continual login

[mrcOwner]

I recently updated my Microsoft Critical updates and
everything installed normally. When I rebooted, the
system began logging me off almost immediately after I
logged in. I can't get back in to Windows. Not in Safe
Mode, not in Last Know Good Config. Any help?

 

[Doug Knox MS-MVP]

This is a symptom of anti-spyware software removing a spyware file.

Boot from the XP CD and let setup begin. When you're prompted to Repair the installation (first time), select R to enter the Recovery Console.

You'll need the Administrator password for that machine to enter Recovery Console.

Once there, and at the C:\Windows prompt, type in CD System32

Then enter COPY USERINIT.EXE WSAUPDATER.EXE

Reboot the computer normally. Once its rebooted, log on to an account with Administrator privileges and click Start, Run and enter REGEDIT Go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

In the right pane look for the Userinit value. It probably reads wsaupdater.exe. Double click the Userinit value and change it to C:\Windows\System32\userinit.exe, The comma on the end is intentional.

You can then delete the WSAUPDATER.EXE file that you created earlier.

 

[mrcOwner]

Thank You! It worked.

-----Original Message-----
This is a symptom of anti-spyware software removing a spyware file.

Boot from the XP CD and let setup begin. When you're

prompted to Repair the installation (first time), select
R to enter the Recovery Console.

You'll need the Administrator password for that machine to enter Recovery Console.

Once there, and at the C:\Windows prompt, type in CD System32

Then enter COPY USERINIT.EXE WSAUPDATER.EXE

Reboot the computer normally. Once its rebooted, log on

to an account with Administrator privileges and click
Start, Run and enter REGEDIT Go to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

In the right pane look for the Userinit value. It

probably reads wsaupdater.exe. Double click the Userinit
value and change it to C:\Windows\System32
\userinit.exe, The comma on the end is intentional.

You can then delete the WSAUPDATER.EXE file that you created earlier.


--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"mrcOwner" <[email protected]> wrote

in message news:[email protected]...

 

[Doug Knox MS-MVP]

You're welcome