Using CrossLoop in Safe Mode on Windows XP

Last week I had a client call in with an Antivirus XP 2008 infection. I connected remotely to the client's computer using Crossloop and began the removal process. Deleting related dll's, executables, registry entries, etc. After rebooting to complete the removal process and logging in, the user reported that there were no icons and the entire desktop was blank. Same thing after a second reboot. At this point I'm having remote session withdrawals and thinking I'll have to drop by for an onsite visit. As a last resort, I had the client reboot a 3rd time into safe mode with networking and to my surprise CrossLoop came right up and I was able to re-establish a remote session. I found and deleted some additional registry entries where Antivirus XP 2008 had modified theme, screensaver and wallpaper info. Rebooted and the computer appeared to be back to normal.

Related Entries

Leave a comment

Recent Entries

Close