Comments on: What is winupdate86.exe, How to remove winupdate86.exe

By: admin

admin — Wed, 17 Feb 2010 14:11:13 +0000

Download Recovery console boot cd from here and burn it to a clean CD Disk. Boot from the disk and follow above steps (admin Says:January 15th, 2010 at 12:10 am).

By: Pete

Pete — Tue, 16 Feb 2010 03:19:45 +0000

Same problem as Jason and Susan above. Want to follow the instructions but I don’t have a windows xp boot disk. My hp Dv1000 did not come with one. Where can I find one so I can replace the winlogon32.exe file with userinit.exe? Oh and should I be worried about losing hard drive data before I try this? Is there a way to backup the hard drive to a portable USB drive even though I can’t logon? Any advice would be greatly appreciated!!! Thanks.

By: Jason

Jason — Fri, 12 Feb 2010 20:42:10 +0000

Just wanted to say that you guys saved me! I had to backdoor it via John’s way and was finally able to get back to where my PC was useable. Thanks so much for putting the time and energyinto helping people with this. Good karma is on the way!

By: Julie

Julie — Mon, 01 Feb 2010 22:56:52 +0000

Hi everyone,
I had the same logon/logoff loop that others (like John above) were having. On a forum someone pointed me to this website: thinkinginpixels.com/quick-fixes/fix-windows-xp-log-onlog-off-loop/ Dan is extremely helpful. Even when the initial fix on his site didn’t work at first (my userinit file had a wrong registry value) I emailed him and he guided me through the process. Highly recommended! I was able to get my system back and running (it was a lot of work, but that’s OK) without having to reformat.

By: admin

admin — Fri, 15 Jan 2010 06:10:34 +0000

Susan, boot your computer in Recovery console.
Type
cd system32
Press Enter.
Type
copy userinit.exe winlogon32.exe
Press Enter.
Type
exit
Press Enter.

By: Susan

Susan — Thu, 14 Jan 2010 18:13:48 +0000

I saw U8MYR!CE instructions on removing winupdate86.exe. Mine is named winupdate32.exe. Do the same instruction apply? After I had removed it, My computer logs off right after logging in.
I am referring to the reply from U8MYR!CE posted December 28, 2009 @ 2:41am

By: Sam Gil

Sam Gil — Thu, 14 Jan 2010 14:37:02 +0000

Please HELP! I have this virus on my computer and before I found this thread, I deleted the file: C:/Windows/System32/SMSS32.exe, C:/Windows/System32/IS15.exe,
C:/Windows/System32/helper32.exe and now when I go to log on after a restart it keeps taking me back to the log on screen to hit ctrl alt delete to log on with my password, I enter my password and it keeps taking me back to the log on screen?

I followed the instruction what U8MYR!CE suggested on

But I am still unable to logon. System keeps taking me back to the log on screen.

Any suggestions?

By: Sam Gil

Sam Gil — Thu, 14 Jan 2010 03:51:34 +0000

My computer had Win32.NetSky,
Symptoms:
1. Desktop on the computer showed that your computer is infected with Win32.NetSky
2. In the system tray I see RED “X “ icon.
3. Task Manager is disabled
4. View->Field Options in Windows Explorer is also disabled.
5. If I try to system restore to previous restore point it display the following message: “System restore has been turned off by your group policy. To turn on system restore; contact your domain administrator.”
System restore was enabled on my system.

What I did:
I rebooted the system in safe mode, same behavior (task manager disable, system restore is not available etc.).
Investigation:
I found following files under C:\Windows\System32 with most recent date time stamp (say 1/13/2010):
1. IS15.exe 0 bytes
2. Helper32.dll 0 bytes
3. IE Warning.htm 3kb
4. wpa.dbl 2kb
5. winlogon32.exe 21kb
6. smss32.exe 21kb
7. oh77tim.dll 145kb
8. info.tmp 40kb

Uncheck through MSCONFIG
In Startup Tab I also UNCHECKED
1. SMSS32 which point to C:\Windows\System32\SMSS32.EXE
2. AWY84 which point to C:\Documents and Settings\\Local Settings\Temp\AWY84.EXE

Deleting files while logged in SAFE mode:
1. I deleted all the files from C:\Documents and Settings\\Local Settings\Temp.
There were couple EXE (e.g. AWY84.EXE) files with most recent date time stamp.

2. Deleted files form C:\Windows\System32
a. IS15.exe 0 bytes
b. Helper32.dll 0 bytes
c. IE Warning.htm 3kb
d. wpa.dbl 2kb
e. winlogon32.exe 21kb
f. smss32.exe 21kb
g. oh77tim.dll 145kb
h. info.tmp 40kb

Rebooted:
Now when I go to log on after a restart it keeps taking me back to the log on screen to hit ctrl alt delete to log on with my password, I enter my password and it keeps taking me back to the log on screen?
Same behavior is happening in SAFE Mode as well.

I followed the instructions what U8MYR!CE mentioned.

1. Put in your your Windows Disc and boot into Repair, you will see a dos mode, press “1″ go into “C:\Windows” directory and type in your user/admin password.
after that go into your “System32″ folder by typing “cd System32″ without “quotes”
then enter in:
“copy winlogon.exe winlogon86.exe” and
“copy winlogon.exe winupdate86.exe” <— just incase
type: "exit" to restart
I
am unable to log-in to my system. When I log on after a restart it keeps taking me back to logon screen.

I really, really appreciate if someone helps to resolve this issue.

Thanks in anticipation.

By: DJOran

DJOran — Wed, 13 Jan 2010 17:56:58 +0000

I tried that and the task manager option is “grayed out” so that isn’t an option for me. If it helps, it’s Windows XP Pro. Any other thought?

By: admin

admin — Wed, 13 Jan 2010 15:43:38 +0000

Dave, once Windows loaded, press CTRL + ALT + DEL.
Windows Task Manager should opens.
Click File, New Task.
Type explorer.exe and press Enter.
It should load your icons and task bar.
Now, download and run Malwarebytes Anti-malware.