Unable to login WinXP - seems to immediately logout

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

HOBOcs

Jim
Thread Starter
Joined
Jan 5, 2004
Messages
8,709
I'm unable to login to a computer.
1) WinXp splash screen is presented and a user login shown.
2) Click on user name.. and message "loading settings".... then almost immediately.. a message "saving Settings"... then back to login selection.
3) There is from time to time a brief flash at the desktop background .. then it appears to log out.

Tried so far:
1) booted from winxp disk and selected recovery console
2) ran chkdsk /r
3) rebooted and got the same result.
Note: I have tried to access via safe mode.. and I get the same result.
I've tried all safe mode modes...

Looks like the recovery console is my only hope.
I'm looking for directions or any help.

edited:
Anybody know how to access the registry entires from the recovery console in command mode.
I suspect the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Value: Userinit
Data: %system32%\xxxxxxxxxx
where xxx should be userinit.exe and may have been changed by something bad.
 

HOBOcs

Jim
Thread Starter
Joined
Jan 5, 2004
Messages
8,709
Thanks, tried that... didn't find a file called wsaupdater.exe ... but copied userinit.exe to it anyway.

I think this is where the problem is. (userinit.exe has been wriiten over)
I'd really like to be able to review the registry but I can't get to it from the Recovery COnsole.
I've tried to run reg.exe but it won't allow me to run it.
 
Joined
Feb 10, 2005
Messages
625
This is probably silly, but will the machine, let you in in safe mode, if you login as admin?
 
Joined
Feb 10, 2005
Messages
625
I also found this:

Booting the pc with your start disks created with windows xp *1 or Booting the pc using your windows xp cd-rom *2

*1 - at the command prompt goto c:\windows\system32\
copy userinit.exe wsaupdater.exe

now reboot your pc , you should be able to log into windows

goto start , run then type regedit

find the following registerkey :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Userinit string value should be:

C:\WINDOWS\system32\userinit.exe,

On the damaged installations it's one of these:

C:\WINDOWS\system32\wsaupdater.exe,
C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wsaupdater.exe,

In this case edit the string to :

c:\windows\system32\userinit.exe,

Everything should work fine now !
Do install some good anti spyware software and do a virus check as mine was infected with a trojan as well.

*2 Boot the pc from the windows setup disk , at the setup screen press R for recovery

at the recovery console type cd system32
type copy userinit.exe wsaupdater.exe
type exit

then follow the instructions under *1 with the regedit.
Which is someone who had an identical problem and resolved it with the above steps
 

HOBOcs

Jim
Thread Starter
Joined
Jan 5, 2004
Messages
8,709
Interesting read. might be the answer I'm looking for.
Thanks Mike

For the Kid: - see post #3 above.
I don't appear to have that particular problem.. although I suspect it is similar. I don;t see the wsaudater file on my system, regardless, I copied userinit to it and rebooted .. no joy, same problem. (FYI, I found that thread as well). Also, logon loop occurs in both normal and safe mode even with administrator account.
 

HOBOcs

Jim
Thread Starter
Joined
Jan 5, 2004
Messages
8,709
I used the link (logon loop) and replaced my logon.scr with cmd.exe.. I'm in..
...now I'm not sure what to do next.
 
Joined
Jun 11, 2004
Messages
2,312
Hope it works out for ya, let us know how it turns out. :)


Just read your results, not good I'm guessing. I'll check around, see what I can find.
 

HOBOcs

Jim
Thread Starter
Joined
Jan 5, 2004
Messages
8,709
This is really COOOL!!
I'm in via command mode... entering c:\windows\explorer.exe gets me to a desktop with icons. (I was impatient and you must wait for it to come up)

SO. cool... now to work my way around and find the problems.... thanks for the super link!. As the article says this could be a good for a variety of issues.\

I'll follow-up with my results.
 

HOBOcs

Jim
Thread Starter
Joined
Jan 5, 2004
Messages
8,709
Stopping this thread - starting a new one in "Security" as I've been able to get where I need too. Haven't solved it .but I'm closer and suspect viruses is playing a major role.
I've been able to load hijack this and get a log file that has plenty.
Mike big help with that link.
 

HOBOcs

Jim
Thread Starter
Joined
Jan 5, 2004
Messages
8,709
Final follow-up here:
Since I been able to get an HJT log I found a line:

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit32.exe,
userinit32.exe is the culprit.

I've gone in and copied userinit.exe to userinit32.exe --- I'm back.
Now to proceed with the virus clean-up.
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top