Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer wont get past login screen.


  • Please log in to reply
6 replies to this topic

#1 Cbrandt

Cbrandt

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 10 April 2009 - 09:00 PM

Hi guys, basically the problem im having is that my computer freezes right at the login screen and I cant login at all. Before this happened my computer all the sudden started getting a bunch of pop-ups, so I tried to run Superanti-spyware but it seemed like some program was bugging it out so it wouldnt load. I tried to re-download it but it wouldn't let me access the page. I tried to run spy-bot and malware-bytes and my computer wont boot either of those up (due to some sort of infection I assume?). So now my computer wont boot into regular Windows XP at all. It will boot into Windows safe mode and so I tried running ad-aware the only spyware program that my computer would let boot up. It ran came up with multiple infections but it didn't fix my problem. I tried going into MSConfig and unchecking all the boot up programs and rebooting but to no avail my computer keeps freezing at the login screen. Please help!! Thanks!

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:05:00 PM

Posted 10 April 2009 - 09:29 PM

If mbam won't install or run

Some types of malware will disable MBAM and other security tools. If MBAM will not install, try renaming it. Right-click on the mbam-setup.exe file and change the .exe extension to .bat, .com, .pif, or .scr and then double-click on it to run.

If after installation, MBAM will not run, open the Malwarebytes' Anti-Malware folder in Program Files, right-click on mbam.exe and change the .exe as noted above. Then double-click on it to run.
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 Cbrandt

Cbrandt
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 10 April 2009 - 09:37 PM

ok thanks ill give it a go

#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,801 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:05:00 PM

Posted 11 April 2009 - 01:33 PM

Topic reopened and HiJack This log deleted at member's request.

@ Cbrandt

Please follow the instructions garmanma previously left for you and post back with the MBAM log if you were able to get it to run. If you couldn't get it to run, please let us know.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#5 Cbrandt

Cbrandt
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 12 April 2009 - 05:26 PM

Ok I got mbam to run and it removed some mal-ware/viruses, but the problem lies in the fact that mbam said it needs to run again upon restart of my computer. Well I still cannot log onto windows regularly so idk how to let mbam re-run to remove the virus or malware or whatever is keeping my computer from running. Because if I just reboot it into safe mode it must not load the file that tells mbam to start up before my computer actually boots to the start screen.

EDIT: My computer just continues to boot until the login page where it freezes as soon as I type the password in.

Edited by Cbrandt, 12 April 2009 - 05:30 PM.


#6 Cbrandt

Cbrandt
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:04:00 PM

Posted 12 April 2009 - 09:48 PM

I got MBAM to run again and here is the log. I've tried rebooting like it says to remove that last trojan downloader but it freezes my computer at the login screen for quite a time before I just hard restart it. It doesnt come up with the MBAM scanner box like it normally does on reboot. Everytime I re-run MBAM it comes up with the same files and its changing my webpages that i'm downloading and what not, but my computer is actually booting up now.

Malwarebytes' Anti-Malware 1.36
Database version: 1964
Windows 5.1.2600 Service Pack 3

4/12/2009 9:48:12 PM
mbam-log-2009-04-12 (21-48-12).txt

Scan type: Quick Scan
Objects scanned: 80080
Time elapsed: 2 minute(s), 44 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 4
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{89876561-f3e9-421a-8381-ed30415fef51} (Trojan.Downloader) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{89876561-f3e9-421a-8381-ed30415fef51} (Trojan.Downloader) -> Delete on reboot.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> Delete on reboot.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\autodis.dll (Trojan.Downloader) -> Delete on reboot.

Edited by Cbrandt, 12 April 2009 - 11:24 PM.


#7 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:05:00 PM

Posted 13 April 2009 - 01:51 PM

Have you tried running Superantispyware again? Please do so
Also try Dr. Web Cure-it
------------------------------

Please download Dr.Web CureIt, the free version & save it to your desktop. DO NOT perform a scan yet.

Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with Dr.Web CureIt as follows:
  • Double-click on launch.exe to open the program and click Start. (There is no need to update if you just downloaded the most current version
  • Read the Virus check by DrWeb scanner prompt and click Ok where asked to Start scan now? Allow the setup.exe to load if asked by any of your security programs.
  • The Express scan will automatically begin.
    (This is a short scan of files currently running in memory, boot sectors, and targeted folders).
  • If prompted to dowload the Full version Free Trial, ignore and click the X to close the window.
  • If an infected object is found, you will be prompted to move anything that cannot be cured. Click Yes to All.
  • When complete, click Select All, then choose Cure > Move incurable.
    (This will move any detected files to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if they can't be cured)
  • Now put a check next to Complete scan to scan all local disks and removable media.
  • In the top menu, click Settings > Change settings, and UNcheck "Heuristic analysis" under the "Scanning" tab, then click Ok.
  • Back at the main window, click the green arrow "Start Scanning" button on the right under the Dr.Web logo.
  • When the scan is complete, a message will be displayed at the bottom indicating if any viruses were found.
  • Click "Yes to all" if asked to cure or move the file(s) and select "Move incurable".
  • In the top menu, click file and choose save report list.
  • Save the DrWeb.csv report to your desktop.
  • Exit Dr.Web Cureit when done.
  • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
  • After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users