how to prevent auto RESTART

Visarlimani · 20 Feb 2015

Hi there,

There is a virus in my PC running Windows XP,

while i work, it's being restarted automatically and i can't prevent it, there is a "msconfig" command to disable Softwares being loaded in startup, but after i type this command in CMD, it's being restarted and all windows are being closed,

I tried to run in safe mode, with "F8" command, but it's happing the same.

any idea how to disable startUP programs ?

Thanks

gregrocker · 20 Feb 2015

Uncheck everything in msconfig>Startup and >Services tabs after Hiding all MS Services.

I'd also run a full scan with Malwarebytes and SuperAntiSpyware, uninstall any AV bloatware and try the recommended ones, run SFC to test system file integrity from the Troubleshooting Steps for Windows 7.

If you have a rootkit or other serious trojan I'd google or ask back in our Security forum for specialized tools to run to remove it.

Bernardus · 20 Feb 2015

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
DWORD = AutoReboot
0 = Auto Restart Disabled
1 = Auto Restart Enabled

There are other ways to see and control what startup items are active.
Probably some string in Windows HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
or run. run once. run service. runservice once. etc. may have been edited or corrupted.

It's possible that the bootmanager itself is infected.

Try finding a program that load's itself from bootable device or only run in virtual memory and view the register.
Or repair the bootsection with the installationdisc.

Other options are autoboot programs and uninstallers that are able to view the list of startup options.

Perhaps this antivirus autobootprogram may help?
AVG Anti-Virus Rescue USB | Portable USB Applications

Download on a non infected PC en creat a flashdrive.

Can't you do a system restore?

You could also get sysinternals suite and run autoruns.exe and uncheck the startup process for the virus but that won't remove it

a program like "remove" let you view delete and backup entries or startups.

With regseeker you could also view the register, the startup programs, entries and strings.

Look at this page it's also in English available
What is Msconfig.exe and How to Fix It? Virus or Safe?

The first thing you need to do is to stop your PC from automatically shutting down. To do this, follow these steps:

Press the "Start" button, and then select "Run" .

Type "shutdown -a" (without the quotes). That's the "shutdown" command, with the "-a" option, which stands for "abort the pending shutdown".

Once the countdown begins telling you that the PC is going to shutdown in 59 seconds, etc. Press "OK" to stop the shutdown from occuring.

Or:

From the Desktop right-click on My Computer.
Click the Properties option.
In the System Properties window click the Advanced tab or the Advanced system settings link.
In Advanced click the Settings button under Startup and Recovery.
In the Startup and Recovery window uncheck the Automatically restart check box.
Click Ok.