Help!!! Malware removal logon loop!

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by mycoolm, Jan 6, 2009.

  1. mycoolm

    mycoolm Private E-2

    i have searched for my answer but haven't found anything yet. I have an ACER laptop (which didn't come with my windows recovery disk) and it is stuck in a constant loop. I was doing a scan in safe mode so I could remove any files that were put on the computer by my teenage sister. God only knows what she downloads when I am not home. Anyways long story short. I was running AVIR antivirus and it was finding common things like cryptxdisk trojan files ect or something along those lines. Apparently one file it deleted was tied to the winlogon i assume because I get to the log on screen, put in my password and bam instant log on then off. I installed another windows XP in the directory C: to at least log on and I am kinda stumped as to how to get my original windows out of this loop. PLEASE HELP! no recovery disk and need my programs asap for college. Thanks in advance
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Sounds like you have deleted your C:\Windows\system32\userinit.exe file or corrupted it in someway. Or a third possibility is that you have corrupted the registry key that is responsible for loading it at startup.

    You would need a bootable Windows CD to repair this or you are going to have to use options like the below and I'm not sure what your experience level is but this is not something for a novice and we do not have time to teach/instruct all the details in this forum.

    • UBCD4Win
    • SystemRescueCd
    • Another option is to put the hard disk into another PC as a slave drive and make sure the userinit.exe file is present and a valid size. If not, you need to replace it from another copy that may be on the disk or from another PC. If the file is their and is valid, then your registry has been corrupted and you will need to use a procedure like in the below to repair the registry.
    However all the above being stated, since you installed another copy of Windows, you need to make sure that you are repairing the correct copy of Windows and I'm not sure that is even possible now since you may have lost System Restore points and registry hive info for the user accounts in the other Windows installation. You would need to check this out by posting in the Software Forum.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds