Winlogon error :(

Notebook, Win Home XP SP2 (Japanese)

My friend gave me the above notebook so I could fix it as it had issues.
Sure enough there were a ton of unnecessary programs, viruses, trojans, etc.

downloaded a bunch of things like spybot, avast, removed a bunch of things like norton.. etc
seemed to go alot smoother, but now suddenly when I rebooted and windows tries to load..
I get a winlogon error. I have the choice of OK to terminate the program or Cancel.. but either choice causes the machine to reboot and starts the cycle again.

Fortunately the computer still works in Safe Mode..

Since its a notebook, Im quite sure her windows is pre-installed and there's no cd (something notebook makers do much of nowadays). I got an XP cd but its the PRO edition not Home (and North American not Japanese).

any way to solve this with out resorting to a reinstall?

 

I am not sure if that XP Pro disc will be of any use or not, but in safe mode, try Run -> sfc /scannow.

And any other details regarding the error ?

 

running that i get an error code 0x000006ba, can't use server

as for other details.. hmm
well the computer was running super slow, there were a jillion programs, etc before I touched it.

She had Norton Utilities and AVG, I uninstalled both (AVG is normally fine but it wasn't being cooperative with me). So I installed Avast and Spybot.. got rid of quite a bit of trojans.

Then there was the issue of it being slow.. so I began uninstalling some programs.

Also I kinda wanted to make the windows theme a bit spiffier so I installed UXTender to allow the use of non MS themes (I wonder if that was it..)

 

If you can still boot into Safe Mode, then it's not so bad.

Can you boot into Safe Mode and post me the startup list?

Start -> Run -> regedit

Then browse to HKLM\Software\Microsoft\Windows\CurrentVersion\Run

I can tell you which entries should be removed.

 

Thanks for the reply

HK LM as in local machine yes? If so
under the Run tab there is
Optional Components folder,
then
IMAIL, MAPI, MSFS
thats it
theres other folders near by called
RunOnce
RunOnceEX

 

Yeah, HKLM = HKEY_LOCAL_MACHINE

Sorry, not the subfolders under the Run tab, what I meant was, if you click on Run, then on the right side window, you will see a whole list of startup items.

 

alright got it!

AGRSMMSG
Alcmtr
Apoint
ATICCC
ATSwpNav
BigDogPath
FJUPDNV_Chitose
High Definition Audio
IMJPMIG8.1
IMJPMIG9.0
IndicatorUtility
INETCONDSP
iTunesHelper
LoadBtnHnd
LoadFUJ02E3
LoadFujitsuQuickTouch
LoadPUSCDaemon
OmniPass
PHIME2002A
PHIME2002Async
PUSCKAPLEXE
QuickTime Task
RTHDCPL
SkyTel
SunJavaUpdateSched
UserFaultCheck
WLANNER

 

hmm... it's quite a lot of startup programs, but they're all safe, except one that I'm not 100% sure about yet, can you post the detail path of that BigDogPath entry?

 

thanks!

it goes to a usb camera
something like
c: windows > vm_stiexe vimicro usb camera

so if the registry seems relatively okay.. what do you think is causing this winlogon problem

I don't think its a virus since I cleaned it out.. or did cleaning it out affect it too?

 

If it's related to usb camera, then it's ok.

As for the winlogon error, it could be related to a W32.Netsky virus.

http://en.allexperts.com/q/Windows-XP-3282/Winlogon-exe-error.htm

There is a tool in there you can download from Symantec, give it a shot.

 

Does sfc /scannow/quiet gives an error too ?

(Also run > sfc /verifyonly)

 

hi guys! I figured it out. UXTender was the problem
i never had a problem with it on my own laptop, but it seems to cause troubles on hers.. UXtender is a program that modifies xp a little bit so you can use custom themes. I guess perhaps because her version of windows is from a different country, it led to some issues as I guess UXTender was designed for NA Windows. Fortunately it had a "restore" button, and that fixed it. thank goodness for a functional safe mode! thanks again guys!

 

Sorry to bump an old topic but I have the same problem, I think. I used UXTender and rebooted and now I get an error when it reaches the login screen. Right now I'm on safe mode and that works fine. Where was this "restore" button? Was it part of the laptop?

 

start uxtender while in save mode..

 

Do you really thing that will work? When I started uxtender in "normal" mode and rebooted I will get bluescreen error when windows reaches the login screen. I just want to go back to the way it was before.

I tried System Restore but after choosing a date and then when I want to confirm it I click the "next" button but nothing happens, no matter how many times I click that button.

I virus scanned with AVG 7.5 and it found 18 viruses and contained 9 and deleted 9. All had something to do with "AutoRun" so I thought that had something to do with it but when rebooting I get the same error.

I'm using Windows XP SP2.

I wish I hadn't tried messing with the windows theme...

 

Oops, sorry for my ignorance. I didn't get that the "restore" button was when you actually opened the program. Thanks.