n99nyrwg

I hooked it up as a secondary harddrive to an xp install, right now i'm scanning it with a a few progs. So far I've found many variances of netsky and backdoor.defender. It looks like backdoor.defender is the one that caused all the problems though, telling windows to start certain services.

Interesting, I knew it could be done for normal users and even users with administrative permissions, but not the actual administrator account. Thanks

If you get logged onto your computer you could right click on My Computer, goto properties, then goto the advanced tab. Click "Settings" under the Startup and Recovery section. Then you can click the "Edit" button and edit your boot.ini. If you can't login you can find the file in C:\boot.ini It is marked as a hidden file and it is marked as a system file.

I've also heard of this happening if you run pirated versions of windows. I can't validate that it's true, just something I've read/heard.

You want to make it so the computer automatically boots into the administrator account? That would be a pretty big security issue, but I also do not believe it's possible.

Actually dr_st, I thought when going into this thread it was going to be about permanent deletion of files as well. Then after reading your first sentence of your post I thought that was surely what it was about. But then by the end of your post I really wasn't sure exactly what you wanted. Did you want a way to permanently delete files, or did you want a way to delete just the os files? Now I know it was the latter, but in that case using the word violently and the phrase 'without a trace' was misleading. But let's forget about that. More importantly if you are going to post on a help forum and ask for help, that is what you did, do not attack the people that are trying to help you. Let's say he was trying to promote his program, it was still relevant to your request, thus it was still help, or an attempt at it. Quote: But I do mind being treated as stupid and talked to in a condescending manner. It's the internet, relax. Lastly, Alec, he's not worth your replies. I've been on this forum for an hour or so and I've already noticed that Alec answers almost everyone's questions. That is why I felt like posting this. dr_st needs to be more grateful imo. dr_st I am sure you will attack my post, but I'm not going to reply. This is a computer help forum, flaming has no place here. If you got what you needed then stop posting rants.

Sorry, I forgot to mention that I already ran a repair install, and the login problem still persists.

Are you behind a hardware or software firewall? Maybe you are blocking the ports that aim needs open.

Ok, first thing, it looks like you started two topics about that. I don't know if that was intentional or not, but you should probably try deleting the other one. Now, to get this straight: You have a 1ghz machine that was running winxp on a 10gig harddrive. You then took out the 10gig, put a 40gig in it's place, then tried a fresh install of winxp on the 40 gig. You got no errors, but now when you boot it won't boot?

Win2k, here is the story: Client was using his computer, just doing some stuff with ms word. Then all of a sudden weird things start happening (that's the only description I got). So he called for a PC tech. One of my co-workers went down there and tried to shut down the computer. A message displayed that he did not have permission to shutdown the computer. The tech then decided to look at the files on the harddrive. He went to My computer, and then C drive, and nothing was displayed. However if he went to the properties of C it would display it as 8gigs full or so. The tech ended up shutting down the computer. Not through windows. When booted back up, safe mode or not, you cannot login. You get an error message: Quote: Logon Message: The system can not log you on due to the following error: The paramater is incorrect Please try again or consult your system administrator. No matter what account you try to log in as you get that message, even if you try the administrator account. My first thought was the attack had disabled all the accounts. So to fix this I ran a linux boot disk with chntpw and sure enough the admin account was disabled/locked out. So I enabled it and reset the password to nothing. Yet when I rebooted, safe mode or not, the same error message appears. I then booted to a Norton Anti-Virus CD I had and did a virus scan from there, no virii were found. My backup plan is too hookup the harddrive as a secondary harddrive and then get the data off. I'm guessing NTFS permission will give me trouble, so then my fall back plan is to use GetDataBack NTFS to recover the files needed. But not only do I want to fix it because it's fun, but also because he wants things off of there like his outlook calendar and stuff like that. No matter what, though, I will be reformatting the computer in the end. But it would be nice to atleast fix some of it so I can login and get files off and maybe see exactly what went on. So what I'm looking for is any tips. I've never seen anything like this, and I'm going to be running out of ideas soon as I can't find any info on the error message I get. I'm going to be researching this and working on it, but if you can point me in the right direction I'd appreciate it. The computer is not supposed to be loggin on to the domain, and according to the windows logon gui it is not trying to do so. I can login to the administrator account by booting into Recovery Console. From there I also tried copying a good userinit.exe file to the system32 folder and naming it wsaupdater.exe. That didn't work so I also tried just replacing the userinit.exe with the good one. That obviously didn't work either.