Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: sezor on December 23, 2010, 08:17:29 PM

Title: XP password demanded
Post by: sezor on December 23, 2010, 08:17:29 PM

A friend of mine reports that, after installing the latest
version of Avast! Free and restarting his computer, Windows
XP now demands a password at startup - where it didn't
before.  Meanwhile, he has no idea what the password could
be. 
If we don't find a way around this, he's going to have to
reinstal windows and lose all his data.  Does anyone know if
Restoring XP would solve the problem? 
Without having checked the info he's given me, it seems to
me advisable, after installing the latest version of Avast!
and before closing down or restarting, to check that no
change has taken place in Windows startup settings - user
accounts, auto login, use of passwords ..   
Avast! hasn't done this to me but another program did
something similar under 2k - which required altering the
registry to restore things. 
Unless someone has a bright idea, I plan to boot his
computer with a Bart's PE cd and carry out the Privilege
Escalation Exploit - involving logon.scr and cmd.exe
- details here:  http://www.clazh.com/how-to-hack-or-crack-a-windows-xp-administrator-password/
Ideas welcome. 
Sezor
 
Title: Re: XP password demanded
Post by: scythe944 on December 23, 2010, 08:37:13 PM
uh... try http://www.pogostick.net/~pnh/ntpasswd/  (a lot easier than all that screen saver mess you found).

As for Avast making the computer "demand a password", that's BS.

He may be accusing avast because that's the last thing that he remembers doing on his computer, but none of the installs that I've ever done has made this happen.
Title: Re: XP password demanded
Post by: CharleyO on December 24, 2010, 06:16:01 AM
***

Nor have any of the install I have done made this happen.
If that were a fault of avast, we would be deluged with complaints.


***
Title: Re: XP password demanded
Post by: sezor on December 24, 2010, 06:09:05 PM
uh... try http://www.pogostick.net/~pnh/ntpasswd/  (a lot easier than all that screen saver mess you found).

Thanks for the suggestion.  It's better than the one I mentioned
- which requires knowing the pw. 
It's not necessarily Avast causing this, it's more likely Windows. 
A quick search shows similar happenings are not all that rare.
Title: Re: XP password demanded
Post by: scythe944 on December 26, 2010, 06:34:35 AM
No problem.  I've used that program to either change passwords or remove them quite a few times.  It works wonders.

Hopefully you find the real culprit of the password issue and get it resolved.

Good luck!
Title: Re: XP password demanded
Post by: Jwatloras06 on January 23, 2011, 04:33:20 PM
I am having the same problem. And I have seen this problem mentioned a few times through out the forum. Yesterday my dad paid for avast and after the computer the "log on to windows" screen pops up. Now I would assume this would be doing this because of avast. Because that was the last thing done on his computer. And he has windows xp just ad the other person. So my question is what is the password? And if I don't have access to another computer to make a password cracking disc how else can I log in? My dad had never had a password on here at any time, so that is why this is pretty confusing.
Title: Re: XP password demanded
Post by: Pacheco81 on January 23, 2011, 06:49:14 PM
I have this same problem and i'm shure it's because avast instalation.

Open avast, go to the vault and you will find logonui.exe file, restore the file and windows will start normaly, but avast will block it again.


Also explorer.exe and many other system files are blocked, why?? after a while have the start in safe mode to unistal avast.

Can anyone help me please, many .exe files are being confused by viruses, had to instal windows for the 3rd time today.

P.S.- I apologize for any error how i write, don't speak english very good.
Title: Re: XP password demanded
Post by: Lisandro on January 23, 2011, 06:52:28 PM
I suggest:

1. Clean your temporary files.
2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! (http://www.freedrweb.com/cureit/) instead.
3. Use MBAM (http://malwarebytes.org/mbam.php) (or SUPERantispyware (http://www.superantispyware.com) or even Spyware Terminator (http://www.spywareterminator.com/)) to scan for spywares and trojans. If any infection is detected, it is better and safer to send the infected file(s) to quarantine (Chest), rather than simply deleting them.
4. Test your machine with anti-rootkit applications (http://www.antirootkit.com/software/index.htm). I suggest avast! antirootkit (http://files.avast.com/files/beta/aswar.exe) or Trend Micro RootkitBuster (http://www.trendmicro.com/download/rbuster.asp).
5. Make a HijackThis (http://www.bleepingcomputer.com/files/hijackthis.php) log to post here or this analysis site (http://www.hijackthis.de/#anl). Or even submit the RunScanner (http://www.runscanner.net/) log to to on-line analysis.
6. Clean your Hosts file (replacing it) with HostsMan (http://www.abelhadigital.com) tool.
7. Disable System Restore and then reenable it again.
8. Immunize your system with SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html).
9. Check if you have insecure applications with Secunia Software Inspector (http://secunia.com/software_inspector/).

Definitively, they don't seem to be false positives of avast... Are you really reinstalling Windows? Is it legit?
Title: Re: XP password demanded
Post by: Pacheco81 on January 23, 2011, 09:08:18 PM
Yes i'm realy installing windows, with a original cd and key, just did it again on a home edition, seconds after installing avast it started to alert about viruses and it does not stop until i disable it and unniistall avast.

already try on 3 computer and always the same problem, going to try a other antivirus to see what will hapend.
Title: Re: XP password demanded
Post by: Lisandro on January 23, 2011, 09:30:37 PM
Can you submit the files to www.virustotal.com ?
It would be very helpful to check if they're not false positives.
Title: Re: XP password demanded
Post by: DavidCo on January 23, 2011, 09:32:10 PM
Tech
If you can't get past the login how can you do all those things, or am I missing something ???
Title: Re: XP password demanded
Post by: Lisandro on January 23, 2011, 09:36:36 PM
Tech
If you can't get past the login how can you do all those things, or am I missing something ???
Maybe we're talking about different users...
If avast is installed and warning the user, he/she did login.
Title: Re: XP password demanded
Post by: DavidCo on January 23, 2011, 10:09:12 PM
Pacheco81

Could be an oldy
http://www.ozzu.com/mswindows-forum/help-deleted-logonui-exe-windows-welcome-screen-gone-t72987-15.html

Title: Re: XP password demanded
Post by: Pacheco81 on January 23, 2011, 10:23:34 PM
Pacheco81

Could be an oldy
http://www.ozzu.com/mswindows-forum/help-deleted-logonui-exe-windows-welcome-screen-gone-t72987-15.html



Hi, thanks, it's looks the same problem, but i don't have only this file missing (moved to quarentine), many files are detecded as virus, ex:

logonui.exe       C:\WINDOWS\system32
spoolsv.exe       C:\WINDOWS\system32
iexplore.exe      C:\Programas\Internet Explorer
wpabaln.exe       C:\WINDOWS\system32

These only by starting windows and trying to open I.Explorer

If i scan the computer with avast it will find hundred's of viruses (that i'm almost shure they not)
Title: Re: XP password demanded
Post by: Pacheco81 on January 23, 2011, 11:09:15 PM
Did a full scan and found 1175 viruses on a pc that i just finish installing windows  ???

Anyone else have the same problem??
Title: Re: XP password demanded
Post by: Lisandro on January 23, 2011, 11:13:15 PM
Which is your virus definitions version?
Everything is so strange...
Title: Re: XP password demanded
Post by: Pacheco81 on January 23, 2011, 11:27:49 PM
Which is your virus definitions version?
Everything is so strange...

110120-0

Yes it's very strange, diferent computers, try with diferente windows install cd, and always the same problem.

Title: Re: XP password demanded
Post by: Lisandro on January 24, 2011, 12:49:18 AM
Update to the latest...
Title: Re: XP password demanded
Post by: Jwatloras06 on January 24, 2011, 06:10:06 AM
Tech
If you can't get past the login how can you do all those things, or am I missing something ???


This is exactly what I am saying. I can't get pass the login. So avast clearly set up a password, that I don't know. I'm not about to reinstall xp back on my computer. I to many files that I haven't backed up. Plus that doesnt seem to be a fix
Title: Re: XP password demanded
Post by: davexnet on January 24, 2011, 06:43:17 AM
Have you tried booting to safemode and selecting the Administrator account?
Often the password is null, just hit the enter key if prompted.
Title: Re: XP password demanded
Post by: Eddy on January 24, 2011, 07:49:09 AM
A couple of things:
1) avast does NOT set a password on Windows.

2) If you want to do a clean install of Windows, do it the proper way.
<<< Do all the above BEFORE going online! (disconnect network cable(s) before starting )>>>

3) There is also the option for a repair installation. This will not cause data loss.
How to do a repair installation (http://www.michaelstevenstech.com/XPrepairinstall.htm)
Title: Re: XP password demanded
Post by: Jwatloras06 on January 24, 2011, 08:00:23 AM
I love how people keep saying avast does not set a password. But we are telling you that's the last thing done on our computers. I'm not a computer genius but deductive reasoning leads me to believe since the last thing done on the computer was install avast and restart my computer, that is what caused to need for a login password. Especially when there was never one before. And as to logging in safe mode. It still asks for a password. There had to be some type of issue between avast and windows xp. That's all I'm saying.
Title: Re: XP password demanded
Post by: Eddy on January 24, 2011, 08:13:29 AM
How to login as administrator (http://windowsxp.mvps.org/admins.htm)
Title: Re: XP password demanded
Post by: Jwatloras06 on January 24, 2011, 02:42:20 PM
Yeah none of that worked. And when I start my computer up in safe mode it still asks for a computer. Pressing ctrl+alt+delete just restarts the computer.
Title: Re: XP password demanded
Post by: scythe944 on January 24, 2011, 05:06:03 PM
Yeah none of that worked. And when I start my computer up in safe mode it still asks for a computer. Pressing ctrl+alt+delete just restarts the computer.

I know that Avast doesn't set a password, but no matter what, you can always remove passwords if all else fails.

This program works wonders for doing so: http://pogostick.net/~pnh/ntpasswd/

I've been using it for about a year and hasn't failed me yet.  It's not exactly the easiest thing to use (it's a bit cryptic) but if you pay attention, go slowly, and READ the instructions on the screen you can remove any password for any account on your computer.

Thus, problem fixed!  ;D
Title: Re: XP password demanded
Post by: Eddy on January 25, 2011, 12:00:51 AM
Yeah none of that worked. And when I start my computer up in safe mode it still asks for a computer. Pressing ctrl+alt+delete just restarts the computer.
By default there is no password set. Leave the field blank.
Title: Re: XP password demanded
Post by: scythe944 on January 25, 2011, 04:04:33 PM
Yeah none of that worked. And when I start my computer up in safe mode it still asks for a computer. Pressing ctrl+alt+delete just restarts the computer.
By default there is no password set. Leave the field blank.

And if that doesn't work, use the link that I provided to clear the password.  Then, it will be blank.

Alternatively, you could reset/create a password for any user.

Again, problem solved.
Title: Re: XP password demanded
Post by: hecongyan on January 26, 2011, 08:10:47 AM
Do you mean that you need to recover xp passsword (http://www.windowspasswordsrecovery.com/forgot-windows-xp-password.htm)?
Title: Re: XP password demanded
Post by: Eddy on January 26, 2011, 03:38:19 PM
No, I mean use the normal options to login.
If they fail it is either a pebkac error (which it is in 99.9% of the cases) or a infection.
In the 27+ years I have been working with computers I never encountered a problem that required anything like hacking/cracking a password like scythe944 seems to be promoting.
There are legal ways to solve the problem!

It is ofcourse very stupid from MS not to force people to set a password on a administrator account. It is making it relatively easy for malware to get full control over a system.

Besides that, people should never use a administrator account, or a account with administrator rights unless absolutely needed. If you are logged in/using such a account, it means that when the system gets infected, the malware has the same rights! Always use a restricted account with a password.
Title: Re: XP password demanded
Post by: ydissac666 on February 20, 2011, 01:22:01 AM
Hi I have the same problem I downloaded the newest update and when I rebooted it is asking for a password which I have never had on my computer, now I had no other programs running and had just started my computer, Also I have tried all the fixes suggested and they do not work, it will not even let me boot from my repair disk with out the password.  ANY IDEAS?

Title: Re: XP password demanded
Post by: Asyn on February 20, 2011, 01:48:08 AM
ANY IDEAS?

Please open a new thread and tell us more about your system..!
asyn
Title: Re: XP password demanded
Post by: ydissac666 on February 21, 2011, 02:42:57 AM
My system is on a Compaq laptop  running windows XP home. As far as any other information on the what updates are on it I can not tell you and as I can not get into it so I can not tell you any more.