services.exe error trying to shutdown cmputer after boot up

  • Thread starter Thread starter Steve Miller
  • Start date Start date
S

Steve Miller

Guest
Hello ng,



Services.exe was trying to shutdown my computer after boot up. Could someone

please help?



Kind regards,

Steve
 
On Mar 13, 2:32 pm, "Steve Miller" wrote:

> Hello ng,

>

> Services.exe was  trying to shutdown my computer after boot up. Could someone

> please help?

>

> Kind regards,

> Steve



Greetings sm,



To prevent chasing the proverbial wild goose, please perform the

following, then we can properly investigate if you still have issues:



Download, install, update and do a full scan with these free malware

detection programs:



Malwarebytes (MBAM): http://malwarebytes.org/

SUPERAntiSpyware: (SAS): http://www.superantispyware.com/



They can be uninstalled later if desired.



To eliminate questions and guessing, please provide additional

information about your system.



Click Start, Run and in the box enter:



msinfo32



Click OK, and when the System Summary info appears, click Edit, Select

All, Copy and then paste the information back here.



There will be some personal information (like System Name and User

Name), and whatever appears to be private information to you, just

delete it from the pasted information.
 
From your post's headers: Outlook Express 6.00.2900.5512



First tell us why your WinXP SP3 computer isn't fully-patched at Windows

Update?



Then tell us...



What anti-virus application or security suite is installed and is your

subscription current? What anti-spyware applications (other than Defender)?

What third-party firewall (if any)?



Has a(another) Norton or McAfee application ever been installed on the

computer (e.g., a free-trial version that came preinstalled when you bought

it)?

--

~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Client - since 2002





Steve Miller wrote:

> Services.exe was trying to shutdown my computer after boot up. Could

> someone please help?
 
"Jose" schrieb im Newsbeitrag news:24db3ba7-bd44-4681-8664-30de783e3d48@t20g2000yqe.googlegroups.com...

On Mar 13, 2:32 pm, "Steve Miller" wrote:

> Hello ng,

>

> Services.exe was trying to shutdown my computer after boot up. Could someone

> please help?

>

> Kind regards,

> Steve



Greetings sm,



To prevent chasing the proverbial wild goose, please perform the

following, then we can properly investigate if you still have issues:



Download, install, update and do a full scan with these free malware

detection programs:



Malwarebytes (MBAM): http://malwarebytes.org/

SUPERAntiSpyware: (SAS): http://www.superantispyware.com/



They can be uninstalled later if desired.



To eliminate questions and guessing, please provide additional

information about your system.



Click Start, Run and in the box enter:



msinfo32



Click OK, and when the System Summary info appears, click Edit, Select

All, Copy and then paste the information back here.



There will be some personal information (like System Name and User

Name), and whatever appears to be private information to you, just

delete it from the pasted information.





Hi Mr,Ease, the computer runs Windows XP Media Center 32 bit. The Windows

copy was genuine.



The error was Winsows related, not caused by a virus or malware or there like, I

think. I had it before, and added an other user, Now it's being back.



Other symptoms are, the Windows update website dosen't work, as well as the

acticvation program. Pretty bad I think.



Steve
 
Steve Miller wrote:



> The error was Winsows related, not caused by a virus or malware or there

> like, I think. I had it before, and added an other user, Now it's being

> back.

>

> Other symptoms are, the Windows update website dosen't work...



And you don't think this is still the work of "a virus or malware"

infection?!
 
"PA Bear [MS MVP]" schrieb im Newsbeitrag news:%23Sx9$quwKHA.1692@TK2MSFTNGP04.phx.gbl...

> From your post's headers: Outlook Express 6.00.2900.5512

>

> First tell us why your WinXP SP3 computer isn't fully-patched at Windows Update?

>

> Then tell us...

>

> What anti-virus application or security suite is installed and is your subscription current? What anti-spyware applications

> (other than Defender)? What third-party firewall (if any)?

>

> Has a(another) Norton or McAfee application ever been installed on the computer (e.g., a free-trial version that came preinstalled

> when you bought it)?

> --

> ~Robear Dyer (PA Bear)

> MS MVP-IE, Mail, Security, Windows Client - since 2002

>

>

> Steve Miller wrote:

>> Services.exe was trying to shutdown my computer after boot up. Could

>> someone please help?

>



Hi PA Bear, I have AVIRA installed.



Steve
 
Search & Destroy didn't find anything as well.
 
And...?



Steve Miller wrote:

> "PA Bear [MS MVP]" schrieb im Newsbeitrag

> news:%23Sx9$quwKHA.1692@TK2MSFTNGP04.phx.gbl...

>> From your post's headers: Outlook Express 6.00.2900.5512

>>

>> First tell us why your WinXP SP3 computer isn't fully-patched at Windows

>> Update?

>>

>> Then tell us...

>>

>> What anti-virus application or security suite is installed and is your

>> subscription current? What anti-spyware applications (other than

>> Defender)? What third-party firewall (if any)?

>>

>> Has a(another) Norton or McAfee application ever been installed on the

>> computer (e.g., a free-trial version that came preinstalled when you

>> bought it)? --

>> ~Robear Dyer (PA Bear)

>> MS MVP-IE, Mail, Security, Windows Client - since 2002

>>

>>

>> Steve Miller wrote:

>>> Services.exe was trying to shutdown my computer after boot up. Could

>>> someone please help?

>>

>

> Hi PA Bear, I have AVIRA installed.

>

> Steve
 
Pretty good, no malware or something. What do yout hink?
 
To whom are you replying? Without quoting the posts you're replying to, WTF

knows?



Steve Miller wrote:

> Pretty good, no malware or something. What do yout hink?
 
I mean, I think I don't have got any viruses, malware or adware or something

stored to my hard drive. I'm pretty much after this and I do notice if something

unusual goes on, normally.



What I did was that I moved files to AVIRAS Quarantine a while back, since

these were indexed by AVIRA to containing suspicious code.



I'm in the process of checking these files.



P.S. Please don't scream at me, I'll start weeping.



Steve
 
PA Bear,



the files are being:



C:\Windows\system32\drivers\9e7ad05a.sys



C:\Windows\system32\gacaq32.dll

C:\Windows\system32\gasac32.dll

C:\Windows\system32\spnmld.dll



Could the deletion of these files have caused the error message at boot up? I didn't see an

immediate correlation.



Otherwise I would have restored them already.



Steve
 
Steve Miller wrote:

> PA Bear,

>

> the files are being:

>

> C:\Windows\system32\drivers\9e7ad05a.sys

>

> C:\Windows\system32\gacaq32.dll

> C:\Windows\system32\gasac32.dll

> C:\Windows\system32\spnmld.dll

>

> Could the deletion of these files have caused the error message at boot up? I didn't see an

> immediate correlation.

>

> Otherwise I would have restored them already.

>

> Steve



It's all malware.. that's why the names are random letter combinations.

They were quarantined by your a/v software, but the references to the

files may not have been removed from the registry.



Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,

type the name of a file into the search pane. Click "Find Next", and

when located, list what you find in a post. Press F3 to continue the

search, change the filename and repeat till all references are found.



You can delete most of them, but the file 9e7ad05a.sys and any of the

filenames, if tacked onto the back of, let's say, Explorer.exe, need to

handled carefully.



--

Joe =o)
 
The convention here is to quote the entire post to which you're replying.

Since you haven't been doing so, I have no idea WTF you're talking about,

Steve.



And your computer still isn't fully patched at Windows Update.





You are seeing the effects of a hijackware infection!



NB: If you had no anti-virus application installed or the subscription had

expired *when the machine first got infected* and/or your subscription has

since expired and/or the machine's not been kept fully-patched at Windows

Update, don't waste your time with any of the below: Format & reinstall

Windows. A Repair Install will NOT help!



Microsoft PCSafety provides home users (only) with no-charge support in

dealing with malware infections such as viruses, spyware (including unwanted

software), and adware.

https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1



Also available via the Consumer Security Support home page:

https://consumersecuritysupport.microsoft.com/



Otherwise...



1. See if you can download/run the MSRT manually:

http://www.microsoft.com/security/malwareremove/default.mspx



NB: Run the FULL scan, not the QUICK scan! You may need to download the

MSRT on a non-infected machine, then transfer MRT.EXE to the infected

machine and rename it to SCAN.EXE before running it.



2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)

in Safe Mode with Networking, if need be:

http://onecare.live.com/site/en-us/center/howsafe.htm



2b. Vista or Win7=> Run this scan instead:

http://onecare.live.com/site/en-us/center/whatsnew.htm



3. Now run a thorough check for hijackware, including posting requested logs

in an appropriate forum, not here. DO NOT SKIP THIS STEP!!



Checking for/Help with Hijackware:

• http://mvps.org/winhelp2002/unwanted.htm

• http://inetexplorer.mvps.org/tshoot.html

• http://www.mvps.org/sramesh2k/Malware_Defence.htm

• http://www.elephantboycomputers.com/page2.html#Removing_Malware



**Chances are you will need to seek expert assistance in

http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,

http://www.spywarewarrior.com/viewforum.php?f=5,

http://www.dslreports.com/forum/cleanup,

http://www.bluetack.co.uk/forums/index.php,

http://aumha.net/viewforum.php?f=30 or other appropriate forums.**



If these procedures look too complex - and there is no shame in admitting

this isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.



--

~PA Bear





Steve Miller wrote:

> PA Bear,

>

> the files are being:

>

> C:\Windows\system32\drivers\9e7ad05a.sys

>

> C:\Windows\system32\gacaq32.dll

> C:\Windows\system32\gasac32.dll

> C:\Windows\system32\spnmld.dll

>

> Could the deletion of these files have caused the error message at boot

> up?

> I didn't see an immediate correlation.

>

> Otherwise I would have restored them already.

>

> Steve
 
"Elmo" schrieb im Newsbeitrag news:uXMvdF5wKHA.4492@TK2MSFTNGP05.phx.gbl...

> Steve Miller wrote:

>> PA Bear,

>>

>> the files are being:

>>

>> C:\Windows\system32\drivers\9e7ad05a.sys

>>

>> C:\Windows\system32\gacaq32.dll

>> C:\Windows\system32\gasac32.dll

>> C:\Windows\system32\spnmld.dll

>>

>> Could the deletion of these files have caused the error message at boot up? I didn't see an

>> immediate correlation.

>>

>> Otherwise I would have restored them already.

>>

>> Steve

>

> It's all malware.. that's why the names are random letter combinations.

> They were quarantined by your a/v software, but the references to the

> files may not have been removed from the registry.

>

> Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,

> type the name of a file into the search pane. Click "Find Next", and

> when located, list what you find in a post. Press F3 to continue the

> search, change the filename and repeat till all references are found.

>

> You can delete most of them, but the file 9e7ad05a.sys and any of the

> filenames, if tacked onto the back of, let's say, Explorer.exe, need to

> handled carefully.

>

> --

> Joe =o)





Hello Joe, none of the files names were found searching regedit.



Steve
 
Hello PA Bear,



thank you for your reply. I will quote the text I reply to futurely. Well, if it's not being an

infection, could I transmit my Windows XP credentials to MS again?



I mean , I could try such first before it was reset by an infection, right?



For a while, the windows update website and the activation tool don't work either.

Also, as long as I ignore to click on sending an error report to MS or not, the computer

does not shut down.



When I would click some button in this error message window, an other small window

pops up saying how many seconds are being left before shutdown. Then the computer

will shut down after 45 seconds, I think.



All of the Windows are pretty much genuine Microsoft, I would say. Would a virus do

that? I'm puzzled.



I'd like to try to fix the activation and the updates, first.



Steve
 
> ...I will quote the text I reply to futurely.



And yet...



PS: Ur spiel chukkers broke two





Steve Miller wrote:

> Hello PA Bear,

>

> thank you for your reply. I will quote the text I reply to futurely. Well,

> if it's not being an infection, could I transmit my Windows XP credentials

> to MS again?

> I mean , I could try such first before it was reset by an infection,

> right?

>

> For a while, the windows update website and the activation tool don't work

> either. Also, as long as I ignore to click on sending an error report to

> MS or not,

> the computer does not shut down.

>

> When I would click some button in this error message window, an other

> small

> window pops up saying how many seconds are being left before shutdown.

> Then the

> computer will shut down after 45 seconds, I think.

>

> All of the Windows are pretty much genuine Microsoft, I would say. Would a

> virus do that? I'm puzzled.

>

> I'd like to try to fix the activation and the updates, first.

>

> Steve
 
On Mar 13, 5:44 pm, "Steve Miller" wrote:

> Pretty good, no malware or something. What do yout hink?



You should have done what Jose suggested earlier.



When that exercise is done, then you can fix any remaining issues
 
"Jose" schrieb im Newsbeitrag news:97c36eac-56c1-4b85-ad41-ce57ec98b39e@z4g2000yqa.googlegroups.com...

On Mar 13, 5:44 pm, "Steve Miller" wrote:

> Pretty good, no malware or something. What do yout hink?



You should have done what Jose suggested earlier.



When that exercise is done, then you can fix any remaining issues





I'm sorry I'm quite busy at the moment, so I don't have the time to be dealing with the fix.

..
 
"PA Bear [MS MVP]" schrieb im Newsbeitrag news:eMBafi7wKHA.4492@TK2MSFTNGP05.phx.gbl...

>> ...I will quote the text I reply to futurely.

>

> And yet...

>

> PS: Ur spiel chukkers broke two

>

>

> Steve Miller wrote:

>> Hello PA Bear,

>>

>> thank you for your reply. I will quote the text I reply to futurely. Well,

>> if it's not being an infection, could I transmit my Windows XP credentials

>> to MS again?

>> I mean , I could try such first before it was reset by an infection, right?

>>

>> For a while, the windows update website and the activation tool don't work

>> either. Also, as long as I ignore to click on sending an error report to MS or not,

>> the computer does not shut down.

>>

>> When I would click some button in this error message window, an other small

>> window pops up saying how many seconds are being left before shutdown. Then the

>> computer will shut down after 45 seconds, I think.

>>

>> All of the Windows are pretty much genuine Microsoft, I would say. Would a

>> virus do that? I'm puzzled.

>>

>> I'd like to try to fix the activation and the updates, first.

>>

>> Steve

>



PA bear, thanks you for your renewed reply. Please let ma say, I think I'm

guessing what you mean. But, be assured I didn't vote to be in this situation,

I didn't choose to be in this situation as well as to be in this position never was

being my personal wish or desire.



I simply can't be playing wild man about it, all day and night long. I'm only

trying, which was rightful I think.



Steve
 
You must log in or register to reply here.
Back
Top