login problems with XP

dsr · Aug 2, 2009

I'm working on trying to fix some problems for some family. This isn't the first time they've had troubles, but it has been the most persistent.

The biggest complaint was that the computer would freeze at various times during the log in process. Sometimes they would not be able to click on a user (mouse would move, but couldn't select user), sometimes it would freeze immediately upon clicking a user, and sometimes it would freeze after entering password.

I have run the suggested scans and attached the log files.

I'm also wondering if it's possible to tell from where the malware infection was acquired?

dsr · Aug 2, 2009

The final set of logs.

TimW · Aug 4, 2009

Your logs are clean. The scans took care of any malware that was on your system.

As to how you may have been infected:

There are many vehicles by which people get infected. Downloading and clicking on adverstisments are only two possible ways. Others include but are not limited to

* NOT KEEPING ALL SOFTWARE UPDATED!!!
* surfing - usually certain websites are the main problem
* click links to view pictures or videos, or listen to music....etc
* not reading what you are clicking on and even if you do it may be worded in a form to trick you into clicking the wrong answer. Sometimes the answer is the opposite of what you think. And sometimes there is no correct answer because it is already too late one the popup has appeared..
* installing codecs to view videos or sound
* installing cracks and or illegal software
* downloading via P2P or Torrent programs
* downloading from websites that do no check their downloads to see if they are safe and very few actually do this even though they say they do. (We do at Major Geeks!)
* reading emails from unknown senders especially if you have html enabled and also especially if clicking on any attachments
* reading emails from friends who don't know they are infected and may not even know they are sending you emails.

I know that many people like to say that they don't understand how they are getting infected, but the fact remains that in most cases it is by their own doing. I surf more than most people and access all kinds of websites while trying to test various malware. I have to eliminate all of my protection (even my router which has a hardware firewall) and I still have a hard time getting infected and I have to knowingly agree to install things to get infected.

General Tips for everyone (not just you )

* If you do not have a router or do not have a router with a hardware firewall, then get one.
* If you are not using a real bidirectional firewall then install one and only one. The Windows (any version) firewall is not adequate.
* Install one and only one antivirus program.
* Install one and only one realtime antispyware protection program
* Install the below for background protection
o SpywareBlaster
o Spybot with SDHelper and use the Immunization feature
* Do period scans with you AV and AS programs?
* Use additional scan only programs like SUPERAntiSpyware and Malwarebytes.
Click to expand...

If you are still having issues with your login process, you need to post in the software forum to assistance with that matter.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real-time protection. They are useful as backup scanners.They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Log in or Sign up

login problems with XP

dsr Private E-2

Attached Files:

SASlog.txt

MBlog.txt

ComboFix.txt

RRlog.txt

dsr Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member