First of all, I am not on the computer that I’m having a problem with.
Earlier this evening I started receiving Teatimer messages that a value was being added and I denied all the entries. Here is what the Resident.log says:
4/17/2009 11.19.45pm Denied (based on user blacklist) value ‘Administrator’ (new Data: C:\Documents and Settings\Administrator\Administrator.exe /i”) added in system startup user entry.
This entry is in the log for every minute – hundreds of entries.
Around that same time I was receiving messages from McAfee that it was deleting Trojans; I believe it said ‘CRYPTS’.
Shortly after, I received another message on the desktop saying – System shutdown’, C:\windows\sys32\lsass.exe terminated unexpectedly with status code –1073741819. The system will now shutdown and restart.
Well, it did shut down and eventually restarted. I immediately pulled the internet cable and opened Spybot’ to run a scan. It runs for 3 seconds and then stops. I tried this a couple times and it won’t run. Teatime is running.
I’m now running a McAfee scan and it will take some time.
My question is - what should I do now?
Please be gentle – I’m not the most savvy computer user.