Author Topic: Please Help!!!!  (Read 3562 times)

0 Members and 1 Guest are viewing this topic.

Scarletred

  • Guest
Please Help!!!!
« on: February 21, 2010, 10:48:03 AM »
Hello,
I tried downloading google chrome and when it in the process of dowloading my computer shuts down and then I have to try more than once to try to turn on the computer. At first I thought my computer was completely dead but when it turned on I also realized the google chrome never downloaded, I tried again and the same thing happend so I ran a hijackthis and because I have no idea what files are are okay or harmful I am posting it here because I know someone can help me not being the first time I ask for assistance. Thank you
Romina


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37561
  • Not a avast user
Re: Please Help!!!!
« Reply #1 on: February 21, 2010, 11:05:33 AM »
Check your computer for Malware with

Malwarebytes Antimalware http://filehippo.com/download_malwarebytes_anti_malware/
after install click UPDATE and run cuick scan, click on REMOVE SELECTED to quarantine anything found

SUPERAntiSpyware http://filehippo.com/download_superantispyware/
Are cookies really spyware and are they dangerous?
http://www.superantispyware.com/supportfaqdisplay.html?faq=26

If anything is found come back and post the scan logs here

Scarletred

  • Guest
Re: Please Help!!!!
« Reply #2 on: February 21, 2010, 12:28:28 PM »
Pondus, I scanned with Malwarebytes and it came out clean then I sanned with SUPERAntiSpyware and just your regular cokkies threat so I quarantined them.. Nothing was found out of the ordinary but what do you think caused the shut down on my computer when trying to download google chrome? thanks!!

Romina

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37561
  • Not a avast user
Re: Please Help!!!!
« Reply #3 on: February 21, 2010, 12:36:12 PM »
Have no idea, but you may fiend out from the mem.dump log or somone who can read this log
http://support.microsoft.com/kb/315263
http://support.microsoft.com/kb/254649

Offline .: L' arc :.

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1780
  • Thinking with Portals
Re: Please Help!!!!
« Reply #4 on: February 21, 2010, 02:47:40 PM »
1 Download OTL to your Desktop
2 Double click on the OTL icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
3 Under the Custom Scan box paste this in:

netsvcs
%SYSTEMDRIVE%\*.*
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
/md5stop
c:\windows\system32\*.dll /lockedfiles
c:\windows\system32\drivers\*.sys /lockedfiles
%systemroot%\*. /mp /s
CREATERESTOREPOINT


4 Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.

5 When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and paste them into your reply as an attachment.
Windows 7 (64-bit) Home Premium SP1
avast! 9 RC1

Scarletred

  • Guest
Re: Please Help!!!!
« Reply #5 on: February 22, 2010, 09:51:51 PM »
Thank you L'arc, I did as you requested so please see attached files.

Romina

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Please Help!!!!
« Reply #6 on: February 22, 2010, 10:00:51 PM »
No indication of malware there, what link did you try to download from - was it Google ?

 

Scarletred

  • Guest
Re: Please Help!!!!
« Reply #7 on: February 22, 2010, 11:03:32 PM »
Yes, I went to google site and downloaded from there. The minute I hit run my computer shut off and I was not able to turn it on, I had to try to turn it on a couple of times before succeeding. Have no idea why it did that??  Thanks