Re: i don't konw if my computer is hacked by someone or not

Hi Carl,

The userinit value may have been corrupted by the removal of blazefind. It
adds wsaupdater.exe to the logon value in the system registry, sometimes
appending it, sometimes replacing it. Running Adaware or other cleaners
detects and removes wsaupdater.exe, but doesn't correct the registry damage.
If this is the case, then you may need to load the registry hive from
another installation and change it. This is the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Userinit string value should be:

C:\WINDOWS\system32\userinit.exe,

On the damaged installations it's one of these:

C:\WINDOWS\system32\wsaupdater.exe,
C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wsaupdater.exe,

Another "quickie" method of resolution is to load the Recovery Console (see
below), copy userinit.exe as wsaupdater.exe from the command prompt, then
restart normally. Once in, go and change the registry value back to what
it's supposed to be and delete the copied file.

HOW TO: Install and Use the Recovery Console in Windows XP [Q307654]
http://support.microsoft.com/?kbid=307654

This can also be done by using the 6 disk boot floppy set mentioned in the
above article, as it loads enough of the Recovery Console so that you can
copy the file. This is particularly useful if you have an OEM installation
that includes only a Restore CD, or no disk at all.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Carl" <(E-Mail Removed)> wrote in message
news:F2503F2B-ACA3-431D-A060-(E-Mail Removed)...
>i try to access into my windows...
> screen shows that I should choose one of the
> owner and guest to get in....
> but both of them are not functioned well.
> when i click either of them..the computer load
> for a short while...but the screen remain unchanged.
> several seconds later..it asks me to choose
> users again....
> i can't get into my computer...
>
> has my computer been hacked by others ?
> or does it get virus?
>
> can anybody tell me how to deal with this issue plz?
> thank you