Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
I have a A31p Thinkpad running W 2000 Pro-- was working fine, til i got a virus -- showed up on McAfee one day. Deleted the virus; then shut machine down. Next time I turned it on, Windows 2000 login screen comes up after normal appearing power-on and asks me for password. I put it in, and it looks normal for a second ... (says applying user settings), then 'saving settings'; then returns me to the password screen. this repeats - each time i add password, back to login screen. ad infinitum.
if i put in an incorrect password (or hit enter or escape), it tells me it does not recognize password immediately , so i know it recognizes password.
I can boot from CD. so i loaded in Windows 98! I can get on C: drive with DOS or with win 98 (when i boot now - i get my choice of 2000 (which gives me the password problem) or 98, which has NO FUNCTIONALITY -- doesn't recognize CD Writer, runs at 640 x 480; can't see network, etc...
i can see all my files are on the hard drive - can i get them off somehow?
can i restore 2000? someone suggested i delete a .SAM file, so i deleted c\winnt\system32\drivers\etc lmshost.sam - no help.
Thanks, Mike
1) Can you login as local administrator?
2) I'm sure you can't do anything on '98 because the drivers aren't installed.
0 
The SAM file you're after is:
winnt\system32\config\SAM
Also delete the SAM.sav and SAM.backup (if they exist). When you reboot, it 'should' present you with new/freah Administrator logon dialogue. Leave the pasword blank and you should be able to click OK (or press Enter) and be in again. You will have to re-establish/recreate all user accounts afresh.
If that doesn't resolve it - post back for other suggestions.
0
i have this same problem. but i also am not overly computer literate. any way to help me solve this. i dont know if i got a virus, i assume so, nothing showed up. i dunno. please please help me!!!
0
I have also the same problem than mike.Mac afee has deleted the virus backdoor-BAM and now i can`t login anymore.here is a decription of the modification made by the virus in the registry.i am not an expert but it seems related to login :
Installation
Upon execution, the trojan installs itself into the %SysDir% directory as SVCINIT.exe.
(Where %Sysdir% is the Windows System directory, for example C:\WINDOWS\SYSTEM)
For example:
C:\WINNT\SYSTEM32\SVCINIT.exe
The following Registry keys is added to hook system startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
RunServices "SVC Service" = "%SysDir%\SVCINIT.exe"The value of the following key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\
Winlogon "Userinit"is modified from:
%SysDir%\userinit.exe
to:
%SysDir%\userinit.exe %SysDir%\SVCINIT.exe
The following Registry key is also created:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectPlugin
0
I have the same problem with a login loop after having "fixed" the backdoor-bam. Had a late version of Mcafee and Windows 2000. I get a message that says "Mcafee Virusscan files have been tampered with. To detect..." It suggests that I boot with the ERD or otherwise and reinstall Mcafee. The network is up. I was able to copy most of "My documents" from a previously configured share (thankfully). But there is other data (i.e. Quickbooks and email) which is not shared.
If anyone found a solution to this or has a suggestion, bring it on. I tried deleting the SAM files. I had no luck. It doesn't seem to be a login problem so much as some Mcafee program running upon login. I've used the repair console to disable all obvious Mcafee services (and most other services too).
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
