PDA

View Full Version : Auto shutdown, plz help me



nguaden
2007-06-05, 10:28
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 2:06:34 PM, on 05/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\AhnLab\V3IS2007\V3Medic.exe
C:\WINDOWS\system32\mmc.exe
F:\antivirus\HiJackThis_v2.exe

O20 - Winlogon Notify: A3dxq - C:\WINDOWS\system32\a3dx8.dll
O20 - Winlogon Notify: winsys2freg - C:\Documents and Settings\All Users\Documents\Settings\winsys2f.dll
O23 - Service: AhnLab Application Service - AhnLab, Inc. - C:\Program Files\Common Files\AhnLab\ACA\ACAAS.exe
O23 - Service: AhnLab Guarantee Service - AhnLab, Inc. - C:\Program Files\Common Files\AhnLab\ACA\ACAEGMgr.exe
O23 - Service: AhnLab Information Service - AhnLab, Inc. - C:\Program Files\Common Files\AhnLab\ACA\ACAIS.exe
O23 - Service: AhnLab Log Service - AhnLab, Inc. - C:\Program Files\Common Files\AhnLab\ACA\ACALS.exe
O23 - Service: AhnLab Task Scheduler - AhnLab, Inc. - C:\Program Files\AhnLab\Smart Update Utility\AhnSDsv.exe
O24 - Desktop Component 0: (no name) - http://www.clip.vn/data/img.thumbnail/16795.thu
O24 - Desktop Component 1: (no name) - http://www.clip.vn/data/img.thumbnail/16742.thu
O24 - Desktop Component 2: (no name) - http://www.clip.vn/data/img.thumbnail/15976.thu
O24 - Desktop Component 3: (no name) - http://www.clip.vn/data/img.thumbnail/15706.thu
O24 - Desktop Component 4: (no name) - http://www.clip.vn/data/img.thumbnail/15487.thu

--
End of file - 1799 bytes

Mr_JAk3
2007-06-05, 21:44
Hello and welcome to the Forums :)

You're infected.

Could you please give some more details.

-Do you get some error before computer shuts down`?
-Does the computer run in safe mode?
-How long does the computer run in normal mode?

nguaden
2007-06-07, 07:07
I use about 30 minute(s) automatically blow out. I am second-hand so many dike software sweep but who isn't destroied. elution faceplate rise spectras finis no mistake appearance, only displayed . Thank you very much

Mr_JAk3
2007-06-07, 21:40
OK please use another computer (and an usb memory stick, cd or other media) to move the following filew to the infected computer. Run the program in safe mode and post the log to here.

1. Download this file - combofix.exe (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

tashi
2007-06-18, 09:14
This topic has been moved to archives to prevent others with similar issues posting to it.

If you need the thread re-opened, please send me a private message (pm) and provide a link.

Applies only to the original poster, anyone else with similar problems please start your own topic.