circlecthrift Posted February 19, 2009 ID:57852 Share Posted February 19, 2009 Hello all I have a customer that got AntiMalware 2009 and after running Malwarebytes the computer won't let you login.I have tried to login in safe mode and as admin but to no avail, Everytime I try it just says logging on then within 2 seconds it is saving settings and logging off. I can't login in safe mode or anything. I removed the hard drive and put it in another computer as a slave. I ran Malwarebytes and it found 4 removed them, still same thing not able to login .I even ran my updated Avast. Thanks in advance Link to post Share on other sites More sharing options...
sjpritch25 Posted February 20, 2009 ID:57967 Share Posted February 20, 2009 Welcome to Malwarebytes !!! Its a pretty easy fix, but you will need a cd burner and software to burn an ISO image. Let me know if its possible or not. Thanks Link to post Share on other sites More sharing options...
circlecthrift Posted February 20, 2009 Author ID:58043 Share Posted February 20, 2009 I have both! thanks for the reply Link to post Share on other sites More sharing options...
sjpritch25 Posted February 20, 2009 ID:58059 Share Posted February 20, 2009 Go here to download a program to burn an ISO imageMake sure you choose the correct one.http://isorecorder.alexfeinman.com/isorecorder.htmIgnore if one is already installed!!!!!I need you to download and install MIcrosoft Recovery and Diagnostic toolkit from herehttp://www.microsoft.com/downloads/details...;displaylang=enIt will create a folder in Program Files called something like Microsoft Recovery and Diagnostic ToolkitLook for the following .iso imageerd50.isoUse your cd burning software to make a cd image/iso or use this oneExample on how to use ISO Recorder v 2http://isorecorder.alexfeinman.com/HowTo.htmOnce you create the iso image, you will need to make sure your computer can boot to cd. Instructions herehttp://www.computerhope.com/issues/ch000217.htmOnce everything is set up, reboot your computer. Stick the cd in immediately. press any key to boot from cd (if prompted). Skip Network settingsLog in to your Windows Installation only!!!!!!!Once your in the desktopClick on Adminstrator toolsLook for Registry EditorOpen Registry EditorNavigate to the following keyHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinlogonLook for the following valueUserinitIt should look like the following"C:\\WINDOWS\\system32\\userinit.exe,"If not you will need to add the following to the value by right-clicking on Userinit and click on ModifyType the following Must include the quotes"C:\\WINDOWS\\system32\\userinit.exe,"Click OkReboot, take cd out and let me know if you can get into Windows. ThanksAt any point you have a question stop and let me know. Thanks. Link to post Share on other sites More sharing options...
circlecthrift Posted February 20, 2009 Author ID:58109 Share Posted February 20, 2009 Still won't boot into windows. Link to post Share on other sites More sharing options...
circlecthrift Posted February 20, 2009 Author ID:58111 Share Posted February 20, 2009 Still won't boot into windows. I forgot to mention I made the iso and everything in Winlogon was ok Link to post Share on other sites More sharing options...
sjpritch25 Posted February 20, 2009 ID:58139 Share Posted February 20, 2009 Okay well that tells me another thingboot back into ERD commander and search for userinit.exe. Let me know if its found. I have a feeling it may have been deleted. Thanks Link to post Share on other sites More sharing options...
circlecthrift Posted February 20, 2009 Author ID:58146 Share Posted February 20, 2009 found it in 3 different folders C:/WINDOWS/$NtServicePackUninstall$ C:/WINDOWS/Prefetch C:/WINDOWS/ServicePackFiles/i386 Thanks John Link to post Share on other sites More sharing options...
sjpritch25 Posted February 20, 2009 ID:58149 Share Posted February 20, 2009 yep figured as much. The copy in one of those folders should be clean. Copy it from their to the following folderds C:\WINDOWS\system32andC:\WINDOWS\system32\dllcacheReboot the pc and it should be fixed Link to post Share on other sites More sharing options...
sjpritch25 Posted February 20, 2009 ID:58150 Share Posted February 20, 2009 the best would be this oneC:/WINDOWS/ServicePackFiles/i386 Link to post Share on other sites More sharing options...
circlecthrift Posted February 20, 2009 Author ID:58169 Share Posted February 20, 2009 Spot on Everything worked out great. Thank you for your help Sipritch25 that was easier than I thought it would be. I guess anything is easy if you know what you are doing THANKS AGAIN "Props TO Sipritch25" Thanks John Link to post Share on other sites More sharing options...
sjpritch25 Posted February 21, 2009 ID:58235 Share Posted February 21, 2009 Well just tell your customer to send me a check!!!! LOL I would suggest a scan with Kaspersky just in case. Run an online virus scan called Kaspersky from HERE.1. At the main page. Press on "Accept". After reading the contents.2. At the next window Select Update. Allow the Database to update.Note: If prompted to run or update your Java, then follow the prompts to do so. Kaspersky requires Java to run.3. Once the Database has finished, under the Scan icon Select My Computer to start the scan. The scan may take a few minutes to complete.4. Select Scan Report.5. If any threats were found they will appear in the report6. Select "Save error report as"Then in the file name just type in kasperskyUnder "save as type" select text .txt Save it to your Desktop.Copy and post the results of the Kaspersky Online scan. If no threats were found then report that as well. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now