Lost logins at Welcome Screen & Admin account issue in Safe Mode

[ctbucky]

Hope someone has some ideas:

Somehow all user accounts have been disabled at the XP Welcome Screen
(virus?). Had this happen once before and was able to restore after loging
in as Admin in Safe Mode. For some reason, Safe Mode will not accept the
<blank> password.

I'm at a loss for what to do now. I stupidly tried to repair my istallation
of XP and it seems to have erased all my System Restore points - tried an
off-the-shelf recovery program but it saw no Restore points. Same program
allows access to files and everything is still there.

Anyone have any thoughts/ideas? Thanks....

 

[Mark L. Ferguson]

It certainly has all the earmarks of a hostile Malware attack. I would reset
the password with a bartPE disk, then use this link info to try to restore
your wsaupdater (logon screen)
You cannot log on to Windows XP after you remove Wsaupdater.exe:
http://support.microsoft.com/kb/892893

Offline NT pw & reg-editor, bootdisk password:
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html
--
Please use the Communities guidelines when posting.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm
Use the "Ratings" feature. It helps the new users.
Mark L. Ferguson MS-MVP
https://mvp.support.microsoft.com/profile/Mark.Ferguson

 

[Leonard Grey]

You should show your computer to a professional. You will likely have to
erase your hard disk and reinstall your software.
---
Leonard Grey
Errare humanum est

"A Day in the Life of a Web 2.0 Hacker" - PC Magazine
http://www.pcmag.com/article2/0,2817,2330952,00.asp

 

[ctbucky]

Mark,

Thanks for the ideas. I actually tried it tonight and I have some access to
the machine now but nothing with Admin privileges. My wife's account is now
accessable as are two that weren't there before ('Owner' and 'Gary2'). The
user account with Admin privileges was mine, 'Gary'. It, as well as the
default Admin account are not listed when I use the boot disk to try to reset
the passwords.

What was I paying TrendMicro for? They should support this after I've been
paying them for 3yrs to protect me from this garbage.....

I guess its looking more and more like I'll have to slave my current drive
to another computer and copy over my files and wipe the stupid thing.