Windows XP Automatic Logout after Login

Discussion in 'Software' started by Gizmoholm, May 4, 2010.

  1. Gizmoholm

    Gizmoholm Private E-2

    tryed that , it just said acces denied
     
  2. Gizmoholm

    Gizmoholm Private E-2


    i tryed that command and it copied 1 file , but it still does the same thing
     
  3. dlb

    dlb MajorGeek

    :wave Welcome to Major Geeks! :major

    Here's what's going on: a malware infection has changed the registry to a different userinit file. The 'normal' XP file is (obviously) userinit.exe. You copied a new healthy userinit.exe to your Windows directory, but the registry still has the entry for the malware version of this file. A malware scan removed the infected file, but since it is still referenced in the registry as being the login file, Windows logs off because the file has been removed. You probably cannot access the registry in the state the PC is in now, but I'll provide the registry key anyway:
    HKEY_LOCAL_MACHINE/Software/Microsoft/WindowsNT/CurrentVersion/WinLogon
    In the right pane, you'd scroll down to the Userinit entry, right click it, and change it to:
    C:\Windows\System32\Userinit.exe, (note the comma at the end)
    Again- since you don't have access to the registry, this doesn't help you too much, BUT- I do have some helpful info:
    First, a very common malware name for an infected userinit.exe file is winlogon32.exe. So, copy a healthy userinit.exe to your System32 directory, and rename it to winlogon32.exe and there's a good chance it will solve your problem and allow you to load to the desktop. If/when it does, you can then enter the registry via regedit and make the appropriate changes I listed above, and rename the file back to userinit.exe in the System32 directory.
    - OR -
    You can build yourself a UBCD4Win boot CD. It will boot to a desktop environment that runs exclusively from the CD giving you unrestricted access to your hard drive and registry. In the programs menu, there's a "Registry" section, use the Remote Registry Editor and when prompted if you want to use a 'NTUSER' file, say "yes" and point it to your user profile in 'Documents and Settings' and select the file when it's listed. Then a registry editor will open and you can navigate to the key I listed above and make the necessary changes. You can also use one of the file explorers in the "File Management > Explorers" section to browse your hard drive(s) and change/remove files as needed. This is all MUCH easier than using the Recovery Console because it's all in a very familiar Windows-like environment.... anyway - good luck!!!!

    If you have any questions, feel free to ask!!!

    (oh yeah . . . the 'how-to-build-the-UBCD4Win' guide can be found at this link . . . and UBCD4Win stands for Ultimate Boot CD For Windows ;) )
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds