[mfrank1]

Calling Salagubang!
Just when I thought I was home free with all the help you gave me, I encountered another problem that is preventing me from booting! I hope you will catch this topic and we can pick up where we left off.

Everything seemed to be working, until I followed the last instructions you gave me to use the OTL cleanup function. After I ran it I rebooted and encountered a new problem. Suddenly, Windows asked me to log in (it never did before ... I'm the only user and never set a password. Windows always booted directly into the desktop). I clicked on the box with my name. It said "Loading your personal settings" and then, after a few minutes, said "logging off." It never actually loads the desktop.

I did this several times. Then, remembering what you taught me, I booted from CD into xPUD and using rst.sh -r, obtained a list of restore points. I restored to before I ran the cleanup. Windows then started to boot (no box to click for logon name). But it just loads my desktop wallpaper. No desktop icons. It isn't locked up. I can access Task Manager, but nothing else.

Things seemed to be going so nicely! I hope you can help me get back on track! THANK YOU!

[Advertisements]

Hi mfrank1

On the clean computer.

Download the attached Scan.txt and save it to your USB stick.
 Scan.txt   394bytes   549 downloads


On the infected computer.

• Reboot your system using the boot CD you just created.
  Note : If you do not know how to set your computer to boot from CD follow the steps here
• As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads
  
• Your system should now display a Reatogo desktop.
  Note : as you are running from CD it is not exactly speedy
• Double-click on the OTLPE icon.
• Select the Windows folder of the infected drive if it asks for a location
• When asked "Do you wish to load the remote registry", select Yes
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK
• OTL should now start.
• Double click Custom scans and fixes box, a dialogue box will appear. Choose the scan.txt saved previously on your USB drive.
• Press Run Scan to start the scan.
• When finished, the file will be saved in drive C:\OTL.txt
• Copy this file to your USB drive if you do not have internet connection on this system.
• Right click the file and select send to : select the USB drive.
• Confirm that it has copied to the USB drive by selecting it
• You can backup any files that you wish from this OS
• Please post the contents of the C:\OTL.txt file in your reply.

[Salagubang]

Hi mfrank1

On the clean computer.

Download the attached Scan.txt and save it to your USB stick.
 Scan.txt   394bytes   549 downloads


On the infected computer.

• Reboot your system using the boot CD you just created.
  Note : If you do not know how to set your computer to boot from CD follow the steps here
• As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads
  
• Your system should now display a Reatogo desktop.
  Note : as you are running from CD it is not exactly speedy
• Double-click on the OTLPE icon.
• Select the Windows folder of the infected drive if it asks for a location
• When asked "Do you wish to load the remote registry", select Yes
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK
• OTL should now start.
• Double click Custom scans and fixes box, a dialogue box will appear. Choose the scan.txt saved previously on your USB drive.
• Press Run Scan to start the scan.
• When finished, the file will be saved in drive C:\OTL.txt
• Copy this file to your USB drive if you do not have internet connection on this system.
• Right click the file and select send to : select the USB drive.
• Confirm that it has copied to the USB drive by selecting it
• You can backup any files that you wish from this OS
• Please post the contents of the C:\OTL.txt file in your reply.

[mfrank1]

Ok ... here are the results of the scan. I wonder what could have caused this problem? I'd be very interested in your thoughts on this, as we cleaned the system thoroughly and I certainly don't want this to happen again. Thank you!

Attached Files

•  OTL after second boot problem.Txt   127.1KB   586 downloads

[mfrank1]

Salagubang--I think I figured out my problem (although I'll need your help for a fix). After we cleaned my system, you advised me to check out the XP forum for tips to get my computer running faster. It was suggested there that I download autoruns and uncheck some no longer needed processes. I did so and the computer seemed to run fine until I rebooted. That's when I had the logon problem. I believe this is the likely culprit and I'm hoping you can help with a fix. As I mentioned, using a restore point obtained from xPud got me booted, but nonfunctioning. Hope it's fixable! (after which I promise to stay away from the XP forum!)

[Salagubang]

Hi mfrank1,

Sorry for the delay.

Start OTLPE as you did previously from CD
Copy the attached Fix.txt to a USB
 fix.txt   248bytes   586 downloads

• Insert your USB drive with fix.txt on it
• Start OTLPE
• Drag and drop fix.txt into the Custom scans and fixes box
• If you cannot drag and drop for some reason. Then press the Run Fix button and a dialogue box will pop up asking for the location - select the file on your USB drive
• Then click the Run Fix button at the top
• Let the program run unhindered, reboot when it is done to normal mode if possible
• Then post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )

[mfrank1]

YOU ARE AMAZING! I need to keep using it (and rebooting it) for awhile, but it seems OK, thanks to your fix. Interestingly, Kaspersky popped up as soon as it booted. Apparently it didn't uninstall itself after I used it. Am I correct that this last problem was caused by autoruns? I'll stay away from that one, for sure. Here is the last OTL log, after your fix but before a reboot. THANK YOU again. Wish I had your email address.

Attached Files

•  OTL after fix before reboot.Txt   103.75KB   615 downloads

[Salagubang]

Hi mfrank1,



When you performed system restore, the system (specifically your registry which functions in part to tell your computer where to look for files) was restored to its past state. This is the reason why you are seeing Kaspersky still being uninstalled. Consequently, it will also look for files that may or may not exist on your computer anymore.

In this case, the old registry was looking for soluto.exe but could not find the file hence you have a blank desktop.

Autoruns is a good program if used with supervision.

Use the computer for a while and if you find any issues, don't hesitate to ask.

Cheers.

Edited by Salagubang, 15 November 2010 - 05:46 PM.

[Salagubang]

Hi mfrank1,

Can you update me of any remaining issues.

[mfrank1]

Hi Salagubang -- I will shortly. I've been traveling for business and away from the affected computer. I will put it through tough paces over the next few days and let you know if any issues remain. Thank you for following up. - mf1

[mfrank1]

Salagubang-- As near as I can tell, my computer is in good working order. This, of course, is thanks to you. I have made additional efforts to delete unnecessary files and programs, as you suggested. Unfortunately, this has not resulted in any noticeable speed increase and it still runs much more slowly than it used to. Don't worry ... I'll keep away from any unsupervised use of autoruns FYI--I thought it might be good to replace my two security programs (Zone Alarm and Spyware Doctor) with one. I'm now using Norton, primarily because it is offered free from my ISP. So far, no Norton-related problems that I can detect.

I want to, again, tell you how grateful I am for your help. Without your patient, step-by-step tutelage, I'd be looking at a doorstop instead of a computer. If positive feedback can help you achieve expert status, please consider my feedback EXTREMELY positive.

Stay well and happy,
Mark (mfrank1)

[Salagubang]

Mark,

Nice to know that everything is working and thank you very much for your feedback. It encourages me to strive even better in training as well as to help other people in need.

Remember, you have to be smarter than the bad guys! Be safe out there!

Regards

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.