Please help user accounts cannot log in

[dewdat]

Hi all, well I caught a virus. I had essentials but some how it is unable to
delete the virus and the real time protection has been disabled. Upon working
with support we manage to find the problem in windows32 folder. It is a fake
security virus. Unfortunately i was unable to delete the applications. I some
how did something because now i cannot log in at all. Windows start up and
gets to the user account section. When i click on any account it starts and
then immediately logs out. This is even in safe mode under admin. I was able
to at least get into windows and now i cannot. Anyone know of a work around i
can do to by pass the user account so i can at least copy my files. The virus
removed my system restore as well. Anything i try to do i recieve a warning
saying I must contact my domain admin.
I am on a dell dimension 9100, Windows XP MCE.


thank you, i really dont know why people choose to make these viruses

 

[Elmo]

dewdat wrote:
> Hi all, well I caught a virus. I had "Essentials" but somehow it is unable to
> delete the virus and the real time protection has been disabled. Upon working
> with support we managed to find the problem in Windows32 folder. It isa fake
> security virus. Unfortunately I was unable to delete the applications.I some
> how did something because now I cannot log in at all. Windows starts up and
> gets to the user account section. When I click on any account it starts and
> then immediately logs out. This is even in Safe Mode under Admin. I was able
> to at least get into Windows and now I cannot. Anyone know of a work-around I
> can do to by pass the user account so I can at least copy my files? The virus
> removed my system restore as well. Anything I try to do I receive a warning
> saying I must contact my domain admin.
> I am on a Dell Dimension 9100, Windows XP MCE.
>
>
> Thank you, I really don't know why people choose to make these viruses.

Burn BitDefender, or another program listed at the link below, to a CD
(using a working machine) and test the infected machine with it.
BitDefender also has a Rootkit checker on the Linux Desktop; run it if
you think that's the problem:

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

Download the executable rather than the .iso image, if one is available,
(though no .exe is available for BitDefender).

After the scan is run, if you elect to quarantine files, they're
quarantined to RAM and lost after you reboot. You'll need to copy any
quarantined files to the hard drive, a thumb drive or elsewhere before
exiting.

Then run these, if you have access afterwards:

Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

SuperAntispyware
http://www.superantispyware.com/superantispywarefreevspro.html

Or just use any of the Knoppix Live CD's to save your data to another
drive. You can also remove the hard drive and install it in another
computer, run a scan from there.

--
Joe =o)

 

[dewdat]

Hi, thank you so much. I am still locked out but i can access my files. I am
copying them to another hard drive. The scan found some problems and said it
corrected them. Unfortunately I still cannot run XP. User accounts start up
then logs out. I do have the XP install disk from dell. If i run a repair do
you think it will correct the problem. Is there a way to break through the
domain administrator password. I am still waiting on MS security people to
call me back.

"Elmo" wrote:

> dewdat wrote:
> > Hi all, well I caught a virus. I had "Essentials" but somehow it is unable to
> > delete the virus and the real time protection has been disabled. Upon working
> > with support we managed to find the problem in Windows32 folder. It is a fake
> > security virus. Unfortunately I was unable to delete the applications. I some
> > how did something because now I cannot log in at all. Windows starts up and
> > gets to the user account section. When I click on any account it starts and
> > then immediately logs out. This is even in Safe Mode under Admin. I was able
> > to at least get into Windows and now I cannot. Anyone know of a work-around I
> > can do to by pass the user account so I can at least copy my files? The virus
> > removed my system restore as well. Anything I try to do I receive a warning
> > saying I must contact my domain admin.
> > I am on a Dell Dimension 9100, Windows XP MCE.
> >
> >
> > Thank you, I really don't know why people choose to make these viruses.
>
> Burn BitDefender, or another program listed at the link below, to a CD
> (using a working machine) and test the infected machine with it.
> BitDefender also has a Rootkit checker on the Linux Desktop; run it if
> you think that's the problem:
>
> http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
>
> Download the executable rather than the .iso image, if one is available,
> (though no .exe is available for BitDefender).
>
> After the scan is run, if you elect to quarantine files, they're
> quarantined to RAM and lost after you reboot. You'll need to copy any
> quarantined files to the hard drive, a thumb drive or elsewhere before
> exiting.
>
> Then run these, if you have access afterwards:
>
> Malwarebytes© Corporation
> http://www.malwarebytes.org/mbam/program/mbam-setup.exe
>
> SuperAntispyware
> http://www.superantispyware.com/superantispywarefreevspro.html
>
> Or just use any of the Knoppix Live CD's to save your data to another
> drive. You can also remove the hard drive and install it in another
> computer, run a scan from there.
>
> --
> Joe =o)
> .
>

 

[Elmo]

dewdat wrote:
> Hi, thank you so much. I am still locked out but I can access my files.I am
> copying them to another hard drive. The scan found some problems and said it
> corrected them. Unfortunately I still cannot run XP. User accounts start up
> then logs out. I do have the XP install disk from Dell. If I run a repair do
> you think it will correct the problem? Is there a way to break through the
> domain administrator password? I am still waiting on MS security peopleto
> call me back.

You should try anything at your disposal, such as "Last known working
configuration", or a repair install. Here's a page on XP repair options:

http://www.michaelstevenstech.com/XPrepairinstall.htm .

> "Elmo" wrote:
>
>> dewdat wrote:
>>> Hi all, well I caught a virus. I had "Essentials" but somehow it is unable to
>>> delete the virus and the real time protection has been disabled. Upon working
>>> with support we managed to find the problem in Windows32 folder. It is a fake
>>> security virus. Unfortunately I was unable to delete the applications. I some
>>> how did something because now I cannot log in at all. Windows startsup and
>>> gets to the user account section. When I click on any account it starts and
>>> then immediately logs out. This is even in Safe Mode under Admin. I was able
>>> to at least get into Windows and now I cannot. Anyone know of a work-around I
>>> can do to by pass the user account so I can at least copy my files? The virus
>>> removed my system restore as well. Anything I try to do I receive a warning
>>> saying I must contact my domain admin.
>>> I am on a Dell Dimension 9100, Windows XP MCE.
>>>
>>>
>>> Thank you, I really don't know why people choose to make these viruses.
>> Burn BitDefender, or another program listed at the link below, to a CD
>> (using a working machine) and test the infected machine with it.
>> BitDefender also has a Rootkit checker on the Linux Desktop; run it if
>> you think that's the problem:
>>
>> http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
>>
>> Download the executable rather than the .iso image, if one is available,
>> (though no .exe is available for BitDefender).
>>
>> After the scan is run, if you elect to quarantine files, they're
>> quarantined to RAM and lost after you reboot. You'll need to copy any
>> quarantined files to the hard drive, a thumb drive or elsewhere before
>> exiting.
>>
>> Then run these, if you have access afterwards:
>>
>> Malwarebytes© Corporation
>> http://www.malwarebytes.org/mbam/program/mbam-setup.exe
>>
>> SuperAntispyware
>> http://www.superantispyware.com/superantispywarefreevspro.html
>>
>> Or just use any of the Knoppix Live CD's to save your data to another
>> drive. You can also remove the hard drive and install it in another
>> computer, run a scan from there.

--
Joe =o)