Question

Locked

Problem with virus?

By c.rubino ·
Well I ended up finding a virus somewhere and while in the process of fixing it I went through and tried a few different av programs. My actual question isnt about the virus it's about me not being able to get past my login screen. I booted safe mode from msconfig. When i restart my computer and try to log on with admin or my actual login, it attempts to logon like normal when i click on the icon/name and automatically logs itself off back to the login screen. I dont have a chance to get in and change msconfig boot mode off of safe mode. dont want to reformat Is there anyway to change that msconfig option without getting into my computer so it will boot up normally and not in safemode?

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

A couple of things to try

by Jacky Howe In reply to Problem with virus?

It could be either of these methods to restore your access.

Insert the XP CD and reboot the computer. You may need to configure your computer to boot from the CD-ROM drive.
When the Windows XP Setup has started, press "R" to "repair the Windows XP installation using Recovery Console".
Select the Windows installation to repair (generally this is C:\Windows) by typing its number and then pressing ENTER.
Type the Administrator password and press ENTER.
Type the following commands: and press Enter after each.

CD I386
EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32
NOTE: If your CD-ROM drive has a different letter assigned to it, enter "X:" instead, where X is the appropriate drive letter.
After entering "EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32" you should see the text "1 file(s) copied", in which case all went well.

Remove the Windows XP CD, type "EXIT" and press ENTER to restart your computer. You should now be able to log on as normal.


Enter the Recovery Console

Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console.

1: C:\WINDOWS

Which Windows Installation would you like to log on to
(To cancel, press ENTER)?
After you enter the number for the appropriate Windows installation, Windows will then prompt you to enter the Administrator account password.

Note If you use an incorrect password three times, the Windows Recovery Console closes. Also, if the Security Accounts Manager (SAM) database is missing or damaged, you cannot use the Windows Recovery Console because you cannot have correct authentication. After you enter your password and the Windows Recovery Console starts, type exit to restart the computer.

Type the following command and press Enter.

CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
At the prompt type in
<b>COPY USERINIT.EXE WSAUPDATER.EXE</b>

Quit Recovery Console by typing EXIT and restart Windows.

You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

<b>"WARNING MODIFYING REGISTRY INFORMATION IS DANGEROUS"</b>
Backup the Key before making changes.

Now, change the USERINIT value in the registry
Click Start, Run and type <b>Regedt32</b> and press Enter.

Navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon

In the right pane you will see that the value of the Userinit key is incorrectly set to <b>"wsaupdater.exe,"</b>


In the right-pane, change the value of Userinit to C:\WINDOWS\system32\<b>userinit.exe,</b>

Type the above value exactly as given, including the comma. Also, change the path to userinit.exe appropriately if Windows is installed in a different drive.

Close Registry Editor and restart Windows.


<b>If you haven't access to an XP CD, here is an alternative.</b>

The Windows Vista Recovery CD can be used to Boot to a Command Prompt where you can run these Commands.

Boot from the CD and on the first screen click Next, click Repair your computer, click Next and select Command Prompt.

<i>It does'nt matter if the Default OS is XP it can still be used on XP PRO or Home.</i>

<b>Creating a Windows Vista Recovery CD</b>

http://blogs.techrepublic.com.com/window-on-windows/?p=622

<b>Download from here:</b>
http://coblitz.codeen.org/neosmart.net/downloads/guides/Vista_Repair/Vista_Recovery_Disc_x86.iso

Burn it with Nero or equivalent and use the previous instructions.

<i>Keep us informed as to your progress if you require further assistance.</i>

Back to Malware Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums