Re: winlogin is killin' me!

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance


ran adaware found 13 items
ran spybot found 91 items including something called window security center
antivirusoverride and a bunch of wwwcoolsearch items
ran bhodemon - he is down due to a house fire it did not find anything

still wont get past loading personal setings.

will rescan with mcaffed and try all again.

mrG


"mrgumby" wrote:

>
> Hi Dave - thanks for staying with me on this
>
> The last several scans with winfixit did not find backdor. Mcafee did not
> report finding anything. It appears to be gone.
>
> Started down the path with lavasoft. It has found 13 items. Am downoading
> the rest now.
>
> mrG
>
> "David H. Lipman" wrote:
>
> > From: "mrgumby" <mrgumby@xxxxxxxxxxxxxxxxxxxxxxxxx>
> >
> > | finally got a chance to get back on this.
> > |
> > | ran the new winfixit with backdoor detector. Didn't say it found anything,
> > | everything seemed to be fixed, got up in normal mode. Ran winfixit again,
> > | found nothing. Ran Norton antivirus corporate edition, got through that
> > | without finding anything got on internet everthing seemed OK.
> > |
> > | rebooted in normal mode again and the problem (or a new one) is back.
> > | I can go into safe mode run winfixit again and it doesn't help anymore.
> > |
> > | here's what it does
> > | boots up in in normal mode, window XP screen comes up, goes to logon screen
> > | , select user, type in password and it says loading your personal settings,
> > | no windows signon jingle, about 20 sec later, desktop background shows up,
> > | and nothing else. hard disk access light is active, so something is going on
> > | - any ideas?
> > |
> >
> > The McAfee HTML Log file had nothing to report ?
> > C:\mcafee\ScanReport.HTML
> >
> > Go through all of the following.
> >
> > For non-viral malware...
> >
> > Please download, install and update the following software...
> >
> > * Ad-aware SE v1.06
> > http://www.lavasoft.de/
> > http://www.lavasoftusa.com/
> >
> > * SpyBot Search and Destroy v1.4
> > http://security.kolla.de/
> >
> > After the software is updated, I suggest scanning the system in Safe Mode.
> >
> > I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
> > that may be on the PC.
> >
> > * BHODemon
> > http://www.definitivesolutions.com/bhodemon.htm
> >
> > For viral malware...
> > { The Mcafee module is redundant to the McAfee scanner in the WinFixerFix utility }
> >
> > * Download MULTI_AV.EXE from the URL --
> > http://www.ik-cs.com/programs/virtools/Multi_AV.exe
> >
> > To use this utility, perform the following...
> > Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> > Choose; Unzip
> > Choose; Close
> >
> > Execute; C:\AV-CLS\StartMenu.BAT
> > { or Double-click on 'Start Menu' in C:\AV-CLS }
> >
> > NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
> > FireWall to allow it to download the needed AV vendor related files.
> >
> > C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> > This will bring up the initial menu of choices and should be executed in Normal Mode.
> > This way all the components can be downloaded from each AV vendor's web site.
> > The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.
> >
> > You can choose to go to each menu item and just download the needed files or you can
> > download the files and perform a scan in Normal Mode. Once you have downloaded the files
> > needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
> > during boot] and re-run the menu again and choose which scanner you want to run in Safe
> > Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
> >
> > When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
> > file. http://www.ik-cs.com/multi-av.htm
> >
> >
> > * * * Please report back your results * * *
> >
> >
> >
> > --
> > Dave
> > http://www.claymania.com/removal-trojan-adware.html
> > http://www.ik-cs.com/got-a-virus.htm
> >
> >
> >
.

Relevant Pages

  • Re: pop up across desktop
    ... Thanks, Steve T. ... download it and upgrade immediately then press Scan Your Computer button ... in normal mode; found 7 infections and cleaned them ... It did not find anything in Safe Mode after. ...
    (microsoft.public.windowsxp.general)
  • Re: Getting a warning NOTICE
    ... To go back to Normal Mode, ... A description of the Safe Mode Boot options in Windows XP ... You can choose to go to each menu item and just download the needed files ... Follw up with a HJT scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Getting a warning NOTICE
    ... Do you wnat to injstall AntiSpware Suite to scan your PC for malware now? ... To go back to Normal Mode, ... A description of the Safe Mode Boot options in Windows XP ... You can choose to go to each menu item and just download the needed files ...
    (microsoft.public.windowsxp.general)
  • Re: alcan A or a dropper?
    ... I've never had a virus this bad. ... Download Adware-Virtumundo Removal Tool -- ... It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML ...
    (microsoft.public.windowsxp.general)
  • Re: alcan A or a dropper?
    ... Download Adware-Virtumundo Removal Tool -- ... Information on the Adware-Virtumundo Removal Tool: ... It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML ...
    (microsoft.public.windowsxp.general)