Re: Login problem

Tech-Archive recommends: Fix windows errors by optimizing your registry

James,

The thread is not about the troll actually it seems to diverted as so

I gave the thread what I did to resolve the situation. Depending on the
state of the OS depends what you do. The OS I was doing had a rootkit too &
if you know anything you would understand you cannot trust a machine with a
rootkit. Besides this, the person is paying me to sort out his computer &
this is what I am doing. All his data is backed up now so the best thing I
can do is rebuild it properly so he doesn't get any more trouble or I'd get
it back saying it wasn't repaired properly

FYI: just copying back the userinit.exe is not the final solution. I spent
around 12 hours just to get the machine logging in correctly & I used a
Windows PE disc running from the command prompt to do everything because
when I detached the hard drive, placed it in a SATA caddy to connect to one
of my machines it wouldn't initialise due to the MBR being changed by the
infection. If this would have worked then it would have made life easier.
Also, I found that the NTFS.SYS file was also corrupt causing issues too

Besides the above it seems that more & more machines in the past week are
getting the same infection

So, James. I see that you can repair these corruptions easily without being
able to get into safe mode, system restore, normal login or being able to do
a rdp session. Clever you but I see you haven't provided an absolute
solution. Instead just made pointless comments. Whereas, I have solved this
issue with things I've done

SPAMCOP User


----- Original Message ----- From: "James Watkins" <Monitor@xxxxxxxxxx>
Newsgroups: microsoft.public.windowsxp.general
Sent: Sunday, March 29, 2009 12:07 PM
Subject: Re: Login problem


You appear to miss the main problem in this thread: there is a troll
impersonating several different MVPs and dishing out bad advice under
their
names. I'm not even sure which side you're on: What you say about
userinit.exe causing the problem is correct but your subsequent advice is
equivalent to fixing a scratch in the door of your car with a sledge
hammer.
There is no need at all for the OP to "flatten" his Windows installation.
The userinit-issue can be resolved in far more elegant ways, without
destroying the current installation.


"SPAMCOP User" <spamcop_user@xxxxxxxxxxxx> wrote in message
news:eUfaPdFsJHA.724@xxxxxxxxxxxxxxxxxxxxxxx
You can trust the MVP's but not all their advice is correct so you need
to
trust other's too who have real qualifications & not just answered a
certain
number of questions in the newsgroup as that is the only qualification to
become a MVP. And remember some just paste in the same advice in every
post
whereas others just seach Google. for the answer & write it here

BTW: the logon/logoff issue for the Media Centre machine I was repairing
was
due to the user downloading Antivirus 360 (C:\Program Files\A360) which
also
deleted 'userinit.exe'. Going through the winlogon registry key making
the
appropriate changes allowed me to get on to the machine, back up the
user's
data, flattened the machine & re-installed the entire OS - simple

--
SPAMCOP User


"Ty" <Ty@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A6A92EFC-60F4-43C7-A446-0F04EA4742BD@xxxxxxxxxxxxxxxx
> Thanks to all those who've tried to help me. Based on that's going on
> here,
> I will just try find any way to deal with my problem.
>
> "James Watkins" wrote:
>
>>
>> "Ty" <Ty@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:42CB62D3-3E26-4070-9B54-24123020549A@xxxxxxxxxxxxxxxx
>> > This is really scary. I come here seeking help for my problem and it
>> > seems
>> > that someone is trying to make things worse? How do I know who to
>> believe?
>> > Obviously, I am not versed enough to know who is real and who is
fake.
>> Will
>> > someone please help me with my problem? I truly appreciate it.
>> > Thanks.
>> > Ty
>>
>> Unfortunately this thread is being hijacked by a stalker. He assumes
>> different names, preferably the ones belonging to respected MVPs, and
he
>> consistently attempts to discredit the replies coming from real MVPs.
>> It's
>> now gotten to a stage where real MVPs no longer dare to respond - they
>> fear
>> that the stalker might grab their own identity too.
>>
>> How can you work out which replies are malicious? It's not easy. Don't
>> download anything for the time being - it's too dangerous. Click the
>> links
>> you see and examine them carefully. When you see a discrepancy between
>> the
>> URL and the real address as seen on the browser's frame at the top,
>> get
>> out
>> quickly. When you get a broken link, ignore the post that quotes it.
>>
>> I have a few suggestions towards resolving your problem but at the
moment
>> I
>> just can't figure out a way of getting them to you without the
>> stalkier
>> discrediting them or stealing my own identity (which wouldn't cause me
>> any
>> inconvenience - in view of the silliness of the situation I had to
assume
>> a
>> disposable alias).
>>
>>
>>







"James Watkins" <Monitor@xxxxxxxxxx> wrote in message news:ubDzX6FsJHA.4648@xxxxxxxxxxxxxxxxxxxxxxx
You appear to miss the main problem in this thread: there is a troll
impersonating several different MVPs and dishing out bad advice under their
names. I'm not even sure which side you're on: What you say about
userinit.exe causing the problem is correct but your subsequent advice is
equivalent to fixing a scratch in the door of your car with a sledge hammer.
There is no need at all for the OP to "flatten" his Windows installation.
The userinit-issue can be resolved in far more elegant ways, without
destroying the current installation.


"SPAMCOP User" <spamcop_user@xxxxxxxxxxxx> wrote in message
news:eUfaPdFsJHA.724@xxxxxxxxxxxxxxxxxxxxxxx
You can trust the MVP's but not all their advice is correct so you need to
trust other's too who have real qualifications & not just answered a
certain
number of questions in the newsgroup as that is the only qualification to
become a MVP. And remember some just paste in the same advice in every
post
whereas others just seach Google. for the answer & write it here

BTW: the logon/logoff issue for the Media Centre machine I was repairing
was
due to the user downloading Antivirus 360 (C:\Program Files\A360) which
also
deleted 'userinit.exe'. Going through the winlogon registry key making the
appropriate changes allowed me to get on to the machine, back up the
user's
data, flattened the machine & re-installed the entire OS - simple

--
SPAMCOP User


"Ty" <Ty@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A6A92EFC-60F4-43C7-A446-0F04EA4742BD@xxxxxxxxxxxxxxxx
> Thanks to all those who've tried to help me. Based on that's going on
> here,
> I will just try find any way to deal with my problem.
>
> "James Watkins" wrote:
>
>>
>> "Ty" <Ty@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:42CB62D3-3E26-4070-9B54-24123020549A@xxxxxxxxxxxxxxxx
>> > This is really scary. I come here seeking help for my problem and it
>> > seems
>> > that someone is trying to make things worse? How do I know who to
>> believe?
>> > Obviously, I am not versed enough to know who is real and who is
fake.
>> Will
>> > someone please help me with my problem? I truly appreciate it.
>> > Thanks.
>> > Ty
>>
>> Unfortunately this thread is being hijacked by a stalker. He assumes
>> different names, preferably the ones belonging to respected MVPs, and
he
>> consistently attempts to discredit the replies coming from real MVPs.
>> It's
>> now gotten to a stage where real MVPs no longer dare to respond - they
>> fear
>> that the stalker might grab their own identity too.
>>
>> How can you work out which replies are malicious? It's not easy. Don't
>> download anything for the time being - it's too dangerous. Click the
>> links
>> you see and examine them carefully. When you see a discrepancy between
>> the
>> URL and the real address as seen on the browser's frame at the top, >> get
>> out
>> quickly. When you get a broken link, ignore the post that quotes it.
>>
>> I have a few suggestions towards resolving your problem but at the
moment
>> I
>> just can't figure out a way of getting them to you without the >> stalkier
>> discrediting them or stealing my own identity (which wouldn't cause me
>> any
>> inconvenience - in view of the silliness of the situation I had to
assume
>> a
>> disposable alias).
>>
>>
>>




.

Relevant Pages

  • Re: Login problem
    ... impersonating several different MVPs and dishing out bad advice under their ... When you see a discrepancy between ... When you get a broken link, ignore the post that quotes it. ...
    (microsoft.public.windowsxp.general)
  • Re: A Question For Mike Stevens
    ... as long as the MVPs have a thick skin ... I could likely get the "best" advice from in here, ... If we bow and worship. ... And I have no issue that Andrew is not being helpful. ...
    (microsoft.public.windowsxp.general)
  • Re: A Question For Mike Stevens
    ... My experience with computers go back to the days of the Commodore Vic ... as long as the MVPs have a thick skin ... I could likely get the "best" advice from in here, ... And I have no issue that Andrew is not being helpful. ...
    (microsoft.public.windowsxp.general)
  • Re: Problem with specific sites
    ... at the address that your lookup is resolving to.) ... Any other browser might also give you different symptoms ... >> For advice specific to problems with secure sites, have a look at the first ... >>> router/firewall. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: My Outlook 2003 is running very slow, why?
    ... MVPs learn from reading the posts and solutions provided the same as everyone else. ... we even give bad advice but learn quickly. ...
    (microsoft.public.outlook)