PC Help needed bad

[James]

Afternoon all, hope your all having a better day than mine!

Looks like i got my virus software too late and computer has gone pete tong.
It had a problem of restarting itself after a few minutes saying something about NT Authority or some crap. I thought i had that sussed as the blaster worm but I scanned for that and it wasn't found. My AVG virus checker keeps finding one particular virus something like SVHost or something but is never able to remove it. I think its always running in background. I could handle all that but latest problem takes piss.

When my computer loads up windows the second my desktop screen appears it immediately restarts itself. It doesn't do this in safe mode. i've also noticed what i think is a new message when the computer is first turned on and is telling you about hardware. I wrote that down, its say "Secondary IDE no 80 conductor cable installed". Is my hardware shagged or is it some kind of virus.

I would really appreciate any help on this as i need my computer badly to do assignments for uni which have to be in by august
____________________
Like shit off a stick

[JonB]

Have you connected anything to the PC recently? Like a digital camera and left the lead in etc...
____________________
Be careful whose advice you buy, but, be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than it?s worth.

[m i k e]

Have you checked out your IDE connections running to your hard drives, if I was you'd i'd run through your hardware making sure all your necessary connections are there.

Mike

[James]

I haven't left any leads in and if there was a connection missing then would it still work in safe mode?
____________________
Like shit off a stick

[m i k e]

Well the main reason why i've said to check your connections, was because I used to have a dodgy connection on one of my hard drives, just so happens that it was my primary drive too. Think I posted about it asking for help, G told me to check my conections because I was getting similar error messages on boot up, but it would occasionally boot up every now and then. I check an IDE lead on the primary drive and it had a quite a dodgy connection, pushed it in more and bingo, problem solved!

Mike

[iheartpie]

could just be ducked hardware, if it automaticaly shuts down could be critical heat, are all your fans goin etc?
____________________
brooooom, BROOOOommmm
https://www.mrnathan.cjb.net

[Frost]

It is most likely a varient of the blaster worm or something similar. unless your virus scanner is updated to look for the newest variant it wont be found. update your virus scanner, find the name of what you have got such as Blaster.f then go tot he microsoft site and get a the patch to remove it and stop it coming back

[James]

Temperature is all fine, ill have a shuffle through my connections when i get home and get back to you
____________________
Like shit off a stick

[mr jamez]

Well running along with the virus theme, go to the avg home page (www.grisoft.com) and download the virus remover tool, gets rid of nasties like blaster etc in safe mode. Their are also removal tools on www.norton.com

[iheartpie]

If its shuttin down as soon as it starts up im assuming you cant update your virus stuff, so just reformat the hard drive, if youve got stuff u really need take it to a specialist, doesnt cost much and they'll get anything you need, otherwise re-format it and reinstall your OS. But yea first check all your connections, + dust can be a little bugger. But what you always have to remember is that computers are little buggers, and there out to get you, iv spent about £1500 on mine and what does it do to show appreciate? nothin! I use it in a way which reduces the life of parts and i have to reformat at least every two months. Keep regular backups!
____________________
brooooom, BROOOOommmm
https://www.mrnathan.cjb.net

[fuzz]

SVCHOST? It's Welchia worm. If your on XP, it copies itself to the C:\Windows\system32\wins\ folder as DLLHOST and SVCHOST. If your running 2000, it's in the C:\winnt\system32\wins\ folder. Delete these files.

Then run regedit from the start menu and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

Delete the entries for RPCPATCH and RPCTFTPD

Then goto https://v4.windowsupdate.microsoft.com to get the RPC vunerability patched (just download all the critical updates)

If a box comes up again with a countdown to shutdown, you can abort by pressing "windows key + R" then type shutdown -a

[fuzz]

[fuzz]

[iheartpie]

CGI, 3D graphics etc.
____________________
brooooom, BROOOOommmm
https://www.mrnathan.cjb.net

[Mr Pants!]

Sounds like the Sasser virus to me.

That was all over the news saying it will reboot your PC constantly.

https://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

You will have to have a dig to find the removal process if you have that.
____________________
Mr Pants! (Alex or Al)
Its better to burn out, than to fade away....

[fuzz]

It's not sasser. Sasser affects LSASS.exe (hence sasser) not svchost.exe. Sasser shows itself as avserve.exe in the system processes. If you do see this, end the process. Also look out for msblast.exe, mslaugh.exe, mssss.exe, csrsss.exe (note three s not two) and systerm.exe. If you have any of these, end them immediately.

Open regedit and locate HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Run\ and delete the subkeys which relate to the processes you just killed.
Also check HKEY_LOCAL_MACHINE\Software\Windows\Currentversion\RunServices\ and do the same here.

[Demonic69]

The 80 cable is for HDD's. If you've only got CD/DVD on your secondary Channel you'll be fine.
____________________
Back on a Blade. Just feels so right.

[carvell]

[Demonic69]

I dunno, I install about 15 DVD writers a week and not had a problem yet. They're all 8x + and -
____________________
Back on a Blade. Just feels so right.

[Maccy]

If your pc is rebooting. Then is more then likely you dont have the sasser virus. but you dont have all the needed updates in order to stop this problem. If someone tries to send the virus to your pc. It causes the RPC service on your machine to crash. which then results in a Pc reboot. This can be fixed by 2 methods. Either go to Windows Update and download every patch you can find or this link https://www.microsoft.com/downloads/details.aspx?FamilyID=3549ea9e-da3f-43b9-a4f1-af243b6168f3&displaylang=en

Had a quick look on the mircosoft site as well found this page that seems pretty good as well

https://www.microsoft.com/security/incident/sasser.mspx

Hope it helps
____________________
Its better to remain silent and be thought of as a fool then to open your mouth and remove all doubt

[Mr Pants!]

Rebuild it...................

Simple................

LOL
____________________
Mr Pants! (Alex or Al)
Its better to burn out, than to fade away....

[BIKELESS STEVE]

If you've still got access to the internet visit Mcaffee website and download STINGER.EXE. Reboot the pc into maintenance mode (f8 on bootup), run stinger - it'll fix all the current viruses (SASSER, MYDOOM, varients of blaster) - then reboot again - that'll fix it.
Had exactly the same problem, job done. Then get yourself a decent antivirus product like Norton and keep it updated, AVG is free! - probably a good reason for that!

[zzr_peak]

sounds very unlikely to be a hardware problem! it would be something to do with a virus you have! something like blaster. it dose'nt blue screen does it?

[Shimmydude]

Back up all the stuff you want from your computer, format the drive, and reinstall Windows. That’s what I would do. You can spend weeks trying to fix a problem and in the end you find you can't. There are far too many variations of WORM's, and TROJAN's and other viruses that screw up you’re computer and if the anti-virus companies haven't picked up on it yet, you’re stuffed.

So by the time you have found a half solution to the problem, you could have formatted, reinstalled and replaced all your items back onto the system. Yes, there is a possibility the virus could be amongst the files you backed up but more often than not, the virus only infects key system files usually found in the Windows, or Program Files.

Try that, if you want of course. Maybe another solution but thought it worth mentioning.
____________________

[mchaggis]

Just going off on a tangent, but have you installed CD burning software lately? I had a friends computer doing the same things as yours when Nero broke. Tried all sorts of things to fix it, but kept missing the software. Uninstalled it, reinstalled it and the random rebooting stopped happening. It's just an idea, but perhaps it's what's wrong.

edit: Needless to say, if it's not a hardware problem, reinstalling Windows and keeping an eye on what goes onto the computer and what happens when you install things would probably do. If in doubt with Windows, reinstall... Pre- win2k was a lot easier though.