WinXP Logon Logoff Loop

For those that have never encountered this woe. The symptom of this apparent malware is that you get to the Windows Welcome screen; presented with your icon, click on the icon, screen reads ‘loading your settings’, and then it displays ‘logging off’.

It hasn’t happened to me, I know 2 people (and heard of many others) it has happened to and they ended up hefty tech repair bills as they wanted to save their files.

Does having Avast installed prevent my ever having to worry about getting the loop?

Well the actual name of the malware that does this would be helpful so that we could find out more about it and check if it’s in avast’s virus database.But i guess if the sample is in avast’s database a Boot time scan should do the trick of removing it.That’s of course if you could schedule a boot time scan.But look at it this way if it’s in the database then avast! would pick it up before it could do damage. :wink:

Cheers

Mikey

Can you boot in Safe Mode?
Are you sure that the pagefile.sys is there and working? I mean, was this computer restored from a backup (image)?

Tech look at what he said:

It hasn't happened to me, I know 2 people (and heard of many others) it has happened to and they ended up hefty tech repair bills as they wanted to save their files.

He just wanted to know:

Does having Avast installed prevent my ever having to worry about getting the loop?

With him or not, seems a pagefile.sys problem for me, not infection.

Using avast could prevent him to be infected but, as I said, it does not seem to be the case. Maybe I’m wrong.

They had been told by the repair shop that the malware culprit was something called BlazeFind. Even booting into safe mode was not letting them get past the Welcome screen logon icon.

Well it looks like the work from the well known 180Solutions(i get the creeps when i hear that name brrrrr) http://www.spywareguide.com/product_show.php?id=724

:slight_smile: To put it more simply, BlazeFind is SPYWARE, therefore
Avast AntiVIRUS does NOT protect against it . That is what
AntiSPYWARE program(s) are supposed to do and hopefully
you have 1 or more ( and your friends ) of those “types”
of programs on your computer !?

And after reading a little more about it i am 100% sure it cannot cause that looping since it only affects your browser(IE)so it had to have been something else.

But now, with an infected computer, is there any other solution?
How can the user boot and install an antispyware?
As I can see, I was wrong in my first thoughts about not being a malware. Sorry.

hi
just a curious tweak here im not sure if it is relevant,but you can config windows to start up without the welcome screen…

control panel
user accounts
change the way users logon
use welcome screen: Disable

i got this off the net and its possibly closing a startup vulnerability

personally i find it a nice touch as i dont really need to see the welcome screen every time i logon ;D

cheers

Ok, but the user right now can’t even logon, or go to Control Panel, change anything…

nope ;D,feelin for ya mate

thats a bit of a tough one for me,

i have edited the registry to have my page file clear on shutdown
i also have my page file size set to max min --same size

eg,min allowed 2mb…so i have set the max and min to 2mb

forget what it does but i have had no probs doing this
(by the way what may work for me may not work for others)
cheers