Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Was Infected with Internet Security 2010


  • Please log in to reply
No replies to this topic

#1 superillusion

superillusion

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:10 PM

Posted 21 January 2010 - 06:45 PM

I was infected with Internet Security 2010 so I ran Superantispyware. It found lots of things on there so I quarantined and removed them but when I tried to log back into windows I got suck in an "auto log off loop". I could not enter safe mode, so I tried booting from the cd and trying "copy userinit.exe wsaupdater.exe", that didn't work so this is what I did:


1) Use the XP disk and go into the Recovery Console
2) "We need to replace the software hive with a previous good backup."
a.) type cd system32\config enter
b.) type ren software software.old enter
This renames the current software hive to software.old
c.) type copy C:\windows\repair\software enter
It should say "1 file(s) copied"
d.) type exit
this will leave recovery console
3) Hit F8 before Windows starts to enter Safe Mode - You should hopefully be able to log in now
4) Now we need to Fix the registry
a.) Start-->Run--> type regedit, enter
b.) Select/Highlight HKEY_LOCAL_MACHINE
c.) Hit File-->Load Hive
d.) Find where you saved the software.old file (C:\windows\system32\config\software.old)
e.) Just name it test
a.) Navigate to test\software\microsoft\windows nt\currentversion\winlogon
b.) Look for the Userinit field
c.) Mine was blank which was causing the log off loop, others had wsaupdater.exe in this key
- Double click on the ky and type C:\windows\system32\userinit.exe,
Note: if anything differs repeat step 5 with HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
6) Restart and log back into Recovery Console
7) Restore the original hive now
a.) type cd system32\config enter
b.) type del software enter
c.) type ren software.old software enter
d.) type exit enter
8) Log back into Windows normally

After I was able to log on, but now my computer hangs at "Applying Settings" and all my documents are gone and I can't connect to the internet.

Help Please and Thank You in advance

BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users