TechSpot

immediately logs back

By Chronus
Feb 3, 2009
  1. My computer
    Hey, here are the logs for my computer. All are in their original location, these are just copied to desktop for easy finding.



    Secondary help for my brothers laptop.
    My brother was having a problem with some viruses on his computer that Avast was working on. out of annoyance my brother restarted his laptop. now whenever he logs on to ANY account, even in safe mode, as soon as it logs in it immediately logs back out allowing you to see the desktop background for less then 1 second. As i said, it will do this even when attempting to log in while in safe mode. Any suggestions?
     
  2. mflynn

    mflynn TS Rookie Posts: 2,655

    Your computer first!

    You never said what your symptoms are?

    Update MBAM then click Logs and post any other logs that are there!

    Update then run SAS Quickscan again and be sure to put a check in Tracking cookies to remove them. New Log!

    Then do the below....

    Download SDFix to Desktop.

    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

    On Desktop run SDdFix It will run (install) then close.

    Then reboot into Safe Mode

    As the computer starts up, tap the F8 key several times.

    On the Boot menu Choose Safe Mode.

    Click thu all the prompts to get to desktop.

    At Desktop
    My Computer C: drive. Double-click to open.

    Look for a folder called SD Fix. Double-click to enter SD Fix.

    Double-click to RunThis.bat. Type Y to begin.

    SD Fix does its job.

    When prompted hit the enter key to restart the computer

    Your computer will reboot.

    On normal restart the Fixtool will run again and complete the removal process then say Finished,
    Hit the Enter key to end the script and load your desktop icons.

    Once the desktop is up, the SDFix report will open on screen and also be saved to the SDFix folder as Report.txt.
    Attach the Report.txt file to your next post.
    =========================================
    Download ComboFix

    NOTE: If you have had ComboFix more than a few days old delete and re-download.

    Get it here: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    Or here: http://subs.geekstogo.com/ComboFix.exe

    Double click combofix.exe follow the prompts.

    When finished, it will open a log.
    Attach the log and a new HJT log in your next reply.

    Note: Do not click combofix's window while its running. That may cause it to stall.

    Mike
     
  3. Chronus

    Chronus TS Enthusiast Topic Starter Posts: 118

    I ran into a problem. I can not use the F8 to start into safe mode as my keyboard does not receive power until after the computer has already started windows. is there a way to tell the computer to restart into safe mode like there was in later versions?

    Windows XP, Office edition.
     
  4. mflynn

    mflynn TS Rookie Posts: 2,655

    OK go into System Properties in Control panel.

    Click Advanced-Startup and Recovery.

    Click the edit button. Copy and paste this to me. Then exit without save. Do not change anything.

    Mike
     
  5. Chronus

    Chronus TS Enthusiast Topic Starter Posts: 118

    [boot loader]
    timeout=30
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
     
  6. mflynn

    mflynn TS Rookie Posts: 2,655

    OK go back to same place. Copy the line below and paste it under the last line. change nothing else.

    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Pro Safe Model" /safeboot:minimal /sos /bootlog

    Save and click ok to exit!

    Reboot! You will be offered a boot to safe mode option for 30 second or it will come up normally. So arrow down to Safe mode and hit Enter!

    Mike
     
  7. Chronus

    Chronus TS Enthusiast Topic Starter Posts: 118

    I did things out of order. SDfix, MBAM, SAS quickscan, Combofix, Hijack this.

    I Had to use the boot.ini in msconfig, to boot into safe mode as the keyboard still was not receiving power soon enough to make the selection.

    Here are the logs.
     
  8. Chronus

    Chronus TS Enthusiast Topic Starter Posts: 118

    The Rest of the logs here
     
  9. mflynn

    mflynn TS Rookie Posts: 2,655

    Combofix had found/removed items so run it again to confirm clean.

    SAS quick scan select and remove the tracking cookies.

    A final I hope HJT log and a Status report on this computer how it runs anything remaining to fix.

    Mike
     
  10. Chronus

    Chronus TS Enthusiast Topic Starter Posts: 118

    Hey, completed the scans, computers working great. I still keep trying to convince my friends to work with you guys as well.
     
  11. mflynn

    mflynn TS Rookie Posts: 2,655

    Found more....

    Cut for pasting pull to bottom watch the side slider, the below text inside the box.Then open new Notepad document on Desktop then paste and save as CFscript.txt to the Desktop

    EXIT ALL BROWSERS before continuing!
    You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    Now use your mouse to drag CFscript.txt on top of ComboFix.exe

    Follow the prompts.
    When it finishes, a log will be produced named c:\combofix.txt. Attach that back here.
    Mike
     
  12. Chronus

    Chronus TS Enthusiast Topic Starter Posts: 118

    done, i think. it updated itself and then restarted, don't know if that would have affected anything.
     
  13. mflynn

    mflynn TS Rookie Posts: 2,655

    Sorry Chronus

    I hope you expected me to thorough!

    I missed this one! Delete the CFScript and so you can create a new one

    Cut for pasting the below text inside the box.

    Then open new Notepad document on Desktop then paste and save as CFscript.txt to the Desktop

    EXIT ALL BROWSERS before continuing!
    You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
    Now use your mouse to drag CFscript.txt on top of ComboFix.exe

    Follow the prompts.
    When it finishes, a log will be produced named c:\combofix.txt. Attach that back here.

    Code:
    File::
    c:\windows\system32\drivers\logiflt.iad
    Mike
     
  14. Chronus

    Chronus TS Enthusiast Topic Starter Posts: 118

    Hey, 1 your human just like me, so its all cool.
    2 considering all that you do to help all lot of us that are here and need help each day, you are awesome. Thank you so much for your help, and I'm glad that you did find it, rather then not.
     
  15. mflynn

    mflynn TS Rookie Posts: 2,655

    One more regular Combofix to confirm removal and see clean log,run and hopefully we are finished.

    Mike
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...