HELP - Serious Problem and Spybot Won't Run

[kob2709]

First of all, I am not on the computer that I’m having a problem with.

Earlier this evening I started receiving Teatimer messages that a value was being added and I denied all the entries. Here is what the Resident.log says:

4/17/2009 11.19.45pm Denied (based on user blacklist) value ‘Administrator’ (new Data: C:\Documents and Settings\Administrator\Administrator.exe /i”) added in system startup user entry.

This entry is in the log for every minute – hundreds of entries.

Around that same time I was receiving messages from McAfee that it was deleting Trojans; I believe it said ‘CRYPTS’.

Shortly after, I received another message on the desktop saying – System shutdown’, C:\windows\sys32\lsass.exe terminated unexpectedly with status code –1073741819. The system will now shutdown and restart.

Well, it did shut down and eventually restarted. I immediately pulled the internet cable and opened Spybot’ to run a scan. It runs for 3 seconds and then stops. I tried this a couple times and it won’t run. Teatime is running.
I’m now running a McAfee scan and it will take some time.

My question is - what should I do now?
Please be gentle – I’m not the most savvy computer user.

XP SP2

[Tom.K]

Please read this thread: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) and create a new thread in Malware Removal by following the steps.

Aborting shutdown (It should work): Create a new shortcut and in location type shutdown.exe -a (or more precisely: %windir%\system32\shutdown.exe -a). If you get System Shutdown warning, you can run that shortcut and the shutting down will (and should) be aborted.

[kob2709]

Thank you Tom.
I will do that when the scan finishes.