userinit.exe application error pops up after login to windows xp sp2 laptop

After logging into windows xp sp2 laptop the error pops up
rfoersterAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

briancassinCommented:
First we want to check and see if you have anything malicious on your system such as a virus or spyware

Download  combofix.exe and save it to your desktop
Close any open browsers.
Before starting ComboFix disable and exit any anti-virus software, anti-spyware or any other security related software as they may interfere with ComboFix's operation.
Double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you and display it on your desktop called c:\combofix.txt. By default this log is located on your 'C' drive. Post that log in your next reply
Note:Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe


Also download and run hijack this http://tomcoyote.org/hjt


Also run these

your going to need some anti spyware /malware utlities run too

http://www.superantispyware.com 
http://security.kolla.de spybot s&d - download it install it (do not install tea timer, ) update it then run it

http://lavasoft.com - adaware - download it run it and then uninstall it
http://pack.google.com/intl/en/pack_installer_new.html?hl=en&gl=us&utm_source=en_US-et-more&utm_medium=et&utm_campaign=en_US&ciNum=11    - select to only download and install spyware doctor.

Additionally I would download and run rootkit revealer if it comes up with anything odd post it up here.
http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx
0
briancassinCommented:
This could also be a problem with the memory, a corrupted profile or corrupted windows ..

To test for a profile problem go to control panel then users and create a new user account assign it a name and password then logoff and login with that account if the error does not occur then it is a problem with your user account / profile. You will need to transfer the data from your old profile to a newly created one.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
johnb6767Commented:
start>run>regedit

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Look at the following value......

"Userinit"

Should ONLY read......

C:\WINDOWS\system32\userinit.exe,     <~~~Notice the comma.....

If it looks like"C:\WINDOWS\system32\userinit.exe, c:\windows\system32\blah.dll", then make sure it loks correct as in the above line....
0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

rfoersterAuthor Commented:
Thanks Brian - I will have availibility to the laptop on Monday to try the various solutions.
The laptop belongs to a network so will test the corrupt profile first.
What is the important thing to look at in the combofix txt doc?
0
briancassinCommented:
the combofix is going to produce a log file, that log file will show what was removed and what else it found the other things it finds has to be verified by using a search engine on the internet and looking up any suspicious dll's and .exe files.

Same as you would do for a hijack this log file.
0
briancassinCommented:
If you post the logfiles here though myself or someone else can review it and then instruct you where to go from there.
0
rfoersterAuthor Commented:
Thanks John, I will check this also.  If there is a  descrepency like an extra comma which do I change?
0
johnb6767Commented:
It should ONLY read,......

C:\WINDOWS\system32\userinit.exe,

Feel free to export the key here....
0
rfoersterAuthor Commented:
Memory issue
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.