Member Avatar for change

Hey there. 2 Days ago I suddenly received a warning popup from my nod32 antivirus asking me if I want to stop the threat, quarantine etc. I clicked stop the threat and the pc shut down. Ever since, I can only successfully start it in safe mode (using it right now). When I start normally, I can login, the desktop appears, the icons are being displayed and 2 seconds later, it shuts down again.

I have no idea if the anti-virus part even does matter, just mentioning it.

Can't get it to work now. First thought its the antivirus, so I deinstalled it. It wasn't so I re-installed it, but can't get an update. so I started to download other antivirus programs, but all of them can't be instlalled in safe mode....

- anybody an idea what I could try?
- if I should run a recent antivirus.. which one can be installed in safe mode?

thanks for the support.

Windows XP SP2
Intel Core 2 2.13ghz
2 Giga Ram

  • 3 Contributors
  • 3 Replies
  • 100 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by change

Dani AI

Generated

Good outcome for and thanks to for the System Restore prompt — that does often stop an immediate-login shutdown. A few practical notes and follow-up steps so the fix is durable and the machine is actually clean.

When the desktop appears and the system shuts down seconds later it usually means a startup program, service, driver or a corrupted system file is being launched at logon. Use Safe Mode to gather evidence before making changes: check Event Viewer (System and Application) for errors at the shutdown time, run msconfig to perform a selective startup (disable non-Microsoft services and startup items) and reboot to see if the problem follows a specific service or startup entry. Autoruns (Sysinternals) or, if you follow the earlier advice from , a HijackThis/Autoruns log will help identify suspicious Run/RunOnce/Userinit entries — record any changes before removing them.

Many AV installers do not run correctly in Safe Mode because core services are disabled. If you cannot install an AV there, either boot Safe Mode with Networking to update or use a bootable offline rescue scanner (rescue CD/USB) or a dedicated rootkit remover (for example, tools targeted at bootkits). After cleaning, run sfc /scannow to repair system files, fully update Windows, then reinstall and update reputable antivirus and perform full scans.

Final cautions: System Restore can mask or return infected files, so always scan afterwards. Change online passwords if malware was suspected, make a verified backup of important data, create a fresh clean restore point once the system is stable, and consider upgrading from unsupported Windows XP for long‑term security. If symptoms return, post cleaned Autoruns/HijackThis logs and relevant Event Viewer entries for targeted advice.

Recommended Answers

All 3 Replies

Member Avatar for Suspishio

I think you should read the first three posts in the Virus forum and then post a HJT log into that forum with a restatement of the problem.

Member Avatar for TechTJ

Maybe you should also try a System Restore in safe mode to a day or two before you choose to stop the process.

Best regards
Tech TJ

Member Avatar for change

thanks alot, this saved my day. I always forget that system restore option!!! I could restore it to right before and the problem is no more... thanks again!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.