[ocean1]

We cannot log in after I removed virus. We are using Toshiba Satellite with Windows XP.
While my daughter was using it, warning messages of Internet Security 2010 ("Your computer has virus." "Click here to remove virus", etc.) started popping up. I used Avast to scan the system, but it didn't detect anything. I searched how to fix this problem on the internet, and found that someone recommended Spybot Search and Destroy, so I used it.
It found quite a few Adware and Trojans. After I removed them, I restarted the computer. Three users are registered with this computer. I selected my icon to log in. The computer started opening up the windows XP, but soon it started logging off, and I could not use this computer. I restarted the computer, and tried a few times, but the same thing happened. Other users cannot log in, either. I tried the safe mode, but it was the same.
Could you help me how to fix this? The computer was infected a couple days ago,so we don't mind restoring the computer to the earlier date's condition if it is possible. But according to the restore procedure manual, I have to log on first which I cannot to do now.
Thank you for your help in adavance.

[JSntgRvr]

Hi, ocean1



Lets give this a try. You will need a flash drive to move information from the sick computer to a working computer, so we can see the progress of our actions. Save these instructions in your flash drive as a text file (use notepad) so you can have access to these while in an external environment (PE).

Here is what you need to do.

Two programs to download

First

Download ISOBurner. Click Here for ISOBurner Instructions. Install the program, and follow the next set of steps.

Second

• Download OTLPE.iso and burn to a CD using ISO Burner. NOTE: This file is 276.7MB in size so it may take some time to download.
• When downloaded double click and this will then open ISOBurner to burn the file to CD
• Boot the Non working computer using the boot CD you just created.
• In order to do so, the computer must be set to boot from the CD first
  Note : For information click here
  
• Your system should now display a REATOGO-X-PE desktop.
• Double-click on the OTLPE icon.
• When asked "Do you wish to load the remote registry", select Yes
• When asked "Do you wish to load remote user profile(s) for scanning", select Yes
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK
• OTL should now start. Change the following settings
  • Change Drivers to All
  • Change Registry to All
  • Under the Custom Scan box paste this in

    
    %SYSTEMDRIVE%\*.*
    /md5start
    eventlog.dll
    scecli.dll
    netlogon.dll
    cngaudit.dll
    sceclt.dll
    ntelogon.dll
    logevent.dll
    iaStor.sys
    nvstor.sys
    atapi.sys
    IdeChnDr.sys
    viasraid.sys
    AGP440.sys
    vaxscsi.sys
    nvatabus.sys
    viamraid.sys
    nvata.sys
    nvgts.sys
    iastorv.sys
    ViPrt.sys
    eNetHook.dll
    ahcix86.sys
    KR10N.sys
    nvstor32.sys
    ahcix86s.sys
    nvrd32.sys
    /md5stop
    %systemroot%\*. /mp /s
    %systemroot%\System32\config\*.sav
    

• Press Run Scan to start the scan.
• When finished, the file will be saved in drive C:\OTL.txt
• Copy this file to your USB drive.
• Please post the contents of the C:\OTL.txt file in your reply.

[ocean1]

Hi JSntgRvr,
Thank you very much for your help. I will try the procedures you described. Give me a couple of days.

[JSntgRvr]