windows sbs 2000 Logon - logoff loop

hello.
I have a HP ML 350 G2 running Windows sbs 2000. The main problem is that I
cant get to the desktop anymore when I start the server. The server boots and
gets to the screen where I type in my username and password to get to
desktop. It accepts user and password, starting loading the desktop, gets as
far as loading my background wall paper, and then the "saving user settings"
dialog comes up and I am taken back to the initial user/password screen again
automatically. The computer does this same thing in safe mode.
i have discovered that was infected with trj/agent.hfm. i think it was
removed by a scan over the network, done with an antivirus from a windows xp,
but the problem persists.

thanks for something

Duncan
Sun Mar 09 07:34:57 CDT 2008

In article <5D98CF53-185A-49A8-8DC1-B79A32D34F2A@microsoft.com>,
JoseAlves@discussions.microsoft.com says...
> hello.
> I have a HP ML 350 G2 running Windows sbs 2000. The main problem is that I
> cant get to the desktop anymore when I start the server. The server boots and
> gets to the screen where I type in my username and password to get to
> desktop. It accepts user and password, starting loading the desktop, gets as
> far as loading my background wall paper, and then the "saving user settings"
> dialog comes up and I am taken back to the initial user/password screen again
> automatically. The computer does this same thing in safe mode.
> i have discovered that was infected with trj/agent.hfm. i think it was
> removed by a scan over the network, done with an antivirus from a windows xp,
> but the problem persists.
>
> thanks for something

Have you tried remoting on w' RDP? Have you tried creating a new (admin
privilege of course) user?

--
Duncan

JoseAlves
Mon Mar 10 05:07:03 CDT 2008

yes, from other pc, with "mmc" i´ve acessed to active directory and created a
new user as administrator, but nothing...

"Duncan McC" wrote:

> In article <5D98CF53-185A-49A8-8DC1-B79A32D34F2A@microsoft.com>,
> JoseAlves@discussions.microsoft.com says...
> > hello.
> > I have a HP ML 350 G2 running Windows sbs 2000. The main problem is that I
> > cant get to the desktop anymore when I start the server. The server boots and
> > gets to the screen where I type in my username and password to get to
> > desktop. It accepts user and password, starting loading the desktop, gets as
> > far as loading my background wall paper, and then the "saving user settings"
> > dialog comes up and I am taken back to the initial user/password screen again
> > automatically. The computer does this same thing in safe mode.
> > i have discovered that was infected with trj/agent.hfm. i think it was
> > removed by a scan over the network, done with an antivirus from a windows xp,
> > but the problem persists.
> >
> > thanks for something
>
> Have you tried remoting on w' RDP? Have you tried creating a new (admin
> privilege of course) user?
>
> --
> Duncan
>

JoseAlves
Mon Mar 10 16:45:00 CDT 2008

Finally solved.

some malware has changed the registry key
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
userint" to other value. i fix it and now i can logon in the server without
problems

thanks

"Jose Alves" wrote:

> yes, from other pc, with "mmc" i´ve acessed to active directory and created a
> new user as administrator, but nothing...
>
> "Duncan McC" wrote:
>
> > In article <5D98CF53-185A-49A8-8DC1-B79A32D34F2A@microsoft.com>,
> > JoseAlves@discussions.microsoft.com says...
> > > hello.
> > > I have a HP ML 350 G2 running Windows sbs 2000. The main problem is that I
> > > cant get to the desktop anymore when I start the server. The server boots and
> > > gets to the screen where I type in my username and password to get to
> > > desktop. It accepts user and password, starting loading the desktop, gets as
> > > far as loading my background wall paper, and then the "saving user settings"
> > > dialog comes up and I am taken back to the initial user/password screen again
> > > automatically. The computer does this same thing in safe mode.
> > > i have discovered that was infected with trj/agent.hfm. i think it was
> > > removed by a scan over the network, done with an antivirus from a windows xp,
> > > but the problem persists.
> > >
> > > thanks for something
> >
> > Have you tried remoting on w' RDP? Have you tried creating a new (admin
> > privilege of course) user?
> >
> > --
> > Duncan
> >

Duncan
Mon Mar 10 18:44:11 CDT 2008

In article <B6DE0CEC-5C13-4A4C-9A70-B36F1353D5D7@microsoft.com>,
JoseAlves@discussions.microsoft.com says...
> Finally solved.
>
> some malware has changed the registry key
> "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
> userint" to other value. i fix it and now i can logon in the server without
> problems
>
> thanks

Cool.

Malware on the Server? - who's been browsing what on the SERVER!???

Gotta put a stop to that practice.! :)

Change passwords.

--
Duncan