Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected laptop reboots automatically on startup; MBAM and SDFix crash in Safe Mode


  • Please log in to reply
1 reply to this topic

#1 engynyr

engynyr

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:02:26 AM

Posted 30 August 2009 - 10:52 AM

I have an infected Dell laptop running Windows XP Pro SP3. On startup, it displays a System Shutdown pop-up with a one-minute timer and the message, "The system process C:\Windows\system32\services.exe terminated unexpectedly with status code -1073741482. The system will now shut down and restart."

When I booted it into Safe Mode, I found AVCare (which I removed). Spybot S&D also caught Monopod attempting to set a startup item in the registry (which I blocked). There's more garbage on the system, because it still reboots itself.

I booted it again into Safe Mode (logged in as Administrator) and tried installing SDFix and MBAM from a flash drive. I was able to install both of them, but they both crash when I run them. SDFix crashes right after I type "Y" to start the scan, and crashes explorer.exe along with it. I was able to start MBAM after installing, but it crashed as soon as I clicked "Start Scan", and I when I try to run it again I get the message, "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."

Any help would be very much appreciated.

More information as of 9:30 PM:

HijackThis also will not run. Firefox and IE7 are both get redirected away from anti-virus and anti-spyware sites (like Trend Micro House Call). In some cases the browsers crash. I installed Google Chrome to try to get a clean browser, and it won't bring up any web pages at all.

Edited by engynyr, 30 August 2009 - 08:31 PM.


BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:02:26 AM

Posted 31 August 2009 - 11:45 PM

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.

==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users