Please report all spam threads, posts and suspicious members. We receive spam notifications and will take immediate action!
Page 2 of 2 FirstFirst 12
Results 11 to 14 of 14

Thread: Immediate Help needed regarding service timeout change




  1. #11
    Join Date
    Nov 2003
    Location
    Minnesota, United States
    Posts
    4,543

    Default

    I'm not sure if the file is the same for you, but I had luck deleting it from outside Windows. I think the file was called aserv2.exe (something like that), but check the Norton thing again for file names if it's not there. If you need to access an NTFS partition from outside Windows, go here:
    http://www.ntfs.com/boot-disk.htm

    Deleting the virus itself should stop the problem entirely. If not, then something has done irrevocable damage to the system. I saw one Sasser computer that couldn't get to XP in any mode. I reinstalled without reformatting to save the guy's files (he asked me to), but the damn thing managed to run itself again and gave me the shutdown crap after I finished installing. I couldn't remember the command, so I shutdown and used that Floppy to remove the virus file. It's a real lifesaver when you have no Internet access and forget a command like that. :D

    :cheers:

  2. #12
    Join Date
    Jan 2002
    Posts
    1,377

    Default

    Well, since I AM at work and this IS a computer store, I have no problems with getting to the internet. I also have a computer here for the sole purpose of data backup. When winlogon started malfuntioning, and would immediately log me off after loggin in, even in safe mode, I just decided it was not worth dealing with and did a fresh install of XP. Thank god for serial numbers on the back of PC cases. Once inside I found that my adventure with AVG in safe mode (before winlogin went south) actually got all but one virus. I wish I had figured out what was causing winlogon to do that, it felt like a startup script that auto logged off. Whatever... next time i'll have this NTFS startup disk. Thx.

  3. #13
    Join Date
    Nov 2003
    Location
    Minnesota, United States
    Posts
    4,543

    Default

    No problem... :D
    I'm pretty sure it's Sasser or something it brings that does that. The computer I worked on had the same problem with Winlogon dying (or I assume so since I couldn't get to the login screen). Perhaps replacing it with the same file from a different computer (or XP disc) would fix the problem. :confused:

  4. #14
    Join Date
    Jan 2002
    Posts
    1,377

    Default

    I've actually seen two different types of Winlogin screw-ups.
    1. Winlogin creates "Fatal Errors" that will stop the logon process by showing error windows.
    2. Winlogin logs you on briefly enough to see the background, but immediately logs you out.

    I think the first may be solved by replacing the winlogon.exe file, and possibly some ajoined dll's, but the 2nd seems more like a startup script (that launches even in safe mode mind you) that is either built into winlogon.exe, or a related dll, or is a separate file pointed to by a service... wait... lsass.exe and svchost.exe are services that run in safe mode, right? Maybe the virus has a backup plan that runs a logoff script if the virus file is not found, or is unable to start. It seems that the only time i've had this is when i use AVG in safe mode to rip the virus out, not when using a fix tool, or even AVG in normal GUI. Hmmm.... I don't know enough about writing code to solve that one, but i'm darn sure I could replace lsass.exe and svchost.exe to see if they are the problem.

Page 2 of 2 FirstFirst 12

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •