Help...my computer keeps restarting

[CreekGeek]

Hey guys i really need some help on this 1.
I have a compaq that has no special temperature settings or overclocking features. this is an old computer problably dated back to 1998.
Ok my problem is that it keeps restarting by itself everytime i install something to the hard drive no matter which hard drive i write 2 (I have 2 in the computer) but when i install in safe mode. it doesnt restart. I havent tested this myself but my brother says that when he scanned with AVG Free, in safe mode and it gets to a certain point ittll restart.
But I can install things and it wont restart whevener in safe mode but when im not thought...it will restart.
Is the cause possibly a virus of some sort or the hard drive or what. Ive reconnected and checked the connectors to the hard drive. Ive dusted the comp and everything. but it still happens. Whats the deal!?!?!?

please help

 

[mechBgon]

It's possible that it's a virus. What version of Windows is on the computer now?

 

[CreekGeek]

windows xp

edit: and when it restarts it doesnt even give no warning or sign b4 it restarts. it just happens

 

[mechBgon]

Originally posted by: CreekGeek
windows xp

edit: and when it restarts it doesnt even give no warning or sign b4 it restarts. it just happens

Ok, try this:

1) go to this page: http://www.elitekiller.com/malware.htm

2) hit CTRL F to do a page search for the word "bloatware" which takes you down to a set of instructions on using a manual McAfee scanner.

3) follow the directions precisely, including using Safe Mode With Command Prompt as suggested, to run a manual virus scan in Safe Mode With Command Prompt. Any questions, just ask.


If the scanner finds stuff, post the text out of the C:\Report.html file here, or send me a Private Message with the text if you prefer.

 

[CreekGeek]

sweet thanks man, will try this

 

[CreekGeek]

Dude it freakin worked ,,, thanks so much....here it is btw

Virus Scan Information

McAfee VirusScan for Win32 v5.10.0
Copyright (c) 1992-2003 Networks Associates Technology Inc. All rights reserved.
(408) 988-3832 LICENSED COPY - May 26 2006

Scan engine v5.1.00 for Win32.
Virus data file v4100 created Apr 07 2007
Scanning for 244614 viruses, trojans and variants.

Virus Scan Results



04/07/2007 21:51:13


Options:
/ADL /DEL /ALL /ALLOLE /ANALYZE /MAILBOX /MANALYZE /MIME /PANALYZE /PROGRAM /STREAMS /UNZIP /WINMEM /SUB /HTML C:\REPORT.HTML

Scanning C: []
E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe ... Found virus or variant New Malware-b !!!
Please send a copy of the file to Network Associates
Scanning C:\*.*
C:\WINDOWS\SYSTEM32\lsasss.exe ... Found the QLowZones-42 trojan !!!
The file or process has been deleted.
C:\WINDOWS\SYSTEM32\yayww.exe ... Found trojan or variant New Malware.aj !!!
Please send a copy of the file to Network Associates
The file or process has been deleted.
C:\WINDOWS\SYSTEM32\tmp1C.tmp.dll ... Found the Vundo trojan !!!
The file or process has been deleted.
C:\WINDOWS\SYSTEM32\zu.exe.exe\000039a0.EXE ... Found the Spam-Mespam trojan !!!
C:\WINDOWS\SYSTEM32\rsvp32_2.dll ... Found the Spam-Mespam trojan !!!
C:\WINDOWS\SYSTEM32\adirka.dll ... Found the Downloader-ZQ trojan !!!
The file or process has been deleted.
C:\WINDOWS\SYSTEM32\adirss.exe ... Found the QLowZones-42 trojan !!!
The file or process has been deleted.
C:\WINDOWS\SYSTEM32\lnwin.exe ... Found the QLowZones-42 trojan !!!
The file or process has been deleted.
C:\WINDOWS\SYSTEM32\bak\lsasss.exe ... Found the QLowZones-42 trojan !!!
The file or process has been deleted.
C:\WINDOWS\NDNuninstall6_38.exe ... Found application NDotNet.
The file or process has been deleted.
C:\WINDOWS\NDNuninstall7_48.exe ... Found application NDotNet.
The file or process has been deleted.
C:\WINDOWS\pdp.exe\GenUnp ... Found the Downloader-BAI.gen trojan !!!
The file or process has been deleted.
C:\WINDOWS\ljkhii.dll ... Found the Vundo trojan !!!
The file or process has been deleted.
C:\WINDOWS\spooldr.exe ... Found trojan or variant New Malware.j !!!
Please send a copy of the file to Network Associates
The file or process has been deleted.
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe ... Found the QLowZones-42 trojan !!!
The file or process has been deleted.
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe ... Found the QLowZones-42 trojan !!!
The file or process has been deleted.
C:\Program Files\Grisoft\AVG Free\avgcc.exe1174945709 ... Found the QLowZones-42 trojan !!!
The file or process has been deleted.
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe ... Found the QLowZones-42 trojan !!!
The file or process has been deleted.
C:\FOUND.015\FILE0029.CHK ... Found virus or variant New Malware-b !!!
Please send a copy of the file to Network Associates
The file or process has been deleted.

Summary report on C:\*.*
File(s)
Total files: ........... 87625
Clean: ................. 87586
Possibly Infected: ..... 18
Deleted: ............... 17
Non-critical Error(s): 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning D: []
E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe ... Found virus or variant New Malware-b !!!
Please send a copy of the file to Network Associates
Scanning D:\*.*
D:\FOUND.001\FILE0008.CHK ... Found virus or variant New Malware-b !!!
Please send a copy of the file to Network Associates
The file or process has been deleted.

Summary report on D:\*.*
File(s)
Total files: ........... 3543
Clean: ................. 3538
Possibly Infected: ..... 2
Deleted: ............... 1
Non-critical Error(s): 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning E: []
E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe ... Found virus or variant New Malware-b !!!
Please send a copy of the file to Network Associates
Scanning E:\*.*
E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe ... Found virus or variant New Malware-b !!!
Please send a copy of the file to Network Associates

Summary report on E:\*.*
File(s)
Total files: ........... 2132
Clean: ................. 2125
Possibly Infected: ..... 2
Non-critical Error(s): 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0


Time: 01:45.01


Visit the Network Associates Online Web Site
Need some help or advice? Send email to Technical Support.





edit: darn....nevermind it started restarting again.

 

[mechBgon]

Well, but you took a nasty bite out of a pretty evil malware at least.

Here are a couple ways you could go next:

1) the mechBgon approach is to back up your documents, Favorites, music, etc, and then use DBAN to burn the Windows installation to the ground :evil: and then reinstall Windows taking these security precautions (scroll down to the big picture there). After installation, apply these security principles to stay clean.

or...

2) remove AVG and then install a 30-day trialware of the full-version Kaspersky Antivirus 6, configuring it as shown here.

After fully configuring it and updating it, reboot into Safe Mode, click Start > All Programs > Kaspersky Antivirus, start up Kaspersky Antivirus, and run a full Scan My Computer. The full-version Kaspersky has rootkit detection, and the MeSpam malware does use rootkits, so that's why I suggest using full-version Kaspersky.

Once you've got Kaspersky all set up, now proceed with John's full malware-removal procedures. He removes malware all the time, so there's a method to his madness

If the system is eventually clean, then when your 30-day trialware expires, right-click the Kaspersky tray icon, choose Exit, uninstall it, reboot, and then you can use the "lite" version from there onwards, which is free. Configure it just like the full version.

Also, if the random reboots continue despite everything, then run the diagnostic program for your hard drive. Each manufacturer makes their own, and I have working links to most of them at the bottom of this page. And run memtest86 to test your RAM for glitches.

 

[CreekGeek]

sweeet.. thanks bro