logonui.exe error when booting XP

timberflake

A friend has called me saying he's getting a lononui.exe error message when he tries to boot up his windows XP machine. He said he can't actually get into Windows even if he tries doing it in safe mode.

From what I can see on the internet, it looks as though it could be a virus/spyware/tojan.

The only way I can think of removing it without reinstalling the OS is to slave it onto another computer and scan it for viruses etc. However, I've only got a laptop and am not sure if he's got a ATA or SATA hard drive. I know you can get SATA to USB cables, would this work with an ATA HDD too???

Really need some help on this guys, can anyone recommend where I could get the right cable from so I can go round with my laptop and take a look?

gaming_guy

get hold of a writable cd, download this and run it (on your machine), take the CD round to your friends and set the machine to boot from the cd and run the scan.

aliEnRIK

Has he tried the basic 'task manager' and try to KILL the process?

Benet

aliEnRIK wrote: »

Has he tried the basic 'task manager' and try to KILL the process?

From the OP, it sounds like Windows isn't even booting...

timberflake

gaming_guy wrote: »

get hold of a writable cd, download this and run it (on your machine), take the CD round to your friends and set the machine to boot from the cd and run the scan.

When you say run it, don't you burn it on my machine and take it to my friends? Is there any specific way to burn it so it boots on start-up? I know I have to set the primary boot device to the cd rom but is there anything else i need to know?

aliEnRIK

Benet wrote: »

From the OP, it sounds like Windows isn't even booting...

It could be that its just not showing the desktop. Which means its 'possible' that task manager could be pulled up, 'exporer.exe' manually started and the nasty process killed

timberflake

aliEnRIK wrote: »

It could be that its just not showing the desktop. Which means its 'possible' that task manager could be pulled up, 'exporer.exe' manually started and the nasty process killed

How do I do that though RIK if he can't type anything?

aliEnRIK

Press CTRL and ALT and DEL keys together

Itll either work or it wont

Browntoa

download this to CD

http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html

you boot from that and it will scan

timberflake

aliEnRIK wrote: »

Press CTRL and ALT and DEL keys together

Itll either work or it wont

Nah, told him to try that - no good.

Benet

aliEnRIK wrote: »

It could be that its just not showing the desktop. Which means its 'possible' that task manager could be pulled up, 'exporer.exe' manually started and the nasty process killed

Mmm fair point