Computing.Net > Forums > Security and Virus > logon/logoff virus?

logon/logoff virus?

Reply to Message Icon

Original Message
Name: voodoo
Date: November 18, 2004 at 00:31:06 Pacific
Subject: logon/logoff virus?
OS: win xp
CPU/Ram: p4 3.0 512
Comment:

Hey all, im having a problem with my brothers computer. Every time I turn it on, it goes to the login screen. When i click login, it flashes the background for a split second and than says loging off and takes me back to the login screen. It even does this in safe mode as well.
I have taken out his HD and put it into my comp. I did a full virus scan with norton 2005, spysweeper, ad-aware, spybot yet, the problem persists.
I than tried to do a format on the HD and reinstall windows. When i put the disk in and set the bios to boot from cd only, it says "improper boot disk inserted. Replace and press any key to try again."

Please help and thnx in advance.


Report Offensive Message For Removal


Response Number 1
Name: digito_hk
Date: November 18, 2004 at 06:55:53 Pacific
Reply: (edit)

Under my repairing experience, it does occur if any of the following:

1) If u set the page file for any reason to say only appear in Disk E:\ and when next-time reboot, u have for any reason take away the drive E:\ so that Windows can't run page file at the designated location and run in looping rebooting cycle.

2) Your physical HD is going to be down and so that the heading physical sectors are corrupted. Try scandisk under DOS.

3) Your HD first boot-sector or the FAT is corrupted. Have to be corrected by Partitioning Software under DOS-like environment.

4) The HD boot-sector was vrus infected.

cheers.

dicksonho (HK)


Report Offensive Follow Up For Removal

Response Number 2
Name: Kamel Takla
Date: December 21, 2004 at 21:11:21 Pacific
Reply: (edit)

I had the same Problem on my computer here is how I solved it. It would log in and then suddenly logs off after you see you wallpaper.

delete and of these files:
"security" or security32.exe (delete)
winsecure.exe
spooler
iprotect.exe
memorymanager (shortcut)

Run>regedit
HKEY_LOCAL_MACHINE\<what your named this in the previous step>\microsoft\windows nt\currentversion\winlogon.

edit (for XP)
C:\WINNT\system32\userinit.exe, %SystemRoot%\iProtect.exe
to
C:\windows\system32\userinit.exe

cheers,
Let me know if it works for you guys,


Manager
Ad-A-Print
AdAPrint.com


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: logon/logoff virus?

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes Today.
Discuss in The Lounge