Virus/Malware – Strange Windows logon screen

Question:

I’ve connected remotely to a friends computer and it had a strange logon screen. When I rebooted it in safe mode it came to the screen to log on to either Administrator or Owner.  When I clicked on Administrator it then came to the screen below in the screenshot.
Has anyone experienced this before or how to fix it?

Solution:

If “Safe Mode w/ Command Prompt” works and the regular Safe Mode doesnt, enter the following commands……

reg query “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon” /v ginadll
reg query “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon” /v uihost

Post the reusults please…..

Or, try getting to this machines registry from across the network if you can….

digg delicious stumbleupon technorati Google live facebook Sphinn Mixx newsvine reddit yahoomyweb
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...