Question about virus that shuts down Windows

[jimdagys]

I downloaded an exe from a dubious source and when I clicked on it, after a few seconds, Windows shut down with the message that Windows had to close to protect your computer. I am curious what type of virus will cause this problem, and also, why does it cause Windows to shut down.

[zoobie]

curiosity killed the cat

[jimmalenko]

It may have tried to alter some mission-critical windows files or registry entries.

[deadrats]

I downloaded an exe from a dubious source and when I clicked on it, after a few seconds, Windows shut down with the message that Windows had to close to protect your computer. I am curious what type of virus will cause this problem, and also, why does it cause Windows to shut down.

what version of windows are you running? if windows is shutting down then it means this virus is ending a critical system process, you can actually duplicate this behaviour by launching task manager, going to the 'process' tab and start shutting down processes, windows will begin the shutdown process.

if windows is shutting down with a message that it's doing so to protect your computer then the virus is designed to behave like a driver of some sort, it's probably trying to run in ring 0 (i.e kernel mode) and due to it being designed for a different windows version it's unable to do so, so windows sees it's failure to load as a driver failing due to a hardware failure.

if you don't mind, archive the executable and upload it to rapidshare or something like that, i would love to get my hands on it and check it out, maybe disassemble it...

[jimdagys]

I am using Windows xp. Sorry I already deleted the exe file and had to ghost restore the c drive because the virus caused a lot of other programs to not work. If you send me a request by private message, I will tell you where I got the exe. I think it would be good to have a place where one can archive all the nasty viruses so that one can experiment with them.

[hech54]

had to ghost restore the c drive

Been There.....Done That....

I would have tried booting from a CD first. A few years ago I
would not known how to do that but....you live and learn.

[Midzuki]

I downloaded an exe from a dubious source and when I clicked on it, after a few seconds, Windows shut down with the message that Windows had to close to protect your computer.

Why do you hate anti-virus software
Maybe you're a masochist

[jimdagys]

This isn't the first time this has happened. I have McAfee and the virus always shuts off the McAfee and then shuts down Windows to the warning screen and then when I reboot, half the programs don't work and I can hardly play a video because the computer is so virused up. Ghost restoring the c drive always solves the problem.

[guns1inger]

This isn't the first time this has happened.

Same virus ? And you went back for more ?

[Midzuki]

This isn't the first time this has happened.

Same virus ? And you went back for more ?

I don't know if it's the same virus, BUT the OP himself confirms he still uses
the same doubtful anti-virus and the same imprudent behavior
Take a look at the the thread https://forum.videohelp.com/topic348783.html
which was posted on 2008/April/02

[sumeshkri]

i really enjoyed guns!inger's comment.

[steptoe]

Maybe better aniti-virus/firewall software instead of using 'free' software that just doesn't manage to do what commercial software can ... when its needed

Are you on AOL by any chance

Its free for a reason, so you try it, like it, then buy the better commercial offering. But then that means having to buy subscriptions every year

Also, a LOT of anti-virus software still works after your subscription expires and then doesn't update the virus signatures which then makes it about as usuful as having no anti-virus software. McAfee does this and is very good at hogging yoir system and really screwing things up as it hooks into everything

I've tried McAfee, hated it and had a hell of a job removing it totally from my system as it took so much control off me. Its my computer not theirs, so I decide what software controls what, not the other way around with software companies thinking they know best and going totally paranoid on stopping everything from becoming 'infected'

[wtsinnc]

I've watched this thread and as of now wonder if the OP has a real plan.

First, as was mentioned earlier in this thread, it sounds as if Windows is shutting down to protect critical files (Data Execution Prevention). Check your settings vis Performance and Maintenance/System/Advanced/Performance/Data Execution Prevention.

A good free antivirus program is far better than a crappy free antivirus program or even a crappy paid antivirus program !
McAfee is and has been crap !
Avira (free) or Avast (free) have far better detection and removal capability and are constantly updated- see AV-Comparatives, Virus Bulletin, Virus.gr, or any other independent testing group. I strongly recommend you download and install either one after completely removing McAfee.

Following the removal of McAfee and BEFORE installing the new antivirus program, run CCleaner (www.filehippo.com or www.majorgeeks.com or www.fileforum.com if you don't already have it (it is free). You will be amazed at how much - CRAP !!!- is there to be removed. Also use it to clean the registry for broken and/or dead links. Run CCleaner EVERY DAY; it is a great way to eliminate tracking cookies prior to a scan. I've never had it damage my system and consider it an essential program.

Download and install Malwarebytes (free) and possibly Superantispyware (free). Update the programs and scan with them EVERY DAY. Both can be downloaded from any of the above locations along with CCleaner.
-IMPORTANT-
After downloading, installing, and updating Malwarebytes and Superantispyware, reboot into the safe mode and run a full scan with each application. Remove the malware found and reboot normally.

Now, download and install/update your chosen antivirus program. I (again recommend Avira or Avast if you prefer a free application. Both offer real-time protection and are also effective against rootkits. Once downloaded/installed/updated, use them; After configuring the program, run a FULL scan at least once a day- no exceptions !

You will also need a firewall/HIPS. Many prefer the Comodo (free) firewall and it is excellent, but I personally like either the Zone Alarm (free) or Online Armor (free) firewall. In any event, all offer excellent protection and are free. A program I strongly recommend to you is WinPatrol (free). It acts as a HIPS as well as a startup manager plus offers other system tools. Also consider using a program such as SandboxIE or Returnil.

Invest in a good backup program which will allow for making a complete clone image of EVERYTHING on your hard drive. If you have either a Seagate or Maxtor hard drive, you can download from Seagate's website either the "Discwizard" or "Maxblast" software which is a stripped down version of Acronis. Either program is free. I strongly recommend you fully clone your hard drive to another for a full backup in the event of a catastrophic drive failure or corruption. If you use a different brand of hard drive, Acronis or Norton Ghost should do the job nicely. Drive Image XML is a free cloning application, but I have no experience with it and therefore cannot recommend it.

Finally, use your head ! You already know that certain websites will tag you every time with malware. Be smart about your surfing habits and downloads. Be absolutely certain that you have every and all irreplaceable file successfully backed-up to disc; Keeping your critical backups on the same drive is not a good practice. Use the tools available for no or little cost to first avoid a problem. If a problem does arise in spite of your best efforts, use the tools available to effect a full recovery with minimal down-time.

Good luck !