From: David H. Lipman on
From: "Maurice N ~ MVP" <maurice(a)mvps.org>

| Sheila,
| As Jen said, see the reply at CastleCops forum
| http://www.castlecops.com/modules.php?name=Forums&file=viewtopic&t=226180&sid=
| 8e3797dea6f6cfdbb5ed639991226576

Miekiemoes registry policy deletion entries won't help.

Sheila indicated she created a new account and then logged in with said new account and
had the same reboot problem. Therefore the problem is in HKLM not in HKCU where
Miekiemoes registry policy deletion entries are focused on.

If anything, there is a problem with the Winlogon process which may indicate examination
of...
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: Maurice N ~ MVP on
Points well taken. Thank you, David.

--
Maurice Naggar
MS-MVP
-----

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:OCzOJ39CJHA.3352(a)TK2MSFTNGP05.phx.gbl...
> From: "Maurice N ~ MVP" <maurice(a)mvps.org>
>
> | Sheila,
> | As Jen said, see the reply at CastleCops forum
> | http://www.castlecops.com/modules.php?name=Forums&file=viewtopic&t=226180&sid=
> | 8e3797dea6f6cfdbb5ed639991226576
>
> Miekiemoes registry policy deletion entries won't help.
>
> Sheila indicated she created a new account and then logged in with said new account and
> had the same reboot problem. Therefore the problem is in HKLM not in HKCU where
> Miekiemoes registry policy deletion entries are focused on.
>
> If anything, there is a problem with the Winlogon process which may indicate examination
> of...
> HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp