machine keeps restarting

Wish I could help you, I had a similar thing that happened to me, it was a virus! Do you have an anti-virus program?
 
Are you sure avast deleted them and didn't just put them in your fault. Some viruses tells Anti-virus programs, that it is system files, so Avast reads it as a virus but is unable to do anything about it! What operating system are you running? Scan again for viruses, if Avast picks it up again, then you know that the virus is cloning itself, or showing itself as a system file. Incidentally, did you get an anti virus program before or after your problem started?
 
scanning now again.. always had the anti-virus on the machine. I chose the selection to delete the file and then it said that it was deleted.

running windows xp with all the latest updates.... running a scan now and if that does not work going to try and do a system restore to when it was not doing it and see if that helps
 
run a scan with malwarebytes
run a scan with superantispyware
run a online scan with kaspersky or trend or any of the other tier one AV programs
boot into safe mode and check if the problem still happens

format and reinstall!
 
System restore might be the best thing to do. If you format will you lose too much work? If it says deleted, then the thing must be cloning itself, mmmh... you can try scanning and when it picks it up, check where the file destination is, then you can get an idea of where the thing lodges itself and by what name it runs around/
 
Ram modules might be faulty....had the same problem on my old P4
 
ok it is starting again. had it working 100% and this morning it started again. there is nothing on the pc but the bare minimum. I have got Microsoft Security Esstials installed, malwarebytes, an anti virus, spybot search and destroy and they are all coming out clean as if there is nothing wrong
 
its a virus

midkemia said:
run a scan with malwarebytes
run a scan with superantispyware
run a online scan with kaspersky or trend or any of the other tier one AV programs
boot into safe mode and check if the problem still happens

format and reinstall!
Click to expand...

it is a virus, get another antivirus and scan again, get escanner i work with it once and it get all the virus that avast didn`t pick up if its not helping, format and re-install. make sure that that the virus is in the os otherwise you backup could be infected
 
As for that first error,indicates a remote VPN connection is attempting to be established using TLS protocol which requires a SSL certificate which the server doesnt have,try connecting with a protocol that doesn't require it

As for the reboot,post a Hijackthis log here
 
have incoming connections enabled as I vpn into the box and just use the local IP's of the machines there to get into them.

and here is the log for Hijackthis


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:35:43 PM, on 9/1/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\intelxpv_v103\wdm\STacSV.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\rdpclip.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\TeleEye\TeleEye CMS V3 Servers\CMS_Monitor.exe
C:\Program Files\TeleEye\TeleEye CMS V3 Servers\CMSV3Manager.exe
C:\Program Files\TeleEye\TeleEye CMS V3 Servers\IS.exe
C:\Program Files\TeleEye\TeleEye CMS V3 Servers\CMSDBSync.exe
C:\Program Files\TeleEye\TeleEye CMS V3 Servers\VideoServer.exe
C:\Program Files\TeleEye\TeleEye CMS V3 Servers\RecordingServer.exe
C:\Program Files\TeleEye\TeleEye CMS V3 Servers\SS.exe
C:\WINDOWS\system32\logon.scr
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - Global Startup: CMS Monitor.lnk = ?
O4 - Global Startup: CMS V3 Manager.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1269453639625
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1269453626062
O16 - DPF: {9B479D7B-916A-45B0-B042-D42865A60E21} (DvrOcx Control) - http://192.168.1.13/DvrOcx.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{39BBD526-1503-421D-8BC0-A1F47B733C9E}: NameServer = 168.210.2.2,196.14.239.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{39BBD526-1503-421D-8BC0-A1F47B733C9E}: NameServer = 168.210.2.2,196.14.239.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{39BBD526-1503-421D-8BC0-A1F47B733C9E}: NameServer = 168.210.2.2,196.14.239.2
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\intelxpv_v103\wdm\STacSV.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 7130 bytes
 
Yes well I noticed from that error VPN is enabled obviously ;) You just need to not try connecting using L2TP/IPSEC,use PPTP
protocol


Nothing abnormal running on the PC except that TuneUp Utilities

Start -> run ->
Sfc.exe /scannow

Run the PC in safe mode for an hour and see if it restarts again?
 
When I try running SFC it gives me the error you must be an administrator running a console session in order to use the windows system file checker. now how do I get to a console as I am logged in with administrator to the machine
 
That would possibly relate to your viral issue stripping rights off the System accounts,could create a shortcut on the desktop pointing to cmd.exe,then right clicking that and run as administrator?
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X