Removing user installed Startup (Shutdown) logo

[Guest]

Hope somebody can help. Neighbour has purchased a second hand laptop for his
son and asked me to clean up. There is an "iinapproriate" logo screen being
displayed on both startup and shutdown which I like to remove.

I'd thought this would be easy having installed a startup logo sreen on my
own PC. (some time back).

However, I'm afraid I can't remember how I installed on mine let alone how I
would uninstall it if I wanted to.

Both PC's are running XP, one home the other Pro. Can anyone help by
pointing me in right direction.

 

[John John]

Did the laptop come with reinstallation disks, or does it have a service
partition? When it is booted does it offer you to press one of the F
keys to recover the operating system? If the laptop has inappropriate
pictures at startup and shutdown there is no saying what else is on it!
Probably more of the same kind of trash hiding in other areas and
quite probably there might be spyware or malware in there somewhere.
The best thing to do is to invoke the restore function or use the
reinstallation disks and format the drive and reinstall Windows cleanly.

John

 

[Guest]

I've not been given any re-intallation disks nor is there sny service
partition. I don't want to go down the route of re-install even if disc
available. All other inapproriate software, images etc have been removed as
has all ad, spy and malware. Also, all virus and trojans that were found
have been eradicated. The PC is clean as it can get apart from this one
image at startup/shutdown. I just need to remove it.

 

[John John]

The ntoskrnl.exe file has been hacked or replaced, replace it with a
good and proper version number, perhaps you can use SFC to attempt to
replace it or else you will have to boot to the Recovery Console to
replace it. YOU MUST use a version of the file that is consistent with
the service pack level or hotfixed version! If you do not want to hack
or replace the file search on the internet for bootscreen hacking
utilities, these utilities hack the file for those who do not know how
to use resource hacking tools or hex editors. It appears that your
malware removal tools failed to notice that ntoskrnl.exe has been changed!

Sooner or later your neighbour's son will need a Windows XP CD! It is
not maybe or if, it is only a matter of time, it is "when" and without
an XP cd he may find himself in a fine pickle and without the necessary
tools to get his computer back up and running. Get his dad to buy him a
Windows CD.

John

 

[Guest]

John John,

I'd downloaded and run a utility called Logon Loader which removed the
picture. Your points noted for future ref and comemnts forwarded. Thanks

 

[John John]

You're welcome, thanks for the follow-up.

John

John John,

I'd downloaded and run a utility called Logon Loader which removed the
picture. Your points noted for future ref and comemnts forwarded. Thanks



: