Printable View
for the past few weeks now every 10 minutes a window pop's up, and it says something along the lines of "other users on on, are u sure u want to shut down...yes or no" almost EVERY 10 minutes, and it gets reall anyoing. also, if no one else is loged on( I have windows XP) it will just automaticly shut down
i scaned my whole computer for virsus, and none are present.
dose anyone know whats going on here?!?! please help
thanks a lot
.. deleted ..
ever heard of
Adaware
Spybot search and destroy
also, did you turn off messanger in Xp services?
yeah, i do have addaware, and when i run it, should i jsut go ahead and dealeat or quarinte everyting in there, or could that cause more trouble
no trouble ...just delete every spyware it finds ;)
cool thanks, i was wondering, becuase i didn't know what some of it was, and i dind't wanna *** anything up
Certainly the first step is to check for and remove ad-ware. However, it seems to me that it could be other things as well. If running a removal program doesn't take care of it, let us know and provide some more detail.
just a stab in the dark...search for sub7 too..., I could be terribly wrong...but sum1 could also be phuckin with you.
I have a couple of questions.Quote:
Originally posted here by theyortiscool
for the past few weeks now every 10 minutes a window pop's up, and it says something along the lines of "other users on on, are u sure u want to shut down...yes or no" almost EVERY 10 minutes, and it gets reall anyoing. also, if no one else is loged on( I have windows XP) it will just automaticly shut down
When this happens, are you the only one logged in ? or are you using the 'fast user switching' utility in XP ?
It sounds to me you have been compromised if this happens when you are the only logged in.
Further, are you running a firewall ? you definatly should. Here are some free ones:
sygate
zone-alarm
outpost
You should also try to search for possible trojans on your system using something like:
The Cleaner or
Tauscan
I hope this can be of any help, feel free to ask if you have more questions.
Buenos Dias
noODle
Something that nobody else seems to have addressed is:and it sounds like you aren't hitting the shut down button or anything...it's just trying to shut down all on it's own. This would be more than just a problem of having more than one active account.....actually this could be one of a million things so I can't really give you an answer but here's a question for you: does this seem to be tied to anything else? Like, does it do it every time you run a specific program? There could be some kind of script (more like an auto-executing shortcut...) that somebody put on there as a joke that would make it try and shut down without any warning every 10 min....I've done something similar to that to a friend's computer as a joke. If this were the case then I doubt that ad-aware or a firewall could stop it. You'd have to talk to the person that had access to your computer right before it started acting up.Quote:
every 10 minutes a window pop's up, and it says something along the lines of "other users on on, are u sure u want to shut down...yes or no" almost EVERY 10 minutes
Definatly delete anything SpyBot finds, only things that may stop working are applications that have adware in them like kazza and such. You may want to check your registry's Run and Run Services (if win98) to see what is starting on boot found at: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\ and in HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Current Version\. Also check your Startup folder under the start menu both for the current user and All Users. Research any wierd files you may have in these places.
(theyoritscool) <- the person, im at a friends house:::: this seems to happen to me whenever i run internet explorer, so i try to avoid it at all cost, and whenver i log on, i have to log on under "guest" so it dosn't automaticly shut me off, becuase when 2 or more ppl are on, it give me that pop up
ok you can try this .....go to run- >type in msconfig ....go to Startup and click on Disable All ... then when it askes you if you want to restart click restart .... if that worked you can still do the same and check which program you want to start when your computer boots ....
The message is most likely being generated by your system when it is being told to shut down... It happens when someone or something has attempted to connect to your computer. Do you have any folders shared on your computer? Also do you have KaZaA or anything like that on your computer??? If you do and you have files shared and KaZaA autostarts when your computer starts up that could be the reason for the message. Have you tried turning on your computer with out it connected to any sort of cable modem or LAN... and just let it sit to see what hapens?? My guess would be that it shuts down about every 10 min with out the message. If that happens the next step would be to install a firewall and see what is trying to connect to your computer and or trying to send information out...
Have you done a windows update if yes That might be the cause. I would try restoring it to a time before all the problems started and see if that works
are you connected to the internet when this happens and do you have a dsl/cable connection?
if you do just to prove it to yourself and see who's doing it:
when this happens of course click no and go to a command prompt and run netstat. better still (if its remote) search google for a program called 'iptools'. it has a netstat program that runs in a gui and constantly updates itself so you wont 'miss the call'.
there's also a tool from systernals.com called psloggedon:
C:\>psloggedon
PsLoggedOn v1.21 - Logon Session Displayer
Copyright (C) 1999-2000 Mark Russinovich
SysInternals - www.sysinternals.com
Users logged on locally:
7/23/2003 1:05:40 AM NSA172\tedob1
No one is logged on via resource shares.
tell us what you find that will be most enlightening
thanks for all the advice, and yes i am connected to the internet, and i do have kazaa, but i'm not currently sharing my files. i'll try out that systernals.com site, thanks
Do yourself a favor and dump Kazaa. I read, and hear from so many ppl. about problems relating to this proggie. While some ppl. using it with generally good intentions, so many are not. I wish you the best of luck in solving your problem bro.
P:
i ran ad-awaware, and it found 109 things, so i deleated them all or quarentined them, and the problem still occurs
It might be time to plan a re-install.Quote:
Originally posted here by theyortiscool
i ran ad-awaware, and it found 109 things, so i deleated them all or quarentined them, and the problem still occurs
Make sure that you get yourself a firewall, there are plenty listed around here and install it before connecting your PC back to the net.
i have a firewall, norton, and i also ran a full system virus scan, still nothing. i would use THECLEANER, but i previusly used it, and its a free 30days, and it won't let me 'try' it again for another 30 days. but thanks to everyone here, u've been such a help to me, if anyone has more info, or suggestions please feel free to post it, and help me out.
thanks again
Are you logging security events, such as successful logons? If not, you might turn it on and look at the events near one of these system messages.
theyortiscool it sure sounds to me like someone is using the remote shutdown utility. one comes with nt utils pack, systernals has one and one can easily be made using WMI. If it was a problem with the system i dont think it wouldn't give you that message. change all your passwords including that of the administrator account then check your firewall settings. make sure port 135 isn't allowed in. this is the RPC port the shutdown util uses.
OKAY my friend.............I am not an expert in this area, but I would suggest that you try "Webroot Spy Sweeper", to check out any spyware you might have (I also use adaware and spybot, but suggest you find this other one as well).......then find the PC-cillin website and run their housecall on your system. This should give you the confidence that it is not malware.
Then go into your BIOS setup and switch off any powersaving crap or whatever.
Go into settings, and get rid of any screensavers (screensaver + antivirus = fun), and kill any powersaving options....set it to "never" and "always on"
I bet you find one of the settings is ten minutes :D
Now that we have ringfenced it, try rebooting.
If this does not work...go to WIN2000 Pro??????????????????
Just a few jaundiced thoughts
Best of luck
Don't panick you are getting MSN net Alerts there is a way to stop them cuz they realy pisss you off don't they. Got to find out how though cuz i don't remember.
Ok i found it. This is a cut and past job:
Disable Messenger Service
Click Start > Run and type "services.msc" (no quotes) in the Open: line and click OK
In the right pane, scroll down to Messenger.
Double click Messenger and click the General tab.
Under Service Status: click the Stop button.
In the Startup Type: drop down box, select Disable.
Click Apply and OK.
Have you tried disconnecting it from the internet??? If you do and it still shuts down then you will know its something running on your machine and if it does not then it is something remotely sending your box a shutdown command.