Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer rebooting itself in normal mode, not sure if its malware or not


  • This topic is locked This topic is locked
16 replies to this topic

#1 deadlift425

deadlift425

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:29 AM

Posted 16 January 2011 - 10:12 PM

Windows 7 operating system. Trying to fix one of my family member's desktops. I have ran malwarebytes and superantispyware already(did remove some files related to pornography), but still havent had luck getting rid of the reboot problem. Just looking for a heads up of where to go from here.

Attached Files


Edited by deadlift425, 16 January 2011 - 10:15 PM.


BC AdBot (Login to Remove)

 


#2 Blind Faith

Blind Faith

  • Malware Response Team
  • 4,101 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:29 AM

Posted 22 January 2011 - 08:19 PM

Hello and welcome to Bleeping Computer :welcome:

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.

Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

We also need a new log from the GMER anti-rootkit scanner. Please first disable any CD emulation programs using the steps found in this topic:

Why we request you disable CD Emulation when receiving Malware Removal Advice

Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:

How to create a GMER log




Elle
Can you hear it?It's all around!

Tomar ki manè acchè?
Yadi thakè, tahalè
Ki kshama kartè paro
?



If I haven't replied in 48 hours, please feel free to send me a PM.



Posted Image

#3 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 27 January 2011 - 06:47 PM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/

#4 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 31 January 2011 - 09:35 PM

This topic has been re-opened at the request of the person who originally posted.
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/

#5 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 31 January 2011 - 09:41 PM

Hi and welcome to the Virus/Trojan/Spyware/Malware Removal forum,

I am thcbytes and I am here to help you!

I ask that you refrain from running tools other than those I suggest to you while I am cleaning up your computer. The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

Please perform all steps in the order received and do not proceed if you need clarification.

Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems please stop and tell me about it. When your computer is clean I will alert you of such. I will also provide you with detailed suggestions for prevention.

In the upper right hand corner of the topic you will see a button called Watch this topic. Click on this then choose Immediate E-Mail notification and then Proceed and you will be advised when I respond to your topic by email.

After 5 days if your topic is not replied I we assume it has been abandoned and I will close it.

I would also like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please be courteous and appreciative for the assistance provided!

Again I would like to remind you to make no further changes to your computer unless I direct you to do so. Your computer fix will be based on the current condition of your computer! Any changes might delay my ability to help you.

==========

Please download ComboFix from one of these locations:

Link 1
Link 2

Save it to your Desktop <-- Important!!!

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Please refer to this link for instructions.

  • Right click it and run as admin & follow the prompts.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own.
This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper


==========

Your hard disk displays errors - Let's fix that!

  • Press the Windows Logo Key + R simultaneously
  • Copy/paste chkdsk /f in the run box then click OK
  • Reboot
  • Allow the utility to run

==========

You may have corrupt critical system files. Let's see if we can fix that.
  • Select Posted Image
  • Select All Programs
  • Select Accessories
  • Right click Command Prompt and choose Run as administrator
Posted Image
  • If you have the User Account Control (UAC) enabled you will be asked for authorization prior to the command prompt opening.
  • You may simply need to press the Continue button if you are the administrator or insert the administrator password.
  • Copy & paste sfc /scannow in the command window and press enter.
    • Be patient because the scan may take some time.

    • When that has completed then we need to create a logfile.

  • Repeat the process but this time copy & paste findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txt in the command window and press Enter.

    Note: This will place a sfcdetails.txt file on your desktop with the SFC scan details from the CBS.LOG. Please copy and paste that log into your next reply.


Regards,
thcbytes
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/

#6 deadlift425

deadlift425
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:29 AM

Posted 02 February 2011 - 01:16 PM

Here is the combofix log: Attached File  comboxfix.txt   13.56KB   2 downloads

#7 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 02 February 2011 - 02:32 PM

How is the computer running now? What problems remain?
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/

#8 deadlift425

deadlift425
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:29 AM

Posted 02 February 2011 - 05:09 PM

Still reboots in normal mode on windows 7 after about 5 minutes of being up. Once I put it in safe mode following that, I got a black screen after a couple minutes.

Edited by deadlift425, 02 February 2011 - 05:10 PM.


#9 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 02 February 2011 - 06:12 PM

Still reboots in normal mode on windows 7 after about 5 minutes of being up.

Does it matter what your doing or does it happen even if your not doing anything? Does it result in a BSOD? Do you get any warning messages? Does it turn off or automatically reboot?

Once I put it in safe mode following that, I got a black screen after a couple minutes.

I am not sure I understand. Will you please elaborate?
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/

#10 deadlift425

deadlift425
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:29 AM

Posted 02 February 2011 - 06:23 PM

Still reboots in normal mode on windows 7 after about 5 minutes of being up.

Does it matter what your doing or does it happen even if your not doing anything? Does it result in a BSOD? Do you get any warning messages? Does it turn off or automatically reboot?

Once I put it in safe mode following that, I got a black screen after a couple minutes.

I am not sure I understand. Will you please elaborate?




I get no BSOD, just a black screen and automatically reboots. Sometimes it reboots, othertimes it doesnt and just gives me a black screen with nothing(I can still hear the computer running when this happens).

#11 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 03 February 2011 - 12:35 AM

Please re-boot your computer. Rapidly tap F8 until the Advanced Boot Options screen appears. Choose Repair Your Computer. Press Enter. Finally choose Startup Repair. Allow it to run then re-boot.

Success?
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/

#12 deadlift425

deadlift425
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:29 AM

Posted 04 February 2011 - 04:39 PM

No success. However, my father has been hearing weird noises coming from inside the computer. We opened up the casing, and the fan on the graphics card(ATI 210) was spinning recklessly for no reason after the computer has been on for a period of time. He said its done this from time to time before.


When it reboots, the fan tends to click back and forth on the graphics card and doesnt rotate much. Would like some insight if this is a potential problem that could be causing the rebooting issue.

Edited by deadlift425, 04 February 2011 - 04:50 PM.


#13 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 05 February 2011 - 08:19 AM

It might very well be a hardware issue. Let me see one more log. If it is clean then you should post for help in the appropriate section here at BC related to your OS.

Re-run DDS download it again if need be:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

Regards,
thcbytes
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/

#14 deadlift425

deadlift425
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:03:29 AM

Posted 05 February 2011 - 01:24 PM

Here you go:

Attached Files

  • Attached File  DDS.txt   12.45KB   1 downloads


#15 thcbytes

thcbytes

  • Malware Response Team
  • 14,790 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:29 AM

Posted 05 February 2011 - 06:07 PM

It is clear. I think it would be best to post over at the Windows 7 section of BC.
Proud member - Unified Network of Instructors and Trained Eliminators
Posted Image

I do not accept personal donations for assistance provided. I would ask that you instead consider donating the greatest gift - Organ Donation. Your organs are of no use to you when your gone. You will save a life that would otherwise be lost!

http://donatelife.net/register-now/




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users