Win xp successfully canceled the case when it was turned on.

On the morning of November 13, the customer sent a commercial machine with important financial software and tax software installed on the system disk. All the data was not backed up. Requires repairs while retaining software and data. It is really difficult for me.

Symptom: XP will automatically log off a boot, simply can not enter the system, safe mode, last known good configuration also can not enter, have no access to change the user name.


Because the C drive has important software, can not FORMAT system disk, so the repair installation XP system, but the fault remains. Starting DOS antivirus did not solve the problem.


Start the machine with the CD-ROM system and find the system disk: \\windows\\system32 has IMG.EXE, IGW.EXE, LYLOADMR.EXE and other virus downloaders. But the userinit.exe file is missing. From this it can be concluded that the virus has destroyed the normal userinit.exe.


Solution:
Copy the system disk under normal machine: \\windows\\system32\\userinit.exe to the corresponding directory of the disease machine; Restart the machine, although it is very slow, but can enter The system is gone. First turn off system restore, upgrade anti-virus software, and full anti-virus. (This machine kills nearly a hundred Trojan viruses, a huge Trojan group), and then manually deletes the virions that have not been killed by individual killing tips, such as: LOADER.EXE. Open the Registry Editor and remove the startup items loaded by the virus. Use the WINDOWS cleanup tool to clean up junk files. At this point, the system starts up normally. Check if the files under \\windows\\system32 are missing. If so, copy it from the normal machine. At this point, the machine is all right. The original software and drivers are back to normal.