Go Back   Tech Support Forum > Microsoft Support > Windows XP Support

User Tag List

blue flash before logon screen

This is a discussion on blue flash before logon screen within the Windows XP Support forums, part of the Tech Support Forum category. well, i've just formatted and i'm facing the same problem: just before the logon screen, a blue screen appears, (not


Closed Thread
 
Thread Tools Search this Thread
Old 05-23-2009, 03:00 PM   #1
Guest
 
Join Date: May 2009
Posts: 8
OS:


Exclamation

well, i've just formatted and i'm facing the same problem:
just before the logon screen, a blue screen appears, (not the blue screen of death:P) just a 2-second flash. i googled it and it seems that many PCs have that, and nobody knows how to fix it....! so, anybody here?
Kaede is offline  
Sponsored Links
Advertisement
 
Old 05-23-2009, 04:02 PM   #2
TSF Enthusiast
 
Join Date: Nov 2007
Location: Planet Earth
Posts: 2,973
OS: XP, Win7



Can you describe what you see a little bit more? A blue screen that is not a BSOD isn't very specific.
lorjack is offline  
Old 05-23-2009, 04:34 PM   #3
Guest
 
Join Date: May 2009
Posts: 8
OS:



it's like a light blue background, between boot and logon screen.. and it lasts for about 2 secs..
Kaede is offline  
Sponsored Links
Advertisement
 
Old 05-23-2009, 06:42 PM   #4
TSF Enthusiast
 
Join Date: Nov 2007
Location: Planet Earth
Posts: 2,973
OS: XP, Win7



Exactly when does it happen? Before the XP logo comes up and the little bar is moving or right after it? What happens to the screen after the blue background disappears? Is there any kind of writing on it or is it literally just a blue background? And dare i ask, what color of blue would you say it is?
lorjack is offline  
Old 05-23-2009, 08:51 PM   #5
dai
TSF Team, Emeritus
 
Join Date: Jul 2004
Location: west australia
Posts: 78,002
OS: win 7 32x 64x rtm



see if it freezes on an error message

turn off the auto reboot
control panel /system/advanced/startup and recovery settings
then untick the auto reboot box
post any bsod error messages the computer freezes on in full



dai is offline  
Old 05-23-2009, 10:38 PM   #6
Microsoft MVP
 
Join Date: Mar 2009
Location: Portland, OR
Posts: 3,339
OS: MS-Dos 6.22 - Win7



That's just part of the process Windows uses to prepare the Welcome screen. It's coded in the logonui.exe file. It loads a solid color desktop before loading the Welcome Screen wallpaper, and MS chose that blue color as the default.

This post at neowin.net shows you what you need to change. Changing the opcode from 74 to a 75 changes the command from JE to JNZ which I'm assuming will bypass the code that sets the color. If you want to change the color of the flash, you'll need to do a bit more disassembly to find where the actual color is set in the code that is bypassed.

HTH

Jerry
TheOutcaste is offline  
Old 05-24-2009, 04:17 AM   #7
Guest
 
Join Date: May 2009
Posts: 8
OS:



i think it's the problem TheOutcaste said. i've read about similar things searching the google. however i have no idea what a "disassembler" and a "hexeditor" are...i'll try to learn :P
Kaede is offline  
Old 05-24-2009, 08:03 AM   #8
Guest
 
Join Date: May 2009
Posts: 8
OS:



Quote:
Originally Posted by TheOutcaste View Post
This post at neowin.net shows you what you need to change.
well, i did everything he says and the problem remains:/
and i'm pretty sure it's the same thing we're talking about. pff
Kaede is offline  
Old 05-24-2009, 03:06 PM   #9
Microsoft MVP
 
Join Date: Mar 2009
Location: Portland, OR
Posts: 3,339
OS: MS-Dos 6.22 - Win7



I'll bet Windows File Protection (WFP) replaced the edited file with a backup copy. They forgot to mention that in the article, and I didn't think of it (or test it first, sorry about that).
If you check the logonui.exe file, you'll see the change is no longer there. You'll also see an entry in the Event Viewer System log with source Windows File Protection.

As of SP2, you can't disable WFP, but the following worked for me:
Copy the original Windows\System32\logonui.exe and rename it logonui-original.exe
Copy Windows\System32\logonui.exe to the Desktop
Edit the logonui.exe file on the desktop and change the 74 to a 75
(In the version 6.0.2900.2180 file that byte is at offset 7BE9)
Make a copy of the modified file named logonui-modified.exe
Copy the modified file to Windows\System32\dllcache
You should be propmpted about replacing the file.
Reboot
Open Windows\System32 and set your view to Details
Note the Modified date on the logonui.exe file
Copy the modified version to Windows\System32
Refresh the window (Press F5) and check the Modified date again
If it's reverted back to the original, copy the file again (Don't know why, but I had to do it twice before it took)
Reboot, and the "flash" should be gone.

If Windows still keeps replacing the file with the original version, you can Reboot to the Recovery Console, or use a Live CD to replace the file.

HTH

Jerry
TheOutcaste is offline  
Old 05-25-2009, 11:52 AM   #10
Guest
 
Join Date: May 2009
Posts: 8
OS:



well, when i replaced the 74 with the 75 and saved the file, WFP displayed a message asking me if i was sure about it and i said yes:P and when i checked the file afterwards, the 75 was still there... so that was not the problem
i wonder if the fact that i'm using a theme on my windows, that has probably modified some elements of the logonui.exe, is somehow interfering with it.. but the 75 is surely still there!
Kaede is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 12:47 AM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts