Today as i was watching a video on youtube, my pc instantly shut down and restarted automatically. this happened approximately 3 times when i opened the event viewer and i saw a the critical message:
"The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."
Yiannis have you run any scans at all?? If not try these for starters.
https://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
https://www.sevenforums.com/tutorials/433-disk-check.html
http://www.superantispyware.com/
http://www.malwarebytes.org/products/malwarebytes_free/
http://www.bleepingcomputer.com/download/adwcleaner/
ADW download from bleepingcomputer delete any rubbish found with themalware scans
I am assuming this machine is not that old so have you tried just reseating everything as well - could be as simple as plug a bit loose. ?
Sorry mate can't help with those files though.
1. I have done the sfc/scannow and no problems were found
2. I have also done the disk To Scan and Automatically Attempt to Fix Errors and Recover Bad Sectors and i think it went okay.
3. I used super anti spyware and i have deleted the harmful files
4. I already have malware bytes and i run scans on a regular basis
5. I scanned with AdwCleaner, then the my computer was restarted by the program and it gave me this report:
# AdwCleaner v3.017 - Report created 21/01/2014 at 17:27:44
# Updated 12/01/2014 by Xplode
# Operating System : Windows 7 Enterprise Service Pack 1 (64 bits)
# Username : John - JOHN-PC
# Running from : C:\Users\John\Downloads\AdwCleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\IBUpdaterService
Folder Deleted : C:\ProgramData\SpeedyPC Software
Folder Deleted : C:\Users\John\AppData\Local\apn
Folder Deleted : C:\Users\John\AppData\Local\Bundled software uninstaller
Folder Deleted : C:\Users\John\AppData\Local\PackageAware
Folder Deleted : C:\Users\John\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\John\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\John\AppData\Roaming\SpeedyPC Software
File Deleted : C:\Windows\System32\roboot64.exe
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hfimfliilbabfohebppnfomgjljicpdm
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_mkv-player_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_mkv-player_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_vlc-media-player_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_vlc-media-player_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\SpeedyPC Software
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\SpeedyPC Software
Key Deleted : HKLM\Software\systweak
***** [ Browsers ] *****
-\\ Internet Explorer v0.0.0.0
-\\ Google Chrome v
[ File : C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [3780 octets] - [21/01/2014 17:25:41]
AdwCleaner[S0].txt - [3563 octets] - [21/01/2014 17:27:44]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3623 octets] ##########
Anything else I can do? what could the problem be?
John I see there are a fair number of refs to a SpeedyPC software have you been using this for getting the machine running better?? I am not as a lot of the others a great fan of those sorts of programs / softwares as they do create more problems than they solve.
What I might suggest is if you have bought this software then uninstall it and see if the problem goes away but I am also thinking maybe it has done something to the OS / registry in general.
I suppose you did not back the registry up when you first installed - a habit I have got myself into to save having to reinstall all over again.
See this Registry - Backup and Restore
What you could do as well as that is to run one of these
http://www.thewindowsclub.com/bootab...-free-download the Kaspersky one is one I would start with. It doesn't take long and eliminates problems there on boot.
Now I know the PSU is newish but doesn't mean it hasn't gone bad but look at this stuff first before we go there.
Well, i did not back up my registry before so i cant restore it from an older day.. i will try the Kaspersky software. What does exactly the software do? does it fix your pc or is it just a program that I will have to use constantly to avoid crashes?
BTW I don't remember installing the SpeedyPC Software, I may have downloaded it by accident because I know these software are not good for the pc. I cant find it in my programs so i suppose it is already removed?
Last edited by Yiannis; 22 Jan 2014 at 10:31. Reason: Edit
John mate that bootable disk will run and from the word go it will scan for any malware that is embedded and has not been picked up. See this for how it it works most of the others in the link I am assuming would work along the same lines How to Use the Kaspersky Rescue Disk to Clean Your Infected PC there are other sites that describe it but are usually linked to Kaspersky so that they can collect info so this one is the one to see how to.
With regard to that software I would try Revo uninstaller as it may pick it up where the Windows feature might not Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems < left hand list. If it finds it then just get rid of it and you will find it goes through the registry a bit more thoroughly (in my mind anyway)
Another good program to have is CCleaner if you haven't got it already as we all (most of us) use this to keep the machine cleaned up and it has an uninstaller feature in it too you can use CCleaner - Download and see this too
CCleaner - Delete Junk Files & this too but beware of using the registry cleaner without asking first How to Use CCleaner Like a Pro: 9 Tips & Tricks
The kaspersky results were positive, there are no malwares or viruses on my pc. how do i proceed?
John you might just take a look in the registry HKEY CURRENT_USER & LOCAL MACHINE entries see pic 1 then look at pic 2
Don't make any changes until we know that SpeedyPC is gone.
To get into the reg this is a good tutorial for you to remember https://www.sevenforums.com/tutorials/4230-registry-backup-restore.html
just checked, no speedy pc in the registry
Quote