Solved

Windows XP logs on, then immediately logs off (even in Safe Mode)

Posted on 2009-04-14
8
2,843 Views
Last Modified: 2012-06-27
Good morning.

I have a laptop here with Windows XP installed. It has been working fine for the past 2 years and a frequent virus scans / updates are run using Avast Home. I am also regularly running and updating SpyBot Search and Destroy.

A few days the laptop started to automatically log off as soon as I would log on. At that time I was able to boot in safe mode with networking which was when I updated my Avast program and definitions. I scheduled a boot scan which found 3 Trojans, then shut down.

Now I am not even able to boot in safe mode. I have removed the drive and attached it to a PC and am running a second full virus scan. The first full virus scan did not find anything, but when the drive was placed back into the laptop I am still unable to log on...even in safe mode.

Is there a permissions issue or file corruption that can en corrected? I'd prefer not to resort to a reformat.

Thanks in advance for any advice.
0
Comment
Question by:trahan
8 Comments
 
LVL 8

Accepted Solution

by:
dmarinenko earned 500 total points
ID: 24138994
HERE IS THE FIX

1. Navigate to
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

2. If there is a key named "OldUserinit", delete the "Userinit" key and rename the "OldUserinit" key to "Userinit".

3. The "Userinit" key should now say
"WINDOWS_PATH\system32\userinit.exe,"

"WINDOWS_PATH" is relative to where you have your windows installed.
Mine would be "C:\WINDOWS\system32\userinit.exe,"

Now you can log in again



Who changed my Userinit key?

Spyware. The program is called "Search Assistant" and is located at "\Program Files\WindowsSA". It also has some "omni*.*" files in "\WINDOWS\system32\" dir that are linked to "Userinit" key. If you remove this spyware (using Ad-aware, etc.) the "omni*.*" files are deleted and you can't log in.



How to edit registry when I can't log in?

- Use recovery console - read the manual or browse the web on how to edit registry in recovery console.

OR

- Use another machine on your network: Open regedit and select "File->Connect Remote Registry..." and in the dialog box select computer that has log in problems to view its registry.
0
 

Expert Comment

by:zebex
ID: 24139458
But if you're no longer cant access safe mode, its a corruption issue. To avoid reformatting your drive, your best option is to use a windows xp live cd. It's a copy of windows xp that runs entirely on cd, it doesnt install anything to your HD. It has the essentials tools you need to restore your windows back to its normal state. Try  google and look for it, or you can make one..here is one link see below :
http://pcsplace.com/windows-xp/how-to-create-windows-xp-live-cd-in-15-mins/

Open in new window

0
 

Author Comment

by:trahan
ID: 24140241
I am in the registry and do not see "OLDUserinit", but I do have "Useinit" that only has the value of "userinit.exe". I changed the value to "WINDOWS_PATH\system32\userinit.exe" but the system still just logs on and off immediately.

Is there anything else I can change?
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 

Author Comment

by:trahan
ID: 24140632
I have compared my entry with another win xp station. Here's what I hav for the volume of Userinit:

C:\WINDOWS\system32\userinit.exe,

I still am unable to log on though.
0
 
LVL 8

Expert Comment

by:dmarinenko
ID: 24140787
windows path refers to the system path, did you try changing the key to "c:\windows\syystem32\userinit.exe"?  That is the default path
0
 
LVL 8

Expert Comment

by:dmarinenko
ID: 24140795
If you used "WINDOWS_PATH\system32\userinit.exe" that wouldn't work.
0
 

Author Closing Comment

by:trahan
ID: 31569943
THANK YOU!

Turns out the userinit.exe file was missing. I replaced it and it worked. Thanks again!
0
 
LVL 7

Expert Comment

by:ManicD
ID: 25504146
personally, my userinit.exe file was missing entirly and i copied and pasted from another windows and all was well.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question