XP virus -- login screen displaying no users to log in with?

Saahil, its a customer machine, I don't know if spyware/virus software was run before this happened or not.  It may a few hours before I here back from the owner to ask.

Try hitting ctrl-alt-del when you get to the logon screen-probably hit it twice and see if you get the classic logon dialog

I ran those steps for wsaupdater.exe, and its still the same problem...I had hopes for that fix.

I also tried the ctrl-alt-delete trick yet again, and nothing happens.

hmmmmmmm i had too =\

tell me when u try this, it too doesn't work ??
HOW TO: Start the System Restore Tool from a Command Prompt in Windows XP:
http://support.microsoft.com/?kbid=304449

if NO then two other ways are replace regisry from Recvoery Console, or a Repair =\

How to recover from a corrupted registry that prevents Windows XP from starting
http://support.microsoft.com/?kbid=307545

How to Perform an In-Place Upgrade (Reinstallation) of Windows XP:
http://support.microsoft.com/?kbid=315341

Or this site explains Repair\Recovery Console with pics:
http://www.webtree.ca/windowsxp/repair_xp.htm

Those writeups appear to require that I have the XP product key, which the customer will look for in a few hours after getting home from work.  I have "given up", and I recommended a reinstall of the OS to the customer, and since they value the data on disk, I will recover that with my 3.5" drive enclosure....

Saahil, their doesn't appear to be a straight forward fix, eh?

Mark

hmmmmmmmm there can be a straight forward fix if we know abt the straght forward reason of the problem !!!!!!

u know problems dont occur without reasons,,,,, there is always a reason behind the problem,,,,, and believe me if we know the reason the chances of solving the problem become 80% !!!!

now we normally see this problem, most of them say we removed this spyware and now im unable to login,,,, so the solution which can be worked is replacing userinit.exe !!!!!

but if a person comes to u and will say,,, i dont know last night i turned off the system and this morning when i turned it on i was unable to login,,,,,, so how will u guess that what wud happen to it !!!!!!!
 
we can eliminate the problem only if we know where it lies,,,, but if u are given an unknown problem, u have to take an extreme step =\

is the RAM (new ram) set correctly in the bios and has the bios been altered to accomodate the new ram ?

Also, try using the clients XP CD, press R to to enter repair options page, press R again, and when a prompt appears for a repair option select M.Now hit the up arrow a couple of times to select Verify Windows System files....and enter.....

After the selection is amde move down to continue, press enter...you'll be prompted to enter emergency repair disk...if you dont have one press L so u can locate Windows on your HDD. Press enter to make the repairs.

Maybe as straight forward fix as you can get.

and that 192 mb of ram..XP really needs 256mb of ram.

I figured out the RAM by looking in bios, odd was that 64 MB was in slot 0, and 128 MB was in slot 1.  I assumed (woops) that this was not the cause of this specific problem, that it must be OK.  I typically prefer the larger ram chip be in slot 0 in this configuration, but I left it alone, since behavior didn't indicate to me that that was the cause of the problem.  I never reseated memory either, again because if that were the problem, I believe problematic behavior would be erratic, not consistent like this.

I did find out that "nothing unusual was done to the computer before this problem occurred", but they did say it was running poorly (slow to come up, lots of popups, etc) for a while before this happened.

They could not find their product key for XP Professional, did not want to install Windows ME (that product key was on the sticker on the computer), and didn't want to purchase a new copy of XP.  So as of timothyfryer's post, I cannot try the new ideas.  She has picked up the machine and payed my my diagnostic fee.  Oh Well.  I'll assign points now.

Thanks for the excellent ideas,
Mark

Any good suggestions for checking for a boot sector viruses?  I know boot floppy's are good, but then I need a set for every OS?  Is there a good anti-virus vendor to use to create such a set?

AVG Free Edition has a boot sector scanner that works on windows, maybe others also but not sure.
http://free.grisoft.com/freeweb.php/doc/2/

Magical Jellybean KeyFinder can retrieve product key from existing installation but not from cd
http://www.magicaljellybean.com/keyfinder.shtml

I am a grisoft reseller...once a customer used AVG's boot disks, and somehow destroyed their Win98 install, it would not do anything, and I had to reinstall the OS.  So I'm now a little leary of it.  Since then I have also found that those boot disks are not very generic; I cannot just pop them into any windows machine (even if the OS is the same), and scan for viruses.

I already have the keyfinder mentioned by tim, but I could not run it in this case, since I could not log into Windows!!

Yeah, I lost some confidence in AVG after right click scanning some known virus files that AVG showed OK.  Actually, none of the virus apps will find all so best bet is scan with as many as you can tolerate.
On machines that have factory installed os'es or unattended install os'es, the product key can sometimes be found in a file called

C:\WINDOWS\SYSTEM32\$WINNT$.INF

http://personal-computer-tutor.com/abc2/v15/vic15.htm

>> She has picked up the machine and payed my my diagnostic fee

didn't u ask her,,,, now how wud she fix it,,, with a hammer ;-)

anywyazzzzzzzz for boot virus disks..... i always Trust Mcafee :)
http://vil.nai.com/vil/averttools.asp#003

Saahil, I accepted your early answer because it will probably help others even though it wasn't my solution, and thanks to timothy and pcgandalf for helping out, all those ideas help me for the next case..

Mark

Thank you for the points.  Good Luck.

thanx ^_^

seems very fair! Best of luck.

This problem is NOT caused by wsaupdater.exe. They are two seperate problems. The user profiles are actually deleted in this case. Classic login will not help you. You need a way to add users to the XP installation. I'm still looking into this on my customers machine.. I'll keep you posted. This is just FYI. I'm sure your finished with that machine by now.

I have found a computer with this problem also. it happens to be an Hp too with xp home sp2.

I have got to find a fix for this problem. I have a client whose machine I have re-built twice and just got this problem again. They're losing confidence in me and it's really got me stumped. I read all above but it doesn't look like it's really been fixed but I do share something in common (Ad Aware  and AVG)

Ad Aware I have been using religiously the same version (1.61) and have not had a problem whatsoever. What IS new is the latest AVG FREE program ver 7. And since it's one of the first things I put on a new system I have to believe this is it. On a new build no less.

What's getting corrupted? I have ERD and all those utilities to get to the registry if needed.

Anxiously looking forward to a reply

thanks all

I have the same problem on a hp laptop.  The first time this happened I reghosted the machine.  It's running Norton internet security and adaware.  It just happened again.  Any help would be appreciated.

is anyone still struggling with this i have a solution. but noticed this thread from 2004/2005 so no point typing out my solution.

Hi beastwez;
 I am interested in hearing your fix. I have a customer that is experiencing this very problem.

beastwez, PLEASE share your solution!

I've come accross the same problem with my Windows XP setup and I'm in urgent need for help.

since janurary iv fixed tonnes of PC, and can't remember my solution. i will have a think and post back ASAP sorry guys.

OK im remember now.
Basically I have a utility on CD, I can upload it to the back end of my website if anyone needs it, it's called PC Anaylser I think. I ran the util, and there was an option to run a registry restore. (Bog standard windows restore wouldnt work as I couldnt log in). Loads of dates appeared so I went back a week, and 2mins later, PC absolutely bang on again! Sorted.
Let me know if you need the app or weblink and ill upload it.

cheers
wes

Hi Beastwez ;

Doh! Sorry for the double post- ZI have done some preliminary searching and cant find a working link for PC Analyzer. If you can provide either a link or or the app I would be greatful! Thanks again for your time.

Hi I will get it uploaded to my website and send you a link. Will upload it as a bootable iso.
bear with me as its wednesday night drinking session tonight so will do is soon as I get chance.

cheers
wes

LOL- have a pint on me! Thanks again

OK everyone, PC Analyzer is uploading to my website now. Should take about an hour, it's about  250mb.
goto www.controlaltdeleteit.co.uk/pcanalyzer.iso
it is a bootbale CD and great for engineers like me.

hope that helps everyone.

wes

Thanks Beastwez!