you guys.

As for the AVG Anti-Rootkit / ATF Cleaner, i ran both.
Cleaned out all the options using the ATF (Yet the program stopped responding if i choose to select all - which meant i had to select and enable each option one at a time)
The AVG Anti-Rootkit scan came up with the following
C://Documents and Settings/Cam.Study/My Documents/Folderlock Portable/Locker
And then listed all the files i had inside there.
(This was expected as Folder Lock Portable hides any files you want inside a password protected folder - used for files others would be offended if they came across)

So no suprises there.

My problem still remains.
My thanks to those who have contributed to helping me so far but i still need assistance, so anyone with any valid suggestions PLEASE help =]

*PS - Reformatting isn't an option as i no longer have my XP CD

#7 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:11:04 PM

Posted 10 April 2008 - 09:45 AM

I suppose you may be referring to the SID change a few years back.


http://www.bleepingcomputer.com/forums/ind...mp;#entry775462

I would assume you have some windows shell corruption and at the very least will to run windows file checker or a repair disk

You will need a windows disk that matches your version and a legal install key

without this you are pretty much out of options
Chewy

No. Try not. Do... or do not. There is no try.

#8 CyberDoug

CyberDoug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Teh Internetz
  • Local time:10:04 PM

Posted 10 April 2008 - 09:48 AM

I suppose you may be referring to the SID change a few years back.


http://www.bleepingcomputer.com/forums/ind...mp;#entry775462

I would assume you have some windows shell corruption and at the very least will to run windows file checker or a repair disk

You will need a windows disk that matches your version and a legal install key

without this you are pretty much out of options

My version of Windows is legal only and i have a holographic sticker to proove it, only problem is there isn't a disk.

Thanks for you help.
But there must be a way to remove these messages?

#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:04 PM

Posted 10 April 2008 - 09:59 AM

You should be able to see the error by looking in the Event Log. Read "How To Use the Event Viewer Applet". You can then gather more information doing a search of the Event ID number.

If you turn off the automatic reboot feature, you may be able to see the error code/STOP Message in a Blue Screen Of Death (BSOD).

To change the recovery settings and Disable Automatic Rebooting, go to Start > Run and type: sysdm.cpl
Click Ok or just press WINKEY + Pause/Break keys to bring up System Properties.
  • Go to the Advanced tab and under "Startup and Recovery", click on the "Settings" button and go to "System failure".
  • Make sure "Write an event to the system log" is checked and that "Automatically restart" is UNchecked.
  • Click "OK" and reboot for the changes to take effect.
Doing this won't cure your problem but instead of crashing and restarting you will get a blue diagnostic screen with an error code and other information that will allow you to better trace your problem. You can use Google to search the error code or post it back here along with any files/drivers listed so others can help you investigate the cause.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 CyberDoug

CyberDoug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Teh Internetz
  • Local time:10:04 PM

Posted 10 April 2008 - 11:58 AM

Didn't do anything except create a lag haven.
Please i am begging anyone out there who has a fix for this - there must be ONE?
You guys have never failed me before don'y start now =[=[

Bumpage.

#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:04 PM

Posted 10 April 2008 - 12:19 PM

Didn't do anything except create a lag haven

I don't know what you mean by this. Are you not getting a BSOD after disabling the auto reboot feature?

Also do the following:

Please print out and follow the instructions for using SDFix in BC's self-help tutorial "How to use SDFix".
-- When using this tool, you must use the Administrator's account or an account with "Administrative rights"
-- Disconnect from the Internet and temporarily disable your anti-virus and any anti-malware real time protection before performing a scan.

When done, the SDFix report log will open in notepad and automatically be saved in the SDFix folder as Report.txt. Please copy and paste the contents of Report.txt in your next reply. Be sure to renable you anti-virus and and other security programs before connecting to the Internet.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 CyberDoug

CyberDoug
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Teh Internetz
  • Local time:10:04 PM

Posted 10 April 2008 - 02:35 PM

Well i'm not sure what did it but the computer is now fixed (for now - i know i'll back someday haha)
I would like to thank quietman7 and DaChew for helping me with this problem.
I am now writing this comment on said computer =]

Again thanks.

(Notice to whom it may concern - please lock this thread)

#13 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:11:04 PM

Posted 10 April 2008 - 02:38 PM

please post that report, it will help to understand what happened

and be on the lookout for a cd that matches your OS just in case
Chewy

No. Try not. Do... or do not. There is no try.

#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:04 PM

Posted 10 April 2008 - 02:41 PM

Glad to hear the issue has been resolved.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users