winlogon.exe error after virus attack

Hewlett-packard / Dv6600
February 21, 2010 at 09:44:11
Specs: XP Home SP3, 2.2/1gig
After a bad virus attack I'm left with a machine
that will get as far as the logon screen and the
'winlogon.exe - application error' message
appears. Clicking 'OK' or closing the box
results in an immediate restart, clicking on 'No'
to debug the system just hangs. If I leave it a
while and click the 'X' then I can logon and it
will occasionally show the desktop but then
reboot. This happens in both safe and normal
modes. I've run chkdsk /r and faults were
repaired. I've removed every trace of any nasty
(using a live Kaspersky CD) so I know it's a
system problem. Trying System Restore from
command prompt (the only way available)
brings back a message to the effect that
'System restore cannot protect your system,
reboot & try again'!! - needless to say it still
doesn't work but I know there are restore
points available in the Restore folder.

I reckon the two options left to me are to try
repairing the registry using the backups from
the repair folder, or doing a repair install. I
would prefer the first option so as to avoid
having to reinstall a load of programs, but I'm
not too sure if it will work.

Any opinions, or other options please?

"I've always been mad, I know I've been mad, like the most of us..."


See More: winlogon.exe error after virus attack

Report •

#1
February 21, 2010 at 09:57:26
When removing a virus, the first step is to disable System Restore, as the virus can exist in Restore Points.

If you can login, disable System Restore, then reboot. If you are unable to login, just boot to the XP Cd and run a Windows Repair. You won't necessarily need to reinstall any programs, just Windows updates and possible IE 7 or 8 if you're running one of those versions.

LIR


Report •

#2
February 21, 2010 at 10:20:48
Thanks for reply. As mentioned, unable to get past the logon
screen so unable to get to System restore. I've already cleaned
out the virus issue - including all the infected restore points, so i
was a bit puzzled as to being unable to access System restore
from the command prompt.

I know from experience that a repair install invariably involves
reinstalling a large amount, if not the majority of programs, so
that's why I only want to do this as a last resort.

"I've always been mad, I know I've been mad, like the most of us..."


Report •

#3
February 21, 2010 at 12:17:44
... "johnr" check out the link below

http://www.computing.net/answers/wi...


.

... Posting is provided "AS IS" with no warranties
http://img714.imageshack.us/img714/...
Grrrr... ...im


Report •

Related Solutions

#4
February 21, 2010 at 14:04:34
Thanks for reply - the link doesn't seem to apply in this case I'm
afraid - the system doesn't log out, it totally restarts as it's a
problem with winlogon.exe, not userinit.exe.

I've tried going through the registry repair & it only got worse, so
it looks like it's a repair install - shall leave that until tomorrow
though.

"I've always been mad, I know I've been mad, like the most of us..."


Report •

#5
February 21, 2010 at 22:52:46
... "johnr" I tried repair install on a machine the other day and it would'nt accept the product key that I used for the full install !!

... mind you I had never had to "repair install" as I speak even after acting as advisor to others to do so in the past!

... so be warned regarding "product key" ... must be different for repair(?) ... anyone?

.

... Posting is provided "AS IS" with no warranties
http://img714.imageshack.us/img714/...
Grrrr... ...im


Report •

#6
February 21, 2010 at 22:57:39
Yes, I've come across that where someone has installed hacked
XP Pro om top of original XPHome - right pain in the proverbial.
No, I know the history of this machine so it will be ok.

"I've always been mad, I know I've been mad, like the most of us..."


Report •

#7
February 21, 2010 at 23:23:08
OK, plank moment coming up. Before doing the repair install I
thought I'd give the interior a quick clean, blast air through, check
everything seated ok. I swapped the memory chips around -
easiest way of making sure contacts are clean etc. and HEY
PRESTO - problem has gone away!

"I've always been mad, I know I've been mad, like the most of us..."


Report •

Ask Question