xp auto log offSolved/Closed

Question

Hello,
ive recently hit a snag, my windows xp boots up as usual to the log on screen, as soon as I imput my password, windows will play the log on sound and then just automatically log me off again, ive had many attempts to try and get windows to stay running including booting from CD and repair, but unsuccesful.

is there another way, a friend of mine suggested trying to activate the guest account at the log on screen, but I have no knowledge how and neither does he, will this rectify the problem for now?
i am planning on getting a new pc soon, but need access to my user account as there are many important documents for my work on it as well as 10Gb of music that I dont want to see vanish

any and all help is greatly appreciated, thank you

waqar · Accepted Answer

Edit these values and type the correct path of shell :
 
            Shell = explorer.exe
            Userinit=X:\windows\system32\userinit.exe
 
NOTE: These files may also be deleted by spywares. You may need to extract them using Windows CD.  
 
Steps for rectifying this problem: 
 

Log on to a networked computer.
Run Regedit.exe 
Point your cursor to HKEY_LOCAL_MACHINE
Select File > Connect Remote Registry
Type computer name (infected computer)
Navigate to the following location in registry of destination or infected computer
 
 
                        HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
 

Edit these two values in right pane: 
 
                  Shell
                  Userinit
 

Change these two values to 
                  Shell=explorer.exe 
                  Userinit = x:\windows\system32\userinit.exe
Exit from Registry
Restart Infected computer.
You should be able to log on to computer. 
if it not work then go to back steps and just copy orwrite the file userinit.exe 

workded successfully tested 100 percent gauranted

WAQAR GILGITI

brakers · Answer

Hi There
You can try one of two things to start with.

Try booting into safe mode
On starting your pc hold down the F8 key you should be taken to a menu to boot in safe mode.
When you get to the logon screen select the Administrator account.

If you cant do that take you Hard drive out and put it in your mates pc or another pc if you have one and transfer the files that way.

These will only work If your hard drive is not faulty.

Let me know how you get on

Regards Tony B.

devildel · Answer

you may have  BlazeFind malware

Anand · Answer

Hi,


My name is Anand. 


I system was infected this problem. so please send me solution if you have.


i am really thank to you..

Nathan · Answer

I have also the same problem... can you help somebody to solve this issues... I've tried in both modes Normal & Safe but no luck

Dev · Answer

Hi, 

Just remove your Harddisk and plug into another computer. 

then go to your hard disk drive open 

C:\Documents and Settings\Administrator\Start Menu\Programs\Startup and delete start up file with every prifile which you have created. 

then your problem is solve definatly. 

Its me ..... Dev 

Email Id removed for security

vivek · Answer

Hello

 In this problem resolved you scan any lestest antivirus CD then after you boot from XP bootable CD then you all of repair file copy in config directory.

San · Answer

Phew,
My desktop was not networked..Followed the instructions and created a Bart CD following the link given by Bongo. Like snowdog mentioned, dont type windows/system 32 as destination.....Props to all of you guys..So glad that I found this thread :)

prem · Answer

plss boot from recovery cd(Emergency Recovery Disk) and remove the startup files

vivek · Answer

Hello 

 Plz confirm me who operating system use XP or Windows Vista.

viveknbhat · Answer

I had same prob. i've solved it.setup new xp sp2 on same disk.no format no delete. dont select repair it's time waste.only one thing what is  the reason?.all u guys having symantech.i got prob started after installing symantech with updates.

viveknbhat · Answer

I had same prob. i've solved it.setup new xp sp2 on same disk.no format no delete. dont select repair it's time waste.only one thing what is  the reason?.all u guys having symantech.i got prob started after installing symantech with updates.

ball_licker · Answer

Here's an easy fix if you have the XP install disk. 

Enter the Recovery Console
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP) 
Type the following command and press Enter.
CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.
You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

Now, change the USERINIT value in the registry and change it accordingly.

Click Start, Run and type REGEDIT. Navigate to:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon
In the right-pane, change the value of Userinit to "C:\WINDOWS\system32\userinit.exe,"
Type the above value exactly as given, including the comma - exclude the quotes. Also, change the path to userinit.exe appropriately if Windows is installed in a different drive.
Close Registry Editor and restart Windows. The Quick Launch settings should be retained now.

max_Jhon · Answer

Thanks for all the help on this issue.

I have tried to fix if you have the XP install disk.

COPY USERINIT.EXE WSAUPDATER.EXE

but I get the error


The system cannot find the file specified.

thanks.,

pinkmona · Answer

hi I need help I have the same problem that when I try to log in it logs me off and when I try to log in through safe mode it asks me to activate my windows account im have no idea what I need to do now can anyone help me

thanks

draven · Answer

heya's, my gf's comp has this same problem, cannot log in through safe mode iether
i understand that a virus or something has changes the "shell" and "userinit" files so that u cannot log in
we never had our comps networked and am unsure how to, so I connected her HD to my PC
but i'm not sure how to edit her  
        Shell 
 or    Userinit

files. 

i can edit my own though regedit.exe

so I know what to edit and i'm pretty sure I have to make them 

Shell=explorer.exe 
Userinit = x:\windows\system32\userinit.exe 

i jus don't know how to do it to her HD

i have read about making a BartPE bootable CD, but then I have to use some windows xp disc that I cannot find. I would rather not do this, is there any other easier solution?

DancinFish · Answer

IveTriedEnter the Recovery Console
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)
Type the following command and press Enter.
CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.
You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

Now, change the USERINIT value in the registry and change it accordingly.

ive tried all the ones listed above actually not a single one worked anyone know anotherfix

galatic · Answer

Many thanks

It works fine.

Props

missjasminnn · Answer

hi I have the same problem but unfortunately, I don't have the windows xp cd that came with my laptop :/
and I don't want to purchase another one....

is there any way to fix this without using the windows sx cd?

rwright142 · Answer

What worked for me was to copy c:\windows\system32\userinit.exe from one user's computer to the others. The file was missing. 
After I copied it and rebooted all is fine.

Ashleigh.xx · Answer

Hi,
I sort of have the opposite problem.
I recently bought a second hand computer (windows 98) from an old friend but it starts up/ turns on automatically every Tuesday at exactly 8 3O am... I asked my friend, they said they have no idea, how do I stop this from happening??

Thanks.

blugori · Answer

Help! I followed this instructions 

CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.


but after it restarted its doing the loop again, I did the copy several times but still...

note:
I used the Xp Installation disk
I tried the safe mode after the copy but same thing happens every time
I tried deleting the userinit.exe and wsaupdater.exe from c:\windows\system32 then restart then copy but still  same thing
HELP!!!

Coach · Answer

Guys,

I docked an infected harddrive on my good bench computer. After successfully cleaning the docked drive with antivirus and antispyware I reattached it back to the original computer. When logging in I got the auto logoff (safe mode also and same for the administrator account or admin User).

I redocked the harddrive again after reading this thread and found that the userinit.exe was missing from the /windows/system32. This drive also had a partition for a system restore and I able to copy the userinit.exe from there to the /system32 for booting without having to use a boot disk. I attached the harddrive back again and I booted the machine. I was able to login sucessfully and have verified HKLM in the registry for the userinit.exe location mentioned.

So far so good.

THANK YOU!!!

halpmekthx · Answer

I'm having the same problem as raj... but my whole story is below:

I ran avast! to get rid of the Vitro virus and it went through deleting all of my .exe files in hopes of Vitro being completely eliminated (though I bet I still have it, lost hundreds of .exe's, which should be all of them)

After avast was done it's scan, I repaired Windows using the more complete method (not the recovery console -- I pressed enter, went through and pressed R when it asks for repair or full installation).

During the repair, I would get many errors saying "Setup Cannot Copy the File _____". I went to the Microsoft website and followed their instructions, deleting Edb.log file and the Edb0000x.log file.

After this, I did the Windows more thorough repair again to see if it worked, and yes, all of my "Setup Cannot Copy File errors" have gone away.

However, now when I try logging in to windows, it starts loading settings, flashes my desktop picture for about 1.5 seconds, then proceeds to automatically log me out and close network connections, etc.

I've tried running in safe mode and logging in with my account or the administrator account, and still I get auto-logged out regardless.

I've tried the Recovery Console method you guys all post, however, when I do the "COPY USERINIT.EXE WSAUPDATER.EXE" part, I get an error saying "The system cannot find the file specified."

I am stuck from this point, I don't know what else to do.

I've got an BartPE boot disk, is there any way of fixing Windows with that? I know it's suppose to be really good at doing so, but I don't know any of the commands or what to run. I followed the directions on this site https://www.winhelponline.com/xp/peboot.htm but it turns out my Userinit value was correct with "C:\Windows\System32\Userinit.exe,".

I've also tried running chkdsk /r /p  and this didn't solve the problem either.

Please help, this is my second day running a bunch of scans and things to try and fix it!

Thanks!

Giolle · Answer

I have just sold problem, and problem is missing "userinit.exe" in c:/windows/system32 directory. So, I copied file "userinit.exe" from another computer to USB Flash drive, then I started "Windows MiniPE" from bootable CD (no necessarily, you can use programs from Hiren's Boot CD or some other bootable file manager) and copied to c:/windows/system32 on computer with problem. Now, when you can log in, you can do everything with your operating system.

I hope this is useful for you!

Raunchy · Answer

I just went through this with a friend's computer who's business depended on a fix. I was able to solve this problem using bart pe with a windows xp home disk. I copied the windows disk to a folder I made and used that as the source for bart pe to make an image and created a bart pe disk. 

Once the problem computer was booted up with bart pe I simply searched the drive for userinit.exe then copied and pasted it into the X:\windows\system32\ folder. Problem solved.

I should add that as an intermediate computer go to guy ( I am not a professional ) this was much harder than it sounds. I tried recovery console with no success, regedit through networling with no success, and a few suggestions from google searches that I didn't think would work to begin with and they didn't.

My advice to novice users is to find a tech savvy friend. Barring that download bart pe and google a beginner's guide to using bart pe. Once you have a working boot disk it's as easy as copy + paste. Good Luck.

Steve S · Answer

What do I do if I do not have the original windows xp discs?  Mine came pre-installed so all I have is the recovery discs.  I don't have the pc networked either.  Any ideas?

lsi · Answer

this one worked for me:

1. login to XP recovery console (after booting off XP CD)

2. from the c:\windows> prompt, type:

expand d:\i386\userinit.ex_ system32

Change d: to the drive letter of your CD-ROM.

Note that you must be in the c:\windows directory to type this command (this is the default directory in the Recovery Console)

The second parameter on the expand commandline tells it to write the expanded file into the system32 directory.  (type expand /? for more info on the expand utility)

Cheers chaps! ;)

xpjunt · Answer

Windows Recovery Mode and replacing userinit.ex_ and renaming it in the hsystem32 folder worked wonders for my XP system.

MeetJack · Answer

Ive tried to get into the recovery console but it asks for a password but I have no idea what that password can be. If anyone can help me with this I would really really appreciate it. It says to put in the built-in administrator password so, if anybody at all can help I will really appreciate the help.

chowton · Answer

Hello,
im having the saem preoblem as u guys..... but..i tried everything .. and the lat 1 was trying to type g:\i386\userinit.ex system\.... but itpromt me... can't find a way to file or .. file doessnt exist... sry (well it didnt write that.. my pc is in french but I tranlated it:p) ....so what can I do?
cuz I try every single metode.. and each time it advanced me farther but im stil stuck at the window system 32.... so if 1 of u guys could help me solve my problem ty very much:p

Chris · Answer

A virus hit my file server, after clearing the virus off the server I had this problem. Userinit did not exist so I expanded it out of the CD drive I386 and copied it into my system32 folder. Thsi was the last peace in my virus free puzzle. Thanks for answers guys!

BK · Answer

I have a similar problem. After following the instructions, and copying the file from my xp setup disk, I was able to log in... unfortunately when I did, the screen turned blue and won't show the start bar or the desktop. I can see the mouse but it will not respond to anything. Any help?

darkphreekquency · Answer

ok wow so I read one post that claimed the person who wrote this was very talented lol .. 3 or 4 lines of code to change a few files is a waste of time .you never even get to see the people you affect what I kind of satisfaction is that?? his person is a moron who read a c++ book and thinks hes a master now because people dont really understand how easy it is to destroy things ...  make something ... invent a way to solve a problem . or make our lives better .. stupid , ignorant people destroy things because they are too thick headed and pathetic that they cant wrap their head around a better concept ..  honestly I hope this kid gets hit by a car . there are too many useless IT people out there

Abushami · Answer

Hi,
I had same problem and fixed it in 5 few minutes by now.
Simple steps:

1-Remove your HDD and attached it to anyother PC, either a second drive or using USB enclosure, depending upon type of ur HDD.

2-Preferably 2nd PC connected to internet.
3- serach userinit.exe  for XP on the internet, use google.
download file directly on your affected HDD.

suppose ur HDD appears as E: in  2nd PC and your Windows directory is Then e:\windows
 download new userinit.exe file into e:\windows\system32

Reconncet you HDD to your original machine, it will logon namally.

It is smply over writing the userinit.exe file in the system32 directory by any means.

scuz75 · Answer

Can someone please reply to those of us who have followed these instructions and keep getting "The system cannot find the file or directory specified?"

Jenni · Answer

Hi, I had the same problem, ended up giving my computer to a friend who's an IT technician.  He spent hours trying .. and connected it to his hard drive like I think someone mentioned earlier.  None ofthis worked.  He ended up asking his boss, who told him to create a new partition on the hard drive, and install XP again.  The file needed for login would then be there, so it would work.  However the viruses had cause so much damage to the harddrive that he couldnt do this.  
I had to wipe my computer and reinstall XP.. something I never thought I'd have to do.  Thankfully I mangaged to recover my files.. he did it somehow when my hard drive was linked to his.. unfortunately I dont know how but maybe someone will.
Seems this is a nasty virus, maybe we should all be more careful in future :)

Hope this helps somehow!

vulpine · Answer

I had the same problem and you guys pointed me in the right direction.
I had neither of these files so I copied userinit.exe from another machine in my house to the laptop and that fixed it.

bos · Answer

Thx a mill, worked like a charm!!

jay_s1ngh · Answer

I was having this problem to. After following the steps from http://www.lavasoftsupport.com/lofiversion/index.php/t7624.html I managed to get access to it although when I log on, windows keeps telling me to register and activate although I cannot do this because it is not connected to the net. Any ideas?

telink · Answer

Please help>  I copied onto a CD the file userinit.exe from another computer. Whne I try to copy in recovery mode I get "The system cannot find the file scpecified" Please help

Deepak · Answer

Many thanks to waqar and SNoWDoGG !!!

My userinit.exe was deleted by the antivirus after a trojan attack and this post really helped me. Thank you very much!!

slowhand · Answer

In reply to earlier post in the thread. I also had the same problem after clearing pc of malware etc, checked the reg key to make sure it was pointing to userinit.exe but never thought of checking that the userinit file was actually there. It wasn't.

Inserted Bart PE cd and copied the userinit file from there to system32 folder on pc. Sorted.

Thanks for thew pointer

bryan17 · Answer

hello guys...

this issue is due because your pc have been infected with a virus... I have got this recently to overcome it I used ''hiren boot cd'' to remove the virus.... then the xp installation cd to repair the damaged OS!!!

syq · Answer

I think the solution is format your PC..

Sean from Chicago · Answer

I replaced the userint.exe through the LAN and the problem was fixed.  I think malware was the cause.

Sean from Chicago · Answer

I replaced the userint.exe through the LAN and the problem was fixed.  I think malware was the cause.

Nevergiveup · Answer

Novice approach that worked. This problem is the virus(s) where on my computer the userinst.exe file was deleted, either by AVG or otherwise. I copied the file from another computer, x:\windows\system32\userinit.exe and put it on the other computer where it was missing and works like normal. However explorer was corupted and I cannot access internet so I had to reload windows. Be sure you go to msconfig, startup and make sure these virus files are deleted, FAKURIYO.DLL, FOKITAPE.DLL AND DEFOHESI.DLL

bmc273 · Answer

what do you do when the fix discussed here does NOT work? I tried it and nothing, so there must be something else going on. Any ideas?

Thanks!

SoeSoe · Answer

after I press R and go into the recovery console it only lets me type one letter.... how do I get passed that? im getting so frustrated with this problem! please help anyone! it would be very appreciated.

thanks, SoeSoe

Nicko · Answer

How do I connect my laptop to another computer? and how do I copy stuff to my comp when I cant log on? Sorry, most of you would probably consider these stupid questions, but im a real computer novice and dont understand most of this jargon. pls help! thanks

xiah · Answer

hello everyone!!! I have the same problem regarding the log off thing.. I did the expand and copy of userinit.exe. using the recovery console of the CD... I did it succesfully but nothing happens...still it logs off when I log in.... can you help me please??? any other solutions??anybody?? thanks a lot..

freak · Answer

hi,

hi to every one I have the same problem as what you have guys and it really pizz me off, I  tried most of the procedures posted in this forum and it ends  up on nothing..i tried to download PE builder and created a BARTPE, yes batrPE will boot on CD and you can edit registry but it is none sense, I tried to load a hive namely SOFTWARE and try to modify it, I restart my PC and it doesn't do anything or any progress. I also tried to repair it using windows xp but it doesn't do anything. Guys don't waste your on doing this procedure, the best thing to do is take out your hard drive connect it to other computer scan the hard drive, and back up your important files, then reformat you hard drive. For those who cannot remove their drive try to use BARTPE or ERD commander to back up your files.. ..

fella1960 · Answer

hi there,

when you start your pc 

before entering your password press CTRL+Alt+Del+del

User name put Administrator

Password Press enter

or 

when pc is booting press and hold F8to enter safe mode 


then go to my computer right click 

properties > advance> startup and recovery

click on setting

disable automatic restart

Thanks

Ral · Answer

"I do this but it says access denied after having typed the EXPAND command and i'm pretty sure I never put a master password so i'm a bit stuck here :( 
Any help would be greatly appreciated 
Thank You"

Im also getting the "access is denied" when trying to type in the command, any help?

manish · Answer

i have copy userinit.exe in windows \system32 but my problem is sam than what can I do dear in my windows lot of data I cant format it ok pls give me solutaion I m very usade

monkey5 · Answer

I was hoplessly during last 2 day with this problem and solved out  when I see this forum.

I sincerely thanks to all the peoples posted for solutions.

deeply appreciation!!!  ^_^ !!!

runnermom · Answer

Hello Computer Gurus,

I need some major help here. My husband downloaded a bad attachment from a FB email--- it was a virus. I spent all day cleaning up the computer, which is far from my strong suit.

When I went to reboot and log-in, I experienced the same problems as you all have. Here's the big dummy question though... I can't get to the Recovery Console. I have tried booting from my XP disk, I believe, but could someone help out a very tired mama who needs to get her computer back and running to finish working and go to bed sometime this year?

I would love a step by step keystroke as to how to even get to the Recovery Console. If someone could do that for me, I would be forever in your debt!!

Many thanks in advance,
Jennifer

Jack · Answer

I have a small Dell Latitide that got a trojan.  I was trying to boot it inot safe mode to remove it by running Symantec which was always on my machine.  Not it logs me off as soon as I try an log on.  
I had disabled the the system restor prior which is what Symantec tells you to do.

BokiSergy · Answer

THIS SOLUTION WORKS 100%

Let me explain what happen with ur computer (why u cant login into ur windows account).  

1) u got a virus
2)  it copied itslef, or it made a copy simmilar name to itself into ur WINDOWS/system32
3)  it cahnged the registry key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon, and instead "Userinit.exe", it wrote its name

So, heres an example:  

1) u got a virus, for an example, "winupdate86.exe"
2) it made a copy inside system32 as "winlogon86.exe"
3) changed registry key, and in entry putted "winlogon86.exe"

So, ur computer actualy loged on via virus, all time until ur antivirus deleted it (after that u couldnt be able to login).  After ur antivurs detected and removed the virus( both "winupdate86.exe" and "winlogon86.exe")  ur windows continues to look for "winlogon86.exe", couse it is on current place in registry,and its all it knowsto look for, when it try to login.

So, to solve the problem u need to (SOLUTION!!!)

1) only way to recover ur login is to find a copy of "userinit.exe" file (from XP DVD, from another computer...) 
2) rename it to be as name of virus u had (u maybe dont know it, couse ur antivirus deleted it, but if u know u llbe able to fix ur login). So, sopy of "userinit.exe"  rename to  "winlogon86.exe"
3) put new renamed copy into ur system32 (Ofc, u dont have windows on ur computer, couse u cant login, but ucan plug off hard disk and plugin it to another computer. Other  solution is  if u can make bottable USB or Floppy disk DOS, and use simple copy function. 3th solution is if u have another operative system on ur computer, and manage coping there)
4) login ur windows normaly (now after u tricked ur regystry key, it still looks for same entry when it login,  which was name of virus. But trick is u made a copy of real userinit.exe, and renamed to trick registry)
5) find via regedit HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ ,  and instead name of virus, put "userinit.exe"

Thats all, ofc if u still have virus would be great if u write its name before ur Antivirus delete.. If u still know it, just do  steps. If u dont know actual name of virus u can do steps, but not gonna help u. Couse u need to know whats written in entry HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ .  I found alctual name of my antivirus in way I go to search files inside my WINDOWS folder. And after it finished, I sorted all files with Modified Date, and Created Date... I found all files of virus in my system32... Deleted them and I had this problem... but after I saw all u people worte here I knew how to fix. Ofc I was lucky cuz I before deleting them, made a carantine. So I knew names. And with another comuter fixed. 


Hope I gonna help

BokiSergy · Answer

One more thing: after u login, best thing would be to do System Restore, to point of time befire u got the virus. Make sure its before virus, couse if is after time u got the virus, it can ruin ur tend, and u need to remove it over again... After u restore the point, it will be no sign of virus for sure. (I done it same)

BokiSergy · Answer

OK, I see many people still have this problem.. and some of them didnt have their own computer for Christmas/NewYear, spent vacations tring to find solution, whats sad...



I) Read this: https://ccm.net/forum/affich-22087-xp-auto-log-off?page=4#179


II) Try this

To solve the problem u need:

1) To know whats written in registry key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon


Should be written userini.exe, if isnt change it to be using some software which can change registry of instalaion of windows in another operative system other, computer, or from MSdos. Somehow, try to find one good program for changing registry from DOS... I dont know any, but u try.

2) make a copy of original userinit.exe in ur WINDOWS\system32


3) Login regulary, should works!

Or


II' )  If u know the name of virus which was deleted from antivirus:
1) Copy userinit.exe from other computer into ur WIDNOWS\system32

2) Rename it to be like name of virus u had (if ur virus was updaterServer.exe, rename userinit.exe to be updaterServer.exe. Why?  Because its written in HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon, and ur computer try to login on virus. But virus is deleted, and ur comp dont have with what to init a user. )

3) Login regulary, should works!


FAQ: How to copy file into system, or cahnge the registry when I cant login?  Use any DOS, or plug hard disk to another computer...  


Good luck;)







https://ccm.net/forum/affich-22087-xp-auto-log-off?page=4#179

JustLiam · Answer

Ive had this same problem and ran through about 50 posts for fixes yet my situation is always slightly different so Im stuck. Ive tried replacing the userinit.exe file. Extracted it from an xp cd n then I copied it to the local drive of the machine not booting. Then in recovery console you paste it into the system32 folder. There are fixes all over explaining this. However after 2 full days of constantly unhooking the problemed hard drive from the laptop and hooking it up through usb onto my working laptop, then putting it back in the bad laptop to test, Im ready to throw the laptop through my window... Here is my issue if someone can please help. 

Problem.... I turn on Dell laptop. Welcome screen comes up. I type in the password for the one ID that appears. It says logging in. I see the desktop wallpaper for maybe 8 seconds. Then under the ID it will say, "saving settings, logging off". It never shuts down on its own. Just logs me off.

My specific Problem with the fix posted everywhere... I dont have a bootable xp cd. I do have the upgrade non bootable xp cd. So I hooked up the bad hard drive to my laptop as a secondary device via usb and on my laptop opened up a cmd prompt. I expanded the userinit.ex_ file from the cd (d:\) to E: (which is the bad hard drive). After expanding I copy pasted the new userinit.exe file to E:\windows\system32. No luck. I then looked for all the userinit files on the bad hard drive. I replaced all of them... 
By the way, there were numerous viruses and malware on the bad hard drive in which I cleaned before this problem began. 
I have read that there is one other fix which pertains to renaming the userinit.exe file to userinitnew.exe. Then going into regedit and changing the path to the new file name. But because I cannot login to the bad hard drive, I cannot access the registry for that hard drive. Ive read to connect to the registry through the good laptop then using "connect remotely through the network" or something like that. Which I tried. But the bad hard drive is not on the network it is only connected via usb. And obviously I cant connect it to the network because it wont bootup.
With all this being said I guess I have a 2 part question... 
1. Is there a way to edit the registry on an external hard drive connected via usb through my working laptop? 
2. Is there a fix for the auto logoff issue without having access to regedit on the bad hard drive, not having recovery console but having an xp cd only readable on the good laptop, and not being able to logon in safe mode. (safemode gives me the same problem as logging in normally) Its almost as if it begins to login safemode but then changes half way through and goes back to normal login mode. 
Any help? As I said... window, throwing, laptop, is next, 
Thanks in advance 
Liam

ICEM3N · Answer

Manual steps to recover a corrupted registry that prevents Windows XP from starting
The procedure that this article describes uses Recovery Console and System Restore. This article also lists all the required steps in specific order to make sure that the process is fully completed. When you finish this procedure, the system returns to a state very close to the state before the problem occurred. If you have ever run NTBackup and completed a system state backup, you do not have to follow the procedures in parts two and three. You can go to part four.
Part one
In part one, you start the Recovery Console, create a temporary folder, back up the existing registry files to a new location, delete the registry files at their existing location, and then copy the registry files from the repair folder to the System32\Config folder. When you have finished this procedure, a registry is created that you can use to start Windows XP. This registry was created and saved during the initial setup of Windows XP. Therefore any changes and settings that occurred after the Setup program was finished are lost.

To complete part one, follow these steps:
1.	Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer. 
Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted to do so.
2.	When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
3.	If you have a dual-boot or multiple-boot computer, select the installation that you want to access from the Recovery Console.
4.	When you are prompted to do so, type the Administrator password. If the administrator password is blank, just press ENTER.
5.	At the Recovery Console command prompt, type the following lines, pressing ENTER after you type each line:
md tmp
copy c:\windows\system32\config\system c:\windows	mp\system.bak
copy c:\windows\system32\config\software c:\windows	mp\software.bak
copy c:\windows\system32\config\sam c:\windows	mp\sam.bak
copy c:\windows\system32\config\security c:\windows	mp\security.bak
copy c:\windows\system32\config\default c:\windows	mp\default.bak

delete c:\windows\system32\config\system
delete c:\windows\system32\config\software
delete c:\windows\system32\config\sam
delete c:\windows\system32\config\security
delete c:\windows\system32\config\default

copy c:\windowsepair\system c:\windows\system32\config\system
copy c:\windowsepair\software c:\windows\system32\config\software
copy c:\windowsepair\sam c:\windows\system32\config\sam
copy c:\windowsepair\security c:\windows\system32\config\security
copy c:\windowsepair\default c:\windows\system32\config\default

6.	Type exit to quit Recovery Console. Your computer will restart.
Note This procedure assumes that Windows XP is installed to the C:\Windows folder. Make sure to change C:\Windows to the appropriate windows_folder if it is a different location.

This is the Best of the Best But with One Problem I am Not responsible For Lost Data if You Lose data Just Get a Recovery data Software For your Pictures and Music Files...

elmer · Answer

thanks... that is our major problem in our internet cafe. your my hero.

JaeShiiZou · Answer

I've read through all 4 pages of this topic... and So far, I've tried almost solutions... however I face difficulties.. 

First thing about Recovery Console... I cant find it, I boot from the Windows XP cd, see the set up page, the only buttons to press are F6, and F2, which is Automatic Recovery. I pressed F2, and it requires another cd I dont have...

I can't find the instruction to press 'R'

So I tried to wait till all the setup to load its files, and still, there is no 'R' for me to press...

>>>sigh, I know my question seemed stupid but I'm sorry I really cannot find it.

About BartPE, since I only have one CD drive, I tried to create an ISO image so that I can burn later, but, there were errors like   Cannot find MSTSC.exe, and so it said it cannot create the ISO...

Please help...

Rans · Answer

Thank you so much for the information. This was a nasty virus/trojan. The following worked for me...
1) I was able to remove the hard drive and install it on a clean computer as a slave drive. I used Norton 360 to scan and rescan the drive until it was clean of virus. 
2)  I copied userinit.exe and winlogon.exe from the clean computer to the 2nd HD and replaced the existing files. And reinstalled the HD in the computer. Still had problems.
3) Created a BartPE recovery disk - best thing! Used BartPE to get access to the computer and used regedit to update the required information. (http://www.nu2.nu/pebuilder/
4) This link was extremely valuable on how to load and edit the registry once BartPE had worked, as loading registries is not easy.  https://www.winhelponline.com/xp/peboot.htm
5) Added Shell and Winlogon information to Registry keys (as the antivirus had removed them altogether)
Under HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon 
Shell=explorer.exe
Userinit = C:\windows\system32\userinit.exe,
(don't forget the , at the end)

System works now... Thank you all

gjp · Answer

Hi,

Can I use the "expand d:\i386\userinit.exe C:\ " command from a regular burned CD? My plan is to burn the userinit.exe file from another computer onto a blank disc (my XP Media Center PC did not come with a boot disk).
So would I insert the burned cd with the one file on it, then type the following?

step1: expand d:\i386\userinit.exe C:\  (or would I type expand d:\userinit.exe?)

step2: copy c:\userinit.exe c:\windows\system32\ 

Thanks in advance!!

Emz · Answer

Hey guys I really need some help.

I have the virus that longs you on/off ect. I have tried running my computer in safemode- that didnt work. I have tried runnying my Computer in debugging mode- that didn't work either. I tried logging in as the administrator- but it said I wasnt authorized. I have a netbook so I do not have a CD drive. I do not know how to get the softwhere on to a USB like someone else with a netbook said they did. I also do not know how to link my computer to another one/ swap hard drives. I also dont have access to another computer to do this. I'm really stuck. I went to a computer shop to see if they would sort it out and they said it would cost £50- money I just don't have.

please help
x x x x

PhillipS · Answer

Thanks a MIL to everyone - worked 100%

Mine was "X:\i386\System32\userinit.exe, " 
Changed it to "C:\WINDOWS\System32\UserInit.exe"

james · Answer

Hi All, 
i am having the same problem,, I hav xp cd and tried copying the userinit.exe and also tried expanding it using the recovery console. it was successfully copied but I still wasnt able to log on. :( 

I still havnt tried the Bart PE cd method but can anyone tell me if this method will work:
http://saveme.danfischbach.com/ 

Have been working on it since 2 weeks! so worried cant focus on studies either. Please Help somone!!

James

D · Answer

Follow steps if using Mini PE -

- Run Mini PE
- Search for Avast Registry editor or alternative (Do not - 'Run - regedit' this wont work)
- Choose correct drive
- HKEY_LOCAL_MACHINE (expand)
- Software (expand)
- Microsoft (expand)
- Windows NT (left click)
- Make sure Userinit is C:\WINDOWS\system32\userinit.exe (right click modify)
- Restart computer rebooting into XP and log on.

bruno · Answer

I had this same problem today. It seems to be caused by smss32 and its party. In my case, which resolved the problem was copying userinit.exe to winlogon32.exe. I did not have to Edit Windows Registry.

Chiran · Answer

Hey ALL
I found the Solution of the problem.
When I lost my Userinit.exe file it may cause automatic logoff when we try to log on with any user.

Don`t try enything else.

Just bring a windows xp Bootable Cd Then Boot form that Disk
And Follow these Steps.
Start Recovery Console ( Press R in the First Screen)\
Choose your windows 1/2/3 or Other
provide password
Command Prompt will appears
type 
copy g:\I386\USERINIT.EX_ C:\WINDOWS\system32\USERINIT.EXE
(G is the CD Rom Drive Replace it with your CD Rome Drive alphabet)

if 1 files coppied massege appears
You have done all well
type exit : The system will rebooted
You have done well Enjoy

raj · Answer

Hi,

my laptop with xp still fails to log in in safe mode:

1. I pressed Alt+Ctrl+Del

2. Username - administrator

3. Password OK

still logs off. earlier, I scanned with avg and had also turned off the system restore. is it possible to get through without format or reinstall etc.

Lil · Answer

I have the same logon/logoff problem, but it wont do with loging in as admin, since I use the admin as my account. id like to know if there is a way to solve it and if you could explain it to me, especially since english is a foreign language for me and I couldnt find a solution in german. Thx Lil

Lil · Answer

HI,

If you are using a HP computer or laptop then its fairly easy to repair this problem

Use the F11-recovery which is a whole program in Hp and choose the option to reset it but have a recovery partition in a folder

Then it takes quite some time to reset it, afterwards you will have to register anew on you computer and are able to retrieve all your documents out of this folder

Lil (sorry, if its written a bit awkward, but telling technical things in english is hard for a foreigner)

Kevin · Answer

Boot from a Windows XP CD
Select "R" for Repair
Select "1" for you Windows operating system
At the C:\WINDOWS prompt, type CD SYSTEM32 and press Enter
Then type  COPY USERINIT.EXE WINLOGON32.EXE and press Enter
If you get the 1 FILE COPIED, then type EXIT and reboot your system.
You should now be able to log in.

If you got a message stating that the file is not recognised or missing, do the following:

Type D: and press Enter - assuming D: is the letter for your CDROM drive.  If not, put in the drive letter for you CDROM.
Type CD I386 and press Enter (that is the letter I and 386)
Then type EXPAND USERINIT.EX_ C: and press Enter
Type C: and press enter

You should now be back at C:\WINDOWS\SYSTEM32
Type COPY USERINIT.EXE WINLOGON32.EXE and press Enter
You should get 1 FILE COPIED.
Type EXIT and reboot system.

Now you should be able to log back into Windows XP.

test · Answer

Hi,

for corrupted registry values or keys you know the name for you can also try the REG command in Windows XP :

https://www.computerhope.com/reg.htm

Regards
O

Mkish · Answer

Win XP is the OS am using

alietha davis · Answer

xputo log offsolve

bjs 714 · Answer

Hi, am trying to un lock a used laptop  pc recently purchased w/ no admin password. got in once and changed settings to" change password  at next login..".it back fired and now wants the old admin password to log in.DIFFICULT to even get out of black screen ! Accounts are all disabled, pc is locked, error message "windows cant read hard drive disk" when trying to use factory included disk to boot Now have the log in box up--> enter user/ domain / password But I  have no passwords, domain names, or ANYTHING to enter...This is a windows xp professional w/ service pack 2

haarp425 · Answer

I have similar issues. I use Kaspersky Rescue Disk (free) to boot and navigate the files on my hard drive. I also use the KRD to clean for viruses :) It seems that the malware replaced the original userinit.exe with an infected version with the same name and the KRD deleted it.

Anyway... Once you boot the KRD, click the lower left icon (Favorite applications) and select File Manager, click the discs folder, click the C:, 

Navigate to \WINDOWS\system32\dllcache
Right click on the userinit.exe and click copy
Navigate to \WINDOWS\system32  and paste the userinit.exe

Verify that you have the userinit.exe in the \WINDOWS\system32 folder.

Reboot without the KRD and you should be able to log in to windows.

The registry for the userinit and shell was not changed at all from its default settings.

Anonymous Grey · Answer

Hi, 

I met the same problem in WinXP Pro. Througout I made a lot of mistakes and error which I have to re-clone back and start again; I "may have the answer" as I solved in XP Pro.  1) Backup your HD onto another HD using Clone software by todobackup by Easeus.  This is as a precaution act to protect in case you make mistake.

2) Try to get the same model with the same configuration as your Notebook or PC ( Ms office and etc) . Link them together in a network I ONLY TRIED IT IN THE DOMAIN Environment.  It's best if the Administrator password are the same and software applications installed are the same. 

Make sure you are able to ping or logon Remotely to the "bad" pC using Administrator from "good" PC. NOTE : It will not work if don't have accessor network connectivity. 

3) On the "good" PC, using Regedit export HKey_Local_Machine\Software\Microsoft\Windows NT\Winlogon by clicking right hand and select Export. You may save on the My documents or Desktop. Name a proper file name you can remember say, "goodpcwinlogon.reg

4) Select File from Pull down menu, Select Connect Network Registry.  Select the "bad" PC and connect it. It might prompt Administrator password here.

5) Export the  HKey_Local_Machine\Software\Microsoft\Windows NT\Winlogon and name it differently say, "badpcwinlogon.reg" onto the "good" PC. 

This is as a precaution act to protect in case a mistake is made.

6) Using Regedit, click Import registry and select the "goodpcwinlogon.reg"  SELECT THE CORRECT PC to IMPORT, in this case the "bad" PC. 

7) After importing, you may restart and try logon using Administrator in the "Bad" PC. It should work. 

8) In the "Bad" PC, Go under C:\Documents and Settings, Here look for your username say, "ABC".
Rename the folder ABC to ABC_OLD.

9) Logoff as Administrator, and re-login as the Domain username in the "Bad" PC in this case "ABC".  Logoff as ABC

10) Logon as Administrator again   in the "Bad" PC. Go to C:\Documents and Settings,  you should see a new user "ABC" created. Copy the Favourites, My Documents and Desktop files from the ABC_OLD folder.

11) re-login as your username in this case, "ABC". It should be working now.

I cannot guarantee it will work completely as I got about 90% of the software application working. I have to re-install some here.

Hope that helps!. Good luck and Best wishes.

Samba · Answer

Plz send urgently

joepille · Answer

Hi I have a mecer extreme when it boots up I am able to login then it would automatically shuts down and restart again. Sometime it takes 30 minutes after logging on to the internet that the same thing happens.

Hope you can assist me I am really lost here.

Jim · Answer

God bless you Bart... and BartPE, especially since the only other computer at my disposal to build a BartPE boot disk was a Japanese laptop, replete with kanji keyboard and all. All of the build logs/notifications were in kanji so I just held my breath and prayed. To my delight, BartPE built a flawless boot disc with no issue for my old Dell 5100 running XP SP3.

In addition to the excellent answers in this thread, and after creating a bootable BartPE disk, you'll need to follow the steps in the following link to "remotely" edit the registry on C: ...which essentially requires editing the proper registry hive on your local infected drive: 

https://www.winhelponline.com/xp/peboot.htm

Since newer virus variants are cropping up, you'll never really know what virus replaces userinit.exe. In my case it was a very nasty case of twext.exe. All of this malware was cleaned up by McAfee, but it left the registry pointing to a non-existent virus/exe. McAfee needs to fix this asap. 

Other notes: I did not replace my winlogon.exe or userinit.exe because my local copies were dated two years ago (fine), my Windows install disk was SP1, local patches were up to SP3 and I feared side affects mixing the two SPs. 
  
Lastly, after a successful restart, I noticed one of the svchost.exe processes no longer pinned my CPU like it used to.  I suspect twext.exe malware is hooked into it somehow.

augus · Answer

my pc (windos xp)can't login with my correct password and eventhough I removed password try but no result it all happened after fixed internet.

Xp auto log off

88 responses

Similar discussions

Subscribe To Our Newsletter!