Help!!! I noticed yesterday that some stuff popped up on my DDs computer screen during the shut down process that wasn't there before. I didn't give it a whole lot of thought. It looked like extra windows suddenly opened. I decided to run spybot as I hadn't done that for a while and it found some spyware. I cleaned it and immunized the PC. Now no one can sign into her computer.

I'll turn it on and it will start out as usual. About halfway through her wallpaer picture comes up then changes back to what I am used to seeing during start up. It ends with a screen it never showed before that makes you pick a user then sign in. When I click to sign in it just kicks me out and closes. I am using Windows XP. Be gentle with your instructions as I am a PC idiot. Can someone tell me a different way to get in? Do I need to take it to the PC doc? Thanks! DD will be livid when she finds out she can't use her 'puter.

If it was spyware, not some type of trojan, you can possibly get in via SafeMode.

Check out this thread:

http://neurotalk.psychcentral.com/thread47687.html

Here's another link that will take you to sites that explain how to enter using SafeMode:

http://www.google.com/search?hl=en&q...22safe+mode%22

I'll have to check this out later when I have more time.

sounds like a hijacked attempt.

Try as Boobie, I mean, Bobbie suggested to see if you can log in safe mode with networking.

Spybot doesn't catch everything and should be used as an ancillary to other better free antispyware products.

adaware free and superantispyware free edition would be good ones to down load. I suspect you've got a mal-ware hijacking attempt so malwarebytes' anti-malware will be a good one to download as well. They are all free.

Any external drives that you have that stores data, like external storage, USB sticks should also be checked for spyware/viruses are able to attack them these days and if you don't scan them, they can reload the crap back to your puter

then,you should run a few of them in safe mode without networking (but you must update them first) by unplugging your internet (ethernet cord)

and after all that, run a "hijackthis" from Trendmicro. That is if you want to, save it as a log file list and post it here, I can help you determine to see if you have any bad stuff up there. But that's an option for your own comfort.

good luck

Just wanted to add some information. Spybot found four problems some with multiple entries. The one thing it found, that I never had before, was hellzlittlespy. It is a trojan key logger. Just great. Not!!! I have not tried to resolve this problem yet as I don't have the time. I'll work on it tonight. My subscription for Norton's antivirus is always current and I get automatic updates. Why me/DD???!!!

Also, I have two sick computers, each with its own illness. This thread is one 'puter's illness while the other thread is a different computer. Sorry about the confusion there.

Since you have Symantec/Norton, I'd do the following:

Note what it states on your start-up screen for changing the boot pathway, and re-boot following those instructions.

Change the pathway to boot from your Norton CD, if you have a copy on CD or someone can lend you one.

See if you can wipe out the trojan.


This is about the trojan:

http://www.google.com/search?hl=en&q...=Google+Search

And, this is a Google cache/archive copy of info. re: the same trojan:

http://209.85.173.104/search?q=cache...lnk&cd=1&gl=us


You might have to take the 'puter to someone for removal if it can't be done on your end. I wouldn't continue using a computer with a known trojan. Not only is it a known security risk, it can also compromise files, etc.


Another thing, I'd try, because I am of the belief one can't really hurt a 'puter that's already messed up: I'd go into SafeMode, and do a System Restore - setting the computer to an earlier time/date or Checkpoint when everything was known to be working well - to put that trojan in a sleep-type mode.

Until I knew that thing was off the drive, I still would not use the computer for everyday use. I'd not want to mess up my files or take the risk of passing it to anyone else.