Xp auto log off
Solved/Closed
wooty
somedude - Oct 26, 2012 at 02:44 PM
- Posts
- 4
- Registration date
- Monday September 1, 2008
- Status
- Member
- Last seen
- September 9, 2008
somedude - Oct 26, 2012 at 02:44 PM
Related:
- Windows xp logging off
- Windows xp logoff - Best answers
- Windows xp log off - Best answers
- Log on to windows xp without password - Guide
- Log into windows xp professional without password ✓ - Forum - Windows XP
- Windows xp simulator - Download
- Windows xp professional administrator password hack ✓ - Forum - Windows XP
- Windows xp sp3 download - Download
88 replies
Edit these values and type the correct path of shell :
Shell = explorer.exe
Userinit=X:\windows\system32\userinit.exe
NOTE: These files may also be deleted by spywares. You may need to extract them using Windows CD.
Steps for rectifying this problem:
Log on to a networked computer.
Run Regedit.exe
Point your cursor to HKEY_LOCAL_MACHINE
Select File > Connect Remote Registry
Type computer name (infected computer)
Navigate to the following location in registry of destination or infected computer
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Edit these two values in right pane:
Shell
Userinit
Change these two values to
Shell=explorer.exe
Userinit = x:\windows\system32\userinit.exe
Exit from Registry
Restart Infected computer.
You should be able to log on to computer.
if it not work then go to back steps and just copy orwrite the file userinit.exe
workded successfully tested 100 percent gauranted
WAQAR GILGITI
Shell = explorer.exe
Userinit=X:\windows\system32\userinit.exe
NOTE: These files may also be deleted by spywares. You may need to extract them using Windows CD.
Steps for rectifying this problem:
Log on to a networked computer.
Run Regedit.exe
Point your cursor to HKEY_LOCAL_MACHINE
Select File > Connect Remote Registry
Type computer name (infected computer)
Navigate to the following location in registry of destination or infected computer
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Edit these two values in right pane:
Shell
Userinit
Change these two values to
Shell=explorer.exe
Userinit = x:\windows\system32\userinit.exe
Exit from Registry
Restart Infected computer.
You should be able to log on to computer.
if it not work then go to back steps and just copy orwrite the file userinit.exe
workded successfully tested 100 percent gauranted
WAQAR GILGITI
brakers
Sep 3, 2008 at 10:13 AM
- Posts
- 117
- Registration date
- Sunday August 17, 2008
- Status
- Member
- Last seen
- November 29, 2009
Sep 3, 2008 at 10:13 AM
Hi There
You can try one of two things to start with.
Try booting into safe mode
On starting your pc hold down the F8 key you should be taken to a menu to boot in safe mode.
When you get to the logon screen select the Administrator account.
If you cant do that take you Hard drive out and put it in your mates pc or another pc if you have one and transfer the files that way.
These will only work If your hard drive is not faulty.
Let me know how you get on
Regards Tony B.
You can try one of two things to start with.
Try booting into safe mode
On starting your pc hold down the F8 key you should be taken to a menu to boot in safe mode.
When you get to the logon screen select the Administrator account.
If you cant do that take you Hard drive out and put it in your mates pc or another pc if you have one and transfer the files that way.
These will only work If your hard drive is not faulty.
Let me know how you get on
Regards Tony B.
wooty
Sep 9, 2008 at 07:26 PM
- Posts
- 4
- Registration date
- Monday September 1, 2008
- Status
- Member
- Last seen
- September 9, 2008
Sep 9, 2008 at 07:26 PM
hello,
booting into safe mode worked a treat, crisis well and truly averted
thank you very much
booting into safe mode worked a treat, crisis well and truly averted
thank you very much
srikant
>
wooty
Dec 24, 2009 at 05:37 AM
- Posts
- 4
- Registration date
- Monday September 1, 2008
- Status
- Member
- Last seen
- September 9, 2008
Dec 24, 2009 at 05:37 AM
Hi,
Bassically I have a server 2003
but 15 users assign on server
but all users are automatically
logoff after several minutes
how to solve this problame
Bassically I have a server 2003
but 15 users assign on server
but all users are automatically
logoff after several minutes
how to solve this problame
tuhtuhtay
>
wooty
Feb 19, 2010 at 10:28 AM
- Posts
- 4
- Registration date
- Monday September 1, 2008
- Status
- Member
- Last seen
- September 9, 2008
Feb 19, 2010 at 10:28 AM
when I click safe mode, I get the blue screen of death
Hi there I noticed you helped a guy with his log in problems. Well unfortunatey I have a similar issue. I had a Trojan Horse virus on my PC so I managed to download AVG 8.0 antivirus. I ran the software which detected and removed the virus however when I log in now the system automatically log me back out. To make matters worst I cant remember the administrators password.
Help ! Please!
Help ! Please!
This is due to some virus.when you reach the welcome screen of XP press "Alt+Ctrl+Delete" or "Ctrl+Shift+Esc".
The popup logon window open and prompt you for Username and Password.
In that type "administrator" in the name field and leave blank password field press "OK".
Now you logon into the administrator account which is defaultly present in the XP.
The popup logon window open and prompt you for Username and Password.
In that type "administrator" in the name field and leave blank password field press "OK".
Now you logon into the administrator account which is defaultly present in the XP.
this one worked for me:
1. login to XP recovery console (after booting off XP CD)
2. from the c:\windows> prompt, type:
expand d:\i386\userinit.ex_ system32
Change d: to the drive letter of your CD-ROM.
Note that you must be in the c:\windows directory to type this command (this is the default directory in the Recovery Console)
The second parameter on the expand commandline tells it to write the expanded file into the system32 directory. (type expand /? for more info on the expand utility)
Cheers chaps! ;)
1. login to XP recovery console (after booting off XP CD)
2. from the c:\windows> prompt, type:
expand d:\i386\userinit.ex_ system32
Change d: to the drive letter of your CD-ROM.
Note that you must be in the c:\windows directory to type this command (this is the default directory in the Recovery Console)
The second parameter on the expand commandline tells it to write the expanded file into the system32 directory. (type expand /? for more info on the expand utility)
Cheers chaps! ;)
Hey ALL
I found the Solution of the problem.
When I lost my Userinit.exe file it may cause automatic logoff when we try to log on with any user.
Don`t try enything else.
Just bring a windows xp Bootable Cd Then Boot form that Disk
And Follow these Steps.
Start Recovery Console ( Press R in the First Screen)\
Choose your windows 1/2/3 or Other
provide password
Command Prompt will appears
type
copy g:\I386\USERINIT.EX_ C:\WINDOWS\system32\USERINIT.EXE
(G is the CD Rom Drive Replace it with your CD Rome Drive alphabet)
if 1 files coppied massege appears
You have done all well
type exit : The system will rebooted
You have done well Enjoy
I found the Solution of the problem.
When I lost my Userinit.exe file it may cause automatic logoff when we try to log on with any user.
Don`t try enything else.
Just bring a windows xp Bootable Cd Then Boot form that Disk
And Follow these Steps.
Start Recovery Console ( Press R in the First Screen)\
Choose your windows 1/2/3 or Other
provide password
Command Prompt will appears
type
copy g:\I386\USERINIT.EX_ C:\WINDOWS\system32\USERINIT.EXE
(G is the CD Rom Drive Replace it with your CD Rome Drive alphabet)
if 1 files coppied massege appears
You have done all well
type exit : The system will rebooted
You have done well Enjoy
Didn't find the answer you are looking for?
Ask a question
THIS SOLUTION WORKS 100%
Let me explain what happen with ur computer (why u cant login into ur windows account).
1) u got a virus
2) it copied itslef, or it made a copy simmilar name to itself into ur WINDOWS/system32
3) it cahnged the registry key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon, and instead "Userinit.exe", it wrote its name
So, heres an example:
1) u got a virus, for an example, "winupdate86.exe"
2) it made a copy inside system32 as "winlogon86.exe"
3) changed registry key, and in entry putted "winlogon86.exe"
So, ur computer actualy loged on via virus, all time until ur antivirus deleted it (after that u couldnt be able to login). After ur antivurs detected and removed the virus( both "winupdate86.exe" and "winlogon86.exe") ur windows continues to look for "winlogon86.exe", couse it is on current place in registry,and its all it knowsto look for, when it try to login.
So, to solve the problem u need to (SOLUTION!!!)
1) only way to recover ur login is to find a copy of "userinit.exe" file (from XP DVD, from another computer...)
2) rename it to be as name of virus u had (u maybe dont know it, couse ur antivirus deleted it, but if u know u llbe able to fix ur login). So, sopy of "userinit.exe" rename to "winlogon86.exe"
3) put new renamed copy into ur system32 (Ofc, u dont have windows on ur computer, couse u cant login, but ucan plug off hard disk and plugin it to another computer. Other solution is if u can make bottable USB or Floppy disk DOS, and use simple copy function. 3th solution is if u have another operative system on ur computer, and manage coping there)
4) login ur windows normaly (now after u tricked ur regystry key, it still looks for same entry when it login, which was name of virus. But trick is u made a copy of real userinit.exe, and renamed to trick registry)
5) find via regedit HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ , and instead name of virus, put "userinit.exe"
Thats all, ofc if u still have virus would be great if u write its name before ur Antivirus delete.. If u still know it, just do steps. If u dont know actual name of virus u can do steps, but not gonna help u. Couse u need to know whats written in entry HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ . I found alctual name of my antivirus in way I go to search files inside my WINDOWS folder. And after it finished, I sorted all files with Modified Date, and Created Date... I found all files of virus in my system32... Deleted them and I had this problem... but after I saw all u people worte here I knew how to fix. Ofc I was lucky cuz I before deleting them, made a carantine. So I knew names. And with another comuter fixed.
Hope I gonna help
Let me explain what happen with ur computer (why u cant login into ur windows account).
1) u got a virus
2) it copied itslef, or it made a copy simmilar name to itself into ur WINDOWS/system32
3) it cahnged the registry key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon, and instead "Userinit.exe", it wrote its name
So, heres an example:
1) u got a virus, for an example, "winupdate86.exe"
2) it made a copy inside system32 as "winlogon86.exe"
3) changed registry key, and in entry putted "winlogon86.exe"
So, ur computer actualy loged on via virus, all time until ur antivirus deleted it (after that u couldnt be able to login). After ur antivurs detected and removed the virus( both "winupdate86.exe" and "winlogon86.exe") ur windows continues to look for "winlogon86.exe", couse it is on current place in registry,and its all it knowsto look for, when it try to login.
So, to solve the problem u need to (SOLUTION!!!)
1) only way to recover ur login is to find a copy of "userinit.exe" file (from XP DVD, from another computer...)
2) rename it to be as name of virus u had (u maybe dont know it, couse ur antivirus deleted it, but if u know u llbe able to fix ur login). So, sopy of "userinit.exe" rename to "winlogon86.exe"
3) put new renamed copy into ur system32 (Ofc, u dont have windows on ur computer, couse u cant login, but ucan plug off hard disk and plugin it to another computer. Other solution is if u can make bottable USB or Floppy disk DOS, and use simple copy function. 3th solution is if u have another operative system on ur computer, and manage coping there)
4) login ur windows normaly (now after u tricked ur regystry key, it still looks for same entry when it login, which was name of virus. But trick is u made a copy of real userinit.exe, and renamed to trick registry)
5) find via regedit HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ , and instead name of virus, put "userinit.exe"
Thats all, ofc if u still have virus would be great if u write its name before ur Antivirus delete.. If u still know it, just do steps. If u dont know actual name of virus u can do steps, but not gonna help u. Couse u need to know whats written in entry HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ . I found alctual name of my antivirus in way I go to search files inside my WINDOWS folder. And after it finished, I sorted all files with Modified Date, and Created Date... I found all files of virus in my system32... Deleted them and I had this problem... but after I saw all u people worte here I knew how to fix. Ofc I was lucky cuz I before deleting them, made a carantine. So I knew names. And with another comuter fixed.
Hope I gonna help
@BokiSergy ....Your post is SPOT ON. Thank you!!!!
Yes, I did delete a bunch of viruses right before this happened to me. Only problem now is my virus was the deadly, ignorantly evil Win32 Virut. Soooo I'm going to cry now.
Reformatting is never an option, it's failure!
Fight Virut and put your results on YouTube.com so everyone can learn!!!!!!!!!!!!!!!
Yes, I did delete a bunch of viruses right before this happened to me. Only problem now is my virus was the deadly, ignorantly evil Win32 Virut. Soooo I'm going to cry now.
Reformatting is never an option, it's failure!
Fight Virut and put your results on YouTube.com so everyone can learn!!!!!!!!!!!!!!!
Manual steps to recover a corrupted registry that prevents Windows XP from starting
The procedure that this article describes uses Recovery Console and System Restore. This article also lists all the required steps in specific order to make sure that the process is fully completed. When you finish this procedure, the system returns to a state very close to the state before the problem occurred. If you have ever run NTBackup and completed a system state backup, you do not have to follow the procedures in parts two and three. You can go to part four.
Part one
In part one, you start the Recovery Console, create a temporary folder, back up the existing registry files to a new location, delete the registry files at their existing location, and then copy the registry files from the repair folder to the System32\Config folder. When you have finished this procedure, a registry is created that you can use to start Windows XP. This registry was created and saved during the initial setup of Windows XP. Therefore any changes and settings that occurred after the Setup program was finished are lost.
To complete part one, follow these steps:
1. Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.
Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted to do so.
2. When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
3. If you have a dual-boot or multiple-boot computer, select the installation that you want to access from the Recovery Console.
4. When you are prompted to do so, type the Administrator password. If the administrator password is blank, just press ENTER.
5. At the Recovery Console command prompt, type the following lines, pressing ENTER after you type each line:
md tmp
copy c:\windows\system32\config\system c:\windows\tmp\system.bak
copy c:\windows\system32\config\software c:\windows\tmp\software.bak
copy c:\windows\system32\config\sam c:\windows\tmp\sam.bak
copy c:\windows\system32\config\security c:\windows\tmp\security.bak
copy c:\windows\system32\config\default c:\windows\tmp\default.bak
delete c:\windows\system32\config\system
delete c:\windows\system32\config\software
delete c:\windows\system32\config\sam
delete c:\windows\system32\config\security
delete c:\windows\system32\config\default
copy c:\windows\repair\system c:\windows\system32\config\system
copy c:\windows\repair\software c:\windows\system32\config\software
copy c:\windows\repair\sam c:\windows\system32\config\sam
copy c:\windows\repair\security c:\windows\system32\config\security
copy c:\windows\repair\default c:\windows\system32\config\default
6. Type exit to quit Recovery Console. Your computer will restart.
Note This procedure assumes that Windows XP is installed to the C:\Windows folder. Make sure to change C:\Windows to the appropriate windows_folder if it is a different location.
This is the Best of the Best But with One Problem I am Not responsible For Lost Data if You Lose data Just Get a Recovery data Software For your Pictures and Music Files...
The procedure that this article describes uses Recovery Console and System Restore. This article also lists all the required steps in specific order to make sure that the process is fully completed. When you finish this procedure, the system returns to a state very close to the state before the problem occurred. If you have ever run NTBackup and completed a system state backup, you do not have to follow the procedures in parts two and three. You can go to part four.
Part one
In part one, you start the Recovery Console, create a temporary folder, back up the existing registry files to a new location, delete the registry files at their existing location, and then copy the registry files from the repair folder to the System32\Config folder. When you have finished this procedure, a registry is created that you can use to start Windows XP. This registry was created and saved during the initial setup of Windows XP. Therefore any changes and settings that occurred after the Setup program was finished are lost.
To complete part one, follow these steps:
1. Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.
Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted to do so.
2. When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
3. If you have a dual-boot or multiple-boot computer, select the installation that you want to access from the Recovery Console.
4. When you are prompted to do so, type the Administrator password. If the administrator password is blank, just press ENTER.
5. At the Recovery Console command prompt, type the following lines, pressing ENTER after you type each line:
md tmp
copy c:\windows\system32\config\system c:\windows\tmp\system.bak
copy c:\windows\system32\config\software c:\windows\tmp\software.bak
copy c:\windows\system32\config\sam c:\windows\tmp\sam.bak
copy c:\windows\system32\config\security c:\windows\tmp\security.bak
copy c:\windows\system32\config\default c:\windows\tmp\default.bak
delete c:\windows\system32\config\system
delete c:\windows\system32\config\software
delete c:\windows\system32\config\sam
delete c:\windows\system32\config\security
delete c:\windows\system32\config\default
copy c:\windows\repair\system c:\windows\system32\config\system
copy c:\windows\repair\software c:\windows\system32\config\software
copy c:\windows\repair\sam c:\windows\system32\config\sam
copy c:\windows\repair\security c:\windows\system32\config\security
copy c:\windows\repair\default c:\windows\system32\config\default
6. Type exit to quit Recovery Console. Your computer will restart.
Note This procedure assumes that Windows XP is installed to the C:\Windows folder. Make sure to change C:\Windows to the appropriate windows_folder if it is a different location.
This is the Best of the Best But with One Problem I am Not responsible For Lost Data if You Lose data Just Get a Recovery data Software For your Pictures and Music Files...
Hi ICEM3N,
I am tempted to try your solution, since it doesn't seem to involve the Bart PE CD (which I cannot burn, since we only have one PC, and we can't log on to it), but....you say there are four 'parts' to the procedure but there is only Part One listed, and this makes me think I'm going to get to the end of what you describe and find that there are more steps to follow.
Is what you have here the whole procedure? If not, any chance you've got the time and energy to write out the rest of the steps for us poor schlubs for whom the other solutions posted have not worked? (I've got the xp install cd, and can get into the recovery window, so that's not a problem).
And: is typing:
md tmp
part of the process? What does 'md tmp' do?
I am mostly a mac user trying to help my partner fix his pc, so I really need the step by step handholding, thanks for your patience!
I am tempted to try your solution, since it doesn't seem to involve the Bart PE CD (which I cannot burn, since we only have one PC, and we can't log on to it), but....you say there are four 'parts' to the procedure but there is only Part One listed, and this makes me think I'm going to get to the end of what you describe and find that there are more steps to follow.
Is what you have here the whole procedure? If not, any chance you've got the time and energy to write out the rest of the steps for us poor schlubs for whom the other solutions posted have not worked? (I've got the xp install cd, and can get into the recovery window, so that's not a problem).
And: is typing:
md tmp
part of the process? What does 'md tmp' do?
I am mostly a mac user trying to help my partner fix his pc, so I really need the step by step handholding, thanks for your patience!
I have also the same problem... can you help somebody to solve this issues... I've tried in both modes Normal & Safe but no luck
So let me get this clear I download PE to a working computer, run it, then use my Windows disc for it to extract whatever files it needs then burn them to a disc. Then do I just put the disc in my "bad" computer, start it up and it will let me fix it by adding the strings discussed here? Do I just put it in or have to shut it down and put it in at start up? Will I still have all my original programs and files on my computey? Sorry to ask dumb questions when you all sound you know what you are doing and I am bumbling around like an idiot.
THANKS TONS!!!! This worked perfectly.... Anyone with this problem needs to check this out... http://www.logicnest.com/archives/90
https://www.winhelponline.com/blog/create-bartpe-bootable-cd-using-pe-builder/
https://www.winhelponline.com/blog/create-bartpe-bootable-cd-using-pe-builder/
Hi,
My name is Anand.
I system was infected this problem. so please send me solution if you have.
i am really thank to you..
My name is Anand.
I system was infected this problem. so please send me solution if you have.
i am really thank to you..
I had the same problem and you guys pointed me in the right direction.
I had neither of these files so I copied userinit.exe from another machine in my house to the laptop and that fixed it.
I had neither of these files so I copied userinit.exe from another machine in my house to the laptop and that fixed it.
OK, I see many people still have this problem.. and some of them didnt have their own computer for Christmas/NewYear, spent vacations tring to find solution, whats sad...
I) Read this: https://ccm.net/forum/affich-22087-xp-auto-log-off?page=4#179
II) Try this
To solve the problem u need:
1) To know whats written in registry key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon
Should be written userini.exe, if isnt change it to be using some software which can change registry of instalaion of windows in another operative system other, computer, or from MSdos. Somehow, try to find one good program for changing registry from DOS... I dont know any, but u try.
2) make a copy of original userinit.exe in ur WINDOWS\system32
3) Login regulary, should works!
Or
II' ) If u know the name of virus which was deleted from antivirus:
1) Copy userinit.exe from other computer into ur WIDNOWS\system32
2) Rename it to be like name of virus u had (if ur virus was updaterServer.exe, rename userinit.exe to be updaterServer.exe. Why? Because its written in HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon, and ur computer try to login on virus. But virus is deleted, and ur comp dont have with what to init a user. )
3) Login regulary, should works!
FAQ: How to copy file into system, or cahnge the registry when I cant login? Use any DOS, or plug hard disk to another computer...
Good luck;)
https://ccm.net/forum/affich-22087-xp-auto-log-off?page=4#179
I) Read this: https://ccm.net/forum/affich-22087-xp-auto-log-off?page=4#179
II) Try this
To solve the problem u need:
1) To know whats written in registry key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon
Should be written userini.exe, if isnt change it to be using some software which can change registry of instalaion of windows in another operative system other, computer, or from MSdos. Somehow, try to find one good program for changing registry from DOS... I dont know any, but u try.
2) make a copy of original userinit.exe in ur WINDOWS\system32
3) Login regulary, should works!
Or
II' ) If u know the name of virus which was deleted from antivirus:
1) Copy userinit.exe from other computer into ur WIDNOWS\system32
2) Rename it to be like name of virus u had (if ur virus was updaterServer.exe, rename userinit.exe to be updaterServer.exe. Why? Because its written in HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon, and ur computer try to login on virus. But virus is deleted, and ur comp dont have with what to init a user. )
3) Login regulary, should works!
FAQ: How to copy file into system, or cahnge the registry when I cant login? Use any DOS, or plug hard disk to another computer...
Good luck;)
https://ccm.net/forum/affich-22087-xp-auto-log-off?page=4#179
Thank you so much for the information. This was a nasty virus/trojan. The following worked for me...
1) I was able to remove the hard drive and install it on a clean computer as a slave drive. I used Norton 360 to scan and rescan the drive until it was clean of virus.
2) I copied userinit.exe and winlogon.exe from the clean computer to the 2nd HD and replaced the existing files. And reinstalled the HD in the computer. Still had problems.
3) Created a BartPE recovery disk - best thing! Used BartPE to get access to the computer and used regedit to update the required information. (http://www.nu2.nu/pebuilder/
4) This link was extremely valuable on how to load and edit the registry once BartPE had worked, as loading registries is not easy. https://www.winhelponline.com/xp/peboot.htm
5) Added Shell and Winlogon information to Registry keys (as the antivirus had removed them altogether)
Under HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell=explorer.exe
Userinit = C:\windows\system32\userinit.exe,
(don't forget the , at the end)
System works now... Thank you all
1) I was able to remove the hard drive and install it on a clean computer as a slave drive. I used Norton 360 to scan and rescan the drive until it was clean of virus.
2) I copied userinit.exe and winlogon.exe from the clean computer to the 2nd HD and replaced the existing files. And reinstalled the HD in the computer. Still had problems.
3) Created a BartPE recovery disk - best thing! Used BartPE to get access to the computer and used regedit to update the required information. (http://www.nu2.nu/pebuilder/
4) This link was extremely valuable on how to load and edit the registry once BartPE had worked, as loading registries is not easy. https://www.winhelponline.com/xp/peboot.htm
5) Added Shell and Winlogon information to Registry keys (as the antivirus had removed them altogether)
Under HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell=explorer.exe
Userinit = C:\windows\system32\userinit.exe,
(don't forget the , at the end)
System works now... Thank you all
Here's an easy fix if you have the XP install disk.
Enter the Recovery Console
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)
Type the following command and press Enter.
CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.
You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)
Now, change the USERINIT value in the registry and change it accordingly.
Click Start, Run and type REGEDIT. Navigate to:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon
In the right-pane, change the value of Userinit to "C:\WINDOWS\system32\userinit.exe,"
Type the above value exactly as given, including the comma - exclude the quotes. Also, change the path to userinit.exe appropriately if Windows is installed in a different drive.
Close Registry Editor and restart Windows. The Quick Launch settings should be retained now.
Enter the Recovery Console
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)
Type the following command and press Enter.
CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.
You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)
Now, change the USERINIT value in the registry and change it accordingly.
Click Start, Run and type REGEDIT. Navigate to:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon
In the right-pane, change the value of Userinit to "C:\WINDOWS\system32\userinit.exe,"
Type the above value exactly as given, including the comma - exclude the quotes. Also, change the path to userinit.exe appropriately if Windows is installed in a different drive.
Close Registry Editor and restart Windows. The Quick Launch settings should be retained now.
I'm having these same logon/logoff loop issues but because I can't access the system files (or any part of the drive) by any of the methods listed in this thread I can't make the suggested changes. Recovery console doesn't find any files or system to use. I can slave the drive to another pc and see all the files using explorer so something must be blocking or hiding the hard drive. However, the system will boot up to the XP logon screen but logs out after attempting to log in.
Any suggestions on how to make the file and registry changes noted? I also cannot remotely access the drive.
Any suggestions on how to make the file and registry changes noted? I also cannot remotely access the drive.
IveTriedEnter the Recovery Console
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)
Type the following command and press Enter.
CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.
You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)
Now, change the USERINIT value in the registry and change it accordingly.
ive tried all the ones listed above actually not a single one worked anyone know anotherfix
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)
Type the following command and press Enter.
CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.
You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)
Now, change the USERINIT value in the registry and change it accordingly.
ive tried all the ones listed above actually not a single one worked anyone know anotherfix
hi,
hi to every one I have the same problem as what you have guys and it really pizz me off, I tried most of the procedures posted in this forum and it ends up on nothing..i tried to download PE builder and created a BARTPE, yes batrPE will boot on CD and you can edit registry but it is none sense, I tried to load a hive namely SOFTWARE and try to modify it, I restart my PC and it doesn't do anything or any progress. I also tried to repair it using windows xp but it doesn't do anything. Guys don't waste your on doing this procedure, the best thing to do is take out your hard drive connect it to other computer scan the hard drive, and back up your important files, then reformat you hard drive. For those who cannot remove their drive try to use BARTPE or ERD commander to back up your files.. ..
hi to every one I have the same problem as what you have guys and it really pizz me off, I tried most of the procedures posted in this forum and it ends up on nothing..i tried to download PE builder and created a BARTPE, yes batrPE will boot on CD and you can edit registry but it is none sense, I tried to load a hive namely SOFTWARE and try to modify it, I restart my PC and it doesn't do anything or any progress. I also tried to repair it using windows xp but it doesn't do anything. Guys don't waste your on doing this procedure, the best thing to do is take out your hard drive connect it to other computer scan the hard drive, and back up your important files, then reformat you hard drive. For those who cannot remove their drive try to use BARTPE or ERD commander to back up your files.. ..
Thanks for all the help on this issue.
I have tried to fix if you have the XP install disk.
COPY USERINIT.EXE WSAUPDATER.EXE
but I get the error
The system cannot find the file specified.
thanks.,
I have tried to fix if you have the XP install disk.
COPY USERINIT.EXE WSAUPDATER.EXE
but I get the error
The system cannot find the file specified.
thanks.,
heya's, my gf's comp has this same problem, cannot log in through safe mode iether
i understand that a virus or something has changes the "shell" and "userinit" files so that u cannot log in
we never had our comps networked and am unsure how to, so I connected her HD to my PC
but i'm not sure how to edit her
Shell
or Userinit
files.
i can edit my own though regedit.exe
so I know what to edit and i'm pretty sure I have to make them
Shell=explorer.exe
Userinit = x:\windows\system32\userinit.exe
i jus don't know how to do it to her HD
i have read about making a BartPE bootable CD, but then I have to use some windows xp disc that I cannot find. I would rather not do this, is there any other easier solution?
i understand that a virus or something has changes the "shell" and "userinit" files so that u cannot log in
we never had our comps networked and am unsure how to, so I connected her HD to my PC
but i'm not sure how to edit her
Shell
or Userinit
files.
i can edit my own though regedit.exe
so I know what to edit and i'm pretty sure I have to make them
Shell=explorer.exe
Userinit = x:\windows\system32\userinit.exe
i jus don't know how to do it to her HD
i have read about making a BartPE bootable CD, but then I have to use some windows xp disc that I cannot find. I would rather not do this, is there any other easier solution?
To do it on her PC,
A: Connect her PC and your PC to the same switch (or network)
B: Open Reged edit on YOUR PC
C: Right click File Connect Network Registry or right click computer and select connect network registry
D: Type in her PC name and then modify the registry settings you have stated above.
A: Connect her PC and your PC to the same switch (or network)
B: Open Reged edit on YOUR PC
C: Right click File Connect Network Registry or right click computer and select connect network registry
D: Type in her PC name and then modify the registry settings you have stated above.
Many thanks
It works fine.
Props
It works fine.
Props
mikethedike
Feb 24, 2009 at 08:53 AM
- Posts
- 158
- Registration date
- Saturday August 16, 2008
- Status
- Member
- Last seen
- September 22, 2012
Feb 24, 2009 at 08:53 AM
hi raj,
looks like a trojan file have installed itself without ur notice well as u said once u log in in few seconds the comp shuts itself down when it means that the file is interferring during startup by executing itself now do the following I mentined below
before u start the process please update ur antivirus with the latest patch files
unplug ur system from the net connection
restart ur system in safe mode
click>start menu>select run
type msconfig
press enter
by default the window will display the general tab properties among the various tabs
select the startup tab
lokk out for any file that doesnt belong to the system the exe
deslect it
then select the services tab
check the same here
deselect the unwanted ones
after u done
click apply
then ok
restart ur system
now again restart ur system in safe mode and scan all ur drives for virus delete them
once finished restart ur system in safe mode
urs truly
Melisio Mascarenhas
India- Mumbai
mikethedike
ur problem should be solved by now
looks like a trojan file have installed itself without ur notice well as u said once u log in in few seconds the comp shuts itself down when it means that the file is interferring during startup by executing itself now do the following I mentined below
before u start the process please update ur antivirus with the latest patch files
unplug ur system from the net connection
restart ur system in safe mode
click>start menu>select run
type msconfig
press enter
by default the window will display the general tab properties among the various tabs
select the startup tab
lokk out for any file that doesnt belong to the system the exe
deslect it
then select the services tab
check the same here
deselect the unwanted ones
after u done
click apply
then ok
restart ur system
now again restart ur system in safe mode and scan all ur drives for virus delete them
once finished restart ur system in safe mode
urs truly
Melisio Mascarenhas
India- Mumbai
mikethedike
ur problem should be solved by now
raj
>
mikethedike
Feb 24, 2009 at 11:09 AM
- Posts
- 158
- Registration date
- Saturday August 16, 2008
- Status
- Member
- Last seen
- September 22, 2012
Feb 24, 2009 at 11:09 AM
Many thanks for your reply
There are few things to note
my laptop logs off few seconds after I log in (it DOESN'T SHUT DOWN)
This happens with my login, guest login and this happens even with Administrator in SAFE MODE
I booted it using XP CD and tried doing the procedure
copy userinit.exe wsaupdater.exe.......etc
but there is no userinit.exe file
please help me
thanks
There are few things to note
my laptop logs off few seconds after I log in (it DOESN'T SHUT DOWN)
This happens with my login, guest login and this happens even with Administrator in SAFE MODE
I booted it using XP CD and tried doing the procedure
copy userinit.exe wsaupdater.exe.......etc
but there is no userinit.exe file
please help me
thanks
What worked for me was to copy c:\windows\system32\userinit.exe from one user's computer to the others. The file was missing.
After I copied it and rebooted all is fine.
After I copied it and rebooted all is fine.
Can someone please reply to those of us who have followed these instructions and keep getting "The system cannot find the file or directory specified?"
Jan 1, 2009 at 11:12 AM
by changing "c" into "x" it creates a loop right back to the "log on" page.
WAQAR GILGITI, your a jerk.
Jan 1, 2009 at 10:29 PM
in my case c:\ is my hdd with windows on it and d:\ is my dvdrom but I have other setups where its completely different
now on a more serious note if the registry entries he mentioned are intact(ie the way they are supposed to be) the issue could be a missing userinit.exe file. more clear instructions on how to replace it would be helpful so here's what happened to me last night.
i tried the expand command from recovery console:
expand d:\i386\userinit.ex_ c:\windows\system32\userinit.exe
but in my case I got the "file could not be created" error so I expanded the file to another directory (the root of c:\) and used "winternals erd commander 2005" and moved the file to the system32 folder, that solved that issue
if you don't have "winternals erd commander" cd you could use somthing else like a PE cd such as BartsPE or even a Linux live cd like ubuntu.
for more information use google search and try not to read Microsoft's "official" help they are confusing. reading is good for you (at least they say it is) so read as much as you can about how others solved this issue as well, I have only given details of my latest effort, its different everytime.
Apr 28, 2009 at 08:04 AM
Jun 8, 2009 at 07:10 AM
Jun 14, 2009 at 11:13 AM
I just copied the file from my cd right to my c:\Windows\system32\.
Under the Windows xp repair console,
type:
copy e:\i386\userinit.ex_ c:\windows\system32\