Spybot S&D Shutting Down Windows

  • Thread starter Thread starter MightyJoe36
  • Start date Start date
M

MightyJoe36

Whenever I run Spybot Search and Destroy (Check for Problems), it gets
about halfway through the program, then my computer shuts off.

I've run a virus scan with Zone Alarm, cleaned out my registry, and
run AdAware. I upgraded to Spybot 1.5, same thing.

I'm running Windows XP.

Any suggestions?

Thanks in advance,

Joe
 
You have a nasty virus. You may want to completely uninstall Spybot. Then,
if you trust it (I wouldn't) reinstall it.
For test purposes don't run Spybot for a few weeks.
 
You have a nasty virus. You may want to completely uninstall Spybot. Then,
if you trust it (I wouldn't) reinstall it.
Click to expand...
For test purposes don't run Spybot for a few weeks.
Click to expand...

Thanks. I did uninstall Spybot. I've been running both it and AdAware
for years without any problems, that is until yesterday when this
behavior started.

You say I have a nasty virus. Could I have picked up the virus by
installing Spybot?

Anyway, as I said, I've uninstalled Spybot.

Thanks again,

Joe
 
No, it's not a conflict. Note:
"
LavaSoft AdAware [link]
If you have the AdAware option to scan inside archives enabled,
AdAware may find files in the Spybot-S&D folder. Spybot-S&D does not contain
any spyware, but it creates backups of everything you fix (until you remove
those backups from the Recovery list), and AdAware complains about these
backups. You can safely ignore these backups found by AdAware.

"

Remove any backups from the recovery list you might have saved, as mentioned
above, and see if the problem goes away. All that happens is it sees
something in the backup as a virus and reports it. That's not going to
crash anything; just sends a false report.

Pop`
 
I take your point.


--
Regards.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
No, it's not a conflict. Note:
"
LavaSoft AdAware [link]
If you have the AdAware option to scan inside archives enabled,
AdAware may find files in the Spybot-S&D folder. Spybot-S&D does not
contain any spyware, but it creates backups of everything you fix
(until you remove those backups from the Recovery list), and AdAware
complains about these backups. You can safely ignore these backups
found by AdAware.
"

Remove any backups from the recovery list you might have saved, as
mentioned above, and see if the problem goes away. All that happens
is it sees something in the backup as a virus and reports it. That's
not going to crash anything; just sends a false report.

Pop`

Spybot Search and Destroy and Ad-aware may conflict. I noticed it on
one of my three computers.
http://www.safer-networking.org/en/compatibility/adaware.html
Click to expand...
Click to expand...
 
[email protected] said:
Thanks. I did uninstall Spybot. I've been running both it and AdAware
for years without any problems, that is until yesterday when this
behavior started.

You say I have a nasty virus. Could I have picked up the virus by
installing Spybot?

Anyway, as I said, I've uninstalled Spybot.

Thanks again,

Joe
Click to expand...

Joe,
Go through these cleaning steps to see or get a clear opinion on how
clean your machine is:
= Click Start >> Control Panel>>Network and Internet Connections >> Double
click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced.
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.


Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2.... And also for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm

Run a scan from here on-line:
http://www.sophos.com
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
Download the FileMon to see the Running Processes in realtime from here:

http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx
Or Process Explorer :
http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx

Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html

HTH.
nass
 
Pop`,
The OP did n't say He/She when running Ad-Aware they have the problem.
He/She said when Running Spybot S&D it stop in Half way and freeze the
Operating system.
This can indicate either some files in SpyBot structure been horked or the
system been compromised.
HTH.
nass
----
www.nasstec.co.uk

Poprivet said:
No, it's not a conflict. Note:
"
LavaSoft AdAware [link]
If you have the AdAware option to scan inside archives enabled,
AdAware may find files in the Spybot-S&D folder. Spybot-S&D does not contain
any spyware, but it creates backups of everything you fix (until you remove
those backups from the Recovery list), and AdAware complains about these
backups. You can safely ignore these backups found by AdAware.

"

Remove any backups from the recovery list you might have saved, as mentioned
above, and see if the problem goes away. All that happens is it sees
something in the backup as a virus and reports it. That's not going to
crash anything; just sends a false report.

Pop`

Spybot Search and Destroy and Ad-aware may conflict. I noticed it on
one of my three computers.
http://www.safer-networking.org/en/compatibility/adaware.html
Click to expand...
Click to expand...
 
Pop`,
The OP did n't say He/She when running Ad-Aware they have the problem.
He/She said when Running Spybot S&D it stop in Half way and freeze the
Operating system.
This can indicate either some files in SpyBot structure been horked or the
system been compromised.
HTH.
nass
Click to expand...

Actually, it's not freezing the OS, it's shutting down the computer.

I already uninstalled SpyBot. Going to try some of the other things as
well to see if there's a virus in there somewhere. I ran the virus
checker in Zone Alarm, but it turned up nothing.

Thanks all for the tips,

Joe
 
It's a bad idea to change the subject line in a message thread. We now
have no idea what problem your reply is referring to.

Brian
 
1) Are you getting a 60-second timer before the shutdown? A timer usually
means that the shutdown.exe command was executed, usually by Blaster (RDP)
or Sasser (LSASS).

2) Are you getting a "Windows is shutting down" message? This means that
something is actually gracefully shutting down your computer, either a
hacker having a little too much fun or a UPS or battery backup when it's
almost out of juice.

3) Does the system just totally die without warning (no shutdown
sequence)? This can mean your CPU is overheating. Spybot is very
CPU-intensive (ESPECIALLY 1.5).

EggHeadCafe - .NET Developer Portal of Choice
http://www.eggheadcafe.com
Click to expand...


WHO are you talking to and about what?

Please note:
This is NOT a chat room and You are NOT posting to a forum run by
Eggheadcafe - you are actually posting to a global Usenet Newsgroup. You
will get a far better experience if you use a newsreader and subscribe to
these groups directly, rather than through Eggheadcafe.

If you must stay with Egghheadcafe then please follow Usenet custom by
quoting the post you are replying to, and replying to the thread.

Thank you.
 
Gerry said:
Gordon
I agree with your sentiments.
Click to expand...

I've tried to have a conversation with the owners of EggHeadCafe in the past
over the fact that they are leaching off the MS newsgroups and that they
should inform their members of this, but they went into denial.
I have to say that the incidents of orphaned posts with no quoting from that
site seems to have dramatically decreased recently...
 
Back
Top