Computing.Net > Forums > Windows XP > Windows won't login after bad virus

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Windows won't login after bad virus

Reply to Message Icon

Original Message
Name: dlublink
Date: September 3, 2008 at 16:44:05 Pacific
Subject: Windows won't login after bad virus
OS: XP Home
CPU/Ram: 1.8ghz, 256b of Ram
Model/Manufacturer: EMachine
Comment:

Hey,

I have a Windows XP Home edition machine in my possession and when I try and log in it does nothing. In safe mode as soon as it logs in, it logs back off.

I tried booting to restore CD but all that does is offer me a list of completely useless options. I can't run sfc!!!

Is there any way of saving the system without reinstalling it?

THanks,

David

My homepage


Report Offensive Message For Removal


Response Number 1
Name: Jennifer SUMN
Date: September 3, 2008 at 17:01:57 Pacific
Reply: (edit)

What virus did you have and what action did you take to remove it?

"So won’t you give this man his wings
What a shame
To have to beg you to see
We’re not all the same
What a shame" - Shinedown


Report Offensive Follow Up For Removal

Response Number 2
Name: dlublink
Date: September 3, 2008 at 17:04:02 Pacific
Reply: (edit)

I don't know. I was given the computer. They said it had a virus, they said some system files were probably screwed up and that it doesn't boot any more.

Since I posted this message, I found a post recommending a chkdsk /p on the harddrive. It froze at 50%, so I am beginning to wonder if it's not the harddrive that is on it's way out.

Thanks for the follow up,

David

Why not?


Report Offensive Follow Up For Removal

Response Number 3
Name: dlublink
Date: September 3, 2008 at 17:04:58 Pacific
Reply: (edit)

BTW, as soon as I hit the submit button, the 50% jumped to 75%. I guess Microsoft doesn't like giving us full information on what is happening.

David

Why not?


Report Offensive Follow Up For Removal

Response Number 4
Name: larryf215
Date: September 3, 2008 at 17:32:41 Pacific
Reply: (edit)

since you were given the computer is it safe to say there is nothing on it that is important to you.
I always find it best to format a "2nd hand computer", why deal with other people's junk files.

larry


Report Offensive Follow Up For Removal

Response Number 5
Name: dlublink
Date: September 3, 2008 at 17:39:44 Pacific
Reply: (edit)

It was given to me to be fixed. I am a programmer analyst and sometimes my boss' friends give him computers for us to fix. It is best to be able to fix it.

Reinstalling is simply a bad option. I no longer reinstall as a solution to a problem. It's bad practice. If Windows can't be fix, than screw it. I'll maybe install for them Ubuntu.

It's funny, Microsoft says that Windows is better because it has better support.

But I have recovered messed up Linux boxes and messed up Windows boxes, and it always seems so much easier and supported to fix linux.

I guess what Microsoft means by support is that they'll tell you how to reinstall....

I am working on a chkdsk, when that is done I will try and do the repair option on the Windows XP CD.

Why not?


Report Offensive Follow Up For Removal


Response Number 6
Name: dlublink
Date: September 3, 2008 at 17:43:11 Pacific
Reply: (edit)

As much as I hate getting stuck fixing Windows for people, it is a friendly reminder to people in my house as to why I removed Windows from all the computers and replaced it with alternative operating systems. ( mainly Ubuntu 8.04 and Ubuntu 8.10 )

Why not?


Report Offensive Follow Up For Removal

Response Number 7
Name: Jennifer SUMN
Date: September 3, 2008 at 17:48:20 Pacific
Reply: (edit)

"If Windows can't be fix, than screw it. I'll maybe install for them Ubuntu." What if they don't want that?

You first need to determine what virus is on the computer and take appropriate action. Running a repair won't fix a virus.

"So won’t you give this man his wings
What a shame
To have to beg you to see
We’re not all the same
What a shame" - Shinedown


Report Offensive Follow Up For Removal

Response Number 8
Name: dlublink
Date: September 3, 2008 at 17:52:03 Pacific
Reply: (edit)

Trouble is the virus screwed the system. I think that the virus was removed, but they messed up the system while trying to remove it. Because it doesn't boot, I can't restore it or anything.

I finished the chkdsk and it says there are no more errors, but it was really slow to run. I am going to try a repair with the Windows XP CD.

Why not?


Report Offensive Follow Up For Removal

Response Number 9
Name: dlublink
Date: September 3, 2008 at 18:14:08 Pacific
Reply: (edit)

I tried to to a repair, but contrary to what several websites say, I do not have access to a repair option.

Is there some special step that must be taken to be able to have the repair mode mentioned in step #10 of this website : http://articles.techrepublic.com.co...

Thanks,

David

Why not?


Report Offensive Follow Up For Removal

Response Number 10
Name: aegis
Date: September 3, 2008 at 18:25:02 Pacific
Reply: (edit)

If you aren't very familiar with doing a 'Repair' install, there are some instructions at the following site:

http://www.dougknox.com/xp/tips/xp_...


Report Offensive Follow Up For Removal

Response Number 11
Name: dlublink
Date: September 3, 2008 at 18:44:22 Pacific
Reply: (edit)

There is no "r" option. I only have "ENTER=Install", "D=Delete Partition", and finally "F3=Quit".

I am booting with a Windows XP home edition english CD but the computer was installed from a factory provided recovery CD ( which is scratched ) and is in french.

Perhaps it isn't recognizing the installation because of the language barrier?

Why not?


Report Offensive Follow Up For Removal

Response Number 12
Name: Rayburn
Date: September 3, 2008 at 19:08:18 Pacific
Reply: (edit)

Well the Windows XP CD won't allow a repair install on some OEM machines such as EMachines, I think because M$ recommends using the Restore CD instead. You can override it, I think by removing/deleting the files of a hidden recovery partition on the hard drive. Don't quote me on that but I believe that is the procedure.

"Reinstalling is simply a bad option. I no longer reinstall as a solution to a problem. It's bad practice."

Not in every case. I believe that you should do all you can to diagnose and fix a problem without reinstalling, but I wouldn't dismiss it completely as a solution.

WinSimple Software


Report Offensive Follow Up For Removal

Response Number 13
Name: Razor2.3
Date: September 4, 2008 at 02:43:54 Pacific
Reply: (edit)

Sadly, there are far too many possibly screwed up registry entries that can cause this behavior for me to remember them all, but I do know of a few you can check:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = Explorer.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost = logonui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = C:\WINDOWS\system32\userinit.exe,


Report Offensive Follow Up For Removal

Response Number 14
Name: dlublink
Date: September 4, 2008 at 08:37:22 Pacific
Reply: (edit)

I managed to get my copy on french install CD. The OEM CDs from Dell are real CDs ( at least one company does it right).

It is currently "repairing". If it doesn't work I'll have a look at the registry keys you mentioned.

Why not?


Report Offensive Follow Up For Removal

Response Number 15
Name: Scupper2008
Date: September 18, 2008 at 12:00:14 Pacific
Reply: (edit)

Once you're able to successfully boot, you can save yourself alot of time and headaches and go with superantispyware. I have wasted much time with other titles that fail at removing virus and spyware infestations. By far the most reliable tool out there: http://www.superantispyware.com?rid...

Hope this helps.


Report Offensive Follow Up For Removal

Response Number 16
Name: dlublink
Date: September 19, 2008 at 05:57:21 Pacific
Reply: (edit)

Hey,

In the end it turns out that the virus hit the harddisk at the same time as the hard disk was on it's way out.

In the end I had to replace the harddisk so the virus was a non issue.

I don't install anti-virus software. I setup the computer appropriately so that it can't get infected.

* I use FF3 instead of IE6
* I disabled all non essential services
* Disabled error reporting ( is micro$oft paying me for debugging their software ?)
* Activate Windows firewall ( all my other favorite firewalls have become bloated and damaging to my computer : Kerio, zone alarm ... )
* Set all user accounts to "user" instead of the default administrator
* Don't install any software that is not from a trusted source ( GPL or I approve after research ).
* A little education to the end user.
* Don't use wma or wmv formats and don't download anything other than MP3s from music sharing systems.
* Don't download anything that advertises itself to contain naked girls.

Likewise I don't take penicillin 24 hours a day, instead I wash my hands and be careful of what I touch.

All this garbage about having scanners in the background is garbage. I use to run norton anti-virus, it took more than half my memory and cut the speed of my computer in half!!! I tried some other scanners, they are all the same.

If you don't want a virus, you gotta wash your hands and treat those people who didn't properly wash their hands.

David

Why not?


Report Offensive Follow Up For Removal

Response Number 17
Name: Razor2.3
Date: September 19, 2008 at 13:30:53 Pacific
Reply: (edit)

Disabled error reporting ( is micro$oft paying me for debugging their software ?)
I find the service is useful for driver issues, which is decidedly non-MS.


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home








Do you own an iPhone?

Yes
No, but soon
No


View Results

Poll Finishes In 7 Days.
Discuss in The Lounge
Poll History




Data Recovery Software