Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Windows XP system will not boot. It keeps cycling at login

Posted on 2010-11-19
27
Medium Priority
?
559 Views
Last Modified: 2012-05-10
I may have gotten a virus, but not sure. Suddenly the computer will boot, show the background desktop image then go to the boot screen where I can select the user. It's called user 1
I click on it, it doesn't ask for a password, then it says logging off. I can click on the user 1 button over and over and it keeps saying logging off.
0
Comment
Question by:wootangclan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 13
  • 8
  • 3
  • +2
27 Comments
 
LVL 6

Expert Comment

by:Kris Montgomery
ID: 34177538
Hi!

An old nasty logon script.

You need the Kapersky Rescue Disk:
http://support.kaspersky.com/viruses/rescuedisk

It will resolve the issue for you.

Thanks.

mug
0
 
LVL 49

Expert Comment

by:dbrunton
ID: 34177546
Quite possible virus.

Safe mode works or not?

If not you'll have to take the hard drive out and attach to another machine (either as a slave or in a USB caddy) and scan for virus there.

These are usually the anti-virus products recommended around here for this task.

MalwareBytes:
http://www.malwarebytes.org/mbam-download.php

HitmanPro:
http://www.surfright.nl/en/hitmanpro

TDSSKiller:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip

ComboFix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
0
 
LVL 10

Expert Comment

by:moon_blue69
ID: 34177564
as soon as your system is powerd up and the bios screen flashes press F8 to bring the advanced startup menu and select disable automatic restart on system failure and continue
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 6

Expert Comment

by:Kris Montgomery
ID: 34177565
I will second the comment to use Malwarebytes and ComboFix.   And I will second my own comment :) about using a Rescue disk, only because the user doesn't need to remove the harddrive.

If you happen to remove the drive, run Malwarebytes... A Full Scan will be necessary.

Thanks!

mug
0
 

Author Comment

by:wootangclan
ID: 34177653
I have Kapersky. It boots, I choose graphic mode, then it has the blackspalsh and nothing else.
0
 
LVL 12

Expert Comment

by:TK-77
ID: 34177676
If you can't get Kapersky to fully boot, you can try Dr Web Live CD.
http://www.freedrweb.com/livecd/

If that doesn't boot into graphic mode, you can select to run a scan from the console mode. It's pretty easy to use plus it's free and it works well.

TK
0
 

Author Comment

by:wootangclan
ID: 34177683
how do you work console mode
0
 
LVL 49

Expert Comment

by:dbrunton
ID: 34177694
Lots of possibles here.

Kapersky may not be fiinding the hard disk.
The hard disk may be corrupt.
Your computer itself my be ailing (motherboard, power supply).

Consider taking the hard disk across to another computer.
0
 

Author Comment

by:wootangclan
ID: 34177738
No. the HD is not corrupt. I've already ran chkdsk /r on it.
it was from another windows install.
0
 
LVL 10

Expert Comment

by:moon_blue69
ID: 34177747
pull your hard disk out if you have a another computer connect it their go to folder options and unhide protected system files and copy ntdetect, ntldr,boot.ini to your c drive plug t back it should be working
0
 
LVL 49

Expert Comment

by:dbrunton
ID: 34177759
>>  No. the HD is not corrupt. I've already ran chkdsk /r on it.

OK.  In that case the motherboard, power supply might be OK as well.  Strange the Kapersky CD didn't seem to go anywhere.  

SATA or PATA drive?  Laptop or desktop computer?
0
 

Author Comment

by:wootangclan
ID: 34177766
SATA drive on a SATA card. I was thinking that was causing issues. I'm trying it on console mode now
0
 

Author Comment

by:wootangclan
ID: 34177804
so isn't there a linux release that has good virus malware scan built in. bootable linux?
0
 
LVL 49

Expert Comment

by:dbrunton
ID: 34177823
That Kapersky CD is I think a Linux disk.  You've got Midnight Commander on it for text mode operations and that http://en.wikipedia.org/wiki/Midnight_Commander is a Linux util.
0
 

Author Comment

by:wootangclan
ID: 34177837
I wish the Kapersky disk would boot damn it. I tried console mode, and it just hanged there. There was just a curser. what do I do? what do I type?
0
 

Author Comment

by:wootangclan
ID: 34177838
I wish the Kapersky disk would boot damn it. I tried console mode, and it just hanged there. There was just a curser. what do I do? what do I type?
0
 

Author Comment

by:wootangclan
ID: 34177839
starting to think there is something seriously wrong with the hardware on this machine.
0
 
LVL 49

Expert Comment

by:dbrunton
ID: 34177861
I suspect that the Kapersky CD can't recognise the hard disk on the SATA channel.

Or there is a hardware problem as you state.

You could grab another Linux distribution such as Knoppix http://www.knoppix.org/ or Ubuntu http://www.ubuntu.com/ and boot from that and see if can see and browse the disk.

You did say that you ran chkdsk on this disk and presumably on this SATA port and it worked OK.

0
 

Author Comment

by:wootangclan
ID: 34177920
hooked it up to my machine. malwarbytes found nothing.
0
 

Author Comment

by:wootangclan
ID: 34177945
tried malwarebytes, superantispyware, and chkdsk. so far nothing. how can I force windows into a normal login window where I can try to login as admininstrator. now I only have option for user1.
I can see user1 and administrator on safe mode boot, however, it does the same thing for both accounts logs back off immediately.
0
 
LVL 49

Expert Comment

by:dbrunton
ID: 34177974
Look at this thread http://www.computing.net/answers/windows-xp/logs-out-imedialtly-after-i-log-in/116408.html

May not be your problem but worth looking at.
0
 
LVL 49

Expert Comment

by:dbrunton
ID: 34177988
0
 
LVL 6

Expert Comment

by:Kris Montgomery
ID: 34178058
The Avira Rescue Disk is Linux and is a good one too.

http://www.avira.com/en/support-download-avira-antivir-rescue-system

Please try that.  Thanks!

mug
0
 

Author Comment

by:wootangclan
ID: 34178112
none of these disk are working. I need a high level expert or guru to tell me how to fix this and not just rely on these rescue disks. I already said that there were no virus found.

I know there has to be something simple. like replacing a windows file. or a registry edit, or script edit that will trick windows to boot up.
0
 

Accepted Solution

by:
wootangclan earned 0 total points
ID: 34178212
Sry. I finally found the solution. I had to mount the registry hive from another computer. then I adjusted the registry

HKEYLOCALMACHINE/SOFTWARE/WINDOWSNT/WINLOGON/
changed key entry to point to userinit.exe file.

All I had to do was change it to point from c:\windows\system32\userinit.exe to d:\windows\system32\userinit.exe

d: is where the actual userinit.exe file is. for some reason the registry was pointing to the c drive even though d was always the boot drive.
0
 
LVL 49

Expert Comment

by:dbrunton
ID: 34178224
0
 

Author Closing Comment

by:wootangclan
ID: 34203813
Thanks for all that tried, but just pointing to these rescue disks didn't help.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows 7 does not have the best desktop search built in. This is something Windows 7 users have struggled with. You type something in, and your search results don’t always match what you are looking for, or it doesn’t actually work at all. There ar…
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question