Unable to log in (Buffer overflow)

[NeilM]

I run Spybot, SAS, and Avast on my machine at the same time.

Last night I had a Firefox window open to gmail and I was using a non-net application when SAS and SpyBot went crazy saying that there was a rootkit being installed on my XP machine.  I denied access to the registry and deleted the exe files.  I kept the computer running until I finished my task in my other program then shut the machine down.

On bootup I ran an old virus checker I have on CD.  It didn't find anything.  When I hit windows I got a buffer overflow in WinLogin.exe (I believe thats what its called) and the system immediately shuts down (It doesn't get past the dialog saying "Windows is starting up").  Safe mode does the exact same thing too.

Does anyone know what I can do to fix this?  Any bootable programs I can run to get windows logging in again?

[Lisandro]

Does last known configuration boot work?
Maybe you could read the instructions, download and burn (maybe from another computer), finally use one of this rescue CD's:
1. Avira
2. Kaspersky
3. BitDefender
4. F-Secure
5. Dr. Web

[NeilM]

Okay, I have tried 3 on this list so far.

First I tried BitDefender.  It found
Trojan.Clicker.MQL
Win32.Worm.Bagle.FJ
Generic.Peed.Eml.123456

in my spam email folder.  That didn't fix the buffer overflow.

I tried Avira next.  It didn't boot properly on my system.

I tried Kaspersky next.
I started it on 3/06/2009 at 5:13pm.  As of 3/08/2006 at 11:00am it is still going.  So about 40 hours now... 78% and nothing found.

When it finishes, hopefully sometime tonight, I'll try avira again and the other ones on the list... but they don't seem to be picking up anything.  Does anyone have any other suggestions?  Is there some process I can go through to recover winlogon.exe?

[Lisandro]

Is there some process I can go through to recover winlogon.exe?

Maybe overinstallation.
Overinstallation can solve the problem and you won't lose your programs, settings, data, files, etc.
Just choose 'Repair' installation of Windows and install 'over' the old installation.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;315341
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314058
http://support.microsoft.com/?scid=kb%3Ben-us%3B315341&x=15&y=0
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/doug92.mspx