Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

CAN'T GET IN XP SYTSEM


  • Please log in to reply

#1
Colabutterfly

Colabutterfly

    Member

  • Member
  • PipPip
  • 26 posts
my system has MALWARE(WORM.WIN32.NETSKY),,So I followed the Malware guide up to the point where I couldn't download MBAM. So I post a topic ,, I was told to do HJT and post results ,then fix with HJT. i did OTL and posted results then did custom scan ,run fix and reboot. When I tried to log in my my system logs me out really quick...can someone with knowledge of XP and WORM.WIN32.NETSKY help please..


http://www.geekstogo...ky-t260962.html

Edited by Colabutterfly, 08 December 2009 - 10:39 AM.

  • 0

Advertisements


#2
admin

admin

    Founder Geek

  • Administrator
  • 24,504 posts
You're getting help at two places. Time is a limited resource. Do you want to close this topic or the one at bleepingcomputer?
  • 0

#3
Colabutterfly

Colabutterfly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 26 posts
As you can see no one has posted to my topic to help,,,I didn't think it was a crime to get help :) . I did'nt want to post this topic, I was getting help in Malware forum til the help got me locked out of my computer and was told to post a topic here to address XP Locking(Login Loop) me out. VEry new to this,,,how do I close a topic??????? :)
  • 0

#4
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Most likely the infection must have corrupted one of the login files. When the Custom scan and clean was done it probably deleted the file or quarantined it.



Give this a try. Without knowing a little more about what caused the problem, I can't guarantee it will work...and it requires the machine you make the disk on AND the machine you are fixing are both running XP.

Please download RC.ISO and save it somewhere you can find it.
Also download MagicISO.

Start MagicISO. You should see a window informing you about the full version of MagicISO.
In the bottom right select Try It! and the program will open.
Click on File and then on Open and navigate to the RC.ISO file you downloaded. Select it, and click Open.

First, we'll need to add a clean version of userinit.exe to the current RC.ISO

* In the upper right pane, double click on the i386 folder.
* Right click in the upper right pane and select Add Files...
* Navigate to C:\Windows\System32 and select userinit.exe
* Then click Open to add userinit.exe to the CD image.
* Click File and select Save As...
* Name the file RCplus and save it somewhere you can find it.


Next, we'll need to burn the newly created image to a disk that we can use to fix the problem.

* Put a blank CD-R disk in your CD burner and close the tray. If an AutoPlay window opens, close it.
* Click on Tools and select Burn CD/DVD with ISO.... A window will appear.
* Click on the little folder to the right of CD/DVD Image File then navigate to the newly created RCplus.iso Image file and click Open.
* In the CD/DVD Writing Speed drop-down menu choose the 8X setting.
* Under Format make sure that Mode 1 is selected.
* And finally, click on the Burn it! button to burn RCplus.iso to disk.


Once the disk is burned, put it in the machine you want to fix and restart it.
Boot to the CD just as you would with a Windows XP disk.
At the Welcome to Setup screen, press R to enter the Recovery Console.
Choose the installation to be repaired by number (usually 1) and press Enter.
When you are asked for the Administrator password, enter the password or leave it blank (default) and press Enter.

At the C:\Windows> prompt, type the following commands pressing Enter after each one. Note: Watch the spaces.

D:
cd i386
copy userinit.exe c:\windows\system32
exit


After putting in the third command, you should receive the message 1 file copied which will indicate that the operation succeeded.
Now take out the CD and reboot your computer to normal mode. Try to log in and it should let you back in.

Thanks to wannabe1
  • 0

#5
admin

admin

    Founder Geek

  • Administrator
  • 24,504 posts
Colabutterfly, I understand your frustration and apologize for the inconvenience. There is a recent infection that changes Windows login values. Good news is that it can be repaired, and you can continue with removal of any infections still present.
  • 0

#6
Colabutterfly

Colabutterfly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 26 posts
Thank you :) I don't want to inconvenience anyone on here or Bleeping computer, it's good to know that I'll be able to fix my computer.


rshaffer61 I get an 404 Not found error when I try to dowmload MagicIso
  • 0

#7
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Click on Burncdcc in my signature below. It will do the same thing as Magic Iso
  • 0

#8
123Runner

123Runner

    Member 4k

  • Member
  • PipPipPipPipPipPipPip
  • 4,307 posts
Colabutterfly

It is not a crime to try and fix your computer. The problem arises when you are getting help in 2 different forums. One forum does not know what the other is doing. You will wipe up with contradicting info which could make the matters worse.

We only want you to stick with 1 forum. We will get it resolved.
  • 0

#9
123Runner

123Runner

    Member 4k

  • Member
  • PipPipPipPipPipPipPip
  • 4,307 posts
Something we need to deal with for Colabutterfly after we get him/her going.

511.01 Mb Total Physical Memory | 226.61 Mb Available Physical Memory | 44.35% Memory free
Drive C: | 37.27 Gb Total Space | 5.85 Gb Free Space | 15.70% Space Free | Partition Type: NTFS
Drive D: | 633.38 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS------->>>This might be a restore partition.
  • 0

#10
Colabutterfly

Colabutterfly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 26 posts
The computer I'm on doesn't have writable cd is there any way to use USB?
  • 0

Advertisements


#11
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
That would depend on if the system can boot to a USB device.
  • 0

#12
Colabutterfly

Colabutterfly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 26 posts
If I reinstall XP will I lose all my Drivers or just my C Drive?
  • 0

#13
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Depends on how you reinstall. A repair installation would replace the files that are missing hopefully but keep your data safe. A Parallel installation would put a second windows on your system but keep your data intact. If you do a full installation then yes you would lose all data and have to reinstall all programs.
  • 0

#14
Colabutterfly

Colabutterfly

    Member

  • Topic Starter
  • Member
  • PipPip
  • 26 posts
So even if my G Drive is separate from my C Drive, I would still lose it? How do I do a Parallel installation?

Edited by Colabutterfly, 10 December 2009 - 12:45 PM.

  • 0

#15
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
No if G drive is a different drive or even a different partition you will not lose that data.
The reload of the OS is usually not the extreme steps we have to take in this type of situation.
Can you get access to a system with a cdrw drive so you can make the required cd with the usernit file to fix the system?


If you have the XP cd you can accomplish the same as using the RC because the RC is the Recovery Console in the XP cd.

Boot to Windows XP disk.
At the Welcome to Setup screen, press R to enter the Recovery Console.
Choose the installation to be repaired by number (usually 1) and press Enter.
When you are asked for the Administrator password, enter the password or leave it blank (default) and press Enter.

At the C:\Windows> prompt, type the following commands pressing Enter after each one. Note: Watch the spaces.

D:
cd i386
copy userinit.exe c:\windows\system32
exit


After putting in the third command, you should receive the message 1 file copied which will indicate that the operation succeeded.
Now take out the CD and reboot your computer to normal mode. Try to log in and it should let you back in.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP