shutdown virus Norton cannot destroy

[dgraci]

Pc shuts down as soon as I start typing... figured out that by holding down two arrow keys, it locks the command from executing, but Norton has not isolated the virus. Shutsdown if I let the arrows go. It is a virus. how do I get rid of it?

 

[profkefah]

try this

download antimalwarebyte
install it and run it then update it if it asked
then perform full scan to whole computer partitions from safe mode
and remove all threats

 

[dgraci]

try this

download antimalwarebyte
install it and run it then update it if it asked
then perform full scan to whole computer partitions from safe mode
and remove all threats

didn't help

 

[casper1973]

Can you boot into safe mode with networking? If so, run a scan from there with both Norton and Malwarebytes free. This should clear up the majority, if not all, of the infection and get you some breathing space to run other scans, clear temp files etc.

How to boot into safe mode - http://kb.eset.com/esetkb/index?page=content&id=SOLN2268&locale=en_US
Malwarebytes - http://www.malwarebytes.org/


If you can't reach safe mode you will need some access to another computer. Download and burn a 'Rescue Disk' such as Kaspersky or AVG. You can then boot from this disk on your machine and run some scans from there.

http://www.avg.com/gb-en/avg-rescue-cd
https://support.kaspersky.com/viruses/rescuedisk

Hopefully after those scans, whatever way you have to go about them, you can start up normally again and run some follow-up scans to be sure nothing was missed.

Good luck

 

[aford10]

If it is virus related, there is a malware guide in my signature that can help remove it.

 

[dgraci]

I've been able to run scans with Norton 360 and even used Norton Eraser in normal mode, and neither 360 nor Eraser, which is supposed to do a deep sweep, is able to detect it, even as it worked against them. I've gotten on Safe mode before, but it is able to shutdown from there too... unless I hold down the arrow key (or a key) and do not let it go. I know it's a virus because a few times I let go of the arrow key and then quickly hold it back down, I interrupt it's program and am able to cancel the shutdown (temporarily). I'm going to try a scan from safemode.

 

[casper1973]

Have you tried any of the rescue disks yet? They work very well on awkward infections like this.

I'l add BitDefender to the list as I actually used it myself earlier today 😛

It's a tad slow at loading up but does a very thorough scan once it's on.
http://www.bitdefender.co.uk/support/how-to-create-a-bitdefender-rescue-cd-627.html

 

[profkefah]

try this
download antispy ware
install it and run
then perform full scan to safe mode
and remove all threats

 

[TenPc]

"Pc shuts down as soon as I start typing" In Microsoft Word?

What version /model is the PC?
What is your current OS and version?

 

[edwardsmith]

Try McAfee antivirus it is good for finding and removing these kind virus. " McAfee Support " team will also help you to solving your problem.

 

[aford10]

When removing malware, you need to use more than one tool. That's why I put together the guide. It's easy, effective, and free.

Honestly, Norton, and McAfee aren't real good. Their detection rates are poor, and you shouldn't have to pay for support. There are free tools that work as good, if not better, and are simple to use.

 

[dgraci]

Windows 7, svc pk 1 -- I tried a scan from safemode, but nothing... it shuts down the scan. And the shutdown program initiates as soon as I start typing my password to log on, and many times I don't have to type. It'll get started on the log-in page and just go into shutdown. I'm able to bypass the program by holding down the down arrow key. I've ran norton a few times hoping it would catch it, but it must be masked somehow.

I'm suspecting it also has a tracker of sorts because as I have been able to bypass it, I've been getting password change verifications from facebook and I haven't changed it. The pass is complex enough that it can't be guessed. So I need to get this thing out.

 

[dgraci]

Casper 1973 -- I ran the malwarebytes, it tells me everything is clean. This is telling me it is not a regular virus.. it's one that has written itself into valid code files. Anyone know what files to look in?

 

[TenPc]

It's not necessarily a virus, it could be that your version of Windows is the RC version to which is a trial version and expires after a period of time and does not allow log in, it shuts down the PC. You should have got warnings during the use of Windows that certain features are being, or have been, disabled.

 

[dgraci]

No, it's a virus. I do not have a trial version. Windows ran an auto update / reconfiguration recently and for a while, it wouldn't shutdown immediately, but it didn't take long to go back. It has to be a virus or worm or something. If it was a hardware issue, I would not be able to keep it from shutting down by holding down the down arrow key.

I tried system restore, still doing it. I ran antimalware, all kinds of virus and system repairs. Nothing is apparently wrong, but something is. Can anyone detail all the files that dictate or control shutdown on Windows 7?

 

[mactronix]

Something like this may help
http://download.cnet.com/BootMed/3000-2094_4-75448200.html

Mactronix

 

[TenPc]

Considering the issue only started after the Windows update, it could be the update itself which you should uninstall..... if you do not believe it to be that update then read the information about that update and what it actually referred to, or tell us what kb number that update is and we can go check ourselves. Actually, better to give the KB numbers for all the updates that occured on that same date.

On the other hand, try a different keyboard....!!!!!!

 

[dgraci]

No, the computer started forced shutdowns on its own at the beginning of May. No updates were had near the time the issue began. The recent update actually made it better, but it is still present. Haven't tried the keyboard yet, but that's my next option.

 

[TenPc]

Is your Num Lock ON or CAPS LOCK or the SCROLL LOCK key?