Problems trying to boot up XP

TheUnKnownTech · Sep 9, 2005

I'm working on a PC with a problem that when you try and sign into a passworded name it goes into their desktop then suddenly boots back out to the users list. The system did have 3 trojans on it, but now removed.

Operating System = XP Home Edition With SP1 (Build 2600)
Processor = 1.67Gig AMD Athlon XP
Ram = 480Mb
Bus Speed = 133 Megahertz
Mother Board = Micro-Star International Co. Ltd. MS-6390

If you need anymore information let me know and I will try and find the information for you.

Many thanks,
Andy

Anon-068c403e2d · Sep 9, 2005

http://www.winxptutor.com/wsaremove.htm

As the article explains a trojan has modified your registry

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon The correct value should be "C:\WINDOWS\system32\userinit.exe,"

But it has been changed to something else.It is important to identify the correct trojan that infected the machine.Because the instruction for removal is depended on this.If you had the blazefind toolbar you should go ahead and try the instructions in the link above.

Enter the Recovery Console

Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)

Type the following command and press Enter.

CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)

COPY USERINIT.EXE WSAUPDATER.EXE

Quit Recovery Console by typing EXIT and restart Windows.

You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

Now, change the USERINIT value in the registry (see Phase II in this page) and change it accordingly.
Click to expand...

Log in or Sign up

Problems trying to boot up XP

TheUnKnownTech Private E-2

Anon-068c403e2d Anonymized