This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Windows shuts down immediately after logon

2 min read

This thread's last reply is from November 18, 2007, 4:13 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

I am running WinXP Pro and recently had a virut infection. I cleaned the PC using AVG's virut removal tool but had to format (using partition magic) and reinstall XP anyway. I installed SP2 OK, then Office 2000. I downloaded all win updates and started installing them. At one poit it asked to switch on System Restore, which I did.

The update process then stopped and the PC shut down

Since then, Windows boots, gets to the logon screen and after selecting a user, reports "Saving your settings" and shuts down.

Please help!!!

I was running AVG Free before all this started. Subsequently I used Sophos and F-prot in an effort to get rid of the initial virut problem

During the cleanup, I also saw hel.exe was in my startup list but couldn't find it anywhere on the system
Hi! Welcome to the MWR forums.
My name is Scotty. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research.

Please be patient as my posts to you have to be checked before I reply, so they make take longer.
Hi

The bad news is, Virut is a particularly nasty infection where formatting is the only option. Because it infects the .exe files, which include important Windows files, anti-virus software will remove the infected files no matter what they are and leave you with an unworkable machine.

When you began reinstalling programs after formatting, is it possible you did one from an infected file or medium?

I suggest trying a Last Known Good Configuration and if that doesnt work, Im afraid another format and reinstall is the only answer. And this time be very careful.
Due to lack of response this topic is now closed.

If you are the originator of this topic, and you need it re-opened please send an email to 'admin at malwareremoval.com', including a link to this topic.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

Gary R