total nightmare and need help

[Spaceman]

Hi everyone,
After my unlce told me he thought he had a virus
I told him to bring the computer over,
He has Windows XP on a Dell Computer
and he had no password setup for his account,
There are other accounts and all are administor
priveleged account but I think only one had a password.


I found it had that Vista Antivirus fake stupid program
and I followed the manual removal instructions at
http://www.enigmasoftware.com/support/vistaantivirus2008-removal/
and it went away fine but then after a couple reboots
and never giving it a password, it is not showing me the Windows
is Not Activated Window at the bottom of the login screen
and all accounts are asking for a password.

I have tried rebooting to safe mode and logging on using
the administrator account but that is also asking for
a password that was never set by anyone.


Is there anything besides a re-install that will help me get back
in to actually set a password now?
I hope?

 

[Daave]

Hi everyone,
After my unlce told me he thought he had a virus
I told him to bring the computer over,
He has Windows XP on a Dell Computer
and he had no password setup for his account,
There are other accounts and all are administor
priveleged account but I think only one had a password.


I found it had that Vista Antivirus fake stupid program
and I followed the manual removal instructions at
http://www.enigmasoftware.com/support/vistaantivirus2008-removal/
and it went away fine but then after a couple reboots
and never giving it a password, it is not showing me the Windows
is Not Activated Window at the bottom of the login screen
and all accounts are asking for a password.

I have tried rebooting to safe mode and logging on using
the administrator account but that is also asking for
a password that was never set by anyone.


Is there anything besides a re-install that will help me get back
in to actually set a password now?
I hope?

You can try Petter Nordahl-Hagen's Offline NT Password & Registry
Editor:

http://home.eunet.no/pnordahl/ntpasswd/

I wouldn't assume you are 100% rid of the malware. Look at the programs
recommended here:

http://www.spywarewarrior.com/rogue_anti-spyware.htm#trustworthy

I especially like SUPERAntiSpyware. You may download the free version
here:

http://www.superantispyware.com/superantispywarefreevspro.html

(Scroll down and click the blue box that says "Download FREE VERSION
Home Users."

If there is still a problem, you can always try HiJack This! The
following list is courtesy of David H. Lipman:

Forums where you can get expert advice for HiJack This! (HJT) and
Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13