Reason4 wrote:
> First of all, thanks for your willingness to help.
>
> Now to your question; we run AVG and Avast antivirus programs, use Spybot
> and Ad-Aware along with Windows Defender and SpywareBlaster and
> SpywareGuard.
I hope you are not running AVG Antivirus and Avast Antivirus at the same
time. If you are, this could most certainly cause problems. I also would
not run Windows Defender and SpywareGuard at the same time. You only want
*one* antivirus program running resident and you only want *one*
antispyware program running resident.
> In the last couple of weeks we have gotten hits from Spybot for what seems
> to be Stration C and Trojan Norio malware. Hubby has made efforts to
> remove these but the results have been questionable.
As far as I'm concerned, your computer is in an unknown state. I have no
idea what your husband has done, what you have installed, or whether in
spite of all the stuff you have running the machine is really clean. There
is always the possibility of hardware failure, too. There is simply no way
for me to guess what's going on here since I can't see the machine.
If you can't log into Windows in any fashion, the only thing you can do is
boot with a Bart's PE or some other rescue media such as ERD Commander (an
old, expensive program that has been discontinued), load the registry hive
from the target drive and see if winlogon is damaged and if it has, repair
it. The correct registry entry for winlogon is:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit string value should be:
C:\WINDOWS\system32\userinit.exe,
Note the trailing comma, which should be there.
You might also be able to salvage the system by pulling the drive and
slaving it in a working XP machine - or put it in an external enclosure -
and scanning it from the working XP install. Or at least see what's going
on and/or pull the data off by copying it from the working install.
Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ -
http://www.elephantboycomputers.com/#FAQ