finding .exe files on each drive in each folder

[TwinHeadedEagle]

PC is clean, majority of these detections are False Positive, name of detection is always Suspicious, so it basically means this is good stuff.

For shuting down problem, did you press Shut Down?

 

[emann]

Dear Sir...ok...so I can give the instruction to ESET to delete all quarantine files as well?

yes for shutdown...i go to start then shutdown and instead it makes a restart...any help appreciated.

tks

 

[TwinHeadedEagle]

Let's try to fix this


1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

reg: reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" %USERPROFILE%\Desktop\export.reg

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.




After the fix you will find file named export.reg on your Desktop. Upload it here --> http://zippyshare.com/ and copy download link in the message.

 

[emann]

Hi...ok did as per your instructions....fixlog.txt is attached with email and below is link of zippyshare

http://www39.zippyshare.com/v/29227132/file.html

 

[TwinHeadedEagle]

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

reg: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v PowerdownAfterShutdown /t REG_SZ /d 1 /f
cmd: shutdown /r /t 5

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

 

[emann]

Hi...procedure complete and attached is file as instructed....will wait for your further step.

tks

 

[TwinHeadedEagle]

Ok, try now to shutdown, and tell me what is going on?

 

[emann]

hi...no change..computer still restarts instead of shutting down

 

[TwinHeadedEagle]

There are more ideas on my mind:


1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

cmd: powercfg lastwake

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

 

[emann]

procedure complete and file attached....what is next pls?

 

[TwinHeadedEagle]

I tried all possible ideas that came to my mind. Only cause that probably makes this problem is some hardware issue, BIOS problem or something. I cannot help you further, I am sorry.

 

[emann]

ok sir...your help is much appreciated....with regards to malwarebytes pro...do you recommend I install some other permanent antivirus as well such as avg, avast, avira....your advise is greatly appreciate.

tks

 

[TwinHeadedEagle]

MalwareBytes is not antivirus, it is antispyware, so it isn't able to fully detect and combat all types of malware. You need to install antivirus software. Choice is yours which one will you pick.


• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

 

[emann]

ok...will check with a pc repair shop for this shutdown thing...will also perform the delfix operation...with regards to antivirus and with the information you have on my pc, would you please advise on anyone in particular as I have no clue from where to start on this...tks

 

[TwinHeadedEagle]

would you please advise on anyone in particular as I have no clue from where to start on this

I didn't understand what you wanted to say?

 

[emann]

with regards to the shut down problem will check with a repair technician as I am not fond of bios or hardware much....

as regards to antivirus I wanted to ask for your recommendation of a good software to try please

 

[TwinHeadedEagle]

Try this one, 6 months free...

https://www.facebook.com/cloudantivirus/app_208195102528120

It is a very good antivirus.

 

[emann]

many thanks sir