Can not get past the welcome screen

[siamoose]

I don't even know how to begin this! This morning I woke up to a black screen
on my monitor that had in big letters WARNING: You have a trojan (and it said
another virus also but I can't remember its name). My McAfee was not
allowing me to run it, so I uninstalled it, reinstalled it, it did a quick
scan said everything was ok, but I still had the black warning on my monitor.
It said for me to run spyware, so I did, I downloaded Spybot, ran it and it
did find a lot of items. After I ran it, all warnings on my monitor went
away. I think I may have told it to do something with the registry and that
maybe my problem now. This is what happens:

1. I turn on the computer
2. It boots up to the welcome screen, where it shows my name (I did have my
husband on as another account user, I removed him from it when his computer
was fixed).
3. I click on my name to go to my desktop
4. It goes to my desktop, my desktop is there but it just sits there for a
few minutes
5. Then it goes back to the welcome screen
6. If I click on my name again at the welcome screen, my desktop appears
just for a brief second, then goes back to the welcome screen and says it is
logging me off.

Can you help? I must have really screwed up on something! I was thinking
about just reformatting in a few weeks, but now I can't even do that, I can't
get past the welcome screen!

Thank you for any help and suggestions! PS: I do not have a CD to reboot
with, none came with the computer, which is a HP.

Debbie

 

[Tim Meddick]

May I ask you what you mean by "reformatting" as most of us would take it as
reformatting and re-installing Windows?

If you were indeed going to do that anyway, may I suggest now is the
time. When you re-install Windows the drive is reformatted before
installation.

You might try booting and pressing F8 as soon as the computer is
switched on to get to the boot menu. Then choose 'Safe mode with
networking. Download Malwarebytes either on your computer or on another and
copy it over on a pendrive. Run Malwarebytes (considered to be about the
best anti-virus software available free).

If you meant something else, and you do not have any Windows versions on
disk to install, and you cannot boot into 'Safe mode' then I don't see that
much can be done.

==



Cheers, Tim Meddick, Peckham, London.

 

[Jose]

I don't even know how to begin this! This morning I woke up to a black screen
on my monitor that had in big letters WARNING: You have a trojan (and it said
another virus also but I can't remember its name).  My McAfee was not
allowing me to run it, so I uninstalled it, reinstalled it, it did a quick
scan said everything was ok, but I still had the black warning on my monitor.
 It said for me to run spyware, so I did, I downloaded Spybot, ran it and it
did find a lot of items. After I ran it, all warnings on my monitor went
away. I think I may have told it to do something with the registry and that
maybe my problem now.  This is what happens:

1. I turn on the computer
2. It boots up to the welcome screen, where it shows my name (I did have my
husband on as another account user, I removed him from it when his computer
was fixed).
3. I click on my name to go to my desktop
4. It goes to my desktop, my desktop is there but it just sits there for a
few minutes
5. Then it goes back to the welcome screen
6. If I click on my name again at the welcome screen, my desktop appears
just for a brief second, then goes back to the welcome screen and says itis
logging me off.

Can you help?  I must have really screwed up on something!  I was thinking
about just reformatting in a few weeks, but now I can't even do that, I can't
get past the welcome screen!

Thank you for any help and suggestions!  PS: I do not have a CD to reboot
with, none came with the computer, which is a HP.

Debbie

If you can't get logged into a usable desktop using normal methods,
you need to try booting in Safe Mode. You can't troubleshoot if you
can't get logged in.

Try Safe Mode with networking first so you can access the Internet.
If that does not work, try with no networking.

Download, install, update and do a full scan with these three free
malware detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
AVG (AVG): http://free.avg.com/

McAffee never has found a darn thing on my system, Spybot just finds
non edible cookies, so they waste my time no more.

You really should try to get booted in safe mode with networking and
get the scans done first. If you can't get on the Internet or make it
to those WWW sites, there are some other options, but you still need
to try diligently to get booted in some kind of safe mode.

After scanning, if you boot normally and still can't login, that is a
common after effect of malware (even after removal) and can sometimes
be fixed without much sweat.

Jose

 

[siamoose]

Tim and anyone else who might see this

So far this is what I have done:

Safe Mode, Safe Mode with Networking, Last Known Good Configuration (your
most recent settings that worked)

None of these have helped. I get to the welcome screen where it says my
name, I click on my name, goes to my desktop, sits there for a few minutes,
goes right back to the welcome screen, if I click on my name again, it logs
me off.

Any suggestions guys? What does this mean, it shows up when the computer
starts up? <F10_System Recovery>

Thank you!

 

[Tim Meddick]

It means you have a complete system backup on your PC. Your PC is probably
either an Acer, HP, or Dell - they have an extra 'recovery' partition on
them with an 'image' of the operating system as it was when it left the
factory.

If you use the F10 option - all your personal data (photos, music, videos,
email, etc) and any software you installed will disappear - However - after
the recovery operation has finished, you will be left with a working XP
installation ready for you to use again. It wont even have any passwords
set as it will be 'As New'.

Try looking up the make of your computer and searching for 'Recovery' on
their website, because this is what it is.

Hope this is of some help to you.

==


Cheers, Tim Meddick, Peckham, London.

 

[Elmo]

I don't even know how to begin this! This morning I woke up to a black screen
on my monitor that had in big letters WARNING: You have a trojan (and it said
another virus also but I can't remember its name). My McAfee was not
allowing me to run it, so I uninstalled it, reinstalled it, it did a quick
scan said everything was ok, but I still had the black warning on my monitor.
It said for me to run spyware, so I did, I downloaded Spybot, ran it and it
did find a lot of items. After I ran it, all warnings on my monitor went
away. I think I may have told it to do something with the registry and that
maybe my problem now. This is what happens:

1. I turn on the computer
2. It boots up to the welcome screen, where it shows my name (I did have my
husband on as another account user, I removed him from it when his computer
was fixed).
3. I click on my name to go to my desktop
4. It goes to my desktop, my desktop is there but it just sits there for a
few minutes
5. Then it goes back to the welcome screen
6. If I click on my name again at the welcome screen, my desktop appears
just for a brief second, then goes back to the welcome screen and says it is
logging me off.

Can you help? I must have really screwed up on something! I was thinking
about just reformatting in a few weeks, but now I can't even do that, I can't
get past the welcome screen!

Thank you for any help and suggestions! PS: I do not have a CD to reboot
with, none came with the computer, which is a HP.

Debbie

You're probably still infected. Burn a couple of these to a CD (using a
working machine) and boot the infected machine with them:

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

 

[Tim Meddick]

P.S. If you want to save your files (photos, music, videos, etc.) either
take the PC to a local Computer repair shop and ask them to recover your
personal data.

OR,

....ask someone you know who is computer 'savvy' to take out the HD and
temporarily place it in their PC as a 'slave' drive. They can then retrieve
your data from your "%PROFILENAME%\My Documents" folder, and put it on a
pendrive for you.

It should not cost as much to you as loosing irreplaceable photos of loved
ones!

==


Cheers, Tim Meddick, Peckham, London.

 

[Tim Meddick]

P.P.S. Using the F10 recovery option *will* get rid of any virus infection
as it re-writes the entire system partition.

If you choose to try the 'recovery cd' and it does not fix the problem,
using the F10 option definitely will bring your computer back to the 'As
New' state as I said before, but with all your data and programs gone.

So do try and follow up on trying to retrieve your data, if it is valuable
to you, on using F10.

==

Cheers, Tim Meddick, Peckham, London.

 

[Tim Meddick]

P.P.S. Using the F10 recovery option *will* get rid of any virus infection
as it re-writes the entire system partition.

If you choose to try the 'recovery cd' proposed by 'Elmo' and it does not
fix the problem, using the F10 option definitely will bring your computer
back to the 'As New' state as I said before, but with all your data and
programs gone.

So do try and follow up on trying to retrieve your data, if it is valuable
to you, on using F10


==


Cheers, Tim Meddick, Peckham, London.

 

[Jose]

Tim and anyone else who might see this

So far this is what I have done:

Safe Mode, Safe Mode with Networking, Last Known Good Configuration (your
most recent settings that worked)

None of these have helped. I get to the welcome screen where it says my
name, I click on my name, goes to my desktop, sits there for a few minutes,
goes right back to the welcome screen, if I click on my name again, it logs
me off.

Any suggestions guys?  What does this mean, it shows up when the computer
starts up? <F10_System Recovery>

Thank you!

Have you a bootable XP CD?

Boot on it, choose the Recovery Console, logon as Administrator with
empty password (that is all the CD knows about, right?)

I think you need to start with replacing the the c:\windows
\system32\userinit.exe file on your HDD.

There should be one in c:\windows\servicepackfiles\i386 (check first)
that you can copy into c:\windows\system32

From a DOS prompt, the command to enter would be something like:

copy c:\windows\servicepackfiles\i386\userinit.exe c:\windows
\system32

It should report: one file(s) copied.

If that fails to copy (tell us what is said if it failed), you may
need to expand the userinit.exe from your CD, but try the easy stuff
first.

Remove your bootable CD, and try the HDD again and report any changes.

Jose

 

[Tim Meddick]

If you copy it from that folder you will be copying a file that is out of
date - a previous version number from the previous service pack.

It may well not be compatible with the current SP any more.


==


Cheers, Tim Meddick, Peckham, London.

Tim and anyone else who might see this

So far this is what I have done:

Safe Mode, Safe Mode with Networking, Last Known Good Configuration (your
most recent settings that worked)

None of these have helped. I get to the welcome screen where it says my
name, I click on my name, goes to my desktop, sits there for a few
minutes,
goes right back to the welcome screen, if I click on my name again, it
logs
me off.

Any suggestions guys? What does this mean, it shows up when the computer
starts up? <F10_System Recovery>

Thank you!

Have you a bootable XP CD?

Boot on it, choose the Recovery Console, logon as Administrator with
empty password (that is all the CD knows about, right?)

I think you need to start with replacing the the c:\windows
\system32\userinit.exe file on your HDD.

There should be one in c:\windows\servicepackfiles\i386 (check first)
that you can copy into c:\windows\system32

From a DOS prompt, the command to enter would be something like:

copy c:\windows\servicepackfiles\i386\userinit.exe c:\windows
\system32

It should report: one file(s) copied.

If that fails to copy (tell us what is said if it failed), you may
need to expand the userinit.exe from your CD, but try the easy stuff
first.

Remove your bootable CD, and try the HDD again and report any changes.

Jose

 

[Tim Meddick]

Download my userinit fix from here http://www.ms-mvp.org/ this file works
for SP2 and SP3 only. READ the enclosed instructions. If you have SP1 do not
use this file. If you need any other version then email me using the link at
the bottom of my webpage. Your issue is caused by a malware infestation.
Once fixed you will need to use my Remove-it software, it will remove that
malware from your system. Choose yes for all options when prompted. Download
it here http://www.ms-mvp.org/


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

 

[Jose]

If you copy it from that folder you will be copying a file that is out of
date - a previous version number from the previous service pack.

It may well not be compatible with the current SP any more.

==

Cheers,    Tim Meddick,    Peckham, London.    










Have you a bootable XP CD?

Boot on it, choose the Recovery Console, logon as Administrator with
empty password (that is all the CD knows about, right?)

I think you need to start with replacing the the c:\windows
\system32\userinit.exe file on your HDD.

There should be one in c:\windows\servicepackfiles\i386 (check first)
that you can copy into c:\windows\system32

From a DOS prompt, the command to enter would be something like:

copy c:\windows\servicepackfiles\i386\userinit.exe  c:\windows
\system32

It should report: one file(s) copied.

If that fails to copy (tell us what is said if it failed), you may
need to expand the userinit.exe from your CD, but try the easy stuff
first.

Remove your bootable CD, and try the HDD again and report any changes.

Jose

Mine are identical (SP3).

I would like to see how this goes since it is easy.

I still have a few cards to play here that do not involve
screwdrivers, leaving the house or any loss of data...

Jose

 

[siamoose]

Ok guys, I'm willing to try anything!
Question: When it says

<<Boot the computer using the new bootdisk>> How do I do that?
Another instruction says

<<boot up the computer by loading DVD / CD Rom media first.>> That has me
lost also!

Thank you guys for helping me, I appreciate it a lot!

 

[Jose]

Ok guys, I'm willing to try anything!
Question:  When it says

<<Boot the computer using the new bootdisk>> How do I do that?  
Another instruction says

<<boot up the computer by loading DVD / CD Rom media first.>>  That hasme
lost also!

Thank you guys for helping me, I appreciate it a lot!

On my system when I boot from the CD, it says press any key to boot
from CD, but I must press F10

Choose R for the Recovery Console. If given a choice of Windows
folder to boot, choose WINDOWS.

The Windows setup will start and last several minutes (it is a little
scary).

You should then be able to get to the console which is a really dumb
DOS window, but you are now looking at your C drive. You have to type
the commands very carefully and I could have mistyped something so be
careful.

The problem is your userinit.exe files is either missing from \windows
\system32 or XP is being told to use a file called wsaupdater.exe to
start XP, which is wrong and why you got the tempting message to
download so software (did you fall for that?)

CD to the windows\system32 folder.

If the userinit.exe file is missing, copy the file from your \windows
\servicepackfiles\i36 folder with copy command:

copy c:\windows\servicepackfiles\i386\userinit.exe c:\windows
\system32 <enter>

If there is a file in \windows\system32 called: wsaupdater.exe this
is part of your problem. Do not just delete it just yet.

In the \windows\system32 folder, copy the userinit.exe file over the
top of wsaupdater.exe:

copy userinit.exe wsaupdater.exe <enter>

Now you should type exit <enter> and whatever else and try to boot
from your HDD.

Should this work, stop for now and report back - there is a little
more to do.

Jose

 

[Tim Meddick]

In the file that you downloaded is an .iso file, that file needs to be
"Burned" to cd. Once that is done you put that cd in the broken computer and
restart it. If that computer is set to boot from the cd then all you have to
do is follow the rest of the directions to replace that file. If your system
is not set to boot from the cd then change that setting. Jose gave you some
options or you can look here
http://www.computerhope.com/issues/ch000217.htm


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

 

[siamoose]

Jose,
I can't understand how to boot up with the CD, sorry. I put it into the CD
drive, turned the machine on and pressed F10, it took me to the program to
reformat.

Ugh, I am at the point of doing just that!
Debbie

 

[Jose]

Ok guys, I'm willing to try anything!
Question:  When it says

<<Boot the computer using the new bootdisk>> How do I do that?  
Another instruction says

<<boot up the computer by loading DVD / CD Rom media first.>>  That hasme
lost also!

Thank you guys for helping me, I appreciate it a lot!

Wait a minute... I want siamoose to boot on a bootable XP CD, if
siamoose has one. Not something downloaded, burned, etc.

If userinit.exe is missing, i don't think just putting it back will
not fix this problem, but it's up to siamoose.

Siamoose - do you have a bootable XP CD for you afflicted machine that
you can boot to?

If yes, we can be done with this chop-chop.

Jose

 

[Tim Meddick]

Siamoose does not have a an XP cd. Yes putting the correct file back will
fix the issue that is why I created that fix with simple instructions that
will automatically replace that file.


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.

Ok guys, I'm willing to try anything!
Question: When it says

<<Boot the computer using the new bootdisk>> How do I do that?
Another instruction says

<<boot up the computer by loading DVD / CD Rom media first.>> That has me
lost also!

Thank you guys for helping me, I appreciate it a lot!

Wait a minute... I want siamoose to boot on a bootable XP CD, if
siamoose has one. Not something downloaded, burned, etc.

If userinit.exe is missing, i don't think just putting it back will
not fix this problem, but it's up to siamoose.

Siamoose - do you have a bootable XP CD for you afflicted machine that
you can boot to?

If yes, we can be done with this chop-chop.

Jose

 

[Tim Meddick]

Siamoose I have updated that file to include a utility to burn that iso
file. It will make it easier if you do not know how to burn iso's.
Re-download it again http://www.ms-mvp.org/


--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.