Help - Search - Members
Full Version: Shut Down instead of Restart
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
Heuristic
We are seeing a number of PCs which when requsted to restart, shut down. This only happens after installation of KL6. Has anyone else see this? I did a search on the forum but no hits.

Thx
mastropizza
Which version/build of "KL6" have you installed on?
Which OSs are involved in?
Could you pls post a sysinfo log collected from one of those mentioned machines?
M
Heuristic
QUOTE(Heuristic @ 31.08.2009 10:18) *
We are seeing a number of PCs which when requsted to restart, shut down. This only happens after installation of KL6. Has anyone else see this? I did a search on the forum but no hits.

Thx


(sorry, quoted wrong forum post!)


Okay, I ran the system info tool as you requested.

We are using net agent 6.0.1710
And the av package is 6.0.3.837

OS is WinXP 32 bit, SP2 (some have SP3, same problem)

All are Lenovo ThinkCentres
mastropizza
and where's the log or the hyperlink to its parsed version? smile.gif
M
Heuristic
QUOTE(Heuristic @ 31.08.2009 10:18) *
We are seeing a number of PCs which when requsted to restart, shut down. This only happens after installation of KL6. Has anyone else see this? I did a search on the forum but no hits.

Thx



Sorry, please see my other response! dash1.gif
Heuristic
QUOTE(Heuristic @ 31.08.2009 10:56) *
(sorry, quoted wrong forum post!)
Okay, I ran the system info tool as you requested.

We are using net agent 6.0.1710
And the av package is 6.0.3.837

OS is WinXP 32 bit, SP2 (some have SP3, same problem)

All are Lenovo ThinkCentres



Crap! I hate being a newbie! laugh3.gif http://www.getsysteminfo.com/read.php?file...4148a3193fff41a

Does that work for you?
mastropizza
well:

1) C:\WINDOWS\system32\xWD35bgnd.exe" looks like a malware....(you also have a reference in the registry, LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run)
2) xrxzipui.exe: again, it's a malware

Check the Unknown tab and you will see what might be bad...smile.gif

M
Heuristic
QUOTE(mastropizza @ 31.08.2009 11:09) *
well:

1) C:\WINDOWS\system32\xWD35bgnd.exe" looks like a malware....(you also have a reference in the registry, LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run)
2) xrxzipui.exe: again, it's a malware

Check the Unknown tab and you will see what might be bad...smile.gif

M


Okay, so is KL supposed to kill these little nasties ? The machine has not yet had a full scan at this point....
Heuristic
QUOTE(mastropizza @ 31.08.2009 11:09) *
well:

1) C:\WINDOWS\system32\xWD35bgnd.exe" looks like a malware....(you also have a reference in the registry, LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run)
2) xrxzipui.exe: again, it's a malware

Check the Unknown tab and you will see what might be bad...smile.gif

M


xrxzipui.exe is Xerox software which we have installed... can't find much info on the other one. Good test for Kaspersky I guess...
mastropizza
sorry for xrxzipui.exe.... tongue.gif
If KAV does not detect any malware, you can try to send xWD35bgnd.exe (zipped and psw-protected) to newvirus@kaspersky.com....KL guys will check it
M
Heuristic
QUOTE(mastropizza @ 31.08.2009 11:32) *
sorry for xrxzipui.exe.... tongue.gif
If KAV does not detect any malware, you can try to send xWD35bgnd.exe (zipped and psw-protected) to newvirus@kaspersky.com....KL guys will check it
M


Thanks.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.