Spybot S&D Shutting Down Windows

On Sep 30, 2:35 pm, "Unknown" <unkn....DeleteThis@unknown.kom> wrote:
> You have a nasty virus. You may want to completely uninstall Spybot. Then,
> if you trust it (I wouldn't) reinstall it.

> For test purposes don't run Spybot for a few weeks.

Thanks. I did uninstall Spybot. I've been running both it and AdAware
for years without any problems, that is until yesterday when this
behavior started.

You say I have a nasty virus. Could I have picked up the virus by
installing Spybot?

Anyway, as I said, I've uninstalled Spybot.

Thanks again,

Joe

Sleep, hibernate or completely power off?
<MightyJoe36 DeleteThis @gmail.com> wrote in message
news:1191171633.481165.327110@w3g2000hsg.googlegroups.com...
> Whenever I run Spybot Search and Destroy (Check for Problems), it gets
> about halfway through the program, then my computer shuts off.
>
> I've run a virus scan with Zone Alarm, cleaned out my registry, and
> run AdAware. I upgraded to Spybot 1.5, same thing.
>
> I'm running Windows XP.
>
> Any suggestions?
>
> Thanks in advance,
>
> Joe
>

You have a nasty virus. You may want to completely uninstall Spybot. Then,
if you trust it (I wouldn't) reinstall it.
For test purposes don't run Spybot for a few weeks.
<MightyJoe36 DeleteThis @gmail.com> wrote in message
news:1191175448.632529.312380@57g2000hsv.googlegroups.com...
> On Sep 30, 1:12 pm, "Unknown" <unkn... DeleteThis @unknown.kom> wrote:
>> Sleep, hibernate or completely power off?
>
> Completely power off.
>
>

"MightyJoe36@gmail.com" wrote:

> On Sep 30, 2:35 pm, "Unknown" <unkn....DeleteThis@unknown.kom> wrote:
> > You have a nasty virus. You may want to completely uninstall Spybot. Then,
> > if you trust it (I wouldn't) reinstall it.
>
> > For test purposes don't run Spybot for a few weeks.
>
> Thanks. I did uninstall Spybot. I've been running both it and AdAware
> for years without any problems, that is until yesterday when this
> behavior started.
>
> You say I have a nasty virus. Could I have picked up the virus by
> installing Spybot?
>
> Anyway, as I said, I've uninstalled Spybot.
>
> Thanks again,
>
> Joe

Joe,
Go through these cleaning steps to see or get a clear opinion on how
clean your machine is:
= Click Start >> Control Panel>>Network and Internet Connections >> Double
click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced.
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.


Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langi...e&venid
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the FileMon to see the Running Processes in realtime from here:

http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
Or Process Explorer :
http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html

HTH.
nass
---
www.nasstec.co.uk

On Sep 30, 5:04 pm, nass <n... RemoveThis @discussions.microsoft.com> wrote:
> Pop`,
> The OP did n't say He/She when running Ad-Aware they have the problem.
> He/She said when Running Spybot S&D it stop in Half way and freeze the
> Operating system.
> This can indicate either some files in SpyBot structure been horked or the
> system been compromised.
> HTH.
> nass

Actually, it's not freezing the OS, it's shutting down the computer.

I already uninstalled SpyBot. Going to try some of the other things as
well to see if there's a virus in there somewhere. I ran the virus
checker in Zone Alarm, but it turned up nothing.

Thanks all for the tips,

Joe

Spybot Search and Destroy and Ad-aware may conflict. I noticed it on
one of my three computers.
http://www.safer-networking.org/en/compatibility/adaware.html


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

MightyJoe36 DeleteThis @gmail.com wrote:
> On Sep 30, 1:12 pm, "Unknown" <unkn... DeleteThis @unknown.kom> wrote:
>> Sleep, hibernate or completely power off?
>
> Completely power off.

No, it's not a conflict. Note:
"
LavaSoft AdAware [link]
If you have the AdAware option to scan inside archives enabled,
AdAware may find files in the Spybot-S&D folder. Spybot-S&D does not contain
any spyware, but it creates backups of everything you fix (until you remove
those backups from the Recovery list), and AdAware complains about these
backups. You can safely ignore these backups found by AdAware.

"

Remove any backups from the recovery list you might have saved, as mentioned
above, and see if the problem goes away. All that happens is it sees
something in the backup as a virus and reports it. That's not going to
crash anything; just sends a false report.

Pop`


Gerry wrote:
> Spybot Search and Destroy and Ad-aware may conflict. I noticed it on
> one of my three computers.
> http://www.safer-networking.org/en/compatibility/adaware.html
>
>
>
> MightyJoe36 DeleteThis @gmail.com wrote:
>> On Sep 30, 1:12 pm, "Unknown" <unkn... DeleteThis @unknown.kom> wrote:
>>> Sleep, hibernate or completely power off?
>>
>> Completely power off.

Pop`,
The OP did n't say He/She when running Ad-Aware they have the problem.
He/She said when Running Spybot S&D it stop in Half way and freeze the
Operating system.
This can indicate either some files in SpyBot structure been horked or the
system been compromised.
HTH.
nass
----
www.nasstec.co.uk

"Poprivet" wrote:

> No, it's not a conflict. Note:
> "
> LavaSoft AdAware [link]
> If you have the AdAware option to scan inside archives enabled,
> AdAware may find files in the Spybot-S&D folder. Spybot-S&D does not contain
> any spyware, but it creates backups of everything you fix (until you remove
> those backups from the Recovery list), and AdAware complains about these
> backups. You can safely ignore these backups found by AdAware.
>
> "
>
> Remove any backups from the recovery list you might have saved, as mentioned
> above, and see if the problem goes away. All that happens is it sees
> something in the backup as a virus and reports it. That's not going to
> crash anything; just sends a false report.
>
> Pop`
>
>
> Gerry wrote:
> > Spybot Search and Destroy and Ad-aware may conflict. I noticed it on
> > one of my three computers.
> > http://www.safer-networking.org/en/compatibility/adaware.html
> >
> >
> >
> > MightyJoe36.RemoveThis@gmail.com wrote:
> >> On Sep 30, 1:12 pm, "Unknown" <unkn....RemoveThis@unknown.kom> wrote:
> >>> Sleep, hibernate or completely power off?
> >>
> >> Completely power off.
>
>
>
>

I take your point.


--
Regards.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Poprivet wrote:
> No, it's not a conflict. Note:
> "
> LavaSoft AdAware [link]
> If you have the AdAware option to scan inside archives enabled,
> AdAware may find files in the Spybot-S&D folder. Spybot-S&D does not
> contain any spyware, but it creates backups of everything you fix
> (until you remove those backups from the Recovery list), and AdAware
> complains about these backups. You can safely ignore these backups
> found by AdAware.
> "
>
> Remove any backups from the recovery list you might have saved, as
> mentioned above, and see if the problem goes away. All that happens
> is it sees something in the backup as a virus and reports it. That's
> not going to crash anything; just sends a false report.
>
> Pop`
>
>
> Gerry wrote:
>> Spybot Search and Destroy and Ad-aware may conflict. I noticed it on
>> one of my three computers.
>> http://www.safer-networking.org/en/compatibility/adaware.html
>>
>>
>>
>> MightyJoe36.RemoveThis@gmail.com wrote:
>>> On Sep 30, 1:12 pm, "Unknown" <unkn....RemoveThis@unknown.kom> wrote:
>>>> Sleep, hibernate or completely power off?
>>>
>>> Completely power off.

http://www.elephantboycomputers.com/page2.html#Removing_Malware

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

MightyJoe36 DeleteThis @gmail.com wrote:
> On Sep 30, 2:35 pm, "Unknown" <unkn... DeleteThis @unknown.kom> wrote:
>> You have a nasty virus. You may want to completely uninstall Spybot.
>> Then, if you trust it (I wouldn't) reinstall it.
>
>> For test purposes don't run Spybot for a few weeks.
>
> Thanks. I did uninstall Spybot. I've been running both it and AdAware
> for years without any problems, that is until yesterday when this
> behavior started.
>
> You say I have a nasty virus. Could I have picked up the virus by
> installing Spybot?
>
> Anyway, as I said, I've uninstalled Spybot.
>
> Thanks again,
>
> Joe

It's a bad idea to change the subject line in a message thread. We now
have no idea what problem your reply is referring to.

Brian

<killerb255> wrote in message news:20071081178killerb255@yahoo.com...
> 1) Are you getting a 60-second timer before the shutdown? A timer
> usually means that the shutdown.exe command was executed, usually by
> Blaster (RDP) or Sasser (LSASS).
>
> 2) Are you getting a "Windows is shutting down" message? This means
> that something is actually gracefully shutting down your computer,
> either a hacker having a little too much fun or a UPS or battery
> backup when it's almost out of juice.
>
> 3) Does the system just totally die without warning (no shutdown
> sequence)? This can mean your CPU is overheating. Spybot is very
> CPU-intensive (ESPECIALLY 1.5).
>
> EggHeadCafe - .NET Developer Portal of Choice
> http://www.eggheadcafe.com

<killerb255> wrote in message news:20071081178killerb255@yahoo.com...
> 1) Are you getting a 60-second timer before the shutdown? A timer usually
> means that the shutdown.exe command was executed, usually by Blaster (RDP)
> or Sasser (LSASS).
>
> 2) Are you getting a "Windows is shutting down" message? This means that
> something is actually gracefully shutting down your computer, either a
> hacker having a little too much fun or a UPS or battery backup when it's
> almost out of juice.
>
> 3) Does the system just totally die without warning (no shutdown
> sequence)? This can mean your CPU is overheating. Spybot is very
> CPU-intensive (ESPECIALLY 1.5).
>
> EggHeadCafe - .NET Developer Portal of Choice
> http://www.eggheadcafe.com


WHO are you talking to and about what?

Please note:
This is NOT a chat room and You are NOT posting to a forum run by
Eggheadcafe - you are actually posting to a global Usenet Newsgroup. You
will get a far better experience if you use a newsreader and subscribe to
these groups directly, rather than through Eggheadcafe.

If you must stay with Egghheadcafe then please follow Usenet custom by
quoting the post you are replying to, and replying to the thread.

Thank you.

Gordon

Re: Spybot S&D Shutting Down Windows
Last post 30 September 2007
http://groups.google.com/groups?as_q=&num=10&scoring=r&hl=en&as_epq=&a...q=&as_e

I agree with your sentiments.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Gordon wrote:
> <killerb255> wrote in message news:20071081178killerb255@yahoo.com...
>> 1) Are you getting a 60-second timer before the shutdown? A timer
>> usually means that the shutdown.exe command was executed, usually by
>> Blaster (RDP) or Sasser (LSASS).
>>
>> 2) Are you getting a "Windows is shutting down" message? This means
>> that something is actually gracefully shutting down your computer,
>> either a hacker having a little too much fun or a UPS or battery
>> backup when it's almost out of juice.
>>
>> 3) Does the system just totally die without warning (no shutdown
>> sequence)? This can mean your CPU is overheating. Spybot is very
>> CPU-intensive (ESPECIALLY 1.5).
>>
>> EggHeadCafe - .NET Developer Portal of Choice
>> http://www.eggheadcafe.com
>
>
> WHO are you talking to and about what?
>
> Please note:
> This is NOT a chat room and You are NOT posting to a forum run by
> Eggheadcafe - you are actually posting to a global Usenet Newsgroup.
> You will get a far better experience if you use a newsreader and
> subscribe to these groups directly, rather than through Eggheadcafe.
>
> If you must stay with Egghheadcafe then please follow Usenet custom by
> quoting the post you are replying to, and replying to the thread.
>
> Thank you.