Re: windows sbs 2000 Logon - logoff loop

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

In article <B6DE0CEC-5C13-4A4C-9A70-B36F1353D5D7@xxxxxxxxxxxxx>,
JoseAlves@xxxxxxxxxxxxxxxxxxxxxxxxx says...
Finally solved.

some malware has changed the registry key
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
userint" to other value. i fix it and now i can logon in the server without
problems

thanks

Cool.

Malware on the Server? - who's been browsing what on the SERVER!???

Gotta put a stop to that practice.! :)

Change passwords.

--
Duncan
.

Relevant Pages

  • Re: [Full-disclosure] windows future
    ... The reason to believe the exponential model will remain valid, ... Did you see the link I posted to the "Evolvable Malware" PPT? ... I have already decommissioned one server, ...
    (Full-Disclosure)
  • Re: Windows/Macro Language Info?
    ... Java scriptlets and servlets can also carry malware. ... other part of the HTTP server. ... PHP can deliver malware and coordinate attacks to precisely the ... server-side scripting languages are not. ...
    (comp.lang.cobol)
  • Re: Action Plan!
    ... 'boater.dave' group on your server which is NOT moderated by anyone at all. ... I would steer away from that newsgroup, ... | So it seems that they are lying - or I have malware on my ... while 'Nanoscan' checks, on the same system in 20 seconds, well, who ...
    (microsoft.public.security.virus)
  • Re: Is there any point to full host names in /etc/hosts ?
    ... Using non-IE browsers means they have to work harder to get malware onto their machines - having a virus scanner in the path would make it even harder. ... You make it sound as though there are gangs of crackers working round the clock on ways to break into my networks, using a combination of essentially unrelated client and server attacks. ...
    (comp.os.linux.networking)
  • Re: Zone Alarm popup
    ... `Zone alarm pop up security alert` Server Program saying ... Generic Host Process for Win32 Servers is trying to act as a server ... I can't answer for the OP, but my AZ popup states it's "svchost.exe", not the malware version "sychost.exe", so I suppose that is what the OP meant to state too. ... It's entirely possible that I am not understanding what you posted, but if it was a solution to the OP's ZA popup problem (to be clear; ZA not remembering that I selected it to rember to allow the Generic Host Process for the svchost.exe file to access the internet) and not involving removal of the ZA program or some malware file that I don't have, then it's still not the solution I'm looking for. ...
    (microsoft.public.windowsxp.general)