• Welcome to Tux Reports: Where Penguins Fly. We hope you find the topics varied, interesting, and worthy of your time. Please become a member and join in the discussions.

services.exe error trying to shutdown cmputer after boot up

S

Steve Miller

Flightless Bird
Hello ng,

Services.exe was trying to shutdown my computer after boot up. Could someone
please help?

Kind regards,
Steve
 
J

Jose

Flightless Bird
On Mar 13, 2:32 pm, "Steve Miller" <misterblue...@hotmail.com> wrote:
> Hello ng,
>
> Services.exe was  trying to shutdown my computer after boot up. Could someone
> please help?
>
> Kind regards,
> Steve


Greetings sm,

To prevent chasing the proverbial wild goose, please perform the
following, then we can properly investigate if you still have issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

To eliminate questions and guessing, please provide additional
information about your system.

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste the information back here.

There will be some personal information (like System Name and User
Name), and whatever appears to be private information to you, just
delete it from the pasted information.
 
P

PA Bear [MS MVP]

Flightless Bird
From your post's headers: Outlook Express 6.00.2900.5512

First tell us why your WinXP SP3 computer isn't fully-patched at Windows
Update?

Then tell us...

What anti-virus application or security suite is installed and is your
subscription current? What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a(another) Norton or McAfee application ever been installed on the
computer (e.g., a free-trial version that came preinstalled when you bought
it)?
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


Steve Miller wrote:
> Services.exe was trying to shutdown my computer after boot up. Could
> someone please help?
 
S

Steve Miller

Flightless Bird
"Jose" <jose_ease@yahoo.com> schrieb im Newsbeitrag news:24db3ba7-bd44-4681-8664-30de783e3d48@t20g2000yqe.googlegroups.com...
On Mar 13, 2:32 pm, "Steve Miller" <misterblue...@hotmail.com> wrote:
> Hello ng,
>
> Services.exe was trying to shutdown my computer after boot up. Could someone
> please help?
>
> Kind regards,
> Steve


Greetings sm,

To prevent chasing the proverbial wild goose, please perform the
following, then we can properly investigate if you still have issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

To eliminate questions and guessing, please provide additional
information about your system.

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste the information back here.

There will be some personal information (like System Name and User
Name), and whatever appears to be private information to you, just
delete it from the pasted information.


Hi Mr,Ease, the computer runs Windows XP Media Center 32 bit. The Windows
copy was genuine.

The error was Winsows related, not caused by a virus or malware or there like, I
think. I had it before, and added an other user, Now it's being back.

Other symptoms are, the Windows update website dosen't work, as well as the
acticvation program. Pretty bad I think.

Steve
 
P

PA Bear [MS MVP]

Flightless Bird
Steve Miller wrote:
<snip>
> The error was Winsows related, not caused by a virus or malware or there
> like, I think. I had it before, and added an other user, Now it's being
> back.
>
> Other symptoms are, the Windows update website dosen't work...


And you don't think this is still the work of "a virus or malware"
infection?!
 
S

Steve Miller

Flightless Bird
"PA Bear [MS MVP]" <PABearMVP@gmail.com> schrieb im Newsbeitrag news:%23Sx9$quwKHA.1692@TK2MSFTNGP04.phx.gbl...
> From your post's headers: Outlook Express 6.00.2900.5512
>
> First tell us why your WinXP SP3 computer isn't fully-patched at Windows Update?
>
> Then tell us...
>
> What anti-virus application or security suite is installed and is your subscription current? What anti-spyware applications
> (other than Defender)? What third-party firewall (if any)?
>
> Has a(another) Norton or McAfee application ever been installed on the computer (e.g., a free-trial version that came preinstalled
> when you bought it)?
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
>
>
> Steve Miller wrote:
>> Services.exe was trying to shutdown my computer after boot up. Could
>> someone please help?

>


Hi PA Bear, I have AVIRA installed.

Steve
 
S

Steve Miller

Flightless Bird
Search & Destroy didn't find anything as well.
 
P

PA Bear [MS MVP]

Flightless Bird
And...?

Steve Miller wrote:
> "PA Bear [MS MVP]" <PABearMVP@gmail.com> schrieb im Newsbeitrag
> news:%23Sx9$quwKHA.1692@TK2MSFTNGP04.phx.gbl...
>> From your post's headers: Outlook Express 6.00.2900.5512
>>
>> First tell us why your WinXP SP3 computer isn't fully-patched at Windows
>> Update?
>>
>> Then tell us...
>>
>> What anti-virus application or security suite is installed and is your
>> subscription current? What anti-spyware applications (other than
>> Defender)? What third-party firewall (if any)?
>>
>> Has a(another) Norton or McAfee application ever been installed on the
>> computer (e.g., a free-trial version that came preinstalled when you
>> bought it)? --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>
>>
>> Steve Miller wrote:
>>> Services.exe was trying to shutdown my computer after boot up. Could
>>> someone please help?

>>

>
> Hi PA Bear, I have AVIRA installed.
>
> Steve
 
S

Steve Miller

Flightless Bird
Pretty good, no malware or something. What do yout hink?
 
P

PA Bear [MS MVP]

Flightless Bird
To whom are you replying? Without quoting the posts you're replying to, WTF
knows?

Steve Miller wrote:
> Pretty good, no malware or something. What do yout hink?
 
S

Steve Miller

Flightless Bird
I mean, I think I don't have got any viruses, malware or adware or something
stored to my hard drive. I'm pretty much after this and I do notice if something
unusual goes on, normally.

What I did was that I moved files to AVIRAS Quarantine a while back, since
these were indexed by AVIRA to containing suspicious code.

I'm in the process of checking these files.

P.S. Please don't scream at me, I'll start weeping.

Steve
 
S

Steve Miller

Flightless Bird
PA Bear,

the files are being:

C:/Windows\system32\drivers\9e7ad05a.sys

C:/Windows\system32\gacaq32.dll
C:/Windows\system32\gasac32.dll
C:/Windows\system32\spnmld.dll

Could the deletion of these files have caused the error message at boot up? I didn't see an
immediate correlation.

Otherwise I would have restored them already.

Steve
 
E

Elmo

Flightless Bird
Steve Miller wrote:
> PA Bear,
>
> the files are being:
>
> C:/Windows\system32\drivers\9e7ad05a.sys
>
> C:/Windows\system32\gacaq32.dll
> C:/Windows\system32\gasac32.dll
> C:/Windows\system32\spnmld.dll
>
> Could the deletion of these files have caused the error message at boot up? I didn't see an
> immediate correlation.
>
> Otherwise I would have restored them already.
>
> Steve


It's all malware.. that's why the names are random letter combinations.
They were quarantined by your a/v software, but the references to the
files may not have been removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of a file into the search pane. Click "Find Next", and
when located, list what you find in a post. Press F3 to continue the
search, change the filename and repeat till all references are found.

You can delete most of them, but the file 9e7ad05a.sys and any of the
filenames, if tacked onto the back of, let's say, Explorer.exe, need to
handled carefully.

--
Joe =o)
 
P

PA Bear [MS MVP]

Flightless Bird
The convention here is to quote the entire post to which you're replying.
Since you haven't been doing so, I have no idea WTF you're talking about,
Steve.

And your computer still isn't fully patched at Windows Update.

<canned>
You are seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackware:
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
</canned>
--
~PA Bear


Steve Miller wrote:
> PA Bear,
>
> the files are being:
>
> C:/Windows\system32\drivers\9e7ad05a.sys
>
> C:/Windows\system32\gacaq32.dll
> C:/Windows\system32\gasac32.dll
> C:/Windows\system32\spnmld.dll
>
> Could the deletion of these files have caused the error message at boot
> up?
> I didn't see an immediate correlation.
>
> Otherwise I would have restored them already.
>
> Steve
 
S

Steve Miller

Flightless Bird
"Elmo" <elmogeek@xxx.invalid> schrieb im Newsbeitrag news:uXMvdF5wKHA.4492@TK2MSFTNGP05.phx.gbl...
> Steve Miller wrote:
>> PA Bear,
>>
>> the files are being:
>>
>> C:/Windows\system32\drivers\9e7ad05a.sys
>>
>> C:/Windows\system32\gacaq32.dll
>> C:/Windows\system32\gasac32.dll
>> C:/Windows\system32\spnmld.dll
>>
>> Could the deletion of these files have caused the error message at boot up? I didn't see an
>> immediate correlation.
>>
>> Otherwise I would have restored them already.
>>
>> Steve

>
> It's all malware.. that's why the names are random letter combinations.
> They were quarantined by your a/v software, but the references to the
> files may not have been removed from the registry.
>
> Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
> type the name of a file into the search pane. Click "Find Next", and
> when located, list what you find in a post. Press F3 to continue the
> search, change the filename and repeat till all references are found.
>
> You can delete most of them, but the file 9e7ad05a.sys and any of the
> filenames, if tacked onto the back of, let's say, Explorer.exe, need to
> handled carefully.
>
> --
> Joe =o)



Hello Joe, none of the files names were found searching regedit.

Steve
 
S

Steve Miller

Flightless Bird
Hello PA Bear,

thank you for your reply. I will quote the text I reply to futurely. Well, if it's not being an
infection, could I transmit my Windows XP credentials to MS again?

I mean , I could try such first before it was reset by an infection, right?

For a while, the windows update website and the activation tool don't work either.
Also, as long as I ignore to click on sending an error report to MS or not, the computer
does not shut down.

When I would click some button in this error message window, an other small window
pops up saying how many seconds are being left before shutdown. Then the computer
will shut down after 45 seconds, I think.

All of the Windows are pretty much genuine Microsoft, I would say. Would a virus do
that? I'm puzzled.

I'd like to try to fix the activation and the updates, first.

Steve
 
P

PA Bear [MS MVP]

Flightless Bird
> ...I will quote the text I reply to futurely.

And yet...

PS: Ur spiel chukkers broke two


Steve Miller wrote:
> Hello PA Bear,
>
> thank you for your reply. I will quote the text I reply to futurely. Well,
> if it's not being an infection, could I transmit my Windows XP credentials
> to MS again?
> I mean , I could try such first before it was reset by an infection,
> right?
>
> For a while, the windows update website and the activation tool don't work
> either. Also, as long as I ignore to click on sending an error report to
> MS or not,
> the computer does not shut down.
>
> When I would click some button in this error message window, an other
> small
> window pops up saying how many seconds are being left before shutdown.
> Then the
> computer will shut down after 45 seconds, I think.
>
> All of the Windows are pretty much genuine Microsoft, I would say. Would a
> virus do that? I'm puzzled.
>
> I'd like to try to fix the activation and the updates, first.
>
> Steve
 
J

Jose

Flightless Bird
On Mar 13, 5:44 pm, "Steve Miller" <misterblue...@hotmail.com> wrote:
> Pretty good, no malware or something. What do yout hink?


You should have done what Jose suggested earlier.

When that exercise is done, then you can fix any remaining issues
 
S

Steve Miller

Flightless Bird
"Jose" <jose_ease@yahoo.com> schrieb im Newsbeitrag news:97c36eac-56c1-4b85-ad41-ce57ec98b39e@z4g2000yqa.googlegroups.com...
On Mar 13, 5:44 pm, "Steve Miller" <misterblue...@hotmail.com> wrote:
> Pretty good, no malware or something. What do yout hink?


You should have done what Jose suggested earlier.

When that exercise is done, then you can fix any remaining issues


I'm sorry I'm quite busy at the moment, so I don't have the time to be dealing with the fix.
..
 
S

Steve Miller

Flightless Bird
"PA Bear [MS MVP]" <PABearMVP@gmail.com> schrieb im Newsbeitrag news:eMBafi7wKHA.4492@TK2MSFTNGP05.phx.gbl...
>> ...I will quote the text I reply to futurely.

>
> And yet...
>
> PS: Ur spiel chukkers broke two
>
>
> Steve Miller wrote:
>> Hello PA Bear,
>>
>> thank you for your reply. I will quote the text I reply to futurely. Well,
>> if it's not being an infection, could I transmit my Windows XP credentials
>> to MS again?
>> I mean , I could try such first before it was reset by an infection, right?
>>
>> For a while, the windows update website and the activation tool don't work
>> either. Also, as long as I ignore to click on sending an error report to MS or not,
>> the computer does not shut down.
>>
>> When I would click some button in this error message window, an other small
>> window pops up saying how many seconds are being left before shutdown. Then the
>> computer will shut down after 45 seconds, I think.
>>
>> All of the Windows are pretty much genuine Microsoft, I would say. Would a
>> virus do that? I'm puzzled.
>>
>> I'd like to try to fix the activation and the updates, first.
>>
>> Steve

>


PA bear, thanks you for your renewed reply. Please let ma say, I think I'm
guessing what you mean. But, be assured I didn't vote to be in this situation,
I didn't choose to be in this situation as well as to be in this position never was
being my personal wish or desire.

I simply can't be playing wild man about it, all day and night long. I'm only
trying, which was rightful I think.

Steve
 
Top