Lowyat.NET Forums

Welcome Guest ( Log In | Register )

 
 RSS feedBump TopicReply to this topicStart new topicStart Poll

Outline · [ Standard ] · Linear+

> comp auto restart when type 'cmd' in run, countdown only 00:00:01 (OS)

Share on | Track this topic | Email this topic | Print this topic
hurricane21
post Feb 23 2008, 08:51 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #1


Senior Newbie
*****

Group: Senior Member
Posts: 919
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Feb 2006
From: Malacca
hi all!
my comp got problem comes after problems,
now i cant even type cmd in run command,
when i type cmd in run and hit enter my comp will auto countdown and restart,
even i install any programs thats related to dos also will shutdown.

anyone know how to fix it?

thanks in advance.

regards.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
ericmaxman
post Feb 23 2008, 09:01 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #2


Silence ! I KILL YOU !
*******

Group: Senior Member
Posts: 4,540
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Sep 2005
From: 127.0.0.1 Status:lolw00t?
hmm..run hijackthis and post a log file..perhaps we can find something inside there
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
hurricane21
post Feb 23 2008, 09:12 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #3


Senior Newbie
*****

Group: Senior Member
Posts: 919
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Feb 2006
From: Malacca
heres my hijackthis log:

» Click to show Spoiler - click again to hide... «


regards.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
vandechrome
post Feb 24 2008, 10:53 AM
Show posts by this member only |This post's rating (0+, 0-) | Post #4


^^^^^^^
*******

Group: Senior Member
Posts: 3,829
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jan 2007
From: here
i didnt know to read the log..AFAIK ur pc infected by virus like some kind of brontok..im facing this problem too..but solved when using cleanxII..or u can find brontok remover..
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
cheahchongseng
post Feb 24 2008, 10:56 AM
Show posts by this member only |This post's rating (0+, 0-) | Post #5


Getting Started
**

Group: Junior Member
Posts: 189
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jan 2003
From: Johor Bahru
did u use antivirus software to scan through ur pc? sound like infected by virus.
User is online!Profile CardPM
Go to the top of the page
+Quote Post
QiQio
post Feb 24 2008, 11:18 AM
Show posts by this member only |This post's rating (0+, 0-) | Post #6


.::Event Freak::.
******

Group: Senior Member
Posts: 1,110
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jul 2006
From: Kay El
does it means if u din run cmd, it wont auto restart is it?
User is online!Profile CardPM
Go to the top of the page
+Quote Post
zroali
post Feb 24 2008, 05:33 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #7


Newbie
*

Group: New Member
Posts: 1
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Nov 2007
got the same thing a few months ago. really freak me out as i'm new to computers. it probably got to my comp from the usb drive that i use in a cc . if you see this line :

F2 - REG:system.ini: UserInit=userinit.exe,password_viewer.exe

the password_viewer.exe is the culprit. I surf around the net and they just give some software to use. sorry.forgot the site where i refer to. try google "password_viewer.exe".

hope this helps. wink.gif
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
lee_what2004
post Feb 24 2008, 08:23 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #8


1 tree 2 three...
*******

Group: Senior Member
Posts: 4,228
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Nov 2006
From: melaka
first you need fix
F2 - REG:system.ini: UserInit=userinit.exe,password_viewer.exe
then download this file
» Click to show Spoiler - click again to hide... «

use the edited.exe to kill password_viewer.exe
then activated show hidden files and uncheck hide extension and hide file system,
then go to C:\Windows, delete the password_viewer.exe and one file(I forgot)
if there is autorun.inf in your drive C, D, etc, delete it.
after that run flash diinfector
then try the cmd, is it still restart?
I forgot what do I do with the cmd, sweat.gif
try to replace it with other computer's cmd.exe
User is online!Profile CardPM
Go to the top of the page
+Quote Post
kazek
post Mar 20 2008, 05:48 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #9


Agent of Chaos
******

Group: Senior Member
Posts: 1,071
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Mar 2008
From: Melaka
I have the exact same problem and in my HT log I can see the file

F2 - REG:system.ini: UserInit=userinit.exe,password_viewer.exe

But I can't find the file 'password_viewer.exe'

This post has been edited by kazek: Mar 20 2008, 05:52 PM
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
lee_what2004
post Mar 20 2008, 05:51 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #10


1 tree 2 three...
*******

Group: Senior Member
Posts: 4,228
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Nov 2006
From: melaka
QUOTE(kazek @ Mar 20 2008, 05:48 PM)
I have the exact same problem and in my HT log I can see the file

F2 - REG:system.ini: UserInit=userinit.exe,password_viewer.exe
*


have you done the above?
User is online!Profile CardPM
Go to the top of the page
+Quote Post
kazek
post Mar 25 2008, 05:43 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #11


Agent of Chaos
******

Group: Senior Member
Posts: 1,071
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Mar 2008
From: Melaka
I fixed it.
I uninstalled the megaupload bar. Deleted the entry password_viewer.exe from the registry.

And deleted some other entries from the registry using HijackThis.
I also used avenger.exe with help of course.

cmd now works like a charm.

User is offlineProfile CardPM
Go to the top of the page
+Quote Post
natakaasd
post Mar 25 2008, 07:19 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #12


Look at all my stars!!
*******

Group: Senior Member
Posts: 2,181
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Nov 2005
Please post a Kasperksy Online Scanner Log. That should also shred some truth about what else is infected in your computer.

Cheers!
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
« Next Oldest · Technical Support · Next Newest »
 

Bump TopicReply to this topicTopic OptionsStart new topic
 

Lo-Fi Version Time is now: 9th February 2010 - 10:19 PM
All Rights Reserved 2003-2009 Vijandren Ramadass (~living on a prayer~)
Powered by Invision Power Board(Trial) © 2010  IPS, Inc.