📢 Advertise on HF Today ◆ Private Crypter - Unique Private Stubs ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Whitehat • Blue Team • Defensive Security Malware, Rat, and Virus Removal › Computer rebooting at odd times with no BSoD or error messages

Thread Closed 

Computer rebooting at odd times with no BSoD or error messages
Avαlαr
Avαlαr Offline
Been a while, man! Life's so rad!
***
HF Ub3r
Posts:
2,229
Threads:
142
Credibility:
600
Popularity:
431
βytes:
β 0
Game XP:
0
Oct 16, 2016 07:23 AM (This post was last modified: Oct 16, 2016 07:24 AM by Avαlαr.)
I like to think I take good care of my PC, but this really has me stumped. My computer has restarted at least three times now without warning, once while idle on the Windows 10 desktop, and two other times while gaming in Windows 7. My first thought is overheating, but this rig has done just fine since January, and all temps are within acceptable levels. I've run every hardware check I can think of, and "sfc /scannow", but everything checks out clean. I'm currently running an in-depth system scan with ESET antivirus, which should be done in about 2 hours, cuz I'm starting to think that I could have a virus.
Changed my username 7/6/18.
JoshuTee
JoshuTee Offline
[closed@HF:]
Posts:
1,521
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Oct 16, 2016 10:26 AM
It could be that you're ratted. If your PC reboots multiple times, it could be the RAT trying to gain Admin rights.

Please run this script here: pastebin.com/DSWcSY3V , it will write some stuff about running processes etc into a file on your desktop. Then it will delete itself.
Please Upload that file to Pastebin and post the link to it here.

Thanks!
Avαlαr
Avαlαr Offline
Been a while, man! Life's so rad!
***
HF Ub3r
Posts:
2,229
Threads:
142
Credibility:
600
Popularity:
431
βytes:
β 0
Game XP:
0
Oct 16, 2016 12:29 PM (This post was last modified: Oct 16, 2016 12:35 PM by Avαlαr.)
(Oct 16, 2016 10:26 AM)JoshuTee Wrote:  It could be that you're ratted. If your PC reboots multiple times, it could be the RAT trying to gain Admin rights.

Please run this script here: pastebin.com/DSWcSY3V , it will write some stuff about running processes etc into a file on your desktop. Then it will delete itself.
Please Upload that file to Pastebin and post the link to it here.

Thanks!

And you're sure this will work?

Anyway, here's the link: http://pastebin.com/nnK2fwrU
Changed my username 7/6/18.
JoshuTee
JoshuTee Offline
[closed@HF:]
Posts:
1,521
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Oct 16, 2016 12:45 PM (This post was last modified: Oct 16, 2016 12:48 PM by JoshuTee.)
(Oct 16, 2016 12:29 PM)Avαlαr Wrote:  And you're sure this will work?

Anyway, here's the link: http://pastebin.com/nnK2fwrU

Well, the script itself doesn't do anything, it just provides info to make it easier helping me fix your PC. I'm analysing it now. . .

Okay, it looks like you had a lot of programs open whilst running the script. Please redownload the script and repeat the process (it makes it easier to find the RAT process)
Thanks, we're getting there! :)
Avαlαr
Avαlαr Offline
Been a while, man! Life's so rad!
***
HF Ub3r
Posts:
2,229
Threads:
142
Credibility:
600
Popularity:
431
βytes:
β 0
Game XP:
0
Oct 16, 2016 02:55 PM (This post was last modified: Oct 16, 2016 02:59 PM by Avαlαr.)
(Oct 16, 2016 12:45 PM)JoshuTee Wrote:  Well, the script itself doesn't do anything, it just provides info to make it easier helping me fix your PC. I'm analysing it now. . .

Okay, it looks like you had a lot of programs open whilst running the script. Please redownload the script and repeat the process (it makes it easier to find the RAT process)
Thanks, we're getting there! :)

I didn't have anything open other than my browser and the .bat file at the time, though. I thought it was strange, too, how many results there were. I'm on Windows 10, now, playing games. I'll post another one here in a sec.

http://pastebin.com/NpPmi4cd

"GearGame.exe" is Gears of War 4, and "foobar2000.exe" is a music player. Just fyi
Changed my username 7/6/18.
JoshuTee
JoshuTee Offline
[closed@HF:]
Posts:
1,521
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Oct 17, 2016 05:04 AM
Okay, I've got some work to do, I'll have it analysed this evening
Avαlαr
Avαlαr Offline
Been a while, man! Life's so rad!
***
HF Ub3r
Posts:
2,229
Threads:
142
Credibility:
600
Popularity:
431
βytes:
β 0
Game XP:
0
Oct 17, 2016 04:51 PM
So, any ideas? I honestly feel like my computer is running slower than it should be as well. Then again, it could just be hardware related.
Changed my username 7/6/18.
JoshuTee
JoshuTee Offline
[closed@HF:]
Posts:
1,521
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Oct 17, 2016 11:20 PM
Sorry for not replying! There's a pack of suspicious files in %temp%. Please download CCleaner portable and let it clean your files and registry.
Then open Msconfig.exe, go to services and tick "Hide all Microsoft services". Disable everything on the list, as long as it's not driver related.
Then reboot. Is it any better?
Avαlαr
Avαlαr Offline
Been a while, man! Life's so rad!
***
HF Ub3r
Posts:
2,229
Threads:
142
Credibility:
600
Popularity:
431
βytes:
β 0
Game XP:
0
Oct 18, 2016 03:01 PM
(Oct 17, 2016 11:20 PM)JoshuTee Wrote:  Sorry for not replying! There's a pack of suspicious files in %temp%. Please download CCleaner portable and let it clean your files and registry.
Then open Msconfig.exe, go to services and tick "Hide all Microsoft services". Disable everything on the list, as long as it's not driver related.
Then reboot. Is it any better?

I cleared nearly 2GB of stuff with CCleaner, and unticked everything I either don't use at all, or very rarely use. My PC hasn't shut off since I made this thread, so I really don't have a clue what caused it. Just thought I'd check to see if it was a virus, first. I guess it isn't lol.
Changed my username 7/6/18.
JoshuTee
JoshuTee Offline
[closed@HF:]
Posts:
1,521
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Oct 18, 2016 03:35 PM
(Oct 18, 2016 03:01 PM)Avαlαr Wrote:  I cleared nearly 2GB of stuff with CCleaner, and unticked everything I either don't use at all, or very rarely use. My PC hasn't shut off since I made this thread, so I really don't have a clue what caused it. Just thought I'd check to see if it was a virus, first. I guess it isn't lol.

Haha yeah, be glad 😁 So, would you consider this solved?
Avαlαr
Avαlαr Offline
Been a while, man! Life's so rad!
***
HF Ub3r
Posts:
2,229
Threads:
142
Credibility:
600
Popularity:
431
βytes:
β 0
Game XP:
0
Oct 18, 2016 04:14 PM
(Oct 18, 2016 03:35 PM)JoshuTee Wrote:  Haha yeah, be glad 😁 So, would you consider this solved?

Yeah, I suppose. Thanks for the help! :)
Changed my username 7/6/18.
Cecilia
Cecilia Offline
What happens now?
***
HF Ub3r
Posts:
3,439
Threads:
69
Credibility:
000
Popularity:
14
βytes:
β 0
Game XP:
0
Oct 18, 2016 05:50 PM
Did you consider looking at event viewer's logs?
Around the time of the crash can help identify things that could have contributed.
They can help with problems sometimes like showing errors if a disk has faults.

Personally it sounded like a graphics driver issue, or even a problem with your hardware, but you said otherwise.

Glad to see it hasn't happened again.
[Image: PVoDiqS.png]
Avαlαr
Avαlαr Offline
Been a while, man! Life's so rad!
***
HF Ub3r
Posts:
2,229
Threads:
142
Credibility:
600
Popularity:
431
βytes:
β 0
Game XP:
0
Oct 18, 2016 08:39 PM (This post was last modified: Oct 18, 2016 09:07 PM by Avαlαr.)
GOD DAMMIT, IT HAPPENED AGAIN. I was reading through Event Viewer a second time as it happened, too.

Also, all of the applications I had open before my PC restarted resumed themselves right away. Even this page stayed open in Firefox...

Edit: Computer restarted again right after I posted this. ^ On mobile, now. Idk what kind of hardware problem would cause my PC to restart after days of daily use and gaming, OR after five minutes on the Desktop.
Changed my username 7/6/18.
JoshuTee
JoshuTee Offline
[closed@HF:]
Posts:
1,521
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Oct 18, 2016 11:37 PM
Iz sounds blatant, but it could just be a malfunctioning reset button!
Avαlαr
Avαlαr Offline
Been a while, man! Life's so rad!
***
HF Ub3r
Posts:
2,229
Threads:
142
Credibility:
600
Popularity:
431
βytes:
β 0
Game XP:
0
Oct 19, 2016 07:29 AM
(Oct 18, 2016 11:37 PM)JoshuTee Wrote:  Iz sounds blatant, but it could just be a malfunctioning reset button!

Hm, never thought of that.
Changed my username 7/6/18.
Next Oldest | Next Newest
Thread Closed 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by CyberErrorDec 23, 2018 06:22 AM 1 111 Dec 23, 2018 06:22 AM
Last Post: 5chn4pp
[Check-Up] by DublAFeb 8, 2018 12:04 PM 14 263 Feb 8, 2018 12:04 PM
Last Post: Sigma
[Check-Up] by ReporterJan 20, 2018 09:45 PM 2 139 Jan 20, 2018 09:45 PM
Last Post: AsSaSs@iN