Over 1 million tech questions and answers.

Sysprep generalize not clearing logs

Q: Sysprep generalize not clearing logs

Hi everyone, I'm hoping that this wonderful community got some help for me.

I've previously done image deployment with Windows 7 and know how to prepare an image for deployment.

I'm now trying to make an image with Windows 8.1 enterprise.

I'm making an image with with PersistAllDeviceInstalls to keep the hardware configuration.
I use the gui to run sysprep oobe with generalize option checked.

After its completed, I make an image of it and deploy to test laptop 2 with the exact same specs.

After its done, and I boot it up and finish all the preparation (like computer name etc), the system boots up to the desktop.

However, here is where I realized I'm most likely doing something wrong.

The event logs are filled with data from pre-sysprep, Symantec Endpoint Protection logs are still there.

Can someone help me out here? Isn't generalize suppose to remove logs and stuff?

It's been almost 2 years since I touched sysprep and all. Hopefully someone here can shed some light about the issue I'm facing.

All help is sincerely appreciated.

RELEVANCY SCORE 200
Preferred Solution: Sysprep generalize not clearing logs

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Sysprep generalize not clearing logs

Hi Neevar, welcome to the Eight Forums.

First this warning about Sysprep GUI (from https://technet.microsoft.com/en-us/...h825084.aspx):

Warning
In Windows 8.1, the Sysprep user interface is deprecated. The Sysprep UI will continue to be supported in this release however it may be removed in a future release. We recommend that you update your Windows deployment workflow to use the Sysprep command line. For more information about the Sysprep Command line tool, see Sysprep Command-Line Options.

To generalize your image without an answer file use command:

Code:
%windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown


The closing option (highlighted) can be shutdown, restart or quit.

To generalize your image with an answer file use command:

Code:
%windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown /unattend:X:\MyAnswerFile.xml


Change the answer file path and name (highlighted) accordingly

Event logs should be cleared when the /generalize switch is used. This from Microsoft TechNet support article https://technet.microsoft.com/en-us/...v=ws.10).aspx:






Generalize:
Prepares the Windows installation to be imaged. If this option is specified, all unique system information is removed from the Windows installation. The security ID (SID) resets, any system restore points are cleared, and event logs are deleted.

The next time the computer starts, the specialize configuration pass runs. A new security ID (SID) is created, and the clock for Windows activation resets, if the clock has not already been reset three times.



I do not know why your logs are not cleared. Could you please tell which logs remain?

Kari

Read other 7 answers
RELEVANCY SCORE 84.4

All,
I need to know exactly what the /generalize options of sysprep does to a Windows 7 system. I am working with WDS to deploy custom images to my workgroup environment.

I work with the government and they require very strict security settings configured via the local group policy / registry / NTFS / Services / Ect.. There are about 300+ setting i must configure for each box. Hence the use of WDS to deploy a preconfigured
image to each system. 
My problem is when running Sysprep to capture a Windows 7 (32bit) image. Everything ive read says the use the /Generalize option. When i re-deploy the image via my WDS server - it clears most of my preconfigured security settings. It seems that the /Generalize
option sets things back to the factory defaults. 
That is not what i want to do. 
What exactly will happen if i DO NOT use the /Generalize option? (My boxes are in a workgroup in this setup)
My questions are:
1. What exactly does the /Generalize option do?
2. What will happen if i DO NOT use the /Generalize option ? me

Read other answers
RELEVANCY SCORE 83.2

On one specific model, we are getting an error during OOBE generalize sysprep.
Running sysprep on the image before capture, this error pops up:
"RunDLL"
"There was a problem starting am
The specified module could not be found"
Sysprep continues but when we capture the image with WDS and then try to deploy it, setup fails with an unknown error.
This happens with or without an answer file.

A:Error during OOBE generalize sysprep

Hi DJX995,
I recommend you check the sysprep log files and upload the log files also, it will help us to troubleshoot the issue .
You can refer to the following article to find the log files:
Sysprep Log Files
Best regards,Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Niko Cheng
TechNet Community Support

Read other 2 answers
RELEVANCY SCORE 80.8

Hi I just installed Windows 7 Ultimate RTM off from technet and as always I do make use of WIM images on having them deployed to my home PC's I was able to have it installed on a clean machine and once the wizard appeared i immediately entered Audit mode (shift+ctrl+f3) and the usual I loaded all of the software i need to pre-install after I was done I Immediately loaded sysprep and had it with the generalized option now this is where the problem begins....... after it restarts during the "Setup is starting Services" screen it gives me a message box error saying "Windows could not finish configuring the system. To attempt resume configuration, restart the computer" and once I press ok it jsut restarts and gives the same error again. This does not happen when i dont select the generalize option in sysprep. Anyone who had the same issues?

A:Windows could not finish configuring the system error after sysprep /generalize

I now have the ACTUAL SOLUTION to this problem.  This solution will actually tell you exactly what registry key is causing your sysprep to fail, so then you don't have to slowly install
every program until you find the problem -- especially since this didn't work for me because my problem has been intermittent.
This issue is caused by certain registry keys that are either:
a) Larger than 8kb
b) Set with incorrect permissions
c) Corrupt in some way
For me, the problem was intermittent (same registry key would sometimes cause the issue and sometimes not - must be corrupt sometimes) so it was impossible to tell what program was doing it.  Luckily, there is a log you can look at that will tell you
exactly what registry key is erroring out.  Here are the steps for getting the log you need to see:
When you see the error message, do the following:
1.) Push Shift+F10 to get to a command prompt
2.) Navigate to C:\windows\Panther
3.) Find the Setup.etl file and find a way to copy this file off of the system (I copied it to the D:\ partition and used Ghost to gather that partition and get the file off)
4.) Copy the setup.etl file from the corrupted system to another computer that has Windows 7.  Put it on the root of C:\ for easiest access.
5.) Open a Command Prompt on the Windows 7 computer.
6.) Navigate to the root of C:\ (or wherever you saved the file)
7.) Type "tracerpt setup.etl -o logfile.csv"
8.) Close the command prompt and op... Read more

Read other 88 answers
RELEVANCY SCORE 79.2

This is a repost from another forum.. I was directed here..  I have seen all the answers regarding this already..
Still having fits... there has to be a way to do this..


SYSPREP GENERALIZE LOSES LOCAL GROUP POLICY SETTINGS       


I have a laptop in which I've created an image I want to  deploy. 

The image has VERY specific group policy settings to restrict the user from doing anything improper on  the desktop.  I have created users and assinged the LGP to a specific user.  It works fine...

BUT, when I sysprep it and do the generalize pass, all the LGP goes away.  I have an unattend file for win 7 that I've created using the SIM program.  I use it to handle the OOBE stuff.


Bottom line, I have an  image that I want to clone using the MS tools (IMAGEX) to create a WIM and then deploy it to laptops as a WIM image.  I need to figure  out a way to clone this laptop and keep  all the settings and let MS WIN7
be happy with the SID's and computername.  I could do this in WINXP and WDS easily.  But WIN7 is a little more difficult.

the LGP is used to lockdown the laptop.  These laptops are for police and fire, so I want them to boot to a user (autologin) and then allow them to login to the dispatch application.  It works with no porblems until I sysprep  it for deployment.

Anyone have any ideas.... my thoughs are no because the LGP is tie... Read more

A:SYSPREP GENERALIZE LOSES LOCAL GROUP POLICY SETTINGS (repost from other forum)

Hi,
Based on my research, we can configure local Group Policy Administrative Template settings on a master computer. This is because Administrative Template settings are stored in the registry, and Sysprep does not change this part of the registry. Any changes
you make to Administrative Template settings will appear on the disk image.
And the sysprep does not remove the user specific GP. It is still under ?c:\windows\system32\Group Policy Users". As you said, the user SID changed during sysprep. Try to change the name of the policy folder in the "c:\windows\system32\Group Policy Users"
folder to match the users new SID.
And then run GPUPDATE / FORCE, restart again.
Regards,Ada Liu
TechNet Community Support

Read other 2 answers
RELEVANCY SCORE 59.6

Every time I try to clear an IIS log file, it says "cannot access denied.... the file may be in use" Tried stopping the service and deleting, but still no joy. Any ideas?
 

A:clearing IIS logs

Read other 7 answers
RELEVANCY SCORE 58.8

is there a way to clear the logs from mcafee?

A:clearing mcafee logs

McAfee log entries are automatically deleted after 30 days.

Read other 3 answers
RELEVANCY SCORE 58

I was wondering if there was any way to clear Security, Application, and System logs on a PC remotely.... We have been infected with W32.Gaobot and it fills up the logs quickly...

Any information would be great.
Thanks!
 

Read other answers
RELEVANCY SCORE 58

If anyone who has AVG Internet Security 8.0 has found a way to clear the firewall logs, I would love to hear about it.

It seems the clear button they had in 7.5 to clear out the firewall log is missing in 8.0... along with the tech support they had for 7.5 I have not been able to locate another setting anywhere within AVG to set it so the log will clear either.

Any assistance would be appreciated.
 

A:Solved: Clearing Firewall Logs in AVG 8.0

I finally heard back from AVG and this is how the firewall logs can be cleared in the paid version 8.0:

You can delete the log files opening the following directory:
C:\Documents and Settings\All Users\Application Data\avg8\Log
There you can find all log files created by AVG. Firewall logs start with avgfw8...
 

Read other 1 answers
RELEVANCY SCORE 58

Is it possible to prevent JRT from clearing the event logs?
 
What is the reason behind this feature?  Event Logs are often crucial for diagnosing Windows issues.  I'm not aware of any reason that the event logs should be cleared to help with junkware removal.  Please help me understand the reason for this feature, and if possible, provide away to disable it.
 
Thanks!

A:Is it possible to prevent JRT from clearing Event Logs?

JRT's disclaimer clearly states: "This software is provided "as is" without warranty of any kind. You may use this software at your own risk."However, you can ask a question (leave a comment/suggestion) on Thisisu's JRT Blog.

Read other 12 answers
RELEVANCY SCORE 58

How can you clear the event logs without an event being created stating that the logs were cleared in Powershell? The "clear-eventlog" command does clear the events, however it leaves behind an event that states that the logs were cleared.
Anyway to get around this and totally clear the logs?
Thanks,

Read other answers
RELEVANCY SCORE 57.6

If you have a lot of entries in the event logs, depending on your system, it can take a bit to open the logs.  Here is a way to clear all the 4 main event logs quickly.
Open a text editor (e.g. notepad), and copy the following into it.
 

@cls
@echo on
wevtutil.exe cl Application
wevtutil.exe cl Security
wevtutil.exe cl Setup
wevtutil.exe cl System
@echo off
pause
Save it as "clear_logs.bat" (no quotes).  Now, just double click on the file, and all 4 main logs will be cleared.  It will not work on Windows XP.
 
This will work on Windows 8.1 for sure.  It should work on Windows 8, 7, maybe Vista.
Have a great day!

 

Read other answers
RELEVANCY SCORE 56.8

The is another attempt at getting this answered.
Previous replies noted that the Administrative Events under the Custom view was just a compilation of all the other logs.
I do not belive this is entirely correct as all the events in this log concern the operating system and do NOT appear in the other logs such as Application, Security, etc.
Below is an example of what is showing up on my system after all the individual logs shown under Event Viewer are cleared:




Level


Date and Time


Source


Event ID


Task Category




Warning



8/27/2015 13:59


Microsoft-Windows-DNS-Client



1014


None




Error



8/27/2015 12:56


Microsoft-Windows-Kernel-EventTracing



2


Session




Error



8/27/2015 12:56


Microsoft-Windows-Dhcp-Client



1001


Address Configuration State Event




Error



8/27/2015 12:54


Microsoft-Windows-PrintService



315


Sharing a printer




Error



8/24/2015 9:15


Microsoft-Windows-Dhcp-Client



1001


Address Configuration State Event




Error



8/24/2015 9:13


Microsoft-Windows-PrintService



315


Sharing a printer




Error



8/20/2015 3:19


Microsoft-Windows-Dhcp-Client



1001


Address Configuration State Event




Error



8/20/2015 3:17


Microsoft-Windows-PrintService



315


Sharing a printer




Error



8/17/2015 10:24


Microsoft-Windows-... Read more

Read other answers
RELEVANCY SCORE 49.2

Hey everyone, I hope you're doing fine.
Well, I'll keep this short and to the point.
I want to run sysprep on my Windows 10 Pro (x64) PC and I've faced many errors till now which I somehow managed to dodge , Now I've come across another problem. i have no clue about this so please help me

Setupact.log :-

Pastebin- http://pastebin.com/ri2cc4Li

Code tags:

Code:
2016-03-01 12:17:21, Info SYSPRP ========================================================2016-03-01 12:17:21, Info SYSPRP === Beginning of a new sysprep run ===
2016-03-01 12:17:21, Info SYSPRP ========================================================
2016-03-01 12:17:21, Info [0x0f004d] SYSPRP The time is now 2016-03-01 12:17:21
2016-03-01 12:17:21, Info [0x0f004e] SYSPRP Initialized SysPrep log at C:\Windows\System32\Sysprep\Panther
2016-03-01 12:17:21, Info [0x0f0054] SYSPRP ValidateUser:User has required privileges to sysprep machine
2016-03-01 12:17:21, Info [0x0f007e] SYSPRP FCreateTagFile:Tag file C:\Windows\System32\Sysprep\Sysprep_succeeded.tag does not already exist, no need to delete anything
2016-03-01 12:17:21, Warning SYSPRP WinMain: File operations pending
2016-03-01 12:17:21, Info [0x0f005f] SYSPRP ParseCommands:Found supported command line option 'OOBE'
2016-03-01 12:17:21, Info [0x0f005f] SYSPRP ParseCommands:Found supported command line option 'GENERALIZE'
2016-03-01 12:17:21... Read more

Read other answers
RELEVANCY SCORE 49.2

 
On the 4th attempt to sysprep a Windows 7 Enterprise system, I get the dreaded, 'A fatal error occurred while trying to sysprep the machine.' 
The setuperr.log shows:
2010-08-04 13:57:58, Error      [0x0f0073] SYSPRP RunExternalDlls:Not running DLLs; either the machine is in an invalid state or we couldn't update the recorded state, dwRet = 31
2010-08-04 13:57:58, Error      [0x0f00ae] SYSPRP WinMain:Hit failure while processing sysprep cleanup external providers; hr = 0x8007001f

I've seen articles referring to the Windows Software Licensing Rearm program may have issues running more than three times in a single Windows image and to add <SkipRearm>1</SkipRearm> in the /unattend file...  but this did not help. 
The Windows Media Player Network Sharing Service has also been disabled which is often referred to in other posts.
The KB article: http://support.microsoft.com/kb/947212/en-us indicated that the resolution is to re-create the image for the machine... This is very frustrating. I'm hoping that there is
a better resolution???
How do you sysprep a machine more than three times to avoid this error?
Thanks!! 
930193

A:Sysprep - Fatal error occurred while trying to sysprep the machine

Hi,
 
Thanks for posting in Microsoft TechNet forums.
 
This error shows that sysprep was run multiple times on the machine, please open a command prompt, type:
slmgr /dlv to view how many times of remaining Windows Activation count. Generally speaking, to sysprep the image on a single computer for multiple times, you need to configure the
Microsoft-Windows-Security-SPP |
SkipRearm to 1 in the unattend.xml file. I am assuming whether you configure the
Microsoft-Windows-Security-Licensing-SLC |
SkipRearm to 1 instead of SPP, the SLC setting is deprecated and should not be used.  
As a work around of this problem, please type: regedit in the Start Search box to open Registry Editor, set the value of
GeneralizationState under HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus to
7, then run sysprep again.
If the same issue still persists, please unistall the MSDTC and Reinstall it, then try the sysprep.
To uninstall MSDTC :- msdtc -uninstall
To reinstall 
MSDTC :- msdtc –install
Best Regards
Dale Qiao
TechNet Subscriber Support in forum. If you have any feedback on our support, please contact
[email protected]

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

Read other 86 answers
RELEVANCY SCORE 49.2

I have windows 7 pro 64 and i want to transfer my disk to a new computer. I tried to use the Sysprep but after a bit it say a fatal error occured and it stop. No other informations. I would like some help please.

Read other answers
RELEVANCY SCORE 46.8

hello,

1st sorry for my english (i'm french guy).

I made a sysprep and all parameters are corrects.
but after the reboot I have always the sysprep preparation tools box.
for me the sysprep is correct but I don't know what's happended.


in attachment my unattend.xml

regards,
and thanks by advance.
didier

A:win7 after sysprep reboot always with sysprep box

Hi Didier, welcome to the Seven Forums.

It looks you have sysprepped your PC in Audit Mode. When Audit Mode starts the sysprep window is always shown. Also, if you have not chosen to exit Audit Mode, PC will after reboot be back in Audit Mode and the sysprep window shown.

To exit Audit Mode and enter the normal setupmode (OOBE or Welcome mode), you need to select System Cleanup Action: Enter System Out-of-Box Experience (OOBE) and Shutdown Options: Shutdown (or reboot) and click OK:

Kari

Read other 4 answers
RELEVANCY SCORE 46.8

I am having problems with the new windows 7 sysprep tool.  I have installed windows 7 and immediately entered audit mode.  After entering audit mode I install all of the divers and software for the deployment.
I have made an answer file using the WAIK, put the answer file in the system32/sysprep folder as unattend.xml and run the command:
sysprep /generalize /oobe /shutdown /unattend:unattend.xml (the command is ran from the sysprep folder)
after the system comes back up, the sysprep tool continues to pop up, as if it is still in audit mode.  I have tried re-running sysprep with the generalize opotion and it still persists.  I have tried just about every option sysprep has, and cant
figure out why this is so difficult.

A:Windows 7 sysprep keeps popping up after sysprep

Hi,
Please refer to
http://www.windowsnetworking.com/articles_tutorials/deploying-vista-part5.html for detailed steps.
Regards,Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ?

Read other 10 answers
RELEVANCY SCORE 45.2

Our organization has recently received a number of Tablet devices (over 100) which we require a standardized image to be deployed to them all, the obvious thing to this was to create a standard image using sysprep however when i run sysprep I get the message
'Sysprep was not able to validate your windows installation' and to check the logs when i check the logs i find a message saying 'sysprep will not run on an upgrade OS' I have recently updated to windows 8.1.
I have found an article relating to windows 7 which suggested deleting the 'upgrade' key from the registry however this solution has not worked for windows 8.1
Can someone help? I do not have the time nor patience to have to start the image from scratch.
Thanks
Kev.

A:Sysprep message "Sysprep was not able to validate your windows installation"

Hi,
Sysprep must not be used on upgrade installation types. Run Sysprep only on clean installations.
For more information, please refer to this article:
http://technet.microsoft.com/en-us/library/cc721940(v=ws.10).aspx
Best regards,
Karen Hu
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Read other 13 answers
RELEVANCY SCORE 45.2

 please any one help me i am struggling last 3 day  with sysprep command, I want to sysprep the windows7 system which is genuine professional version and updated with Microsoft patches, i installed all applications and drivers to that system, When i doudle click sysprep icon selected oobe /generalize/reboot Then it give error  a fatal error occured while trying to sysprep the machine  then i checked log file in prefeth folder 2009-11-24 16:17:22, Error      [0x0f0073] SYSPRP RunExternalDlls:Not running DLLs; either the machine is in an invalid state or we couldn't update the recorded state, dwRet = 31 2009-11-24 16:17:22, Error      [0x0f00ae] SYSPRP WinMain:Hit failure while processing sysprep cleanup external providers; hr = 0x8007001f please help me........

Read other answers
RELEVANCY SCORE 38

I can't get rid of it, everytime I restart my computer and run spybot, there it is, laughing at me. Also, 1) my homepage is constantly reset to: res://mshp.dll/index.html, which seems to download the "mshp.dll" to my WINNT file 2) my ability to change IE's internet options is disabled and 3) my add/remove software program will not appear when I try to access it. I'm at the end of my rope. If anyone can help me out, it would be much appreciated.
I'm currently using windows 2000, with a recently updated IE 6.0.2800.1106

Spybot log before "problems fixed" :

Avenue A, Inc.: Tracking cookie or cookie of tracking site (File, nothing done)
C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt

Commission Junction: Tracking cookie or cookie of tracking site (File, nothing done)
C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt

CoolWWWSearch.008k: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FD9BC004-8331-4457-B830-4759FF704C22}

CoolWWWSearch.008k: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{587DBF2D-9145-4c9e-92C2-1F953DA73773}

CoolWWWSearch.008k: Class (Registry key, nothing done)
HKEY_CLASSES_ROOT\iefeatsl.ViewSource.1

CoolWWWSearch.008k: Class (Registry key, nothing done)
HKEY_CLASSES_... Read more

A:coolwwwsearch driving me insane, hijack this logs + spybot logs

Read other 6 answers
RELEVANCY SCORE 38

It has been 2 months since i m infected now. Everytime i start my comp, the coolwwsearch pops back up no matter how manytime i delete it with spybot. Also, its alway those 2 items that i cant delete unless i restart. Can someone help me plz??? It wasted me a lotta time. I really appreciate it.
 

A:coolwwwsearch driving me insane, hijack this logs + spybot logs

Hi Teph

Welcome to TSG!

I have split your post off into your own thread. In the future if you have a Question/Problem please start a "New Thread". It get's too confusing trying to address two different people's problem in the same thread and you may get overlooked.

Please continue here in this new thread.
Please do this. Click here to download Hijack This. Click on the Hijackthis.exe.

Click the "Scan" button when the scan is finished the scan button will become "Save Log" click that and save the log.

Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required. Someone here will be glad to advise you on what to fix.

*Note: When you download Hijack This Do Not download it to a temp folder or to the desktop. Create a permanent folder somewhere like in My Documents and name it Hijack This and put it in that folder.
 

Read other 1 answers
RELEVANCY SCORE 37.6

I recently acquired a computer from a friend who had problems with it and just didn't want to deal with it. She gave it to me as is, without any restore disks or Windows XP disks. The computer information I know so far is that it's a Dell Dimension 9100 running Windows XP Pro.

When I first got the computer, it would not even turn on. It would get power (the lights on the front of the tower lit up) but gave nothing but a black screen and a beep code. I researched the beep code and found out for this computer it meant that there was an error in memory. So, I opened up the box and took out a stick of RAM to see what would happen. Without that stick of RAM, the computer booted up to the select your profile screen and when I clicked the profile it began to log on. It showed the desktop (without icons) for a few seconds then went back to the profile screen and said it was "logging off". I rebooted the machine and tried to log in in safe mode but, I got the same result. I also tried logging in as Administrator in safe mode, but it was the same thing. I put my own Windows XP Pro CD in the CD-Rom to see if it would allow me to restore or repair Windows, but it didn't do anything different. It seemed to not even register that there was a CD in the drive.

I don't know anything about the history of the machine and what might have caused this issue. My friend doesn't seem to know either. She just said that one day, all of a sudden, she couldn't turn the computer on. ... Read more

A:Windows Profile Logs In and Immediately Logs Back Out

Hello manekineko,

From previous experience when the system starts to load the profile then logs you right back off, its cause either the userinit.exe file was modified or deleted, or the registry entry that points to it has been changed. All this usually happens when the computer is infected. If there is nothing to be saved on the hard drive I might suggest going ahead and reformatting the computer. If there is information that is needed then you might need to look into creating a mini xp boot disk that would allow you to at least backup whatever information.

Your other option is to try to do a system repair if you have a XP Pro disk that works and then if your able to log into windows after the repair, visit http://www.techsupportforum.com/f50/...lp-305963.html and create a new thread to get help to clean up the system.

Read other 1 answers
RELEVANCY SCORE 37.6

I've had the delta homes browser hijacker bugging me for a while and haven't been able to get rid of it. At one point my computer booted to a blank screen and I couldn't do anything unless I restarted in safe mode. Not sure if the two things are related, but I do know that after I used HijackThis to remove everthing with delta homes in the name, it fixed both problems for a while. Eventually delta homes came back to mess up my browser, and I'm trying to get rid of it for good. I just used HijackThis again to remove everything with delta homes in the name, only this time when I removed them, the problem remained when I opened my browser. That's where I'm at right now, so below are the logs from HijackThis as well as DDS which apparently gives more info for Windows 7 if you know how to read it.
 
If anyone can help me based on this information I'd really appreciate it. If you need more information of some kind then let me know and I'll try to get it for you as soon as possible.
 
___________________________________________________________________________________________________
HijackThis logs:
 
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 14:39:52, on 24/07/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17344)
FIREFOX: 39.0 (x86 en-US)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeCont... Read more

A:Can't get rid of Delta Homes: HijackThis logs and DDS logs posted

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

Read other 2 answers
RELEVANCY SCORE 37.6

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16537
Run by Me at 13:15:36 on 2015-03-08
Microsoft Windows 8 6.2.9200.0.1252.1.1033.18.3986.2145 [GMT -4:00]
.
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16384_none_622908ad510eb05b\TiWorker.exe
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\dashost.exe
C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Windows Defende... Read more

A:Reposting logs-!st logs I dont think I ran scan properly

Do you see anything in my logs please? I know I am not supposed to make any changes to my laptop while waiting but I did delete a couple things and have found a couple files that I don't have access to. My home network now says it is a public network if I connect. I also found in computer management remote shared folders for all drives that I am unable to change along with Group sharing or access in my services set to automatic and is completely greyed out so I am unable to disable. Windows says the default is disabled and it has to be turned on to automatic but I did not turn it on. I am very concerned and have received a phone call from a local venue about an appointment being made in person by someone using my last name and phone number. All of my email accounts continuously being compromised even after changing passwords from another computer. My LinkedIn and twitter accounts are being used by someone else. I am concerned so any help or advice would be appreciated. If I need to rerun any scans and post logs since I have made changes just let me know.

Read other 19 answers
RELEVANCY SCORE 37.6

New to the site and I hope this is in the right forum.

I am using Windows 7 Pro 64 and my main account logs in then automatically logs off. I can successfully log in using Safe Mode to this account. I created another account called test and I can access this account in both Safe and Normal modes.

I ran Malware Bytes and Avast Anti-Virus and they found nothing.

What can I do fix this issue or transfer my Outlook, programs and such to the test user account and rename it?

A:Windows 7 Main Account Logs On then Automatically Logs Off

I followed the instructions per the link and it appeared to copy everything over successfully.
Fix a corrupted user profile

The original account is still not able to logon and is on the computer. Is there anything else I should be looking at?

Read other 1 answers
RELEVANCY SCORE 37.6

I just tried to post a log created with 2.0.3 and got the message stating I was using an older version.??log is attached

A:forum marks 2.0.3 logs as older, unapproved logs

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No inp... Read more

Read other 2 answers
RELEVANCY SCORE 36.8

Hey guys my computers busted again (and for the third time I call for help from my trusty laptop...it never seems to die whenever my desktop is in need...she's like a good neighbour...)

Sorry I digress! Few days ago my ISP disconnected my internet because they found an IRC bot infecting their network. I ran my antivirus and (gasp) it found system32/virut virus, among a plethora of other files. I'm not sure how bad this virus is, or if indeed anything can be salvaged. I let the antivirus remove what it could, and rebooted my PC.

From that point on I can't log back on. I see the blue screen, enter my password for my account, and it says loading settings, only to save settings and log off a few seconds later.

info-
NO, I cannot log in with other accounts, or administrator
NO, I cannot log in safe mode, or safe mode with command prompt
YES, I still have my operating system cd and YES I did an XP repair but it did not work (same thing, stuck at welcome/account screen grr)

Now I've perused the web and others have experienced similar problems. I tried a fix that says "copy userinit.exe wsaupdater.exe" that had worked for others.

I receive the message "The system cannot find the file specified." I guess viruses, ****-ware and whatnot tampered with my userinit.exe as it doesn't seem to be on my comp. That or my antivurs removed it, because I could still log on before I had run the antivirus.

Any way to fix/restore the mess? Prefera... Read more

A:Solved: XP logs off and then immediately logs back out lol

Read other 6 answers
RELEVANCY SCORE 36.8

My initial problem was that the my documents folder was automatically coming up on startup. So, I looked this up and I found this (From Microsoft):

1.Start>Run>Regedit>ok

2.Now navigate to the following key:-
HKEY_ LOCAL_ MACHINE\SOFTWARE\Microsoft\Win*dows NT\CurrentVersion\Winlogon

3.Look down the list in the Right Hand pane,scroll down to the value Userinit This value should read: C:\WINDOWS\system32\userinit.e*xe, (The comma at the end must also be there)

4.If the value is different from that mentioned above then Right Click on the Userinit value and, from the drop down menu, select Modify. Type in the value C:\WINDOWS\system32\userinit.e*xe,in the Modify dialogue box click OK

5.Exit the Registry.Restart your computer.

So I did, however, now when I log in it automatically logs out.
Any thoughts?
 

A:Solved: Computer logs in then immediately logs out

I do not know ehere you found this article suggesting the solution, but I can assure you that if you have typed correctly what it says the article is wrong.
It NEVER suggested Win*dows, unless it is a spoof article
and it never suggested typing e*xe.

Try F8 Last Known Good.
If no success try F8 Safe Mode.
If that does not work do you have the XP CD, without it, you now have a problem.

Is this the relevant part of the article you followed
To resolve this issue, follow these steps:

Back up the registry keys that you plan to edit before you modify the registry. For more information about how to back up the registry, click the following article number to view the article in the Microsoft Knowledge Base: 322756 How to back up, edit, and restore the registry in Windows XP and Windows Server 2003
Check the Userinit and PersistBrowsers registry entries to make sure that they contain the correct values. To check the Userinit and PersistBrowsers registry entries, follow these steps:
Click Start, click Run, type regedit in the Open box, and then click OK.
Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
In the right pane, right-click Userinit, and then click Modify.
In the Edit String dialog box, type Windows installation drive letter:\WINDOWS\system32\userinit.exe under Value data, and then click OK.
Locate and then click the following registry subkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVe... Read more

Read other 3 answers
RELEVANCY SCORE 36.8

So, as my title stated, I've been infected with a nasty virus that attacked just about every program on my PC. My Anti virus removed files needed to run windows and now, when I log into windows it logs me out immediately. I've also tried to log into safe mode but the same thing happens, it logs me out immediately. Should I put my PC into the shop to get cleaned up or can I fix this problem myself. Any help would be greatly appreciated.
 

Read other answers
RELEVANCY SCORE 36.8

I am working on a Gateway, Windows Xp Home SP2 machine. The machine was infected with a Trojan. The trojan seemed to be removed and all was fine, but the trojan seems to have removed the "c:\windows\system32\userinit.exe" file. I can not access any windows profiles in the normal boot up or safe mode.

I have downloaded the Windows Xp Boot Disk from support.microsoft.com and burned the .exe to a CD to repair the windows installation as the machine does not have a floppy drive. I changed the Bios to select the CD Rom as the primary, but the message "Boot Failure, Insert system disk" appears when the machine boots up.

The drive seems to be functioning fine as the gateway has System Resotre by pressing F11, but the Windows XP disk is not the System Disk #1 the system is looking for.

I understand I need to get to the Recovery Console to either copy the userinit.exe file or modify the registry but can't get the console and can't get a windows profile to open.

Do you have any ideas, or another download that would allow me to access the Recovery Console to modify the registry key or copy the userinit.exe file?

Thanks

A:Windows Xp Home Logs in Then Immediately Logs Off

We will have to create a small 'fix CD' to solve this problem.Please download RC.ISO and save it somewhere you can find it.Also download MagicISO and install it.Start MagicISO. You should see a window informing you about the full version of MagicISO.In the bottom right select Try It! and the program will open.Click on File and then on Open and navigate to the RC.ISO file you downloaded. Select it, and click Open.First, we'll need to add a clean version of userinit.exe to the current RC.ISOIn the upper right pane, double click on the i386 folder.Right click in the upper right pane and select Add Files...Navigate to C:\Windows\System32 and select userinit.exeThen click Open to add userinit.exe to the CD image.Click File and select Save As...Name the file RCplus and save it somewhere you can find it.Next, we'll need to burn the newly created image to a disk that we can use to fix the problem.Put a blank CD-R disk in your CD burner and close the tray. If an AutoPlay window opens, close it.Click on Tools and select Burn CD/DVD with ISO.... A window will appear.Click on the little folder to the right of CD/DVD Image File then navigate to the newly created RCplus.iso Image file and click Open.In the CD/DVD Writing Speed drop-down menu choose the 8X setting.Under Format make sure that Mode 1 is selected.And finally, click on the Burn it! button to burn RCplus.iso to disk.Once the disk is burned, put it in the machine you want to fix and restart it.Bo... Read more

Read other 6 answers
RELEVANCY SCORE 35.6

When starting up the computer it seems to start normally. The wallpaper appears for a second then goes to the log on screen. If you try to log on it immediately logs off. I've tried every option in safe mode and debugging with the same result. Any ideas?
 

A:Windows XP logs on then logs off instantly

rscarb2
Have you found a solution?
I'm having the same problem.
Appears to have started after I ran CWShredder.exe to remove spyware.
I accepted a prompt to remove an exe file from either the windows directory, or the windows system directory. I didn't take time to note the file name that it placed in the recycle bin, but I suspect that as the problem
 

Read other 1 answers
RELEVANCY SCORE 35.6

After doing a Clean Install of Windows 10 I noticed a folder I have never seen before on my C disk simply called Logs. When I look at the last edit date it says February. Inside it I see a bunch of logs as you would find in the Event Viewer. Is this something Windows 10 put there by default as it was not added when I performed the Clean Install? The folder take up around 20 MB of space.

Read other answers
RELEVANCY SCORE 35.6

I go to log in on my Windows XP Home sp2 and when I log in, the background flashes then instantly logs me off. Happens in safe mode aswell as safe mode under the admin account.

Ok I know alot of you have heard of this but, here is the deal, The windows xp home cd does not pick up my harddrive, I cant get signed in through normal mode aswell as safe mode, Last know config does crap, I have it hooked up to my friends pc right now and I just backed up all my important files. Nothing seems to be working, I have tried several bootable cds with registry editors in then and again none of them picked up my harddrive. So I am at a stand still! nothing seems to pick up my harddrive except plugging it into another pc. But I am having troubles when loading it with the Hive editor the first time I did this to the software tab, I was able to navigate to the suspected key to change it from wsaupdater back to userinit.exe or whatever but there was no wsaupdater to be found and userinit.exe was already set perfectly fine! Wth! so I then unloaded the hive editor and proceeded with backing up went back to load hive editor on same software reg. file and now it only shows Microsoft and clients nothing else! Wth again! There is no userinit.exe or Wsaupdater in my windows folder or system32 folder. NO viruses or spyware are on my pc (scanned with several virus scanners aswell as spyware scanners) So I am very confused as to what the problem is. Yes its an official xp cd, (Dell) and It is registere... Read more

A:Windows logs in the instantly logs off (please help)

Let's start with the easy part... Get your XP cd, or a xp cd and boot with it. You want to enter the recovery console. For some systems you may need to login into your installation. If you didnt have a password formerly and it is asking for one, leave it blank. If you had one formerly, use it.

Once you're logged in type the following:

cd system32
del userinit.exe
expand E:\i386\userinit.ex_
exit

What you just did was point your console to the System32 folder where the userinit.exe file resides, which controls your login settings. You then deleted that file and replaced it with your XP copy. If you did each step successfully, there should be no error prompts of any kind. If this didn't fix your issue, it may related to a spy scan which removed a file that added a registry key to your userinit.exe file and still points to it, despite it being gone... first things first though.

PS- "E" asumed E is your cd drive.
 

Read other 2 answers
RELEVANCY SCORE 35.6

Yesterday i downloaded windows updates that needed to be ran. Like normal,said OS must be restarted to take effect. So i restarted, now i can click on my user name to log on and it immediately logs back off! What do i do?!? I have a Dell XPS M140 with Windows XP Media Center Edition. I read somewhere that i can use a disk to restore back to the way it was when i bought it, but i need to get all my data off and backed up and saved before getting disk from dell!! HElp me please! I dont want to lose everything! I am at my wits end!

A:Windows XP Logs on and immediately logs off!

Try tapping F8 when you turn on your PC. When you get to the advanced boot options screen, choose Last Known Good Configuration.

If this doesn't work, boot up into safe mode and see if that works. If it does, then do a system restore to a point before the update.

Read other 1 answers
RELEVANCY SCORE 35.6

i have tried to fix my computer but i dont have too much experience with stuff like formatting stuff so a detailed explanation would help.

THE PROBLEM: my avg showed that 'userinit.exe' was a virus and i tried to move it to the vault but it didnt work. after a few days of getting this virus alert and waking up to like 50 internet explorers saying that i should download their internet explorer, i got annoyed and went on task manager, i found that the programme 'userinit.exe' was in there so i did end process. the next day when i woke up, my computer was unresponsive and so i restarted it. when it tries to log me on, it shows the background, i hear the sound, couple of seconds later, it logs me out...help someone.

I would prefer not to do anything that requires money...I have an official windows XP service pack 2 disk. Also I would prefer not to reformat my computer and leave that as a last resort option if there is nothing else I can do.

Someone help.

Thanks.

A:[SOLVED] need help, computer logs me in but then logs me out.

DO THE FOLLOWING:

1. Insert the original Windows XP CD (Windows XP with Service Pack 2 is preferred, but not required) and reboot the computer. You may need to configure your computer to boot from the CD-ROM drive.
2. When the Windows XP Setup has started, press "R" to "repair the Windows XP installation using Recovery Console".
3. Select the Windows installation to repair (generally this is C:\Windows) by typing its number and then pressing ENTER.
4. Type the Administrator password and press ENTER.
5. Type the following commands:

D: [press ENTER]
CD I386 [press ENTER]
EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32 [press ENTER]

Note: there is a space between EX_ and C:

NOTE: If your CD/DVD drive has a different letter assigned to it, enter "X:" instead, where X is the appropriate drive letter.

The text "1 file(s) copied" should now appear, in which case all went well.

Remove the Windows XP CD, type "EXIT" and press ENTER to restart your computer. You should now be able to log on as normally.

paraphrased from this thread: http://forums.cnet.com/5208-6142_102...rum-w;forums06

Read other 3 answers
RELEVANCY SCORE 35.6

Hello, I am running a system with Windows XP SP3. This computer only has one user account setup and no password, so when it turns on it just loads the desktop rather then bringing up a user select screen. The other day it was infected with malware, you know the kind that says you are infected and to buy their program to clear it. Anyway, I have attempted to remove it with rkill, malware bytes, super antispyware and AVG free. AVG found some threats and I removed them but had to reboot to complete the removal. Upon rebooting this issue started. The wallpaper shows up, then goes to the user account screen with just the one user. I click on the user, wallpaper shows up (no icons) and logs off. I have booted into safe mode and was able to get the users desktop but Im not sure what I can do from there for this issue. Last known good configuration doesnt help. Any advice will help. Thanks.

A:User logs in, immediately logs off

Quote:





Originally Posted by RevolutionistT


I click on the user, wallpaper shows up (no icons) and logs off.




Try this ...

Fix Windows XP LogOn/LogOff Loop ..... thinkinginpixels

Read other 1 answers
RELEVANCY SCORE 35.6

My windows XP will let me log in but then it flashes my wallpaper and logs me out. I have been on the phone with tech support for hours and don all kinds of test, when throught the Windows XP restore & repair process and still does the same thing. I can't log in in safe mode or as admin, does the same think.

Can anyone help!!!!!!! I saw another post on here from a google search but it was back in April.

Thinking that the only thing to do is just reinstall Windows XP and start over.
 

A:Windows logs me in then immedately logs me out

Read other 15 answers
RELEVANCY SCORE 35.6

ok , i just switched to Xp HOme , last week

and

today out of NOWHERE , Xp HOME started loggin me out automatically, i mean , when the comp start , and I click on my icon , it logs in and then logs out automatically.

I can login safely in safe mode , wihout any problem .

I installled a modem on COM1 , but after thse problem I took it out ,physically coz in safe modem , i cannot c modem in control panel.

I went to safe mode,delete my acc by using admin and then created me a new account with admin right but the same thing happens over and over again

ALso this a single computer , not on a network , so If I have to delete the network , please tell me how ???

any ideaz ???
 

A:XpHome Logs in and logs out automatically

Read other 7 answers
RELEVANCY SCORE 35.6

i have a sony vaio laptop....yesterday i got a notice that i had windows updates so i chose the update icon and after it installed them, the laptop restarted. once i see the log in page...i would put in my password and login...and 2 seconds later it would log me off...save my settings and send me back to the log in page. heres the funny part...its happening to the admin account aswell ....IN SAFE MODE!!! i have no idea what to do inorder to fix this issue...if anyone has any idea as to how i can tackle this problem it would greatly appreciated
 

A:login problems - logs in and logs out right away

I don't think this problem is caused by an update -- it is usually caused by the improper cleaning of a specific type of malware.

http://support.microsoft.com/default.aspx?scid=kb;en-us;892893

You will need the recovery console to carry out these instructions:

http://support.microsoft.com/default.aspx?scid=KB;en-us;314058&
 

Read other 1 answers
RELEVANCY SCORE 35.6

So the desktop i think is infected with malware or something because every time i try to log in on any ones name (even in safe mode) it logs off. i tried looking at other forums but i couldn't understand what they were saying and TechGuy has never failed me before so any ideas? Thanks.

im using windows xp on a dell and shortly before this happened there was a red circle with an x in the task bar(?) bottom right corner, anyway it said must start spy ware removal and mozilla would have about 13 windows pop up telling me to download a spyware removal tool and i tried AVG but im just a greenhorn so i don't know my next move.

-Andrew
 

A:Windows XP logs in and logs off immediately

Read other 8 answers
RELEVANCY SCORE 35.6

I am having problems I was told it might be malware and I saw most of these have a combo fix log too. So here is a combo fix and hijack log. Hope someone can help me!
Combo fix:
ComboFix 08-01-04.1 - Family 2008-01-04 11:28:31.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.414 [GMT -5:00]
Running from: C:\Users\Family\Downloads\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Windows\system32\x64
D:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2007-12-04 to 2008-01-04 )))))))))))))))))))))))))))))))
.

2008-01-04 11:25 . 2000-08-31 08:00 51,200 --a------ C:\Windows\NirCmd.exe
2008-01-03 23:26 . 2008-01-03 23:35 <DIR> d-------- C:\Mgame
2008-01-03 23:22 . 2008-01-03 23:35 <DIR> d-------- C:\temp___
2008-01-03 15:15 . 2008-01-03 15:15 <DIR> d-------- C:\Users\All Users\MailFrontier
2008-01-03 15:15 . 2008-01-03 15:15 <DIR> d-------- C:\ProgramData\MailFrontier
2008-01-03 15:15 . 2004-04-27 04:40 11,264 --a------ C:\Windows\System32\SpOrder.dll
2008-01-03 15:15 . 2008-01-03 15:15 4,212 ---h----- C:\Windows\System32\zllictbl.dat
2008-01-03 15:14 . 2008-01-03 15:27 <DIR> d-------- C:\Windows\System32\ZoneLabs
2008-01-03 15:14 . 2003-10-16 14:11 70 --------- C:\Windows\System32\vsconfig.xml
2008-01-03 15:13 . 2008-01-03 15:34 <DIR> d-------- C:\Windows\Internet Logs
2008-01-03 10:43 . 2008-01-... Read more

Read other answers
RELEVANCY SCORE 35.6

I tried cleaning up some of the spyware that is on my computer the other day. Once I had, I restarted. The welcome screen appeared, it flashed my background and then went to a welcome screen with my name on it. I click on my name, the log in music plays, my background appears and then the log out music plays and I am right back at the welcome screen with my name on it. I have tried opening in every type of safe mode and all other available options when I hit F8. I called the maker of my computer and they said it is a spyware problem. Can anyone please help me with this?
 

A:XP logs me in then immediately logs me back out!

Read other 12 answers
RELEVANCY SCORE 35.6

Hi,
My laptop is a 14 month old Toshiba L20 Satellite Pro, running Windows XP and is just out of warranty. I have Norton Anti Virus and Spyware Terminator from Download.com.

For the past week before logging on I have been shown the following screen:

Spyware Terminator is about to delete 1 file
Summary:
files found 1
files deleted 0
deletions failed 1

Despite this message I have been able to log in and work on my laptop as normal. But this morning I can no longer log in.
I type in my password, see my wallpaper for less than a second and am promptly informed that my settings are being saved, and that the computer is logging out, and am returned to the welcome screen.
This also happens in safe mode for my own username and under 'administrator'.
I suspect that the Spyware Terminator message and my inability to log on are related.
I have my manufacturer's recovery CD and obviously a lot of important documents I can't afford to lose, can anyone help with my issue, I suspect it is virus related.
Thanks.
 

Read other answers
RELEVANCY SCORE 35.2

hello,

my computer is affected by Generic.Brontok, and because of that it became very slow. i have posted panda active scan log.

my DSS main.txt log size is bigger than allowed size of post, so i have attached main.txt and extra.txt with this post.

waiting for your help.

Thanks.

Incident Status Location

Virus:W32/Brontok.P.worm Disinfected C:\Program Files\Softwin\BitDefender10\Quarantine\SERVICES.EXE
Virus:W32/Brontok.P.worm Disinfected C:\Program Files\Softwin\BitDefender10\Quarantine\LSASS.EXE
Virus:W32/Brontok.P.worm Disinfected ... Read more

Read other answers
RELEVANCY SCORE 34.8
Q: sysprep

KMS Activation for Windows and Office Fails
I have cloned and deployed several PCs with similar hardware as they are of the same model.

The steps are as follows:
Computer A
Install Windows
Install applications/drivers/updates
Capture Image Version #1
Run sysprep
Join domain
Activate windows and office

Computer B, C and so on
Deploy Image Version #1 to a machine
Run sysprep
Join domain
Activate windows and office



Run the following bat file when sysprep

@ECHO OFF

reg add "HKLM\SYSTEM\Setup\Status\Sysprepstatus" /v CleanupState /t REG_DWORD /d 00000002 /F
reg add "HKLM\SYSTEM\Setup\Status\Sysprepstatus" /v GeneralizationState /t REG_DWORD /d 00000007 /F
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform" /v SkipRearm /t REG_DWORD /d 00000001

msdtc -uninstall
timeout 120
msdtc -install
timeout 120

rmdir /Q /S "C:\Windows\System32\Sysprep\Panther" 
del /Q "C:\Windows\System32\Sysprep\Sysprep_succeeded.tag "

ECHO Beginning Sysprep. The system will shutdown when complete.

"C:\Windows\System32\Sysprep\Sysprep.exe" /oobe /generalize /shutdown


What is the difference if I sysprep /generalize with SkipRearm=1 and sysprep /generalize with SkipRearm=0?

I have now realised that windows and office fails to activate on the kms server by itself. Any idea on how I can remedy the problem. Thanks.

Read other answers