SEARCH

The How-To Geek Forums Have Migrated to Discourse

How-To Geek Forums / Windows 7

(Solved) - Shutdown

(56 posts)
  • Started 1 year ago by tsmith777
  • Latest reply from tsmith777
  • Topic Viewed 1046 times

warlock
warlock
Posts: 4100

If you open the folder you named task manager can you view it?

Posted 1 year ago
Top
 
tsmith777
Posts: 881

When I click on the folder, Task Manager, nothing happens

Posted 1 year ago
Top
 
tsmith777
Posts: 881

I just ran a full scan of SAS and it discovered this, Heur.Agent/Gen-White Box C:\WINDOWS\SYSWOW64\LXDWJSWR.DLL QUARENTINE - 12.03.2012 08-58-43, is that a virus and could it be causing the problem?

Posted 1 year ago
Top
 
GuiltySpark
GuiltySpark
Posts: 4024

tsmith ,

Do you have a Lexmark Printer ?

Posted 1 year ago
Top
 
tsmith777
Posts: 881

Yes, It is a X7675 Pro.

Posted 1 year ago
Top
 
GuiltySpark
GuiltySpark
Posts: 4024

Try using the in built False Positive button to send the sample to SAS they can then tell you if it is a genuine FP or something serious.

But I think that dll file is to do with your Lexmark.

Posted 1 year ago
Top
 
tsmith777
Posts: 881

Ok, where is the False Positive Button?

Posted 1 year ago
Top
 
GuiltySpark
GuiltySpark
Posts: 4024

It should be on the Quarantine page, you may have to select View Logs to get there.

Here is a sample of what it looked like on the older builds : http://www.superantispyware.co.....tml?faq=28

but it should be somewhere similar.

Am running a scan at present so can't check.

Posted 1 year ago
Top
 
tsmith777
Posts: 881

I also just now found another one from SAS REAL TIME PROTECTION, Trojan.Agent/Gen-Tres (Drop).Process C:\Users\TomSmi~APPDATA\Local\Temp\CDB\.exe

Posted 1 year ago
Top
 
GuiltySpark
GuiltySpark
Posts: 4024

Sorry was having dinner :)

You can probably get rid of Trojan.Agent/Gen-Tres but to be sure you need to check in the AppData folder under that path appdata\local\temp\......

If you can't see the appdata folder then you will need to show it, as by default it is hidden.

Posted 1 year ago
Top
 
tsmith777
Posts: 881

I thought SAS Quarantine would get rid of it, if I delete it from there?

Posted 1 year ago
Top
 
GuiltySpark
GuiltySpark
Posts: 4024

Yes it will.

I am unsure of the path name \.exe in that appdata folder it is strange that there is no file name however, I wouldn't put it past a piece of malware to work that way.

That is the reason I suggest to check that path/filename fully to see that it doesn't belong to anything necessary.

Posted 1 year ago
Top
 
tsmith777
Posts: 881

Ok, Thanks very much, so is that a virus or malware? Do you think that was causing the problem with the shutdown/restart?

Posted 1 year ago
Top
 
GuiltySpark
GuiltySpark
Posts: 4024

Malware is a generic term that covers all aspects of 'nasties' = Virus, Trojans, Hijacks etc...

As to the cause ? Unsure from this end.

Posted 1 year ago
Top
 
tsmith777
Posts: 881

Okay, that's what I thought, I will restart and see if it fixes it, I am learning little by little, Thanks again.

Posted 1 year ago
Top
 
tsmith777
Posts: 881

Nope, that did not help. I still get the FORCE shutdown page.

Posted 1 year ago
Top
 
GuiltySpark
GuiltySpark
Posts: 4024

Without seeing what's happening there's not much I can do, maybe take it to a local tech shop to have a look at.

Posted 1 year ago
Top
 
tsmith777
Posts: 881

Oakey Dokey thanks

Posted 1 year ago
Top
 
tsmith777
Posts: 881

Anyone else have any ideas?

Posted 1 year ago
Top
 
warlock
warlock
Posts: 4100

http://www.howtogeek.com/howto.....fected-pc/ Read through this and try the Kapersky rescue disk.

Posted 1 year ago
Top
 



Topic Closed

This topic has been closed to new replies.

Enter Your Email Here to Get Access for Free:

Go check your email!