shut down at login

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

bigzach334

Thread Starter
Joined
Jan 21, 2011
Messages
4
I have a hp pavillion dv5 with windows 7. Everytime I try to start up windows normally I get to the login screen, log in and blue screen appears then instantly my computer reboots. I do not have this problem in safe mode. PLEASE HELP
 
Joined
Sep 15, 2004
Messages
3,791
I do not have this problem in safe mode. PLEASE HELP

That's a good sign because it means only your User Account has been messed up at the winlogonui stage, almost certainly by some form of malware. Boot up and go into Safe Mode with Networking and start off by downloading CCleaner from http://www.piriform.com and ATF Cleaner form http://www.atribune.org. Run both to clear out different forms of unnecessary files to make the malware scanning run more smoothly and it clears out the folders where the nasty stuff tends to hide.

Next, go to http://www.malwarebytes.com and download MalwareBytes, install it and let it update then run the Full Scan. When it completes, click Show Results and then Remove Selected - it won't kill anything you'd wish to keep.

Restart back into Normal Mode which hopefully will now work. If it doesn't, go back to Safe Mode, open MBAM and click the Logs tab. Copy and paste the log it created back here for more advice.
 

bigzach334

Thread Starter
Joined
Jan 21, 2011
Messages
4
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5657
Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385
2/2/2011 12:56:08 AM
mbam-log-2011-02-02 (00-56-08).txt
Scan type: Full scan (C:\|D:\|E:\|)
Objects scanned: 367887
Time elapsed: 20 minute(s), 55 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 8
Files Infected: 7
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
c:\programdata\2aca5cc3-0f83-453d-a079-1076fe1a8b65 (Adware.Seekmo) -> Quarantined and deleted successfully.
c:\Users\Zach\AppData\Roaming\HBLite (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programdata\HBLiteSA (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files (x86)\HBLite (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files (x86)\HBLite\bin (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files (x86)\HBLite\bin\11.0.329.0 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files (x86)\HBLite\bin\11.0.329.0\firefox (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files (x86)\HBLite\bin\11.0.329.0\firefox\extensions (Adware.Hotbar) -> Quarantined and deleted successfully.
Files Infected:
c:\programdata\HBLiteSA\HBLiteSA.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programdata\HBLiteSA\hblitesaabout.mht (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programdata\HBLiteSA\hblitesaau.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programdata\HBLiteSA\hblitesaeula.mht (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programdata\HBLiteSA\hblitesa_hpk.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programdata\HBLiteSA\hblitesa_kyf.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files (x86)\HBLite\bin\11.0.329.0\firefox\extensions\install.rdf (Adware.Hotbar) -> Quarantined and deleted successfully.
 

bigzach334

Thread Starter
Joined
Jan 21, 2011
Messages
4
I did everything exactly as you said and it did the same thing a couple more times, but now it seems fine. i posted the log just in case there is anything that needs to be done about it. Thanks for your help man, i really appreciate it.
 
Joined
Sep 15, 2004
Messages
3,791
Pretty low-level stuff in the MBAM log but it may have taken a couple of restarts for the Registry to catch up with the changes MBAM made in deleting files, along with the other entries associated with the files the cleaners binned. I hope it behaves properly in future.
 

bigzach334

Thread Starter
Joined
Jan 21, 2011
Messages
4
It just started happening again, but not at the loginand anymore. It just happens randomly, and now even in safe mode. Do you know anything else I can try?
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top