Computer Shut Down and Possible Registry Problems - HELP!

[tyders]

Hi all,

When i shut my PC down it keeps restarting itself. I have re-installed XP etc anyway but also ran ran virus checkers etc to no avail. A friend said it may be to do with wake on lan or soemthing.

I have also found a spyware change in the registry that i cant get rid of. Everytime I 'fix' it using search & destroy it comes back.

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-21-1801674531-1604221776-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Internet Settings\Zones\0\1004!=W=3


Im not sure if they are linked but any help would be appreciated as its driving me insane!

Thanks

[BJ_M]

http://www.sarc.com/avcenter/venc/data/w32.sasser.removal.tool.html

[BJ_M]

also -- try this:

disable Fast Shut Down

[Cobra]

Try Ad-Aware for your spyware problems. It sometimes asks to restart the machine so it can remove the stubborn stains, leaving Windows whiter than white.

As for the "wake on LAN" issue, look for that option and disable it in BIOS. You normally get to this by holding "DEL" when your machine first starts. It should tell you how to enter "BIOS" or "setup". You'll probably find it under "Power options".

I am not sure what is causing your machine to behave like this. It may be a BIOS option, so take a look.

Good luck,

Cobra

EDIT - ...or listen to BJ_M.

[tyders]

Hi all,

I have tried the sasser worm fix and it says it is not present on my PC. I have also checked out the bios options to no avail as i am not connected to anyother pcs so the 'wake' thing wont matter.

any other ideas?

[BJ_M]

bad button ?

unplug the start up button and use windows shut down ..

[tyders]

the actual button turns the pc off. its when i go to start, shutdown it reboots.

[BJ_M]

what about going to last known good restore point ?

[BobV]

try getting with toghther with shoozleboy "Computer will not boot up"

[thecoalman]

Have you installed AVG virus scanner and have Roxio installed? If so there's a conflict between the two. There's link on AVG's site to the download on Roxio's site.

If that DSO exploit is showing up in Spybot and you have the latest XP patches ignore it, it's a bug in Spybot.

[Italic]

If you want to remove the DSO Exploit you saw in SpyBot scan you have to do manually in the registry. Here you can see how to do :
http://www.pchell.com/support/dsoexploit.shtml
I had the same DSO immediately after installed the OS, I don't know if it's a bug or not.

[tyders]

Thanks Italic - thats what to do. I had 5 exploits in total - only got 4 now after following that program and after further investigation found it only effects windows explorer and was fixed in service pack 1 - apparently. Im using Mozilla Firefox so i should be OK.

Thanks anyways all!

[thecoalman]

I had the same DSO immediately after installed the OS, I don't know if it's a bug or not.

http://www.safer-networking.org/en/faq/36.html