services.exe error trying to shutdown cmputer after boot up

  • Thread starter Thread starter Steve Miller
  • Start date Start date
S

Steve Miller

Hello ng,

Services.exe was trying to shutdown my computer after boot up. Could someone
please help?

Kind regards,
Steve
 
Hello ng,

Services.exe was  trying to shutdown my computer after boot up. Could someone
please help?

Kind regards,
Steve
Click to expand...

Greetings sm,

To prevent chasing the proverbial wild goose, please perform the
following, then we can properly investigate if you still have issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

To eliminate questions and guessing, please provide additional
information about your system.

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste the information back here.

There will be some personal information (like System Name and User
Name), and whatever appears to be private information to you, just
delete it from the pasted information.
 
From your post's headers: Outlook Express 6.00.2900.5512

First tell us why your WinXP SP3 computer isn't fully-patched at Windows
Update?

Then tell us...

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a(another) Norton or McAfee application ever been installed on the
computer (e.g., a free-trial version that came preinstalled when you bought
it)?
 
Hello ng,

Services.exe was trying to shutdown my computer after boot up. Could someone
please help?

Kind regards,
Steve
Click to expand...

Greetings sm,

To prevent chasing the proverbial wild goose, please perform the
following, then we can properly investigate if you still have issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

To eliminate questions and guessing, please provide additional
information about your system.

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste the information back here.

There will be some personal information (like System Name and User
Name), and whatever appears to be private information to you, just
delete it from the pasted information.


Hi Mr,Ease, the computer runs Windows XP Media Center 32 bit. The Windows
copy was genuine.

The error was Winsows related, not caused by a virus or malware or there like, I
think. I had it before, and added an other user, Now it's being back.

Other symptoms are, the Windows update website dosen't work, as well as the
acticvation program. Pretty bad I think.

Steve
 
Steve Miller wrote:
The error was Winsows related, not caused by a virus or malware or there
like, I think. I had it before, and added an other user, Now it's being
back.

Other symptoms are, the Windows update website dosen't work...
Click to expand...

And you don't think this is still the work of "a virus or malware"
infection?!
 
PA Bear said:
From your post's headers: Outlook Express 6.00.2900.5512

First tell us why your WinXP SP3 computer isn't fully-patched at Windows Update?

Then tell us...

What anti-virus application or security suite is installed and is your subscription current? What anti-spyware applications
(other than Defender)? What third-party firewall (if any)?

Has a(another) Norton or McAfee application ever been installed on the computer (e.g., a free-trial version that came preinstalled
when you bought it)?
Click to expand...

Hi PA Bear, I have AVIRA installed.

Steve
 
I mean, I think I don't have got any viruses, malware or adware or something
stored to my hard drive. I'm pretty much after this and I do notice if something
unusual goes on, normally.

What I did was that I moved files to AVIRAS Quarantine a while back, since
these were indexed by AVIRA to containing suspicious code.

I'm in the process of checking these files.

P.S. Please don't scream at me, I'll start weeping.

Steve
 
PA Bear,

the files are being:

C:\Windows\system32\drivers\9e7ad05a.sys

C:\Windows\system32\gacaq32.dll
C:\Windows\system32\gasac32.dll
C:\Windows\system32\spnmld.dll

Could the deletion of these files have caused the error message at boot up? I didn't see an
immediate correlation.

Otherwise I would have restored them already.

Steve
 
Steve said:
PA Bear,

the files are being:

C:\Windows\system32\drivers\9e7ad05a.sys

C:\Windows\system32\gacaq32.dll
C:\Windows\system32\gasac32.dll
C:\Windows\system32\spnmld.dll

Could the deletion of these files have caused the error message at boot up? I didn't see an
immediate correlation.

Otherwise I would have restored them already.

Steve
Click to expand...

It's all malware.. that's why the names are random letter combinations.
They were quarantined by your a/v software, but the references to the
files may not have been removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of a file into the search pane. Click "Find Next", and
when located, list what you find in a post. Press F3 to continue the
search, change the filename and repeat till all references are found.

You can delete most of them, but the file 9e7ad05a.sys and any of the
filenames, if tacked onto the back of, let's say, Explorer.exe, need to
handled carefully.
 
The convention here is to quote the entire post to which you're replying.
Since you haven't been doing so, I have no idea WTF you're talking about,
Steve.

And your computer still isn't fully patched at Windows Update.

<canned>
You are seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
</canned>
 
In
PA Bear said:
The convention here is to quote the entire post to which you're
replying. Since you haven't been doing so, I have no idea WTF you're
talking about, Steve.
Click to expand...

No, the convention on Usenet (a.k.a. "here") is to quote the _relevant_
portion of the post to which one is responding, then respond in sequence so
that others may follow the conversation in a logical order.

Top-posting as you do means that _nobody_ has any idea WTF you're talking
about unless they go to a great deal of useless trouble.

Usenet has been around since the 1980's ... if you're unwilling or unable to
follow the conventions of replying, then just stay the **** off Usenet and
use your cutesy little adolescent chat forums.
 
Elmo said:
It's all malware.. that's why the names are random letter combinations.
They were quarantined by your a/v software, but the references to the
files may not have been removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of a file into the search pane. Click "Find Next", and
when located, list what you find in a post. Press F3 to continue the
search, change the filename and repeat till all references are found.

You can delete most of them, but the file 9e7ad05a.sys and any of the
filenames, if tacked onto the back of, let's say, Explorer.exe, need to
handled carefully.
Click to expand...


Hello Joe, none of the files names were found searching regedit.

Steve
 
Hello PA Bear,

thank you for your reply. I will quote the text I reply to futurely. Well, if it's not being an
infection, could I transmit my Windows XP credentials to MS again?

I mean , I could try such first before it was reset by an infection, right?

For a while, the windows update website and the activation tool don't work either.
Also, as long as I ignore to click on sending an error report to MS or not, the computer
does not shut down.

When I would click some button in this error message window, an other small window
pops up saying how many seconds are being left before shutdown. Then the computer
will shut down after 45 seconds, I think.

All of the Windows are pretty much genuine Microsoft, I would say. Would a virus do
that? I'm puzzled.

I'd like to try to fix the activation and the updates, first.

Steve
 
...I will quote the text I reply to futurely.

And yet...

PS: Ur spiel chukkers broke two
 
Pretty good, no malware or something. What do yout hink?
Click to expand...

You should have done what Jose suggested earlier.

When that exercise is done, then you can fix any remaining issues
 
Pretty good, no malware or something. What do yout hink?
Click to expand...

You should have done what Jose suggested earlier.

When that exercise is done, then you can fix any remaining issues


I'm sorry I'm quite busy at the moment, so I don't have the time to be dealing with the fix.
..
 
Back
Top