Trojan Detected-New Malware.ai

System is now not letting me login to Windows XP. I have three separate accounts and none of them allow me to login after system boot.

Did this happen soon after my last post to you? I assume you you tried re-booting
I'm at work at the moment but I come off soon and will look into it for you.
Anything you think may help regarding when this occured.

After I posted my last information I shut down. System was working prior to shut down. Not sure what happened. I tried booting into safe mode and system gets to where is should come up with safe mode in the corners but no XP desktop appears. It seems like it is hung somewhere. I can pull up the windows task manager to shut down.

I'm in the process of talking with colleagues of your situation, I hope to get some feed back soon.
I believe I know what is causing this problem but just need to make sure.
Thanks dan

Hi, sorry for delay.

Very Important: Shortly I will be asking for a repair operation on your computers operating system and you will not be able to access these instructions during the aforementioned. I highly advise you print off the following, write them down exactly or view them from another computer. This is essential as each step of the below is critical and needs to be adhered to!

We will need the Windows XP CD-ROM for this. This will not affect your currently installed software and or documents and files.

Next:

• Place your Windows XP CD into your CD-ROM and Reboot your computer
  
• XP's setup program will automatically start and files will be loaded to memory
  
• When you reach the Welcome to Setup screen choose the Repair option by pressing R
  
• This will start the Recovery console and the list of Windows installations will appear
  
• As you only have one installation on your computer you need to press the number which is relevant to your installations location. This, obviously will typically be 1
  
• Type in your Administrator password. If you are using Windows XP Home edition the administrator password is blank by default so simply press Enter
  
• Now type in the following exactly D: and hit the enter/return key.
  
• Next type in the following exactly CD I386 and hit the enter/return key.
  
• Now type in the following exactly EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32 and hit the enter/return key.
  
• After typing in the last command you should see the following on screen:
  
  

  1 file(s) copied

  
  
  
• Remove your XP CD from the CD-ROM and then type Exit and hit the enter/return key.
  
• Reboot your machine as normal.
  

let me know how it goes.

Here is the only challenge. My PC did not come with an XP CD. It has a partition with all the factory software loaded. It is an HP machine with a recovery console rather than a cd. Not sure how to work around this?

Ok, leave it with me and will get back to you.
We will get there

I think I can create recovery cds using the DOS prompt. Not sure if this will create the file needed.
http://h10025.www1.hp.com/ewfrf/wc/document?lc=en&dlc=en&cc=us&docname=bph08097

Just hang fire for now
To keep you up to date, one of the tools used has taken out the userinit file which gives you the ability to logon.
I have mailed the developer to make him aware of this.
As I mentioned I'm waiting to here back from colleagues and the developer I've mailed with regards to this situation.
Hang in there

Are you able to borrow a friends xp cd the same as your system so we can get the file we need, failing that, I'm looking down the lines of a linux live cd to boot the system to recover the file.

I am working on that. I will let you know.

Will wait to hear from you

Got a CD to use. Having trouble getting through the administrator password even though it is a XP Home Edition.

UGH!!!!

Password is not letting me through. I am still trying. I have never set a password that I am aware of. Trying the usual suspects. I am confused because I do not have to login with a password normally.

I have three installs located at
1. H:\I386
2. H:\MinNt
3. c:\Windows

I have been trying to access the 3rd install. I cannot get past the administrator password.