Computer keeps shutting down (WXP-Pro)

[Taffy]

Hi, My computer keeps shutting down and re-booting . I have a pop-up to say that the "Isass.exe" encountered a problem and needs to shut down, and then gives me 45seconds to save my work.
I have run Hijack this and here is the result...
Logfile of HijackThis v1.98.2
Scan saved at 6:50:13 PM, on 11/11/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\wkeaadoqk.exe
C:\Program Files\Hijack This\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe"
O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
O4 - HKLM\..\Run: [WindowsRegKey upd4te2d4te] wkeaadoqk.exe
O4 - HKLM\..\RunServices: [WindowsRegKey upd4te2d4te] wkeaadoqk.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WindowsRegKey upd4te2d4te] wkeaadoqk.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

Thanks for your help.


TaffyDownUnder /images/forums/icons/cool.gif

[josefz]

Be sure about you're running timely updated antivir, and both Spybot S&D and Adaware!

Nasties: must be fixed! In HijackThis (make sure it is configured to make backups-->"Config button"-->"Main" button), check to fix the next entries:
O4 - HKLM\..\Run: [WindowsRegKey upd4te2d4te] wkeaadoqk.exe
O4 - HKLM\..\RunServices: [WindowsRegKey upd4te2d4te] wkeaadoqk.exe
O4 - HKCU\..\Run: [WindowsRegKey upd4te2d4te] wkeaadoqk.exe

Reboot and test your machine again.

[Taffy]

Thanks for your reply....
I have already done that but those three entries keep coming back.
The only thing I haven't done is install and run adaware, but I'm not sure if doing that will make a difference as I thing these three entries are more sinister than simple adds don't you ?

Taffy

TaffyDownUnder /images/forums/icons/cool.gif

[josefz]

Try boot in Safe Mode, search your computer for wkeaadoqk.exe and move it from it's original location(s) to another folder (create one for this purpose only) or recycle bin.
Be sure you search in hidden subfolders too.

If it will come back again, then I am at the end of my tether.

[Taffy]

Thanks, I will try that this afternoon and let you know.

TaffyDownUnder /images/forums/icons/cool.gif