NWI2007
asked on
Can't log into windows xp
when login into windows xp pro I am immediately logged out again.
Even with the administrator account. I used a password reset utility to reset the password.
Now when I login it appears to work and then immediately logs me out.
<Additional information from duplicate question has been added by Moderator>
Even with the administrator account. I used a password reset utility to reset the password.
Now when I login it appears to work and then immediately logs me out.
<Additional information from duplicate question has been added by Moderator>
ASKER
Any account. I've never seen this before. Tried the reg edit to winlogon and that didn't work.
I've seen that before (long ago) with a virus. I'd scan the drive (install as second drive in another computer or use a CD or USB-based boot disk scanner).
ASKER
I'll give it a shot...you may be right...somehow the pc managed to rename itself.
Disconnect it from the network. (I've seen that help other login issues... I have my doubts it will work, but it's a quick and simple thing to try).
"Suddenly no logins", "renamed itself" and "logs me out" to me says virus or malware ... loudly. It is clearly not an Update issue as Update for XP has been dead a long time unless the POS hack has been enabled.
It is unfortunate that a password reset utility was used, as the system is now no longer in the original, corrupt state and not much can be made of the user accounts forensically now. It would have been useful to know when the last password changes wer done on the system.
Does the afflicted system have internet access, and was an antivirus installed on it?
At this stage I would:
a) Make a full image backup of the drive, and then
b) Take the drive to a different system, attach it either by USB converter or directly to the motherboard (not as a bootable drive!), and then run a full virus and malware scan on it, and then
c) Let us know what you discover.
It is unfortunate that a password reset utility was used, as the system is now no longer in the original, corrupt state and not much can be made of the user accounts forensically now. It would have been useful to know when the last password changes wer done on the system.
Does the afflicted system have internet access, and was an antivirus installed on it?
At this stage I would:
a) Make a full image backup of the drive, and then
b) Take the drive to a different system, attach it either by USB converter or directly to the motherboard (not as a bootable drive!), and then run a full virus and malware scan on it, and then
c) Let us know what you discover.
Probably this is the reason: https://support.microsoft.com/en-us/help/249321 (it explains that due to an unintentional change of the drive letter from c: to something else, system processes cannot start and thus, log you out again.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.
I have recommended this question be closed as follows:
Accept: NWI2007 (https:#a42955569)
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
seth2740
Experts-Exchange Cleanup Volunteer
I have recommended this question be closed as follows:
Accept: NWI2007 (https:#a42955569)
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
seth2740
Experts-Exchange Cleanup Volunteer
Sounds like account might be disabled