Windows XP immediately reboots after login

[Guest Sheila]

PC had indicated viruses last week and tech came and cleaned it up. However,

apparently there is no antivirus program installed. This week noticed

appearance of Antivir08 which I thought was AV put on by tech but found out

it is malware. Shortly thereafter PC cannot be booted other than safe mode

because after Windows login PC immeidately reboots.

 

I was able to get into Safe Mode and install Malawarebytes Anti-Malware (as

suggested in another forum) which indicated it removed Antivir08 but the

reboot problem persists. Any ideas how to solve this?

 

Since safe mode is only option to start successfully, I cannot get to

Windows updates or other installs as I get "cannot install in safe mode"

errors.

 

System is Windows XP Media Center Edition 2002 SP2 on Dell Optiplex GM-280

(Pentium 4).

[Guest David H. Lipman]

From: "Sheila" <sheila@nospam>

 

 

 

| PC had indicated viruses last week and tech came and cleaned it up. However,

| apparently there is no antivirus program installed. This week noticed

| appearance of Antivir08 which I thought was AV put on by tech but found out

| it is malware. Shortly thereafter PC cannot be booted other than safe mode

| because after Windows login PC immeidately reboots.

 

| I was able to get into Safe Mode and install Malawarebytes Anti-Malware (as

| suggested in another forum) which indicated it removed Antivir08 but the

| reboot problem persists. Any ideas how to solve this?

 

| Since safe mode is only option to start successfully, I cannot get to

| Windows updates or other installs as I get "cannot install in safe mode"

| errors.

 

| System is Windows XP Media Center Edition 2002 SP2 on Dell Optiplex GM-280

| (Pentium 4).

 

 

What happens if you create a new account, in Safe Mode, and logon to the system with said

new account ?

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Guest Sheila]

Created new account in safe mode, rebooted and tried to login. Same problem,

system immeidately reboots.

 

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message

news:u6$F6PyCJHA.4380@TK2MSFTNGP06.phx.gbl...<span style="color:blue">

> From: "Sheila" <sheila@nospam>

>

>

>

> | PC had indicated viruses last week and tech came and cleaned it up.

> However,

> | apparently there is no antivirus program installed. This week noticed

> | appearance of Antivir08 which I thought was AV put on by tech but found

> out

> | it is malware. Shortly thereafter PC cannot be booted other than safe

> mode

> | because after Windows login PC immeidately reboots.

>

> | I was able to get into Safe Mode and install Malawarebytes Anti-Malware

> (as

> | suggested in another forum) which indicated it removed Antivir08 but the

> | reboot problem persists. Any ideas how to solve this?

>

> | Since safe mode is only option to start successfully, I cannot get to

> | Windows updates or other installs as I get "cannot install in safe mode"

> | errors.

>

> | System is Windows XP Media Center Edition 2002 SP2 on Dell Optiplex

> GM-280

> | (Pentium 4).

>

>

> What happens if you create a new account, in Safe Mode, and logon to the

> system with said

> new account ?

>

> --

> Dave

> http://www.claymania.com/removal-trojan-adware.html

> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

>

> </span>

[Guest jen]

"Sheila" <sheila@nospam> wrote in message

news:ODZjhxxCJHA.5060@TK2MSFTNGP03.phx.gbl...<span style="color:blue">

> PC had indicated viruses last week and tech came and cleaned it up.

> However, apparently there is no antivirus program installed. This week

> noticed appearance of Antivir08 which I thought was AV put on by tech

> but found out it is malware. Shortly thereafter PC cannot be booted

> other than safe mode because after Windows login PC immeidately

> reboots.

> I was able to get into Safe Mode and install Malawarebytes

> Anti-Malware (as suggested in another forum) which indicated it

> removed Antivir08 but the reboot problem persists. Any ideas how to

> solve this?

> Since safe mode is only option to start successfully, I cannot get to

> Windows updates or other installs as I get "cannot install in safe

> mode" errors.

> System is Windows XP Media Center Edition 2002 SP2 on Dell Optiplex

> GM-280 (Pentium 4).</span>

 

Wait for help (as you were told when you posted this same issue on CC)

here:

"You're Ready for cleaning.

At CastleCops we screen all HijackThis logs for errors, out-of-date

versions, unupdated operating systems, omissions and P2P applications;

getting you [READY] for cleaning by our 1st Responders and Security

Experts.

Now you wait for one of them to come help you."

http://www.castlecops.com/p1110292-Windows...fter_login.html

 

-jen

[Guest Maurice N ~ MVP]

Sheila,

As Jen said, see the reply at CastleCops forum

http://www.castlecops.com/modules.php?name...5ed639991226576

 

--

Maurice Naggar

MS-MVP

-----

 

"Sheila" <sheila@nospam> wrote in message news:ODZjhxxCJHA.5060@TK2MSFTNGP03.phx.gbl...<span style="color:blue">

>

>

> PC had indicated viruses last week and tech came and cleaned it up. However,

> apparently there is no antivirus program installed. This week noticed

> appearance of Antivir08 which I thought was AV put on by tech but found out

> it is malware. Shortly thereafter PC cannot be booted other than safe mode

> because after Windows login PC immeidately reboots.

>

> I was able to get into Safe Mode and install Malawarebytes Anti-Malware (as

> suggested in another forum) which indicated it removed Antivir08 but the

> reboot problem persists. Any ideas how to solve this?

>

> Since safe mode is only option to start successfully, I cannot get to

> Windows updates or other installs as I get "cannot install in safe mode"

> errors.

>

> System is Windows XP Media Center Edition 2002 SP2 on Dell Optiplex GM-280

> (Pentium 4).

>

></span>

[Guest David H. Lipman]

From: "Maurice N ~ MVP" <maurice@mvps.org>

 

| Sheila,

| As Jen said, see the reply at CastleCops forum

| http://www.castlecops.com/modules.php?name...c&t=226180&sid=

| 8e3797dea6f6cfdbb5ed639991226576

 

Miekiemoes registry policy deletion entries won't help.

 

Sheila indicated she created a new account and then logged in with said new account and

had the same reboot problem. Therefore the problem is in HKLM not in HKCU where

Miekiemoes registry policy deletion entries are focused on.

 

If anything, there is a problem with the Winlogon process which may indicate examination

of...

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

 

 

 

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Guest Maurice N ~ MVP]

Points well taken. Thank you, David.

 

--

Maurice Naggar

MS-MVP

-----

 

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:OCzOJ39CJHA.3352@TK2MSFTNGP05.phx.gbl...<span style="color:blue">

> From: "Maurice N ~ MVP" <maurice@mvps.org>

>

> | Sheila,

> | As Jen said, see the reply at CastleCops forum

> | http://www.castlecops.com/modules.php?name...c&t=226180&sid=

> | 8e3797dea6f6cfdbb5ed639991226576

>

> Miekiemoes registry policy deletion entries won't help.

>

> Sheila indicated she created a new account and then logged in with said new account and

> had the same reboot problem. Therefore the problem is in HKLM not in HKCU where

> Miekiemoes registry policy deletion entries are focused on.

>

> If anything, there is a problem with the Winlogon process which may indicate examination

> of...

> HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

>

> --

> Dave

> http://www.claymania.com/removal-trojan-adware.html

> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp </span>