PDA

View Full Version : Infection - Can't even log into Windows XP - Help!



sjb80
2009-03-25, 04:26
My Norton Antivirus detected two infections:
1) Trojan.Initbar and 2) Trojan.Malscript!html.

I believe Norton successfully removed # 2 but not #1.

I then rebooted in SAFE MODE but I can't even log in to any of the 5 user accounts on the system, not even ADMINSTRATOR. I can get to the login screen but when I try to login to any account, the login process starts and 1 to 2 seconds later I get a message "saving settings" and am automatically logged off.

Is there any sort of utility I could load on a USB stick and load onto the infected computer to detect and delete the infections?

I'm trying to avoid a full reformat/reinstall of Windows XP.

Thanks for any help.

sjb80
2009-03-25, 18:19
I forgot to also mention that Spybot detected and appeared to remove VirusRemover 2009, but now something is blocking my XP logins.

Again, looking for something that can be loaded to a USB drive that can scan XP without actually logging in.

Does such a thing even exist?

Again, I'd like to avoid a full drive reformat and reloading Windows XP (running SP2).

Thanks for any assistance,
_Scott

katana
2009-03-28, 17:57
Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.

Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:
Please Read All Instructions Carefully
If you don't understand something, stop and ask! Don't keep going on.
Please do not run any other tools or scans whilst I am helping you
Please continue to respond until I give you the "All Clear"
(Just because you can't see a problem doesn't mean it isn't there)

If you can do those few things, everything should go smoothly http://www.countingcows.de/laechel.gif

Please Note, your security programs may give warnings for some of the tools I will ask you to use.
Be assured, any links I give are safe
----------------------------------------------------------------------------------------

Hi sjb80,
Can you log in in normal mode ?

Download and Run RSIT

Please download Random's System Information Tool by random/random from here (http://images.malwareremoval.com/random/RSIT.exe) and save it to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open:

log.txt will be opened maximized.
info.txt will be opened minimized.

Please post the contents of both log.txt and info.txt.