help! my computer auto shutdown - testmy.net resource / tool
Home
Welcome, Guest. Please login or register.
Did you miss your activation email?

  



donations help testmy.net pay for the very high cost to run the site. Any amount is greatly appreciated.
Click to read why...

  spcr
    
News : Have you seen the guides section?  It's an always growing section with tons of cool guides for subjects you might not even know about, check it out... it's a good read azn November 22, 2008, 05:24:32 AM
testmy.net Broadband  |  Main Forum  |  HELP!  |  Topic: help! my computer auto shutdown Advanced search

Recommended Tests

Click here to run a free Performance Scan
   Test PC Performance:
     Click here to run a free Performance Scan		     Test PC Stability:
     Click here to run a free Registry Scan


Note: The links above are sponsored links
  0 Members and 1 Guest are viewing this topic. « previous next »
Topic Tools Search this topic
 Pages 1 2  All Go Down
Author
Topic: help! my computer auto shutdown  (Read 6165 times)
Enzone26
Jr. Member
*
Offline Offline

Gender: Male
Posts: 39



View Profile
« on: April 11, 2008, 11:59:11 PM »
Any one who can help me to fix my problem in my computer, here's my problem when i started run command.exe my computer says save all your work! your computer will shutdown in 30 seconds. ill try to scan my computer but nothing found. I used avg anti-virus free edition. and search and destroy spybot, please help me guys...
Logged
mudmanc4
Global Moderator
TMN Sr. Veteran
*
Offline Offline

Gender: Male
Posts: 4470


✠


View Profile
« Reply #1 on: April 12, 2008, 12:03:41 AM »
 The last time I came across that  was a dyeing hard drive, not to say thats your problem, is the HDD older?
Logged
Yea, it's a Mac

In confusion there is profit
Enzone26
Jr. Member
*
Offline Offline

Gender: Male
Posts: 39



View Profile
« Reply #2 on: April 12, 2008, 12:28:05 AM »
my hard drive was release in the mid of 2004, and the brand is samsung 40gig
Logged
mudmanc4
Global Moderator
TMN Sr. Veteran
*
Offline Offline

Gender: Male
Posts: 4470


✠


View Profile
« Reply #3 on: April 12, 2008, 12:43:38 AM »
 Maybe try this Hard drive monitoring software and see what that tells you. The personal version should be free.
Logged
Yea, it's a Mac

In confusion there is profit
Enzone26
Jr. Member
*
Offline Offline

Gender: Male
Posts: 39



View Profile
« Reply #4 on: April 12, 2008, 01:28:11 AM »
thanx for that link, can you help me to understand what it says.
here's my result

DiskCheckup Version:            DiskCheckup V2.1 Build: 1001
SmartDisk DLL Version:          SmartDisk DLL SDK v1.0 Build: 1013
Time of export:                 15:30:46 12-Apr-2008
Device ID:                      0
Device Capacity:                38201 MB
Serial Number:                  S01JJ50Y627931
Model Number:                   SAMSUNG SP0411N

SMART ATTRIBUTES:
 ID   Description                            Raw Value    Status       Value        Worst        Threshold    TEC                 
---------------------------------------------------------------------------------------------------------------------------------------------
  1   Raw Read Error Rate                    0            OK           100          100          51           N.A.               
  3   Spin Up Time                           2944ms       OK           100          100          25           N.A.               
  4   Start/Stop Count                       4505         OK           96           96           0            N.A.               
  5   Reallocated Sector Count               0            OK           100          100          11           N.A.               
  7   Seek Error Rate                        0            OK           100          100          51           N.A.               
  8   Seek Time Performance                  0            OK           100          100          15           N.A.               
  9   Power On Time                          280153       OK           100          100          0            N.A.               
  A   Spin Retry Count                       0            OK           100          100          51           N.A.               
  B   Calibration Retry Count                0            OK           100          100          0            N.A.               
  C   Power Cycle Count                      2827         OK           98           98           0            N.A.               
 C2   Temperature                            33 C         OK           139          82           0            N.A.               
 C3   Hardware ECC Recovered                 18137        OK           100          100          0            N.A.               
 C4   Reallocation Event Count               0            OK           100          100          0            N.A.               
 C5   Current Pending Sector Count           0            OK           100          100          0            N.A.               
 C6   Uncorrectable Sector Count             0            OK           100          100          0            N.A.               
 C7   UltraDMA CRC Error Count               7            OK           200          200          0            N.A.               
 C8   Write Error Count                      0            OK           100          100          51           N.A.               
 C9   Off Track Errors                       0            OK           100          100          51           N.A.               

Logged
mudmanc4
Global Moderator
TMN Sr. Veteran
*
Offline Offline

Gender: Male
Posts: 4470


✠


View Profile
« Reply #5 on: April 12, 2008, 01:59:45 AM »
 What you should be looking at is the TEC,  " Threshold exceeded Condition" , it says n/a , Now I'm not sure if that means the smart settings weren't turned on in the bios when the system was setup, or that the hdd is ok for now. Maybe do some reading on the site to decipher the results.
Logged
Yea, it's a Mac

In confusion there is profit
Enzone26
Jr. Member
*
Offline Offline

Gender: Male
Posts: 39



View Profile
« Reply #6 on: April 12, 2008, 03:15:28 AM »
early i perform another test on my computer using avg anti-spyware and it found that i have a malicious file on my computer.
here is the details:

location                                         name                                  risk
C:\windows\pcoff.bat             trojan.shutdown.bi                         high

when i try to remove or quarantine that file it says action has done but when i started to run command.exe it shut down my computer how can i fix this, what should do any suggestion will greatly appreciate. thanks!
Logged
coolbuster
Proud To Be Filipino
News Anchor
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2171


call on me and i'll be there...


View Profile WWW
« Reply #7 on: April 12, 2008, 03:24:44 AM »
turn off system restore before removing the malware using AVG anti spyware  smiley
Logged
Enzone26
Jr. Member
*
Offline Offline

Gender: Male
Posts: 39



View Profile
« Reply #8 on: April 12, 2008, 03:35:48 AM »
how can i turn off system restore? where should i go?
Logged
coolbuster
Proud To Be Filipino
News Anchor
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2171


call on me and i'll be there...


View Profile WWW
« Reply #9 on: April 12, 2008, 03:38:24 AM »
Also, download and install Trend Micro HijackThis v2.0.2.

Then, click "Scan" and look for code 04 - HKLM\.. \Run: [pcoff.bat] C:\windows\

or something like that. then mark the corresponding box then click "Fix checked". Be very extra careful not to put a mark on other boxes.

hope it will help  smiley
« Last Edit: April 12, 2008, 03:44:06 AM by coolbuster » Logged
coolbuster
Proud To Be Filipino
News Anchor
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2171


call on me and i'll be there...


View Profile WWW
« Reply #10 on: April 12, 2008, 03:40:46 AM »
right click My Computer/Properties/System Restore

check "Turn off System Restore on all drives" click Apply then Ok.  smiley
Logged
jdbendijo
Full Member
*
Offline Offline

Posts: 52


View Profile
« Reply #11 on: April 12, 2008, 06:19:07 AM »
you might still have some trojans which is not detected by your antivirus software. try the bitdefender online scan at http://www.bitdefender.com/scan8/ie.html

I have used the AVG antivirus home edition before and there were plenty of viruses and malicious files which was not detected.

If you're going to use the online scan of bitdefender, make sure to make the window smaller as possible and move it out of the way of your working area because once the scan starts, you won't be able to move the window unless you abort the scanning or until the end of scan.
Logged
tommie gorman
Sophist Member
TMN Seasoned Veteran
*
Offline Offline

Gender: Male
Posts: 10133


"OLD GLORY"


View Profile
« Reply #12 on: April 12, 2008, 11:02:10 AM »
Or maybe try this online by avg to do the rest.  Laughing
http://www.ewido.net/en/onlinescan/
Logged
IF YOU DON'T STAND BEHIND OUR TROOPS, PLEASE, FEEL FREE TO STAND IN FRONT OF THEM !!!

"an old country hick from america"

Sprint EVDO Rev. A * AMD 64 3500+ 2.2 GHz cpu Ram 2GB/XP Home * TCP Optimizer
coolbuster
Proud To Be Filipino
News Anchor
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 2171


call on me and i'll be there...


View Profile WWW
« Reply #13 on: April 13, 2008, 07:05:03 AM »
How to Remove password_viewer.exe Virus

The "password_viewer.exe" virus executes during startup and cannot be easily disabled from the task manager. It shuts down your computer thru a batch file named "pc-off.bat". Surprisingly, this virus cannot be removed by known anti-malware programs but can be easily removed if done carefully on a manual way.

Here's how:

1. Turn off 'System Restore'.

Right click 'My Computer', click 'Properties', click the 'System Restore' tab, mark/check "Turn off System Restore on all drives", click Ok.

2. Restart computer in "Safe Mode" (press F2 or equivalent before the Windows bootup screen appears).

3. Now go to 'My Computer'. At the Menu bar click 'Tools', click 'Folder Options', click the 'View' tab. Scroll down and mark "Show hidden files and folders", uncheck both "Hide extensions for known file types" and "Hide protected operating system files", if a prompt appears click 'Yes', and then click 'Apply' and 'Ok' to close.

4. Open your system drive (usually drive C:), open 'Windows', scroll down, look for and delete the following files:

password_viewer.exe
pc-off.bat

- if a prompt appears each instance, click "Delete All".

5. Click the 'Back' button then go back to 'Tools', click 'Folder Options', click the 'View' tab. Scroll down and mark "Do not show hidden files and folders", check both "Hide extensions for known file types" and "Hide protected operating system files" and then click 'Apply' and 'Ok' to close.

6. Restart your computer to normal mode and turn on System Restore back by right clicking 'My Computer', click 'Properties', click the 'System Restore' tab, unmark/uncheck "Turn off System Restore on all drives", click ok.

You can check if the virus is still there by opening the Task Manager/Processes then look for password_viewer.exe. If its not there, you just had a successful virus removal. To test to make sure your computer doesn't shutdown when executing the Command Prompt, go to Start/Run and type cmd.

Good luck!
Logged
Enzone26
Jr. Member
*
Offline Offline

Gender: Male
Posts: 39



View Profile
« Reply #14 on: April 13, 2008, 08:45:25 PM »
hey guys thanks a lot for your response, but here' s the actions what i did to remove this kind of virus hopefully it helps to the other's with the same problem to their pc.

how to remove bar311.exe Pc shutdown virus

This is the symptom of a computer having bar311.exe virus A.K.A. winzip123. The virus comprises bar311.exe, password_viewer.exe, photos.zip.exe and pc-off.bat.

When you boot your Windows XP in Safe Mode the message appears: Thank You!!!
Password:Winzip123

The pc-off.bat contains the syntax like this"C:/path/shutdown -s -f -t 2 -c" which automatically shutdown your computer when you run the cmd.exe. So heres the solution to this problem… just follow these simple steps that im goin to discuss….

Manual removal:

1. upon start up…. after os loading… go to task manager by pressing CTRL+ALT+DEL then kill (end process) password_viewer.exe or bar311.exe or photos.zip.exe…

2. EDIT the following registry entries thru regedit at start/run

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="userinit.exe,bar311.exe" —> remove ", bar311.exe" only… leave userinit.exe because this is used by Windows when you log-in…

[HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
"HideFileExt"=dword:00000000
"ShowSuperHidden"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
"autorun"="c:\Windows\pc-off.bat" –> remove "c:\Windows\pc-off.bat" or delete the autorun key.

3. go to your thumb drive, please use the folders view in the explorer and use the navigation panel on the left side when accessing the drives to avoid triggering the autorun… then delete autorun.inf and password_viewer.exe or bar311.exe

4. open notepad then type what is shown below as is…

@echo off
del /a /f c:\Windows\bar311.exe
del /a /f c:\Windows\password_viewer.exe
del /a /f c:\Windows\photos.zip.exe
del /a /f c:\Windows\pc-off.bat
pause

then save this as remove.bat then click to run…. it will remove this annoying types of PC shut-off thing of virus… ;)
 
and also thanks to peepz... he is the man who responsible for making me free from this virus..
Logged
Print  Pages 1 2  All Go Up
testmy.net Broadband  |  Main Forum  |  HELP!  |  Topic: help! my computer auto shutdown « previous next »
Jump to:  

 
    
testmy.net's forum is proudly Powered by SMF | SMF © 2006-2007, Simple Machines LLC
Bookmark: Del.icio.us    StumbleUpon
 		  

 

 © 1999-2008 testmy.net - Contact - Legal - Facts & FAQs
Page Loading Stats: This forum Page created in 0.122 seconds with 53 queries.