Link to home
Start Free TrialLog in
Avatar of kmac9576
kmac9576

asked on

Windows Malware: Users logged out as soon as they login to the system.

OK, this is a new problem to me.  Apparently another user had the same problem but was unable to resolve it and resorted to loading the operating system from scratch.  So I will restate the problem and pray for a possible resolve.

Starting off.  The importance of this is high.  My client has multiple programs loaded on her pc that she does not have the software nor registration keys for any longer.  So the burden of figuring out this problem has landed on me.

Here is the previous post https://www.experts-exchange.com/questions/21994155/Malware-trojan-logs-users-out-as-they-log-in.html

Same problem here.

The systems ran for over a year with nortons subscription expired.  We were called out to speed up this over burdened pc and found W32.Beagle@mm running wild on the system.  After an Avast boot time scan, (removing over 2,800 entries of the virus) the system no longer lets users login.  It brings up the desktop, then immediately logs them right back off.  Attempts to run a windows repair has no effect.  I have also used our UBCD4, version 3, cd and manually edited the registry of all suspicious/un necessary services and start up programs to no avail.  Any help in resolving this issue would be much appreciated.

Thanks in Advanced.
SOLUTION
Avatar of InteraX
InteraX
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of kmac9576
kmac9576

ASKER

Yes, i have tried logging into safe mode, no go.  Same with Directory Restore mode as well.  I havn't tried creating a new user account yet.  I've used a program in the past that is for removing forgotten passwords on user accounds in windows that also lets you create new administrator users.  I will try that now and get back with you.

Thanks
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Yes, I can access safe mode command prompt.  Though I'm not sure (probably out of ignorance) what this would achieve for me.  I currently have the hard drive slaved in one of my tech boxes doing JUST those scans, but also including Kaspersky as well.  I'm looking at about another 30 minutes for the scans to finish before I can get the drive back into the original machine and check both the register (re: John6767's comment) and to try adding another administrator user.

Thanks for the feedback.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ah, well, system restore is definately a no-go.  It was one of the first things wiped with ezpcfix off of the UBCD disc just due to the fact that it would be a haven for the beagle virus.

thanks
ok, well time ended up playing out in favor, the customer finally broke down and bought new copies of her software, much thanks for the help. I'm closing this and spreading the points.