<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>I  AM  YOUR  I.T.  GUY &#187; Virus Repair</title>
	<atom:link href="http://iamyouritguy.com/archives/category/windows/virus-issue/feed" rel="self" type="application/rss+xml" />
	<link>http://iamyouritguy.com</link>
	<description>iamyouritguy.com</description>
	<lastBuildDate>Thu, 03 Sep 2009 04:11:08 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.3</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>How to get into Recovery Console. Adding Recovery Console to Windows Boot Menu</title>
		<link>http://iamyouritguy.com/archives/164</link>
		<comments>http://iamyouritguy.com/archives/164#comments</comments>
		<pubDate>Thu, 06 Aug 2009 06:45:18 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>
		<category><![CDATA[tutorial]]></category>
		<category><![CDATA[fix]]></category>
		<category><![CDATA[how to]]></category>
		<category><![CDATA[repair]]></category>
		<category><![CDATA[xp]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/archives/164</guid>
		<description><![CDATA[<!-- Easy AdSense V2.63 -->
<!-- Post[count: 2] -->
<div class="ezAdsense adsense adsense-leadin" style="text-align:center;margin:12px;" ><script type="text/javascript"><!--
google_ad_client = "pub-8320224863007700";
/* 468x60, created 7/21/09 */
google_ad_slot = "9002369434";
google_ad_width = 468;
google_ad_height = 60;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
</div>





The Recovery Console, provides a command prompt environment that lets you access your FAT, FAT32, or NTFS partitions and perform system recovery operations.

You can access the Recovery Console in either of two ways: Boot the system to the installation CD-ROM and launch the Recovery Console from there, or install the Recovery Console onto the system [...]]]></description>
			<content:encoded><![CDATA[<p><span style="font-family:Arial; font-size:10pt">The <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span><span style="background-color:white">,</span> provides a command prompt environment that lets you access your FAT, FAT32, or NTFS partitions and perform system recovery operations.</span><span style="font-family:Times New Roman; font-size:12pt"><br />
</span></p>
<p><span style="font-family:Arial; font-size:10pt">You can access the <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span> in either of two ways: Boot the system to the installation CD-ROM and launch the <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span> from there, or install the <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span> onto the system so that it&#8217;s available as an option from the boot menu.</span><span style="font-family:Times New Roman; font-size:12pt"><br />
</span></p>
<p><span style="font-family:Arial; font-size:10pt"><strong>Starting the <span style="color:#f79646; background-color:white">Recovery Console</span> with the Windows XP Professional Installation CD-ROM</strong></span><span style="font-family:Times New Roman; font-size:12pt"><br />
</span></p>
<ol>
<li><span style="font-family:Arial; font-size:10pt">Boot your computer system to the installation CD-ROM and start the Windows Setup installation process.<br />
</span></li>
<li><span style="font-family:Arial; font-size:10pt">At the Welcome to Setup dialog box, press the R key to select the option to repair a Windows XP installation using the <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span>.<br />
</span></li>
</ol>
<p><span style="font-family:Arial; font-size:10pt"><strong>Adding the <span style="color:#f79646; background-color:white">Recovery Console</span> to the Windows XP Boot Menu</strong></span><span style="font-family:Times New Roman; font-size:12pt"><br />
</span></p>
<ol>
<li><span style="font-family:Arial; font-size:10pt">Insert the Windows XP Professional installation CD-ROM. You can temporarily disable autoplay by holding down the SHIFT key as you insert the disc.<br />
</span></li>
<li><span style="font-family:Arial; font-size:10pt">Select <strong>Start</strong> &gt; <strong>Run</strong>, type <em>d:\i386\winnt32 /cmdcons</em>, and click <strong>OK</strong>. If <em>d</em> is not the drive letter for your CD-ROM drive, substitute the correct drive letter.<br />
</span></li>
<li><span style="font-family:Arial; font-size:10pt">A dialog box opens, asking you to confirm installation of the <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span>. Click the <strong>Yes</strong> button to install the <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span>.<br />
</span></li>
<li><span style="font-family:Arial; font-size:10pt">The Recovery Console files are copied to a hidden folder named \CMDCONS which resides in the root directory of your system&#8217;s boot drive—most commonly C:\CMDCONS.<br />
</span></li>
<li><span style="font-family:Arial; font-size:10pt">The next time you restart your system, the boot menu will have the option of starting Windows XP Professional or the <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span>.<br />
</span></li>
<li><span style="font-family:Arial; font-size:10pt">Press the C key to select the option to repair Windows XP using the <span style="color:#f79646; background-color:white"><strong>Recovery Console</strong></span>.</span></li>
</ol>
<p style="text-align: left;">Please leave comment. Let me know if this post help!<span style="font-family:Arial; font-size:10pt"><br />
</span></p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/164/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>AntiMalwareGuard Step by Step Removal Guide</title>
		<link>http://iamyouritguy.com/archives/153</link>
		<comments>http://iamyouritguy.com/archives/153#comments</comments>
		<pubDate>Mon, 03 Aug 2009 04:03:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>
		<category><![CDATA[fix]]></category>
		<category><![CDATA[repair]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[vista]]></category>
		<category><![CDATA[xp]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/archives/153</guid>
		<description><![CDATA[AntiMalwareGuard
is another fake anti-spyware program that comes from a Trojan infection.
To remove the AntiMalwareGuard
Before you start: Print or bookmark these instructions because you&#8217;ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.


Download and save SmitFraudFix to your desktop.

Restart your computer in Safe Mode (how to do safe [...]]]></description>
			<content:encoded><![CDATA[<p><strong><span style="color:#f79646">AntiMalwareGuard</span><br />
</strong>is another fake anti-spyware program that comes from a Trojan infection.</p>
<p>To remove the AntiMalwareGuard</p>
<p><span style="font-family:Times New Roman; font-size:12pt"><span style="color:#f79646"><strong>Before you start:</strong></span> Print or bookmark these instructions because you&#8217;ll have to reboot into Safe Mode. Also <a title="back up your computer" href="http://www.spyware-techie.com/how-to-back-up-your-computer/"><span style="color: blue; text-decoration: underline;">back up your computer</span></a> in case you make a mistake.<br />
</span></p>
<ol>
<li><a title="Download and save SmitfraudFix" href="http://siri.urz.free.fr/Fix/SmitfraudFix.exe"><span style="font-family: Times New Roman; color: blue; font-size: 12pt; text-decoration: underline;">Download and save SmitFraudFix</span></a><span style="font-family:Times New Roman; font-size:12pt"> to your desktop.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Restart your computer in <a title="Safe Mode (how to do safe mode)" href="http://iamyouritguy.com/archives/151"><span style="color: blue; text-decoration: underline;">Safe Mode (how to do safe mode)</span></a>. Once the<br />
desktop appears, double click on the <span style="color:#f79646"><strong>SmitfraudFix.exe</strong></span> on your desktop.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">After the credits screen, you&#8217;ll see a menu. Select the option number <strong>2</strong>, which is <span style="color:#f79646"><strong>&#8216;Clean (safe mode recommended)&#8217;</strong></span>, and then<br />
press <span style="color:#f79646"><strong>Enter</strong></span> to delete infect files.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the <span style="color:#f79646"><strong>Disk Cleanup</strong></span> program.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Once the <span style="color:#f79646"><strong>Disk Cleanup program is complete</strong></span>, you will be prompted with the message <span style="color:#f79646"><strong>&#8216;Registry cleaning &#8211; Do you want to clean the registry&#8217;</strong></span>. Answer <span style="color:#f79646"><strong>Y (Yes)</strong></span> and hit <span style="color:#f79646"><strong>Enter</strong></span>. Reboot your computer.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there&#8217;s any) Answer by typing <span style="color:#f79646"><strong>Y (Yes)</strong></span> to replace file then hit <strong>Enter</strong>.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Reboot your computer to complete the cleaning process.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">After reboot, a Notepad screen may appear containing a log of all the files<br />
removed from your computer. If it doesn&#8217;t appear, a file will be created called<br />
<span style="color:#f79646"><strong>rapport.txt</strong></span> in the root of your drive, <span style="color:#f79646"><strong>(Local Disk C:)</strong>.</span><br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Restart your computer in <a title="Safe Mode (how to do safe mode)" href="http://iamyouritguy.com/archives/151"><span style="color: blue; text-decoration: underline;">Safe Mode (how to do safe mode)</span></a>.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Go to <span style="color:#f79646"><strong>C:\Windows\Temp</strong></span>, click <span style="color:#f79646"><strong>Edit</strong>,</span> click <span style="color:#f79646"><strong>Select All</strong></span>, press <span style="color:#f79646"><strong>DELETE</strong></span>, and then<br />
click <span style="color:#f79646"><strong>Yes</strong></span> to confirm that you want all the items to go to the <span style="color:#f79646"><strong>Recycle Bin</strong></span>.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Go to <span style="color:#f79646"><strong>C:\Documents and Settings\[LISTED USER]\Local Settings\Temp</strong></span>, click <span style="color:#f79646"><strong>Edit</strong></span>, click <span style="color:#f79646"><strong>Select All</strong></span>, press <span style="color:#f79646"><strong>DELETE</strong></span>, and then click <span style="color:#f79646"><strong>Yes</strong></span> to confirm that<br />
you want all the items to go to the <span style="color:#f79646"><strong>Recycle Bin</strong></span>.<br />
</span></li>
<li><span style="font-family:Times New Roman; font-size:12pt">Reboot your computer back to normal mode.<br />
</span></li>
</ol>
<p style="text-align: left;">Please leave comment. Let me know if this post help!</p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/153/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows XP, Vista does not detect CD / DVD ROM. Fixing missing CD / DVD ROM</title>
		<link>http://iamyouritguy.com/archives/138</link>
		<comments>http://iamyouritguy.com/archives/138#comments</comments>
		<pubDate>Sat, 01 Aug 2009 02:04:58 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>
		<category><![CDATA[tutorial]]></category>
		<category><![CDATA[fix]]></category>
		<category><![CDATA[hardware]]></category>
		<category><![CDATA[repair]]></category>
		<category><![CDATA[vista]]></category>
		<category><![CDATA[xp]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/archives/138</guid>
		<description><![CDATA[To fix this problem in Microsoft Windows XP and Microsoft Vista, follow these steps:
Step 1: Go to device manager Start &#62; Control Panel &#62; System &#62; Hardware &#62; Device Manager
    a. Right click and uninstall the missing CD / DVD ROM
Step 2. Remove the registry entries.
A. Click Start, click Run, type regedit, and then click OK.
B. [...]]]></description>
			<content:encoded><![CDATA[<p>To fix this problem in Microsoft Windows XP and Microsoft Vista, follow these steps:</p>
<p>Step 1: Go to device manager <span style="color:#f79646"><strong>Start &gt; Control Panel &gt; System &gt; Hardware &gt; Device Manager</strong></span></p>
<p>    a. <span style="color:#f79646"><strong>Right click</strong></span> and uninstall the missing <span style="color:#f79646"><strong>CD / DVD ROM</strong></span></p>
<p>Step 2. Remove the registry entries.</p>
<p>A. Click <span style="color:#f79646"><strong>Start</strong></span>, click <span style="color:#f79646"><strong>Run</strong></span>, type <span style="color:#f79646"><strong>regedit</strong></span>, and then click <span style="color:#f79646"><strong>OK</strong></span>.</p>
<p>B. In the navigation pane, locate and then click the following registry subkey:</p>
<p><span style="color:#f79646"><strong>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E965-E325-11CE-BFC1-08002BE10318}<br />
</strong></span></p>
<p>C. In the right pane, click <span style="color:#f79646"><strong>UpperFilters</strong></span>.</p>
<p>D. On the <span style="color:#f79646"><strong>Edit</strong></span> menu, click <span style="color:#f79646"><strong>Delete</strong></span>.</p>
<p>E. When you are prompted to confirm the deletion, click <span style="color:#f79646"><strong>Yes</strong></span>.</p>
<p>F. In the right pane, click <span style="color:#f79646"><strong>LowerFilters</strong></span>.</p>
<p>G. On the Edit menu, click <span style="color:#f79646"><strong>Delete</strong></span>.</p>
<p style="margin-left: 36pt">H. When you are prompted to confirm the deletion, click <span style="color:#f79646"><strong>Yes</strong></span>.</p>
<p style="margin-left: 36pt">I. Exit Registry Editor.</p>
<p style="margin-left: 36pt">J. Restart the computer.</p>
<p><span style="color:red"><strong>Note</strong></span>: If you notice a loss of functionality in a particular program such as in CD recording software after you remove the UpperFilters and LowerFilters registry values, reinstall that software.</p>
<p style="text-align: left;">Please leave comment. Let me know if this post help!</p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/138/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>windowsclick removal, Google, Yahoo and MSN search result redirect to windowsclick.com. Remove windowsclick.com redirect [UACd.sys trojan]</title>
		<link>http://iamyouritguy.com/archives/54</link>
		<comments>http://iamyouritguy.com/archives/54#comments</comments>
		<pubDate>Thu, 16 Jul 2009 10:23:03 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/?p=54</guid>
		<description><![CDATA[After
Redirect to windowsclick.com site is a result of UACd.sys trojan activity. The trojan horse may represent security risk for the infected computer and uses rootkit-specific techniques designed to hide the software presence in the system. Once infected, UACd.sys trojan blocks user access to security websites, search results in Google, Yahoo, MSN and other redirect you [...]]]></description>
			<content:encoded><![CDATA[<p>After</p>
<p><strong>Redirect to windowsclick.com site is a result of UACd.sys trojan activity.</strong> The trojan horse may represent security risk for the infected computer and uses rootkit-specific techniques designed to hide the software presence in the system. Once infected, UACd.sys trojan blocks user access to security websites, search results in Google, Yahoo, MSN and other redirect you to windowsclick.com and other non related sites.</p>
<p>The Fix:</p>
<ul>
<li>Download Avenger from <a href="http://swandog46.geekstogo.com/avenger.zip">here</a> and unzip to your desktop.</li>
<li>Run Avenger, copy,then paste the following text in Input script Box:<br />
<blockquote><p>Drivers to delete:<br />
UACd.sys</p>
<p>Files to delete:<br />
C:\WINDOWS\system32\wJQs.exe</p></blockquote>
<p>Then click on ‘Execute’.</li>
<li>You will be asked Are you sure you want to execute the current script?. Click Yes.</li>
<li>You will now be asked First step completed — The Avenger has been successfully<br />
set up to run on next boot. Reboot now?. Click Yes.</li>
</ul>
<ul>
<li>Your PC will now be rebooted.</li>
</ul>
<p>You can find a few other steps with the website link below.</p>
<p><a href="http://www.myantispyware.com/2009/01/24/how-to-remove-windowsclickcom-redirect-uacdsys-trojan/">http://www.myantispyware.com/2009/01/24/how-to-remove-windowsclickcom-redirect-uacdsys-trojan/</a></p>
<p style="text-align: left;">Please leave comment. Let me know if this post help!</p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/54/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Profile Storage Space error, virus, or malware. Repair! Fix!</title>
		<link>http://iamyouritguy.com/archives/21</link>
		<comments>http://iamyouritguy.com/archives/21#comments</comments>
		<pubDate>Fri, 10 Jul 2009 00:47:59 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>
		<category><![CDATA[computer]]></category>
		<category><![CDATA[current version]]></category>
		<category><![CDATA[error]]></category>
		<category><![CDATA[fix]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[policies]]></category>
		<category><![CDATA[profile]]></category>
		<category><![CDATA[registry]]></category>
		<category><![CDATA[repair]]></category>
		<category><![CDATA[space]]></category>
		<category><![CDATA[storage]]></category>
		<category><![CDATA[system]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[windows xp]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/?p=21</guid>
		<description><![CDATA[First make sure you clean  Spyware Protect 2009 virus out of your system using Malwarebytes Anti-Malware 
Follow the following steps:
a. Ctl+Alt+Delete go to task manger, go to process tab,  find &#8220;proquota.exe&#8221; right click and end the process.
b.  Click Start, and then click Run.

In the Open box, type regedit, and then click OK
Back up registry by [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_20" class="wp-caption alignnone" style="width: 310px"><a href="http://iamyouritguy.com/wp-content/uploads/2009/07/profileStorageSpaceFix1.jpg"><img class="size-medium wp-image-20" title="profileStorageSpaceFix" src="http://iamyouritguy.com/wp-content/uploads/2009/07/profileStorageSpaceFix1-300x169.jpg" alt="Profile Storage Space Fix registry location" width="300" height="169" /></a><p class="wp-caption-text">Profile Storage Space Fix registry location</p></div>
<p>First make sure you clean  Spyware Protect 2009 virus out of your system using <a href="http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html">Malwarebytes Anti-Malware </a></p>
<p>Follow the following steps:</p>
<p>a. <strong>Ctl+Alt+Delete</strong> go to task manger, go to <strong>process</strong> tab,  find &#8220;<span style="color: #ff6600;">proquota.exe</span>&#8221; right click and end the process.</p>
<p>b.  Click Start, and then click Run.</p>
<ol type="1">
<li>In the Open box, type regedit, and then click OK</li>
<li>Back up registry by clicking the File menu, click Export.</li>
<li>In the Save in box, select a location where you want to save the Registration Entries (.reg)</li>
<li>Locate by clicking on the left hand side &#8212;&gt;<strong>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System  ( <span style="color: #ff6600;">view image above<span style="color: #000000;">)</span></span></strong></li>
<li><span style="color: #ff6600;"><span style="color: #000000;">once your at the location you will see on the right side </span></span><strong><span style="color: #ff6600;"><span style="color: #000000;">&#8220;EnableProfileQuota&#8221; </span></span><span style="color: #ff6600;">right click</span></strong><strong><span style="color: #ff6600;"><span style="color: #000000;"> EnableProfileQuota </span></span></strong><span style="color: #ff6600;"><span style="color: #000000;">and select</span></span><strong><span style="color: #ff6600;"><span style="color: #000000;"> Delete</span></span></strong></li>
</ol>
<p>c. An easier way to do this is to copy the following script between the ******  to notepad save and rename the extension to .reg and execute the file.</p>
<div>*****************************************************************</div>
<p>REGEDIT4</p>
<div>[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]</div>
<div>EnableProfileQuota&#8221;=-</div>
<div>&#8220;ProfileQuotaMessage&#8221;=-</div>
<div>&#8220;MaxProfileSize&#8221;=-</div>
<div>&#8220;IncludeRegInProQuota&#8221;=-</div>
<div>&#8220;WarnUser&#8221;=-</div>
<div>&#8220;WarnUserTimeout&#8221;=-<!--c2--></div>
<p><!--ec2-->*****************************************************************</p>
<p>I have made the file you can download <a href="http://iamyouritguy.com/wp-content/uploads/2009/07/profileStorageErrorRemoval.rar">profileStorageErrorRemoval</a> <a href="http://iamyouritguy.com/wp-content/uploads/2009/07/profileStorageErrorRemoval.rar">here</a> Extract the file and double click the file, click <strong>yes</strong> and then <strong>ok</strong>.</p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/21/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XP login &#8211; logoff loop —- computer virus repair</title>
		<link>http://iamyouritguy.com/archives/10</link>
		<comments>http://iamyouritguy.com/archives/10#comments</comments>
		<pubDate>Tue, 07 Jul 2009 09:53:43 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/?p=10</guid>
		<description><![CDATA[Method 1:
Enter the Recovery Console if you need help and don&#8217;t know how to get into Recovery Console click here
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press “R” (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Method 1:</strong></p>
<p><strong>Enter the <a href="http://iamyouritguy.com/archives/164">Recovery Console</a> if you need help and don&#8217;t know how to get into <a href="http://iamyouritguy.com/archives/164">Recovery Console</a> click <a href="http://iamyouritguy.com/archives/164">here</a></strong></p>
<p>Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press “R” (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You’ll see the prompt reading <strong>C:\Windows</strong> (Or any other drive-letter where you’ve installed XP)</p>
<p>Type the following command and press Enter.</p>
<p><strong>CD SYSTEM32</strong><br />
(If that does not work, try <strong>CHDIR SYSTEM32</strong>)</p>
<p><strong>option 1:</strong></p>
<p><strong>COPY USERINIT.EXE WSAUPDATER.EXE</strong></p>
<p><strong>option 2:</strong></p>
<p><strong>expand d:\i386\userint.exe c:\windows\system32\</strong></p>
<p><strong>if your in c:\windows\system32 then</strong></p>
<p><strong>expand d:\i386\userinint.exe</strong></p>
<p>Quit Recovery Console by typing <strong>EXIT </strong>and restart Windows.</p>
<p>You’ll be able to login successfully as you’ve created the wsaupdater.exe file (now, a copy of userinit.exe)</p>
<p>Now, change the <strong>USERINIT</strong> value in the registry and change it accordingly.</p>
<p><strong>Fixing a registry entry which causes the xp login &#8211; logoff loop</strong></p>
<p>Click Start, Run and type REGEDIT. Navigate to:</p>
<p><strong>HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon</strong></p>
<p>In the right-pane, change the value of Userinit to “<strong>C:\WINDOWS\system32\userinit.exe,</strong>“</p>
<p>Type the above value exactly as given, including the comma &#8211; exclude the quotes. <strong>Also, change the path to userinit.exe appropriately if Windows is installed in a different drive</strong>.</p>
<p>Close Registry Editor and restart Windows.</p>
<p><strong>Method 2:</strong></p>
<p>Sometime virus scanners such as AVG and Malwarebytes eat up the infected file <a href="http://iamyouritguy.com/wp-content/uploads/2009/07/userinit.rar">userinit.exe</a> which cause this login loop. A way to fix this issue is to take out the infected hard drive. Attach the hard drive to a working Windows system via usb or placing it inside the system. Once the drive is up and running copy  the userinit.exe found in c:\windows\system32 into the drive infected drive d:\windows\system32 (d: being the infected drive letter). Reinstall the hard drive into the orginal system and boot up.</p>
<p>i have attach the <a href="http://iamyouritguy.com/wp-content/uploads/2009/07/userinit.rar">userinit.exe</a> with this blog download <a href="http://iamyouritguy.com/wp-content/uploads/2009/07/userinit.rar">here</a></p>
<p>the file is compress with <a title="winrar" href="http://download.cnet.com/3001-2250_4-10007677.html?spi=927d59c2dd7d23bf1eb2b20169fcd4e8" target="_blank">winrar</a> you can download winrar <a title="winrar" href="http://download.cnet.com/3001-2250_4-10007677.html?spi=927d59c2dd7d23bf1eb2b20169fcd4e8" target="_blank">here</a> to extract</p>
<p>Did this post help? Please comment!</p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/10/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Completetala removal “It block internet connections to some websites.”</title>
		<link>http://iamyouritguy.com/archives/6</link>
		<comments>http://iamyouritguy.com/archives/6#comments</comments>
		<pubDate>Tue, 07 Jul 2009 09:39:11 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus Repair]]></category>
		<category><![CDATA[Windows Tutorials]]></category>

		<guid isPermaLink="false">http://iamyouritguy.com/?p=6</guid>
		<description><![CDATA[Completetala is a virus that may induce computer users to download fake antispyware application from a illegitimate Microsoft Security Center website. Completetala annoys user by pop-up with message “hehehehehheheheh!!!!!”
Aliases:
-
Risk Level: Medium
File Size: Varies
Affected System: Windows
Common Symptoms:
1. It can block internet connections to some websites
How to remove…
1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. [...]]]></description>
			<content:encoded><![CDATA[<p>Completetala is a virus that may induce computer users to download fake <a href="http://www.precisesecurity.com/blogs/2008/11/02/completetala/" target="_top">antispyware</a> application from a illegitimate Microsoft <a href="http://www.precisesecurity.com/blogs/2008/11/02/completetala/" target="_top">Security Center</a> website. Completetala annoys user by pop-up with message “hehehehehheheheh!!!!!”</p>
<p><strong>Aliases:</strong><br />
-</p>
<p><strong>Risk Level:</strong> Medium</p>
<p><strong>File Size:</strong> Varies</p>
<p><strong>Affected System:</strong> Windows</p>
<p><strong>Common Symptoms:</strong><br />
1. It can block internet connections to some websites</p>
<p><strong>How to remove…</strong></p>
<p><strong>1.</strong> Download <a href="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm">Malwarebytes’ Anti-Malware</a> (mbam-setup.exe) and save it on your Desktop.<br />
<strong>2. </strong>After downloading, double-click on mbam-setup.exe to install the application.<br />
<strong>3.</strong> Follow the prompts and install as “default” only<br />
<strong>4. </strong>Before the installation completes, check on the following prompts:<br />
- Update Malwarebytes’ Anti-Malware<br />
- Launch Malwarebytes’ Anti-Malware<br />
<strong>5. </strong>Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.<br />
<strong>6.</strong> Scan your <a href="http://www.precisesecurity.com/blogs/2008/11/02/completetala/" target="_top">computer</a> thoroughly.<br />
<strong>7.</strong> When scanning is finished click on the “Show Results”<br />
<strong>8.</strong> Make sure that all detected threats are marked, click on Remove Selected.<br />
<strong>9.</strong> Restart your computer.</p>
<p>If that does not fix the problem. Try to empty the hosts file the file is under Windows/system32/drivers/etc.</p>
<p>To empty “hosts” file. Do this</p>
<p>a) Close the broswer<br />
b) Open C:\Windows\system32\drivers\etc\hosts file with <a href="http://www.precisesecurity.com/blogs/2008/11/02/completetala/" target="_top">notepad</a>.<br />
c) remove all the text<br />
d) Save the file</p>
<p>Now open the browser and browse internet. It should work fine.</p>
<p style="text-align: left;">Please leave comment. Let me know if this post help!</p>
]]></content:encoded>
			<wfw:commentRss>http://iamyouritguy.com/archives/6/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
