Author Topic: XP password demanded  (Read 9288 times)

0 Members and 1 Guest are viewing this topic.

Offline sezor

  • Newbie
  • *
  • Posts: 7
XP password demanded
« on: December 23, 2010, 08:17:29 PM »

A friend of mine reports that, after installing the latest
version of Avast! Free and restarting his computer, Windows
XP now demands a password at startup - where it didn't
before.  Meanwhile, he has no idea what the password could
be. 
If we don't find a way around this, he's going to have to
reinstal windows and lose all his data.  Does anyone know if
Restoring XP would solve the problem? 
Without having checked the info he's given me, it seems to
me advisable, after installing the latest version of Avast!
and before closing down or restarting, to check that no
change has taken place in Windows startup settings - user
accounts, auto login, use of passwords ..   
Avast! hasn't done this to me but another program did
something similar under 2k - which required altering the
registry to restore things. 
Unless someone has a bright idea, I plan to boot his
computer with a Bart's PE cd and carry out the Privilege
Escalation Exploit - involving logon.scr and cmd.exe
- details here:  http://www.clazh.com/how-to-hack-or-crack-a-windows-xp-administrator-password/
Ideas welcome. 
Sezor
 

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: XP password demanded
« Reply #1 on: December 23, 2010, 08:37:13 PM »
uh... try http://www.pogostick.net/~pnh/ntpasswd/  (a lot easier than all that screen saver mess you found).

As for Avast making the computer "demand a password", that's BS.

He may be accusing avast because that's the last thing that he remembers doing on his computer, but none of the installs that I've ever done has made this happen.
« Last Edit: December 23, 2010, 08:38:45 PM by scythe944 »
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

Offline CharleyO

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7085
  • Be alert for error code - ID 10T
Re: XP password demanded
« Reply #2 on: December 24, 2010, 06:16:01 AM »
***

Nor have any of the install I have done made this happen.
If that were a fault of avast, we would be deluged with complaints.


***
Self-built desktop (8 years old) - AMD64 3200+_Gigabyte GA-K8NS Ultra-939_4 gb RAM_GeForceFX 5800w/256 ram_XP/SP3_Avast 7_MBAM_ZA Free __and__ Toshiba Satellite Laptop_W7-64bit_ 4 gb Ram_Avast 8_MBAM

Offline sezor

  • Newbie
  • *
  • Posts: 7
Re: XP password demanded
« Reply #3 on: December 24, 2010, 06:09:05 PM »
uh... try http://www.pogostick.net/~pnh/ntpasswd/  (a lot easier than all that screen saver mess you found).

Thanks for the suggestion.  It's better than the one I mentioned
- which requires knowing the pw. 
It's not necessarily Avast causing this, it's more likely Windows. 
A quick search shows similar happenings are not all that rare.

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: XP password demanded
« Reply #4 on: December 26, 2010, 06:34:35 AM »
No problem.  I've used that program to either change passwords or remove them quite a few times.  It works wonders.

Hopefully you find the real culprit of the password issue and get it resolved.

Good luck!
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

Offline Jwatloras06

  • Newbie
  • *
  • Posts: 4
Re: XP password demanded
« Reply #5 on: January 23, 2011, 04:33:20 PM »
I am having the same problem. And I have seen this problem mentioned a few times through out the forum. Yesterday my dad paid for avast and after the computer the "log on to windows" screen pops up. Now I would assume this would be doing this because of avast. Because that was the last thing done on his computer. And he has windows xp just ad the other person. So my question is what is the password? And if I don't have access to another computer to make a password cracking disc how else can I log in? My dad had never had a password on here at any time, so that is why this is pretty confusing.

Offline Pacheco81

  • Newbie
  • *
  • Posts: 5
Re: XP password demanded
« Reply #6 on: January 23, 2011, 06:49:14 PM »
I have this same problem and i'm shure it's because avast instalation.

Open avast, go to the vault and you will find logonui.exe file, restore the file and windows will start normaly, but avast will block it again.


Also explorer.exe and many other system files are blocked, why?? after a while have the start in safe mode to unistal avast.

Can anyone help me please, many .exe files are being confused by viruses, had to instal windows for the 3rd time today.

P.S.- I apologize for any error how i write, don't speak english very good.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: XP password demanded
« Reply #7 on: January 23, 2011, 06:52:28 PM »
I suggest:

1. Clean your temporary files.
2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
3. Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, it is better and safer to send the infected file(s) to quarantine (Chest), rather than simply deleting them.
4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
6. Clean your Hosts file (replacing it) with HostsMan tool.
7. Disable System Restore and then reenable it again.
8. Immunize your system with SpywareBlaster.
9. Check if you have insecure applications with Secunia Software Inspector.

Definitively, they don't seem to be false positives of avast... Are you really reinstalling Windows? Is it legit?
The best things in life are free.

Offline Pacheco81

  • Newbie
  • *
  • Posts: 5
Re: XP password demanded
« Reply #8 on: January 23, 2011, 09:08:18 PM »
Yes i'm realy installing windows, with a original cd and key, just did it again on a home edition, seconds after installing avast it started to alert about viruses and it does not stop until i disable it and unniistall avast.

already try on 3 computer and always the same problem, going to try a other antivirus to see what will hapend.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: XP password demanded
« Reply #9 on: January 23, 2011, 09:30:37 PM »
Can you submit the files to www.virustotal.com ?
It would be very helpful to check if they're not false positives.
The best things in life are free.

Offline DavidCo

  • Sr. Member
  • ****
  • Posts: 257
Re: XP password demanded
« Reply #10 on: January 23, 2011, 09:32:10 PM »
Tech
If you can't get past the login how can you do all those things, or am I missing something ???
Asus P5, E8500/3.16GHz, 4GB Corsair X2E, Sata11 'Cudas, 512MB Nvidia
Vista HP 32Bit, Avast AV/V6 Pro, Mbam on demand

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: XP password demanded
« Reply #11 on: January 23, 2011, 09:36:36 PM »
Tech
If you can't get past the login how can you do all those things, or am I missing something ???
Maybe we're talking about different users...
If avast is installed and warning the user, he/she did login.
The best things in life are free.

Offline DavidCo

  • Sr. Member
  • ****
  • Posts: 257
Asus P5, E8500/3.16GHz, 4GB Corsair X2E, Sata11 'Cudas, 512MB Nvidia
Vista HP 32Bit, Avast AV/V6 Pro, Mbam on demand

Offline Pacheco81

  • Newbie
  • *
  • Posts: 5
Re: XP password demanded
« Reply #13 on: January 23, 2011, 10:23:34 PM »
Pacheco81

Could be an oldy
http://www.ozzu.com/mswindows-forum/help-deleted-logonui-exe-windows-welcome-screen-gone-t72987-15.html



Hi, thanks, it's looks the same problem, but i don't have only this file missing (moved to quarentine), many files are detecded as virus, ex:

logonui.exe       C:\WINDOWS\system32
spoolsv.exe       C:\WINDOWS\system32
iexplore.exe      C:\Programas\Internet Explorer
wpabaln.exe       C:\WINDOWS\system32

These only by starting windows and trying to open I.Explorer

If i scan the computer with avast it will find hundred's of viruses (that i'm almost shure they not)

Offline Pacheco81

  • Newbie
  • *
  • Posts: 5
Re: XP password demanded
« Reply #14 on: January 23, 2011, 11:09:15 PM »
Did a full scan and found 1175 viruses on a pc that i just finish installing windows  ???

Anyone else have the same problem??