[paul714]

Hi! I am having hard time to log on my system . The system shutdown every time i get log on menu.
Try to use Spybot and anti-Malware , but they crash.

The messege shows on screen
NT Authority system
C:\windows\system32\services.exe terminated
unexpectedly with status code -1073741482 system will now shut down
<timer 60sec>

Please help. Thanks!

[Advertisements]

Sounds like a rootkit to me...

Can you restore to a point when you didn't have this problem? May be the easiest thing to do.

If not, do this:
1) Take the problem computer off the internet connection (unplug your LAN or turn off your wireless)
2) Go to Start
3) Click Run
4) Type shutdown /a (note the space between "shutdown" and "/")
5) Hit Enter

Now go straight to the Virus, Spyware and Trojan Removal Forum.

Start at the Malware and Spyware Cleaning Guide. Do everything you can on this thread and post the logs they request at the end, after you're done. If the scans find nothing, let them know that as well.

If you can't complete any of these for whatever reason, start a new post in that forum and title it something like "Possible Kernel Level Rootkit" (use a title like this for your post if you do complete everything as well, it will be important). Link to this thread, tell them what you said here, and let them know what you could not complete and why (wouldn't run..., error message..., etc).

Good luck!

Edited by n3ko, 21 September 2009 - 02:51 PM.

[n3ko]

Sounds like a rootkit to me...

Can you restore to a point when you didn't have this problem? May be the easiest thing to do.

If not, do this:
1) Take the problem computer off the internet connection (unplug your LAN or turn off your wireless)
2) Go to Start
3) Click Run
4) Type shutdown /a (note the space between "shutdown" and "/")
5) Hit Enter

Now go straight to the Virus, Spyware and Trojan Removal Forum.

Start at the Malware and Spyware Cleaning Guide. Do everything you can on this thread and post the logs they request at the end, after you're done. If the scans find nothing, let them know that as well.

If you can't complete any of these for whatever reason, start a new post in that forum and title it something like "Possible Kernel Level Rootkit" (use a title like this for your post if you do complete everything as well, it will be important). Link to this thread, tell them what you said here, and let them know what you could not complete and why (wouldn't run..., error message..., etc).

Good luck!

Edited by n3ko, 21 September 2009 - 02:51 PM.