Solved pc randomly going to log in screen

[pandasniper100]

mine did not have safe file results so i just screen caped all of the results

1.) Download herdprotect: (choose the portable version)

Download herdProtect - Free Anti-Malware Platform

2.) Run the scan.

3.) When the scan finishes, save the results per the screenshot below. Then upload the log here.

DO NOT REMOVE ANYTHING YET. I will advise if anything needs removed when I receive the log.

Attached Images

 

[andrew129260]

Remove the two items under adware and pups.

Have you ever used the cain and able password recovery program? If not, remove abel.dll

Run a new scan and please post the log like asked.

_________________________________________________________________________________________


I would like you to scan with Hitman Pro.

1.) Download hitman pro here for your windows version and install it.

2.) Open hitman pro. Click next.

Read and Accept the license agreement, then checkmark the box and click next.

Choose to only run a one time with this computer and click next

The scan will start, wait until it completes, then click the save log button.

Choose a place to save it for upload later

Close out of hitman pro.

Find the log file wherever you saved it and upload it using the paperclip

 

[MilesAhead]

Also it should be fairly easy to change this script to just cancel logoff

Help with log off / OnMessage script - Support - AutoHotkey Community

Perhaps you could ask the author to just intercept the logoff request and return false. Supposedly that's all that is needed to stop a log off. When you really want to log off, kill the script first.

Edit: this is just as a means to try to read what's going on in the command prompt or see what is launching it. Keep going in tandem with the AV hunting.

 

[andrew129260]

Please follow all steps in post 22 and report with logs.

Just an added note here:

In order to stop the shutdown, open this I have attached (save to your desktop) as soon as you see it start happening. This will abort the shutdown no matter how it was initiated.

 

[pandasniper100]

done

Remove the two items under adware and pups.

Have you ever used the cain and able password recovery program? If not, remove abel.dll

Run a new scan and please post the log like asked.

_________________________________________________________________________________________


I would like you to scan with Hitman Pro.

1.) Download hitman pro here for your windows version and install it.

2.) Open hitman pro. Click next.

Read and Accept the license agreement, then checkmark the box and click next.

Choose to only run a one time with this computer and click next

The scan will start, wait until it completes, then click the save log button.

Choose a place to save it for upload later

Close out of hitman pro.

Find the log file wherever you saved it and upload it using the paperclip

 

[andrew129260]

Ok, delete what was found from hitman pro.

Download DDS:

DDS.com

Save the file to your pc. Then open the dds icon to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop.
Include the contents of both logs in your next post by using the paperclip

________________________________________________________________________________________

Download this bat file attachment. This will gather all your scheduled tasks which will allow me to see if one of them is causing the random going to log in screen.

It will create a file called my scheduled tasks and saves it to the root of your documents folder. Attach the document here.

 

[pandasniper100]

done although i am not sure what u mean about the myscheduledtasks saving to my documents as i ran it (on my desktop )and it created that .cvs file but i can not see any thing in the root directory of my documents also i changed the.cvs to a .txt so i can upload it

Ok, delete what was found from hitman pro.

Download DDS:

DDS.com

Save the file to your pc. Then open the dds icon to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop.
Include the contents of both logs in your next post by using the paperclip

________________________________________________________________________________________

Download this bat file attachment. This will gather all your scheduled tasks which will allow me to see if one of them is causing the random going to log in screen.

It will create a file called my scheduled tasks and saves it to the root of your documents folder. Attach the document here.

 

[andrew129260]

Give me a bit to look through the logs.

While you wait, I want to know exactly what is happening.

1.) Is this your computer? Are there any parental controls applied to your account?

2.) What are your power settings and screensaver set to?

3.) I would also like you to disable all your startup programs except avg using this guide below and see if the issue continues:

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

 

[pandasniper100]

yes it is my pc and there are no parental controlles on my acc my screen saver is set to none then wait 9999 then on resume diplay log in screen unticked also it is set to high performance hear are some screen shots on my settings and to adress step 3 i have all ready try ed this it whont stop all of my services anways some just keep running idk why?

Give me a bit to look through the logs.

While you wait, I want to know exactly what is happening.

1.) Is this your computer? Are there any parental controls applied to your account?

2.) What are your power settings and screensaver set to?

3.) I would also like you to disable all your startup programs except avg using this guide below and see if the issue continues:

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

 

[andrew129260]

This is quite puzzling. I see nothing that would cause this behavior.

When did this start happening? Was it after you installed a update for a program or any new software/hardware?

Is it always random when this happens?

Could you take a video showing it happening?

 

[pandasniper100]

started happing awhile ago but it did work without this happening i think it may of been when i installed sumthing {at a guess} by video do u mean record it on my pc or record my pc screen as if u mean record it on my pc it will not work as it shuts down all the programs and that would eithere not save the vod or corrupt it and yes it happens at random

This is quite puzzling. I see nothing that would cause this behavior.

When did this start happening? Was it after you installed a update for a program or any new software/hardware?

Is it always random when this happens?

Could you take a video showing it happening?

 

[andrew129260]

Maybe if could snag it on video with a cell and post it to youtube yes.

I am going to see if anyone else can help me figure this out.

 

[pandasniper100]

Maybe if could snag it on video with a cell and post it to youtube yes.

I am going to see if anyone else can help me figure this out.

kk will do

 

[Kari]

My feeling is that the command prompt is running
shutdown /l

which is logoff immediately.

Now the trick is finding out what is launching it.

That was my thought, too.

This is far fetched, I know, but might be worth to check. If anyone else has had access to your PC, anyone who might want to play tricks with you, it might be this someone has created a task which could for instance force the log off (SHUTDOWN -F -L) after certain amount of idle time.

If this is the case you'll find a task for this in Task Scheduler.

Kari

 

[pandasniper100]

i think u found it i disabled and delleted it this is really odd the only time sumone has had acess to my pc is when i was trying to install gow on my pc it did not work so i got in contact with the site (gaming dragon) and sumone installed it for me using teamviewer i find it odd that when i have payed for a game that they would do sumthing like that no one in my house has acess to my pc in my house as it is password protected and my family is not exatly tec savy at all so unless it was the guy form gaming dragons idk how it is there could this be done through a exe or sumthing like that? i will test my pc out for the next 2 days and see if it is indeed fixed and will report back

My feeling is that the command prompt is running
shutdown /l

which is logoff immediately.

Now the trick is finding out what is launching it.

That was my thought, too.

This is far fetched, I know, but might be worth to check. If anyone else has had access to your PC, anyone who might want to play tricks with you, it might be this someone has created a task which could for instance force the log off (SHUTDOWN -F -L) after certain amount of idle time.

If this is the case you'll find a task for this in Task Scheduler.

Kari

 

[carwiz]

Doesn't look random to me. Looks like it runs every day at 5:42pm.

I hope you learned something about "Teamviewer" and letting other people into your machine. You got off cheap!

 

[andrew129260]

Wait a minute!!!

I looked through all the tasks but I guessed I missed that one. Thank you kari!

But is teamviewer still installed? Teamviewer has a feature where it can auto lock your pc after teamviewer session ended as well.

Check to see if teamviewer is still installed. If it is uninstall it!

Note: Teamviewer is a legit program and not bad, but people can use it to do bad things. Never let strangers remote into your pc!

 

[essenbe]

I believe he could just change the password someone else has to have to connect.

 

[pandasniper100]

yhea thank u for all of ur help it is uninstall i usually uninstall programs when i am not using them also i bought a product i did not expect to be messed with because i did purchase it after all ... and yeah i prob should of written the times down when it was happening i just though it was at random so sorry i made u mad carwiz and thanks to everyone whom helped i can game in peace now

Wait a minute!!!

I looked through all the tasks but I guessed I missed that one. Thank you kari!

But is teamviewer still installed? Teamviewer has a feature where it can auto lock your pc after teamviewer session ended as well.

Check to see if teamviewer is still installed. If it is uninstall it!

Note: Teamviewer is a legit program and not bad, but people can use it to do bad things. Never let strangers remote into your pc!

 

[andrew129260]

I believe he could just change the password someone else has to have to connect.

Very true. Panda you might want to change all your passwords as a security precaution.