Virus turns off the monitor

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hello,

I have Windows XP. A had a worm (a week ago or so) which I removed
with an online scanner (I haven't memorized the names).

It seems it has turned into a major problem, however. I start my
computer and it runs until the first Windows screen appears. Right
afer this moment, the monitor goes into the stand-by mode. The systems
seems to go on running because the hard disc continues run.

Unfortunately, F8 doesn't take it to the safe mode (where I could
perform another scan).

Can you, please, suggest something?

Tom

P.S. The monitor is OK, I have checked. The computer from which I am
posting is yet another machine (which is OK :)

Re: Virus turns off the monitor


| Hello,

| I have Windows XP. A had a worm (a week ago or so) which I removed
| with an online scanner (I haven't memorized the names).

| It seems it has turned into a major problem, however. I start my
| computer and it runs until the first Windows screen appears. Right
| afer this moment, the monitor goes into the stand-by mode. The systems
| seems to go on running because the hard disc continues run.

| Unfortunately, F8 doesn't take it to the safe mode (where I could
| perform another scan).

| Can you, please, suggest something?

| Tom

| P.S. The monitor is OK, I have checked. The computer from which I am
| posting is yet another machine (which is OK :)

You are going to have to describe the problem "better" than...
"...Windows screen appears. Right afer this moment, the monitor goes into the
stand-by
mode..."

This sounds like a video driver problem.

Test 1:
Login to a different account

Test 2:
Boot into Safe Mode. ( F5 )


--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

wrote:
Quoted text here. Click to load it

Thank you very much for replying.

A better (layman) description is this:

1. I start the computer.

2. It boots.

3. It prints the BIOS messages on the screen (the amount of memory,
size of the hard drive etc.)

4. Then it starts loading Windows and precisely this screen appears:

http://pcarena.pl/uploads/adam/bootup60.gif

5. After this, the monitor goes into the stand by mode (the on/off
switch's colour changes from green to red).

6. The hard drive seems to continue to run (it can be heard plus the
diode blinks)

I tried using the F8 / F5 keys as early as possible (holding them
down / pressing them several times) with no effect of going into the
Safe Mode. They seem to be ignored by the system (which seems very
unusual).

I can't log in at all. I can't to the point of logging in.

All software is legal. Everything was fine until now. I installed no
new software that could manipulate the drivers. As I said, I had a
virus a week ago, which I removed with some free online scanner (which
of course wasn't perfect).

What do you think?

Tom

Re: Virus turns off the monitor


| Thank you very much for replying.

| A better (layman) description is this:

| 1. I start the computer.

| 2. It boots.

| 3. It prints the BIOS messages on the screen (the amount of memory,
| size of the hard drive etc.)

| 4. Then it starts loading Windows and precisely this screen appears:

| http://pcarena.pl/uploads/adam/bootup60.gif

| 5. After this, the monitor goes into the stand by mode (the on/off
| switch's colour changes from green to red).

| 6. The hard drive seems to continue to run (it can be heard plus the
| diode blinks)

| I tried using the F8 / F5 keys as early as possible (holding them
| down / pressing them several times) with no effect of going into the
| Safe Mode. They seem to be ignored by the system (which seems very
| unusual).

| I can't log in at all. I can't to the point of logging in.

| All software is legal. Everything was fine until now. I installed no
| new software that could manipulate the drivers. As I said, I had a
| virus a week ago, which I removed with some free online scanner (which
| of course wasn't perfect).

| What do you think?

So it run the Power On Self Test (POST)

Shows the OS inistial Splash Screen and then no longer drives video.

It hasn't reached the Winlogon process so I strongly think it is driver related.
 Video
maybe ?

Do you have the Windows Recovery Console installed ?
If yes, try booting into it.

Desktop or notebook ?

If desktop...
Is this an embedded video or is in a PCI/AGP video card ?
Do you have access to another video card ?

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

wrote:
Quoted text here. Click to load it

::::

Quoted text here. Click to load it

Yes.


Yes.


I take your word for it (I thought it would be a virus, but OK, sure).

Quoted text here. Click to load it

It is my girlfriend's computer. The license was paid for and the
system was downloaded via the Internet (so, I think, there is
everything except the system disc from which I could boot). I will
check with her for details tomorrow.

Quoted text here. Click to load it

It's a desktop with an onboard video card.

Quoted text here. Click to load it

Not at the moment, but I might just have borrow one somewhere.

Do you completely exclude a possibility of a virus?

Thank you very much again.

Tom


Re: Virus turns off the monitor


| wrote:

Quoted text here. Click to load it
















| Yes.

Quoted text here. Click to load it

| Yes.

Quoted text here. Click to load it

| I take your word for it (I thought it would be a virus, but OK, sure).

Quoted text here. Click to load it

| It is my girlfriend's computer. The license was paid for and the
| system was downloaded via the Internet (so, I think, there is
| everything except the system disc from which I could boot). I will
| check with her for details tomorrow.

Quoted text here. Click to load it


| It's a desktop with an onboard video card.

Quoted text here. Click to load it

| Not at the moment, but I might just have borrow one somewhere.

| Do you completely exclude a possibility of a virus?

| Thank you very much again.

Everybody thinks all things that happen negatively with a computer is malware
related.
Some things yes, many others no or possibly a side effect.

However assuming it is malware related the chances of it being a virus is
extremely slim.
There is a much higher probability of it being caused by a trojan (assuming it
was malware
related).

All viruses are malware.  Not all malware are viruses.

For all we know a driver was attempted to be trojanized or it was trojanized and
then the
driver (which was trojanized and thus detected as malware) was removed leaving
the system
in the state it is in.

Right now we need to look at why at this point in the boot process the video
isn't being
driven.

The process of elimination will help sort things out and that would require
bypassing the
video card with another.

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

wrote:
Quoted text here. Click to load it

::::

Quoted text here. Click to load it

Laymen like me think that. :)

Quoted text here. Click to load it

Yes, I see.

Quoted text here. Click to load it

An onboard video card - I quoted that from memory (I am sorry).

It is really a removable GF4 MX440-8X Ver:M, 64M 128BIT DDR TV-OUT,
GJ050129300692 (sticker info). Call it card 1.

I took out another card from an older PC. It is: BAI-002-SDR6H
(laminate info front), 0149011361AGP-128ULTV2M-32M (sticker info),
HDLTEK HT270512-70 A119MO813-2 (main chip). Call it card 2.

I took out card 1 and I put in card 2. Everything works fine - thank
you very much indeed :)

Now, I found drivers for card 1 and downloaded them.

http://download.cnet.com/NVIDIA-GeForce4-MX-440-with-AGP8X/3000-2108_4-6522 =
3.html

I tried to run them, but (obviously :) it didn't work because they are
not meant for card 2.

I put card 1 back in. The screen turns off as previously.

The idea is to reistall the drivers for card 1. I think.

What do you think and how do I do that?

Thank you very much again for your time.

Tom :)





Quoted text here. Click to load it


Re: Virus turns off the monitor



| An onboard video card - I quoted that from memory (I am sorry).

| It is really a removable GF4 MX440-8X Ver:M, 64M 128BIT DDR TV-OUT,
| GJ050129300692 (sticker info). Call it card 1.

| I took out another card from an older PC. It is: BAI-002-SDR6H
| (laminate info front), 0149011361AGP-128ULTV2M-32M (sticker info),
| HDLTEK HT270512-70 A119MO813-2 (main chip). Call it card 2.

| I took out card 1 and I put in card 2. Everything works fine - thank
| you very much indeed :)

| Now, I found drivers for card 1 and downloaded them.

|
http://download.cnet.com/NVIDIA-GeForce4-MX-440-with-AGP8X/3000-2108_4-65223.html

| I tried to run them, but (obviously :) it didn't work because they are
| not meant for card 2.

| I put card 1 back in. The screen turns off as previously.

| The idea is to reistall the drivers for card 1. I think.

| What do you think and how do I do that?

| Thank you very much again for your time.

| Tom :)

"I took out another card from an older PC. It is: BAI-002-SDR6H (laminate info
front),
0149011361AGP-128ULTV2M-32M (sticker info), HDLTEK HT270512-70 A119MO813-2 (main
chip).
Call it card 2."

Wow that is hard to get data on.  I don't recognize it.

What we need is the;  make, manufacturer and model number of PC1 and PC2 and
find what
video options are/were available for PC2 (that has a good video card).


--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

wrote:
Quoted text here. Click to load it

Both PC1 & 2 have been assembled in local computer shops from more or
less randomly chosen parts (as far as the choice of their
manufacturers was concerned). I don't have any information except what
it says directly on the equipment itself.

But, actually, today another local computer store gave me something
called Malwarebytes Antimalware (said to be free and good) to try.
Thanks to your kind suggestion, I was able to run PC2 with the video
card from PC1 for a while and I run the software. It turned up lots of
infected files (trojans, viruses, etc. and about 40 of them). The
software cleaned the disk, reset the computer and after another scan
said everything was fine (no infection). I can now run PC2 in the Safe
Mode (the VGA Mode) with he original card, but unfortunately, after a
while the monitor turns off again.

The man who gave me the software said that something changes the
resolution of the screen beyond what the screen can handle, hence the
behaviour. It might be some undetected malware. I might have to take
the machine there tomorrow so that he runs whatever he wants on it.

My last virus cost me reloading the BIOS, low formatting the hard
drive and reinstalling Windows plus a lot of my time (I did myself :)
I hope the man fixes it tomorrow so that it doesn't take too much of
anyone else's time and attention.

Btw, I think I should get some decent anti-malware, shouldn't I? Would
you be kind enough as to say a few words about the product you
advocate?

http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html

The man suggested addition three names: Norton, Nod & Kaspersky.

What do you think?

Thank you again for your time and support.

Tom

Re: Virus turns off the monitor



| Both PC1 & 2 have been assembled in local computer shops from more or
| less randomly chosen parts (as far as the choice of their
| manufacturers was concerned). I don't have any information except what
| it says directly on the equipment itself.

| But, actually, today another local computer store gave me something
| called Malwarebytes Antimalware (said to be free and good) to try.
| Thanks to your kind suggestion, I was able to run PC2 with the video
| card from PC1 for a while and I run the software. It turned up lots of
| infected files (trojans, viruses, etc. and about 40 of them). The
| software cleaned the disk, reset the computer and after another scan
| said everything was fine (no infection). I can now run PC2 in the Safe
| Mode (the VGA Mode) with he original card, but unfortunately, after a
| while the monitor turns off again.

| The man who gave me the software said that something changes the
| resolution of the screen beyond what the screen can handle, hence the
| behaviour. It might be some undetected malware. I might have to take
| the machine there tomorrow so that he runs whatever he wants on it.

| My last virus cost me reloading the BIOS, low formatting the hard
| drive and reinstalling Windows plus a lot of my time (I did myself :)
| I hope the man fixes it tomorrow so that it doesn't take too much of
| anyone else's time and attention.

| Btw, I think I should get some decent anti-malware, shouldn't I? Would
| you be kind enough as to say a few words about the product you
| advocate?

| http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html

| The man suggested addition three names: Norton, Nod & Kaspersky.

| What do you think?

| Thank you again for your time and support.

Let me state that I am a past employee of Malwarebytes and I can state that
their product,
Malwarebytes' Anti Malware (aka; MBAM), does not specifically target "viruses"
in
reference to you stating "It turned up lots of infected files (trojans, viruses,
etc. and
about 40 of them)."  I'd like to see that log file or at least a snippet showing
what was
detected and what they were declared to be.  MBAM is an excellent non-viral
malware
program in both it's free On Demand Scanner version or in the full feature
preventative
paid-for version.  You mentioned Norton AV, Eset NOD32 and Kaspersky.  Forget
Norton.
Eset NOD32 and Kaspersky are excellent anti virus products as well as one that
was not
mention is Avira AntiVir.  Any of which can be supplemented by MBAM.

You also stated "My last virus cost me reloading the BIOS...".  That was a
wasteful
measure.  If malware, such as the Chernobyl, has affected the BIOS then the PC
would have
been impotent and you would have been unable to re-flash the BIOS.

Let me also reiterate... "It hasn't reached the Winlogon process so I strongly
think it is
driver related.  Video maybe ?" in reference to you stating "The man who gave me
the
software said that something changes the resolution of the screen beyond what
the screen
can handle, hence the behaviour."

That may be true.  However malware doesn't set video resolution, peolple do and
the visdeo
resolution is set per user.  Since this happens subsequent to the OS Splash
Screen and
prioor to the Winlogon process I don't think it is a resolution problem.
However look at
from a driver issue or OS corruption issue.

The idea of installing an alternate video card needs to be continued.  You need
one where
you have WinXP drivers for.  Then the state of the computer's OS canm be
determined.

The The man who gave me the software (presumably MBAM) should have provided you
video
drivers.

You indicated that you were able to run MBAM.  That means you were able to run
WinXP.
Can you get into Safe Mode ?
If yes, using Safe Mode can you restore the PC to a restore breakl point of a
period when
the PC was working properly ?


--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

Dave wrote:

Quoted text here. Click to load it

I certainly haven't deleted the report, but I haven't saved it. If it
had been saved automatically, it's still there and I will post it to
you. Having seen it, I thought that was all (for some reason). I
should have intentionally saved it.

I remember that most of the infected files were in a catalogue "C:
\Program files\Relevant knowledge". A catalogue which later
disappeared (for some reason).

Honestly, there were 3-4 types of malware, a trojan, spy software. I
can't remember exactly. I was just happy that I found something.

Quoted text here. Click to load it

In that case, I think I will purchase NOD32.

Quoted text here. Click to load it

It was bad enough :(

Quoted text here. Click to load it

Was it written just for the hell of it? :(

Quoted text here. Click to load it

The person who will try to help me tomorrow is a computer technician,
nowhere near a malware expert, like you. He and I will do our best. I
will bear in mind all your remarks and get back to you when we're done
(I know you'd solve it in minutes, but unfortunately you're far away).

The surest thing would be to flash the BIOS and reinstall Windows,
wouldn't it? I know you'd consider that stone age thinking, but people
solved problems in those days, didn't they? ;)

At least I am now able to run in it the Safe Mode (for while).

Quoted text here. Click to load it

Let's just see if I waste time tomorrow, or not.

Quoted text here. Click to load it

Thank you, we will try that.

Quoted text here. Click to load it

He is a sales person and a technician. Nowhere near an expert.

His first idea was the purchase of a new computer ;)

No, it wasn't. But I have plenty of time to waste, so why not try
it? ;)

Quoted text here. Click to load it

Yes, now I can get to Safe Mode. Ok, I am in Safe Mode, the computer
is running.

Then, suddenly, without any apparent cause, the monitor turns off.

The PC is still running. It seems it's running, because I can turn it
off just fine with the manual on/off switch on the casing. I press it
and the hard disc runs for a while, and the computer turns off.

Is there a log of operations the system does that would include the
very moment and reason of the monitor's turning off and allow a
restoration to the point immediately preceding that moment? I am just
an average user. I don't know such things :(

Anyway, thank you very much again.

Tom


Quoted text here. Click to load it


Re: Virus turns off the monitor


| Dave wrote:

Quoted text here. Click to load it

| I certainly haven't deleted the report, but I haven't saved it. If it
| had been saved automatically, it's still there and I will post it to
| you. Having seen it, I thought that was all (for some reason). I
| should have intentionally saved it.

| I remember that most of the infected files were in a catalogue "C:
| \Program files\Relevant knowledge". A catalogue which later
| disappeared (for some reason).

| Honestly, there were 3-4 types of malware, a trojan, spy software. I
| can't remember exactly. I was just happy that I found something.

Quoted text here. Click to load it

| In that case, I think I will purchase NOD32.

Quoted text here. Click to load it

| It was bad enough :(

Quoted text here. Click to load it

| Was it written just for the hell of it? :(

Quoted text here. Click to load it

| The person who will try to help me tomorrow is a computer technician,
| nowhere near a malware expert, like you. He and I will do our best. I
| will bear in mind all your remarks and get back to you when we're done
| (I know you'd solve it in minutes, but unfortunately you're far away).

| The surest thing would be to flash the BIOS and reinstall Windows,
| wouldn't it? I know you'd consider that stone age thinking, but people
| solved problems in those days, didn't they? ;)

| At least I am now able to run in it the Safe Mode (for while).

Quoted text here. Click to load it

| Let's just see if I waste time tomorrow, or not.

Quoted text here. Click to load it

| Thank you, we will try that.

Quoted text here. Click to load it

| He is a sales person and a technician. Nowhere near an expert.

| His first idea was the purchase of a new computer ;)

| No, it wasn't. But I have plenty of time to waste, so why not try
| it? ;)

Quoted text here. Click to load it

| Yes, now I can get to Safe Mode. Ok, I am in Safe Mode, the computer
| is running.

| Then, suddenly, without any apparent cause, the monitor turns off.

| The PC is still running. It seems it's running, because I can turn it
| off just fine with the manual on/off switch on the casing. I press it
| and the hard disc runs for a while, and the computer turns off.

| Is there a log of operations the system does that would include the
| very moment and reason of the monitor's turning off and allow a
| restoration to the point immediately preceding that moment? I am just
| an average user. I don't know such things :(

| Anyway, thank you very much again.

Nope, no log that would show monitor just not showing a display.
There is no reason to re-flash BIOS.  The only time is when you upgrade the BIOS
to the
latest version for such reasons as installing new hardware or a new OS or to
specifically
fix a problem.

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

wrote:
Quoted text here. Click to load it

::::
Quoted text here. Click to load it

Yup. :)

Quoted text here. Click to load it

Yes, I skipped the BIOS part. I think MBAM and Avira AntiVir did the
job.

No more viruses and I reinstalled the video drivers. The thing seems
stable (for now). Will keep both sofware above and advocate purchasing
NOD32. I think her school uses it too (which is all the better reason
for this choice).

NGs are *GREAT*!

Dave, thank you very much indeed for your support. I might have to
return to this topic, but let's hope not. :)

Many thanks again :)))

Tom

Quoted text here. Click to load it


Re: Virus turns off the monitor


Quoted text here. Click to load it

DO NOT flash the bios.  If it boots at all, the bios is ok. Trying
to flash it, may fail, leaving the computer un-bootable.

The eeprom that stores the bios firmware has a very limited number
of writes, before it will fail.  The only time you should flash
the bios, is if a firmware update is required to fix a hardware
problem that you are experiencing.

If the bios is soldered in (most are), destroying the bios by too
many writes effectively means buying a new motherboard.  If the
cpu is soldered in, that also has to be replaced.

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)

Re: Virus turns off the monitor



| Btw, I think I should get some decent anti-malware, shouldn't I? Would
| you be kind enough as to say a few words about the product you
| advocate?

| http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html

| The man suggested addition three names: Norton, Nod & Kaspersky.

| What do you think?

| Thank you again for your time and support.

I forgot to respond to that.  Sorry  :-(

The PCTipp URL isn't just some product that I advocate, it is my own utility
called the
Multi-AV Scanning Tool and is a scripted front-end to anti malware On Demand
scanners
from;  Kaspersky, Trend Micro, Avira, Sophos and Emsisoft.  None of which has to
be
installed prior to its use.  The tool will download all that's needed.


--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

wrote:
Quoted text here. Click to load it

Thank you very much for these remarks. As I said, this is not my own
computer, so I think I suggest the owner (my girlfiend) buying the
NOD32.

Tom

Re: Virus turns off the monitor



| Thank you very much for these remarks. As I said, this is not my own
| computer, so I think I suggest the owner (my girlfiend) buying the
| NOD32.

ESET NOS32 is a fine choice and I suggest pairiung it with MBAM (full version
which you
purchase one lifetime license).

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

wrote:
Quoted text here. Click to load it

I've had these:

ADWARE/Adware.Gen
ADWARE/Agent.54132
APPL/Nir.Cmd.E.1.B
TR/Trash.Gen
TR/Drop.Softomat.AN
TR/Spy.533120
TR/Spy.123520
TR/Spy.107136

Too bad, isn't it. Avira AntiVir turned them up. There was lost more
the first time around (when MBAM scanned it :)

I think I might flash the thing and reload Windows. I'll see what the
man says.

Tom

Re: Virus turns off the monitor


| I've had these:

| ADWARE/Adware.Gen
| ADWARE/Agent.54132
| APPL/Nir.Cmd.E.1.B
| TR/Trash.Gen
| TR/Drop.Softomat.AN
| TR/Spy.533120
| TR/Spy.123520
| TR/Spy.107136

| Too bad, isn't it. Avira AntiVir turned them up. There was lost more
| the first time around (when MBAM scanned it :)

| I think I might flash the thing and reload Windows. I'll see what the
| man says.

No viruses listed and nothing too catestrophic.

I won't disagree with your wipe and re-install of the OS.  Just make sure you
have ALL the
hardware drivers first.

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Virus turns off the monitor

wrote:
Quoted text here. Click to load it

They're all _to me_! ;)))

Site Timeline