5 replies to this topic

[REEMPTSY]

Hello,

Since a few days my computer was attacked with fake virus alerts. After several scans with malwarebytes software some infected files were found with "trojan-horse downloaders". After cleaning-up a restart was commanded. I ignored a "HKEY"-message after the restart was executed. Now I can't log in anymore with Windows Xp SP2. Log in starts and ends after few seconds. How can I repair, without access to my files,registers??

Thanks for feedback

[REEMPTSY]

Paul317, on Apr 21 2009, 02:57 PM, said:

You'll probably have to install the Windows Recovery Console to repair this

http://support.microsoft.com/kb/307654


But, before you do that?

Have you tried to boot into safe mode? If so, does the same thing happen when you're in safe mode?
If you're not sure how to boot into safe mode. Follow this directions found here.

http://support.microsoft.com/kb/315222

Thanks for reply,

First test with safe mode-boot didn't worked. Log-out after start-up of windows.

With the Windows recovery console I have done some test, but don't know which files I need the set back in order?

[REEMPTSY]

Paul317, on Apr 22 2009, 03:25 PM, said:

Your Userinit.exe file was likely corrupted or removed. This file is located in c:\windows\system32 .

What you're going to want to do is copy the userinit.exe file from your Windows XP installation disk , typically located in D:\I386 to C:\Windows\System32 and overwrite the current userinit.exe file that is there.

Ok, thanks. After some trial and errors I came to the right solution. The file I needed to copy van de D:\Windows CD was named " \ userinit.ex_" and this file I had to expand in the recovery console to become to the file " \ userinit.exe" needed for a new log in in Windows Xp. I'm back on track

[AdvancedSetup]

Update and Scan with Malwarebytes' Anti-Malware

• Start MalwareBytes AntiMalware (Vista users must Right click and choose RunAs Admin)
  
• Please DO NOT run MBAM in Safe Mode unless requested to, you MUST run it in normal Windows mode.
  
  • Update Malwarebytes' Anti-Malware
    
  • Select the Update tab
    
  • Click Update
• When the update is complete, select the Scanner tab
  
• Select Perform quick scan, then click Scan.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Be sure that everything is checked, and click Remove Selected.
  
• When completed, a log will open in Notepad. please copy and paste the log into your next reply
  • If you accidently close it, the log file is saved here and will be named like this:
    
  • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

Then post back the MBAM log and a new Hijackthis log.

[AdvancedSetup]

Please post a status update on this.

Thanks

[AdvancedSetup]

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.