Desktop

Ask something
Question Locked

IBM think pad logging off

0 helpful
7 replies

by leezx10

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a user who was using spybot it told him he had 99 errors. He told spybot to repair them all, and now when he boots his laptop it logs in and then says Windows is logging off. Have anyone ever seen this problem before. Is there a way to repair it. I think spybot deleted an important file I just don't know which one.

7 replies

by larryd4

I would boot in to safe mode, if possible, and look at the spybot logs to see what files were changed and/or deleted.

Oh and as a suggestion, adaware is my personal favorite.

www.adaware.com

by thumbsup2

Adaware is only available as a free product for personal use. It's no longer free for business/commercial use. We've had to abandon it for that reason, since they've changed their licensing.

by larryd4

That had to suck, I love the thing.. We don't use it in the office either..

by leezx10

Safemode won't work that was the first thing i did. I'm logged in now using a live CD called BartPE. I''m looking for a way to convert back to the last restore point before this guy screwed it up. If that dosen't work I'll log in to the laptop threw remote desktop and see if I can find the spybot log files.
Thanks, any other suggestions.

by seanferd

What I'd bet is that some malware had attached itself to winlogon, and now the system won't boot because it is looking for something that isn't there, but is actually malware and not a Windows file.

I'd have a look through Autoruns from
http://technet.microsoft.com/en-us/sysinternals/default.aspx.
You can install that on a BartPE disk and run it from there. You might also like to get Rootkit Revealer from the same place, or
GMER http://www.gmer.net/index.php

You might try installing Spybots S&D on the BartPE disk, you might be able to undo the repairs offline, but I've never tried it.

by ashish_apo

I am not sure of recovery path. If found some solution please let me know.

This discussion is closed to new replies.