Microsoft Windows Vista Community Forums - Vistaheads
FREE Anti Rootkit Software for Vista Users




Welcome to the Microsoft Windows Vista Community Forums - Vistaheads, YOUR Largest Resource for Windows Vista related information.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so , join our community today!

If you have any problems with the registration process or your account login, please contact us.


Black / Blank screen after login

microsoft.public.windows.vista.general



Click On Your Flag for Translation
Simplified Chinese French Spanish Italian Portugeuse Japanese German Dutch
Reply
  #1 (permalink)  
Old 05-17-2008
Phadima Phadima is offline
 

Join Date: May 2008
Posts: 2
Phadima is on a distinguished road
Black / Blank screen after login
Hi all

Its been 5 days since i have locked out of my pc (vista home).
Problem:
Switch on PC, Choose any user from list, after login, i get a black screen. After searching i found my way to the registry using F8->Repair ..->Command promt->regedit.exe
In there i found that the everytime i change [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\Shell] to explorer.exe, and restart my pc, it changes to cmd.exe /k start cmd.exe .
i dont know what to do now. The following didnt work:
  1. CTRL-ALT-DELETE/CRTL-SHFT-ESC to show task manager
  2. Safe mode
  3. System restore and repair
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 05-17-2008
Dave
 

Posts: n/a
Re: Black / Blank screen after login
Phadima wrote:
> Hi all
>
> Its been 5 days since i have locked out of my pc (vista home).
> *Problem:*
> Switch on PC, Choose any user from list, after login, i get a black
> screen. After searching i found my way to the registry using
> F8->Repair .->Command promt->regedit.exe
> In there i found that the everytime i change
> [*HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Explorer\Shell*]
> to explorer.exe, and restart my pc, it changes to *cmd.exe /k start
> cmd.exe* .
> i dont know what to do now. The following didnt work:
>
> - CTRL-ALT-DELETE/CRTL-SHFT-ESC to show task manager
> - Safe mode
> - System restore and repair


You could try having a look at the registry keys that run programs on start-up.

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Have a look on the right side and delete anything that looks suspicious.
I have only one entry there, for the sidebar gadgets.

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
I have only one entry there, for Windows Defender.

I do not have this key in my registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\Shell
so I don't know what to suggest about that.



Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 05-17-2008
Malke
 

Posts: n/a
Re: Black / Blank screen after login
Phadima wrote:

>
> Hi all
>
> Its been 5 days since i have locked out of my pc (vista home).
> *Problem:*
> Switch on PC, Choose any user from list, after login, i get a black
> screen. After searching i found my way to the registry using F8->Repair
> ..->Command promt->regedit.exe
> In there i found that the everytime i change
>

[*HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Explorer\Shell*]
> to explorer.exe, and restart my pc, it changes to *cmd.exe /k start
> cmd.exe* .
> i dont know what to do now. The following didnt work:
>
> - CTRL-ALT-DELETE/CRTL-SHFT-ESC to show task manager
> - Safe mode
> - System restore and repair


My guess (because I can't see the machine) is that your computer is severely
infected which is why the shell setting changes upon reboot. Since you
haven't told us anything about your computer and its recent history (except
that you've had this problem for 5 days) or your security/antivirus
protection, that's about as specific as I can guess.

You could try booting with a Bart's PE with an antivirus plugin and scanning
from there. Or you could pull the drive and attach it to a working computer
running XP or Vista and use the installed av to scan it from there.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech;
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). If possible, have all your data backed up
before you take the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 05-17-2008
Rick Rogers
 

Posts: n/a
Re: Black / Blank screen after login
Hi,

For starters, that should be the HKLM branch, not the HKCU branch, and your
key is entirely the wrong path. It should be:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Note that this is the "Windows NT" key, not just "Windows", and not the
"Explorer" key but the "Winlogon" key.

Try changing it there. As Malke has pointed out, you most likely have a
serious infection which is best attacked from outside of Windows.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"Phadima" <Phadima.39jlsf@no-mx.forums.vistaheads.com> wrote in message
news:Phadima.39jlsf@no-mx.forums.vistaheads.com...
>
> Hi all
>
> Its been 5 days since i have locked out of my pc (vista home).
> *Problem:*
> Switch on PC, Choose any user from list, after login, i get a black
> screen. After searching i found my way to the registry using F8->Repair
> .->Command promt->regedit.exe
> In there i found that the everytime i change
> [*HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Explorer\Shell*]
> to explorer.exe, and restart my pc, it changes to *cmd.exe /k start
> cmd.exe* .
> i dont know what to do now. The following didnt work:
>
> - CTRL-ALT-DELETE/CRTL-SHFT-ESC to show task manager
> - Safe mode
> - System restore and repair
>
>
> --
> Phadima
> Posted via http://www.vistaheads.com
>


Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 05-19-2008
Phadima Phadima is offline
 

Join Date: May 2008
Posts: 2
Phadima is on a distinguished road
I have tried
Thank you for your replies.
I was mistaken it is in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
My laptop is a Toshiba P100, got it a year ago,running the latest symantec endpoint protection, two days before it went blank i installed divx and the latest windows update. Before then i was using skype,xlite with x-ten, fireworks,dreamweaver,visual studio 2005, sql server 2005, mysql 5.1, office 2007 and all toshiba programs that came with the pc.
I have also changed it to explorer.exe but it keeps going back to cmd.exe /k start cmd.exe*
the only thing left to try is scanning from another machine and formating i guess.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 05-19-2008
Dave
 

Posts: n/a
Re: Black / Blank screen after login
Phadima wrote:
> Thank you for your replies.
> I was mistaken it is in the
> *HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\Winlogon
> *My laptop is a Toshiba P100, got it a year ago,running the latest
> symantec endpoint protection, two days before it went blank i
> installed divx and the latest windows update. Before then i was using
> skype,xlite with x-ten, fireworks,dreamweaver,visual studio 2005, sql
> server 2005, mysql 5.1, office 2007 and all toshiba programs that
> came with the pc. I have also changed it to explorer.exe but it keeps
> going back to cmd.exe /k start cmd.exe*
> the only thing left to try is scanning from another machine and
> formating i guess.



I Googled "cmd.exe /k start cmd.exe" and came across this rootkit forum's page:

http://www.rootkit.cz/forum/viewtopi...639a1e2fb8f250

If you look at the HijackThis posting you will see the "cmd.exe /k start cmd.exe" entry in the F2 section.

The HijackThis help file says this about F section entries:

F - IniFiles, autoloading entries
F0 - Changed inifile value
F1 - Created inifile value
F2 - Changed inifile value, mapped to Registry
F3 - Created inifile value, mapped to Registry

So it may be worth looking at your system.ini and win.ini files via the command prompt.
They are at c:windows\system.ini and c;\windows\win.ini

Navigate to c:\windows and type in edit system.ini
You can REM anything out with a semi-colon ( like the first line is).

It's a long shot, but if you have tried everything else...



Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Article ID: 935265 The desktop background appears as a blank, black screen when the Bubbles screen saver runs in Windows Vista KBArticles English 0 10-22-2007 20:00
Blank Screen After Login OzzyJack microsoft.public.windows.vista.general 2 09-20-2007 06:39
ATi: blank screen after boot before login =?Utf-8?B?Y2VuaXQ=?= microsoft.public.windows.vista hardware devices 11 03-21-2007 23:23
Vista Ultimate: blank screen after login and no Aero =?Utf-8?B?R2VuZQ==?= microsoft.public.windows.vista.installation setup 1 03-19-2007 04:46
Screen goes blank after login =?Utf-8?B?Q0s=?= microsoft.public.windows.vista hardware devices 4 03-18-2007 06:09


All times are GMT +1. The time now is 12:44.




Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.0.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119