Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: U.S. Ballistic Missile Defense Systems Fail Cybersecurity Audit

Featured Deal: Get 98% off the 2018 CompTIA Certification Training Bundle: Lifetime Access Deal

IS 2010 can't get past start screen

Started by John Good , Dec 24 2009 02:04 PM

Please log in to reply

1 reply to this topic

#1 John Good

Members
4 posts
OFFLINE

Local time:07:08 PM

Posted 24 December 2009 - 02:04 PM

Hello and thanks alot for helping us!

I have an XP machine in my home network that got infected with IS 2010. When I start the computer (in safe or normal mode) i get a fake welcome screen (the blue Windows welcome screen) with the "administrator" button. I am sure its fake because I see the desktop "flash" for a split second before the fake screen covers it. I can't get past this fake start up GUI to take your recommended countermeasures. I just need a clue so I can get "in" and get this scourge out! I am a veteren of fighting the AV 2009 war so I know something about these things. Anyway, I have already taken one interesting countermeasure. Since I couldn't get past the fake start screen, i removed the hard drive and attached a raid to USB adaptor cable. I then cleaned the drive by scanning it with MBaum from another machine thru the USB connection. Both Mcafee and MBaum found numerous infections and cleaned them. But upon retrying I still get the fake screen when I reboot with the cleaned drive in the first machine. I repeated the cleaning procedure and the infections had regenerated. Any ideas how to get past the fake screen or to clean remotely with the 2nd machine?

Thanks
John