[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2724
  • Last Modified:

userinit.exe application error pops up after login to windows xp sp2 laptop

After logging into windows xp sp2 laptop the error pops up
0
rfoerster
Asked:
rfoerster
  • 4
  • 3
  • 2
2 Solutions
 
briancassinCommented:
First we want to check and see if you have anything malicious on your system such as a virus or spyware

Download  combofix.exe and save it to your desktop
Close any open browsers.
Before starting ComboFix disable and exit any anti-virus software, anti-spyware or any other security related software as they may interfere with ComboFix's operation.
Double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you and display it on your desktop called c:\combofix.txt. By default this log is located on your 'C' drive. Post that log in your next reply
Note:Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe


Also download and run hijack this http://tomcoyote.org/hjt


Also run these

your going to need some anti spyware /malware utlities run too

http://www.superantispyware.com 
http://security.kolla.de spybot s&d - download it install it (do not install tea timer, ) update it then run it

http://lavasoft.com - adaware - download it run it and then uninstall it
http://pack.google.com/intl/en/pack_installer_new.html?hl=en&gl=us&utm_source=en_US-et-more&utm_medium=et&utm_campaign=en_US&ciNum=11    - select to only download and install spyware doctor.

Additionally I would download and run rootkit revealer if it comes up with anything odd post it up here.
http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx
0
 
briancassinCommented:
This could also be a problem with the memory, a corrupted profile or corrupted windows ..

To test for a profile problem go to control panel then users and create a new user account assign it a name and password then logoff and login with that account if the error does not occur then it is a problem with your user account / profile. You will need to transfer the data from your old profile to a newly created one.
0
 
johnb6767Commented:
start>run>regedit

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Look at the following value......

"Userinit"

Should ONLY read......

C:\WINDOWS\system32\userinit.exe,     <~~~Notice the comma.....

If it looks like"C:\WINDOWS\system32\userinit.exe, c:\windows\system32\blah.dll", then make sure it loks correct as in the above line....
0
Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

 
rfoersterAuthor Commented:
Thanks Brian - I will have availibility to the laptop on Monday to try the various solutions.
The laptop belongs to a network so will test the corrupt profile first.
What is the important thing to look at in the combofix txt doc?
0
 
briancassinCommented:
the combofix is going to produce a log file, that log file will show what was removed and what else it found the other things it finds has to be verified by using a search engine on the internet and looking up any suspicious dll's and .exe files.

Same as you would do for a hijack this log file.
0
 
briancassinCommented:
If you post the logfiles here though myself or someone else can review it and then instruct you where to go from there.
0
 
rfoersterAuthor Commented:
Thanks John, I will check this also.  If there is a  descrepency like an extra comma which do I change?
0
 
johnb6767Commented:
It should ONLY read,......

C:\WINDOWS\system32\userinit.exe,

Feel free to export the key here....
0
 
rfoersterAuthor Commented:
Memory issue
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

  • 4
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now