Lock out at XP Welcome screen every time after deleting Malware with Ad-aware

Discussion in 'Virus Information' started by PhiL M., Nov 11, 2004.

  1. PhiL M.

    PhiL M. Guest

    A friend scanned his computer offline with latest version of ad-aware
    and deleted all Malware the program detected (there were several
    including CoolWebSearch). After a reboot he is locked out of Windows.

    He is presented with the logon screen and his user name (there is no
    other account). After he clicks on his user name, Windows attempts to
    login and soon after the words "Loading personal settings..." appears,
    he is kicked back to the logon screen again.

    He then reboots to Safe Mode and found the Administrator login is also
    having the same issue.

    Is it a virus? What can he do to regain control of his Windows?

    He is not very proficient with English so I'm helping him post this.
    Thank you so very much!!
     
    PhiL M., Nov 11, 2004
    #1
    1. Advertisements

  2. PhiL M.

    Will Denny Guest

    Hi

    See if a System Restore via Safe Mode helps.
     
    Will Denny, Nov 11, 2004
    #2
    1. Advertisements

  3. PhiL M.

    PhiL M. Guest

    How to do that? He cannot even login in Safe Mode.


    | Hi
    |
    | See if a System Restore via Safe Mode helps.
    |
    | --
    |
    | Will Denny
    | MS-MVP - Windows Shell/User
    | Please reply to the News Groups
    |
    |
    | | >A friend scanned his computer offline with latest version of ad-aware
    | > and deleted all Malware the program detected (there were several
    | > including CoolWebSearch). After a reboot he is locked out of
    Windows.
    | >
    | > He is presented with the logon screen and his user name (there is no
    | > other account). After he clicks on his user name, Windows attempts
    to
    | > login and soon after the words "Loading personal settings..."
    appears,
    | > he is kicked back to the logon screen again.
    | >
    | > He then reboots to Safe Mode and found the Administrator login is
    also
    | > having the same issue.
    | >
    | > Is it a virus? What can he do to regain control of his Windows?
    | >
    | > He is not very proficient with English so I'm helping him post this.
    | > Thank you so very much!!
    | >
    | >
    |
    |
     
    PhiL M., Nov 11, 2004
    #3
  4. Hi Will, I have the same problem Phil's friend have. I used Adware to
    remove files and it's locking me out in the same manner. I've was able to
    getin using the safe mode and tried the system restore feature but it doesn't
    work. I tried reinstalling the software but that didn't solve the ploblem
    either. I've tried booting from the CD-Rom and it still didn't work. I'm
    not at home right now so Microsoft sugguested I try looking here first for
    solutions and then I will get with them later this evening. I hope someone
    has a solution.
     
    =?Utf-8?B?TWlrZSBE?=, Nov 11, 2004
    #4
  5. PhiL M.

    Chris Barnes Guest

    Boot from the Windows XP cd. At the first prompt, enter "R"


    --?

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Chris Barnes AOL IM: CNBarnes
    Yahoo IM: chrisnbarnes
    Computer Systems Manager MSN IM:
    Department of Physics ph: 979-845-7801
    Texas A&M University fax: 979-845-2590
     
    Chris Barnes, Nov 11, 2004
    #5
  6. PhiL M.

    Wesley Vogel Guest

    http://www.winxptutor.com/wsaremove.htm

    Scroll down to >>>

    Unable to logon to Windows after removing BlazeFind using a spyware removal
    utility?
    Logon - Logoff loop, also caused by BlazeFind
     
    Wesley Vogel, Nov 11, 2004
    #6
  7. PhiL M.

    PhiL M. Guest

    Thank you! Thank you! Thank you!

    You might just save my friend's sanity.
    He confirmed he saw BlazeFind on the Ad-ware listing. I failed to find
    anything like this via Google - didn't know what keyword(s) to use :(

    Will print this out and head over to my friend's place this weekend and
    try it out.

    We can't thank you enough for the info!



    | http://www.winxptutor.com/wsaremove.htm
    |
    | Scroll down to >>>
    |
    | Unable to logon to Windows after removing BlazeFind using a spyware
    removal
    | utility?
    | Logon - Logoff loop, also caused by BlazeFind
    |
    |
    | --
    | Hope this helps. Let us know.
    | Wes
    |
    | In | PhiL M. <@.com.hk> hunted and pecked:
    | > How to do that? He cannot even login in Safe Mode.
    | >
    | >
    | > | >> Hi
    | >>
    | >> See if a System Restore via Safe Mode helps.
    | >>
    | >> --
    | >>
    | >> Will Denny
    | >> MS-MVP - Windows Shell/User
    | >> Please reply to the News Groups
    | >>
    | >>
    | >> | >>> A friend scanned his computer offline with latest version of
    | >>> ad-aware and deleted all Malware the program detected (there were
    | >>> several including CoolWebSearch). After a reboot he is locked out
    | >>> of Windows.
    | >>>
    | >>> He is presented with the logon screen and his user name (there is
    no
    | >>> other account). After he clicks on his user name, Windows
    attempts
    | >>> to login and soon after the words "Loading personal settings..."
    | >>> appears, he is kicked back to the logon screen again.
    | >>>
    | >>> He then reboots to Safe Mode and found the Administrator login is
    | >>> also having the same issue.
    | >>>
    | >>> Is it a virus? What can he do to regain control of his Windows?
    | >>>
    | >>> He is not very proficient with English so I'm helping him post
    this.
    | >>> Thank you so very much!!
    |
     
    PhiL M., Nov 12, 2004
    #7
  8. PhiL M.

    Wesley Vogel Guest

    PhiL,

    You don't know Ramesh either, he has a lot of answers.

    Keep having fun! :)
     
    Wesley Vogel, Nov 12, 2004
    #8
  9. PhiL M.

    Bob Smith Guest

    Like many people I did not have a bootable CD
    when trying to fix this logon/logoff problem.

    I downloaded the BartPE tool from:

    http://www.nu2.nu/pebuilder/

    Built and burned BartPE in 10 mins (be sure
    to "burn as image" using your CD burner), booted,
    and copied userinit.exe to wsaupdater.exe as per
    the recommendations elsewhere. Problem solved.

    IBM does not ship bootable CD's with their Thinkpads,
    and by company policy "All I can help you do is
    restore your system to factory config if you send
    me $50. However, off the record, have you ever
    heard of BartPE?" was what the nice IBM support guy
    told me over the phone.

    Thanks IBM support guy and Bart!
     
    Bob Smith, Nov 13, 2004
    #9
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.