XP logs itself out as soon as it logs itself in

A

Alan

I’ve got a laptop that logs itself out as soon as it logs itself in, with all
users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it without using system
recovery?

Thanks in advance Alan
 
A

Alan

I should add that there were a lot of viruses on this laptop and the problem
occured after a preboot scan for viruses
 
N

nass

Alan said:
I’ve got a laptop that logs itself out as soon as it logs itself in, with all
users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it without using system
recovery?

Thanks in advance Alan

Did you use Last Good Known Configuration?
If the above was helpful try to perform system Restore and run a complete
scan by going through these cleaning steps:
- Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit or you can send them here in your next
post) and click [OK] to confirm your Changes.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Click on Advanced Tab and scroll down under the browsing option and uncheck
this box:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) and click Apply
then OK to close your IE Properties.
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html
Run diskm cleanup then this command:
sfc /scannow

Have a look in the Event Viewer for error messages(X) that can shed some
light and post it back in your next post by performing the following and also
the System File Checker (SFC) sfc /scannow.
HTH,
nass
 
W

WTC

Alan said:
I’ve got a laptop that logs itself out as soon as it logs itself
in, with all users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it without using
system recovery?

Try this soluton first.

You cannot log on to Windows XP after you remove Wsaupdater.exe
http://support.microsoft.com/?kbid=892893

If you have performed the above KB article and you cannot still log on
your computer then try the solution below.

--or--

The problem may be an incorrect system drive letter. With a networked
machine, open the registry and connect to the problematic machine and
navigate to:

[MACHINE_NAME\HKLM\SYSTEM\MountedDevices]

and delete all values that look like this:

\DosDevices\C
\DosDevices\D
\DosDevices\E
and so on

When finished, make sure you disconnect the machine from the registry.
There are other ways to gain access to the registry if you cannot
connect to the problematic machine via networked Registry. Please let
me know if you need information on how to gain access to the Registry
if you cannot by a networked registry.

How to restore the system/boot drive letter in Windows
http://support.microsoft.com/?kbid=223188
 
A

Alan

Thanks for your post Nass, I have tried Last Good Known Configuration, I have
run out of ideas to get back into windows, I need help from someone with a
lot more knowledge than I have.

nass said:
Alan said:
I’ve got a laptop that logs itself out as soon as it logs itself in, with all
users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it without using system
recovery?

Thanks in advance Alan

Did you use Last Good Known Configuration?
If the above was helpful try to perform system Restore and run a complete
scan by going through these cleaning steps:
- Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit or you can send them here in your next
post) and click [OK] to confirm your Changes.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

Click on Advanced Tab and scroll down under the browsing option and uncheck
this box:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) and click Apply
then OK to close your IE Properties.
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html
Run diskm cleanup then this command:
sfc /scannow

Have a look in the Event Viewer for error messages(X) that can shed some
light and post it back in your next post by performing the following and also
the System File Checker (SFC) sfc /scannow.
HTH,
nass
 
N

nass

Alan said:
Thanks for your post Nass, I have tried Last Good Known Configuration, I have
run out of ideas to get back into windows, I need help from someone with a
lot more knowledge than I have.

You can download Ultimate Boot CD and use one of the Boot scan tools to
remove the Boot sector viruses you may have and also to run chkdsk on the
hard drive.
Anti-Virus/Malware Tools
http://www.ultimatebootcd.com/

HTH,
nass
 
A

Alan

Thanks for your posts, I have tried your suggestions regedit , Wsaupdater.exe
and chkdsk, no luck
Just to clarify, windows is booting to the log in screen, where there are 2
users but when I try to log into windows it immediately logs back out to the
log in window. Same in safe mode


WTC said:
Alan said:
I’ve got a laptop that logs itself out as soon as it logs itself
in, with all users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it without using
system recovery?

Try this soluton first.

You cannot log on to Windows XP after you remove Wsaupdater.exe
http://support.microsoft.com/?kbid=892893

If you have performed the above KB article and you cannot still log on
your computer then try the solution below.

--or--

The problem may be an incorrect system drive letter. With a networked
machine, open the registry and connect to the problematic machine and
navigate to:

[MACHINE_NAME\HKLM\SYSTEM\MountedDevices]

and delete all values that look like this:

\DosDevices\C
\DosDevices\D
\DosDevices\E
and so on

When finished, make sure you disconnect the machine from the registry.
There are other ways to gain access to the registry if you cannot
connect to the problematic machine via networked Registry. Please let
me know if you need information on how to gain access to the Registry
if you cannot by a networked registry.

How to restore the system/boot drive letter in Windows
http://support.microsoft.com/?kbid=223188
 
W

WTC

Hi Alan,

Did you perform these steps from the KB article
(http://support.microsoft.com/?kbid=892893)? This is crucial before
making the registry changes.

=======

At the Recovery Console command prompt, type:

cd system32

and then press ENTER.

Type:

copy userinit.exe wsaupdater.exe

and then press ENTER.

Type:

exit

and then press ENTER.

=====

If you are not sure how to gain access to the Recovery Console then see:

Description of the Windows XP Recovery Console for advanced users
http://support.microsoft.com/?kbid=314058

Use Option 2 to gain access to the Recovery Console.

--
William Crawford


Thanks for your posts, I have tried your suggestions regedit ,
Wsaupdater.exe and chkdsk, no luck
Just to clarify, windows is booting to the log in screen, where there
are 2 users but when I try to log into windows it immediately logs
back out to the log in window. Same in safe mode


WTC said:
Alan said:
I’ve got a laptop that logs itself out as soon as it logs itself
in, with all users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it without
using system recovery?

Try this soluton first.


If you have performed the above KB article and you cannot still log
on your computer then try the solution below.

--or--

The problem may be an incorrect system drive letter. With a
networked machine, open the registry and connect to the problematic
machine and navigate to:

[MACHINE_NAME\HKLM\SYSTEM\MountedDevices]

and delete all values that look like this:

\DosDevices\C
\DosDevices\D
\DosDevices\E
and so on

When finished, make sure you disconnect the machine from the
registry. There are other ways to gain access to the registry if
you cannot connect to the problematic machine via networked
Registry. Please let me know if you need information on how to gain
access to the Registry if you cannot by a networked registry.

How to restore the system/boot drive letter in Windows
http://support.microsoft.com/?kbid=223188
 
A

Alan

I think I have found a problem in my registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

In my registry there is no winlogon folder

Is there anything I can do about it?

WTC said:
Hi Alan,

Did you perform these steps from the KB article
(http://support.microsoft.com/?kbid=892893)? This is crucial before
making the registry changes.

=======

At the Recovery Console command prompt, type:

cd system32

and then press ENTER.

Type:

copy userinit.exe wsaupdater.exe

and then press ENTER.

Type:

exit

and then press ENTER.

=====

If you are not sure how to gain access to the Recovery Console then see:

Description of the Windows XP Recovery Console for advanced users
http://support.microsoft.com/?kbid=314058

Use Option 2 to gain access to the Recovery Console.

--
William Crawford


Thanks for your posts, I have tried your suggestions regedit ,
Wsaupdater.exe and chkdsk, no luck
Just to clarify, windows is booting to the log in screen, where there
are 2 users but when I try to log into windows it immediately logs
back out to the log in window. Same in safe mode


WTC said:
Alan wrote:

I’ve got a laptop that logs itself out as soon as it logs itself
in, with all users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it without
using system recovery?

Try this soluton first.


If you have performed the above KB article and you cannot still log
on your computer then try the solution below.

--or--

The problem may be an incorrect system drive letter. With a
networked machine, open the registry and connect to the problematic
machine and navigate to:

[MACHINE_NAME\HKLM\SYSTEM\MountedDevices]

and delete all values that look like this:

\DosDevices\C
\DosDevices\D
\DosDevices\E
and so on

When finished, make sure you disconnect the machine from the
registry. There are other ways to gain access to the registry if
you cannot connect to the problematic machine via networked
Registry. Please let me know if you need information on how to gain
access to the Registry if you cannot by a networked registry.

How to restore the system/boot drive letter in Windows
http://support.microsoft.com/?kbid=223188
 
W

WTC

Yes you can, use a System Restore point which backs up the SOFTWARE
Hive.

This is what you need to do:

Gain access to the "c:\System Volume Information" folder by using the
Security tab.

Navigate to "c:\System Volume
Information\_restore{GUID}\rp##\snapshot", use the highest RP##.

Locate "_REGISTRY_MACHINE_SOFTWARE" (this is the Software Hive for
HKLM).

Rename the Hive ""_REGISTRY_MACHINE_SOFTWARE" to SOFTWARE.

Make a backup of SOFTWARE located at c:\windows\system32\config

Replace the SOFTWARE hive from the RP## folder.

You may need to use other RP## folders to make this process work.

======

Or you can export the Winlogon key from hive
"_REGISTRY_MACHINE_SOFTWARE" and then import to the SOFTWARE hive
located at "c:\windows\system32\config". Make sure you edit the
exported hive to have the correct path for the Winlogin registry key
before importing.

You will need to load the hive "_REGISTRY_MACHINE_SOFTWARE" into a
registry editor to export the Winlogon key.

--
William Crawford


I think I have found a problem in my registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon

In my registry there is no winlogon folder

Is there anything I can do about it?

WTC said:
Hi Alan,

Did you perform these steps from the KB article
(http://support.microsoft.com/?kbid=892893)? This is crucial before
making the registry changes.

=======

At the Recovery Console command prompt, type:

cd system32

and then press ENTER.

Type:

copy userinit.exe wsaupdater.exe

and then press ENTER.

Type:

exit

and then press ENTER.

=====

If you are not sure how to gain access to the Recovery Console then
see:

Description of the Windows XP Recovery Console for advanced users
http://support.microsoft.com/?kbid=314058

Use Option 2 to gain access to the Recovery Console.

--
William Crawford


Thanks for your posts, I have tried your suggestions regedit ,
Wsaupdater.exe and chkdsk, no luck
Just to clarify, windows is booting to the log in screen, where
there are 2 users but when I try to log into windows it
immediately logs back out to the log in window. Same in safe mode


:

Alan wrote:

I’ve got a laptop that logs itself out as soon as it logs
itself in, with all users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it
without using system recovery?

Try this soluton first.
If you have performed the above KB article and you cannot still
log on your computer then try the solution below.

--or--

The problem may be an incorrect system drive letter. With a
networked machine, open the registry and connect to the
problematic machine and navigate to:

[MACHINE_NAME\HKLM\SYSTEM\MountedDevices]

and delete all values that look like this:

\DosDevices\C
\DosDevices\D
\DosDevices\E
and so on

When finished, make sure you disconnect the machine from the
registry. There are other ways to gain access to the registry
if you cannot connect to the problematic machine via networked
Registry. Please let me know if you need information on how to
gain access to the Registry if you cannot by a networked
registry.

How to restore the system/boot drive letter in Windows
http://support.microsoft.com/?kbid=223188
 
A

Alan

Thank you WTC, thanks for all your help, got in on second attempt.

Alan

WTC said:
Yes you can, use a System Restore point which backs up the SOFTWARE
Hive.

This is what you need to do:

Gain access to the "c:\System Volume Information" folder by using the
Security tab.

Navigate to "c:\System Volume
Information\_restore{GUID}\rp##\snapshot", use the highest RP##.

Locate "_REGISTRY_MACHINE_SOFTWARE" (this is the Software Hive for
HKLM).

Rename the Hive ""_REGISTRY_MACHINE_SOFTWARE" to SOFTWARE.

Make a backup of SOFTWARE located at c:\windows\system32\config

Replace the SOFTWARE hive from the RP## folder.

You may need to use other RP## folders to make this process work.

======

Or you can export the Winlogon key from hive
"_REGISTRY_MACHINE_SOFTWARE" and then import to the SOFTWARE hive
located at "c:\windows\system32\config". Make sure you edit the
exported hive to have the correct path for the Winlogin registry key
before importing.

You will need to load the hive "_REGISTRY_MACHINE_SOFTWARE" into a
registry editor to export the Winlogon key.

--
William Crawford


I think I have found a problem in my registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon

In my registry there is no winlogon folder

Is there anything I can do about it?

WTC said:
Hi Alan,

Did you perform these steps from the KB article
(http://support.microsoft.com/?kbid=892893)? This is crucial before
making the registry changes.

=======

At the Recovery Console command prompt, type:

cd system32

and then press ENTER.

Type:

copy userinit.exe wsaupdater.exe

and then press ENTER.

Type:

exit

and then press ENTER.

=====

If you are not sure how to gain access to the Recovery Console then
see:

Description of the Windows XP Recovery Console for advanced users
http://support.microsoft.com/?kbid=314058

Use Option 2 to gain access to the Recovery Console.

--
William Crawford



Alan wrote:

Thanks for your posts, I have tried your suggestions regedit ,
Wsaupdater.exe and chkdsk, no luck
Just to clarify, windows is booting to the log in screen, where
there are 2 users but when I try to log into windows it
immediately logs back out to the log in window. Same in safe mode


:

Alan wrote:

I’ve got a laptop that logs itself out as soon as it logs
itself in, with all users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it
without using system recovery?

Try this soluton first.



If you have performed the above KB article and you cannot still
log on your computer then try the solution below.

--or--

The problem may be an incorrect system drive letter. With a
networked machine, open the registry and connect to the
problematic machine and navigate to:

[MACHINE_NAME\HKLM\SYSTEM\MountedDevices]

and delete all values that look like this:

\DosDevices\C
\DosDevices\D
\DosDevices\E
and so on

When finished, make sure you disconnect the machine from the
registry. There are other ways to gain access to the registry
if you cannot connect to the problematic machine via networked
Registry. Please let me know if you need information on how to
gain access to the Registry if you cannot by a networked
registry.

How to restore the system/boot drive letter in Windows
http://support.microsoft.com/?kbid=223188
 
W

WTC

You are most welcome Alan.


--
William Crawford

Thank you WTC, thanks for all your help, got in on second attempt.

Alan

WTC said:
Yes you can, use a System Restore point which backs up the SOFTWARE
Hive.

This is what you need to do:

Gain access to the "c:\System Volume Information" folder by using
the Security tab.

Navigate to "c:\System Volume
Information\_restore{GUID}\rp##\snapshot", use the highest RP##.

Locate "_REGISTRY_MACHINE_SOFTWARE" (this is the Software Hive for
HKLM).

Rename the Hive ""_REGISTRY_MACHINE_SOFTWARE" to SOFTWARE.

Make a backup of SOFTWARE located at c:\windows\system32\config

Replace the SOFTWARE hive from the RP## folder.

You may need to use other RP## folders to make this process work.

======

Or you can export the Winlogon key from hive
"_REGISTRY_MACHINE_SOFTWARE" and then import to the SOFTWARE hive
located at "c:\windows\system32\config". Make sure you edit the
exported hive to have the correct path for the Winlogin registry key
before importing.

You will need to load the hive "_REGISTRY_MACHINE_SOFTWARE" into a
registry editor to export the Winlogon key.

--
William Crawford


I think I have found a problem in my registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon

In my registry there is no winlogon folder

Is there anything I can do about it?

:

Hi Alan,

Did you perform these steps from the KB article
(http://support.microsoft.com/?kbid=892893)? This is crucial
before making the registry changes.

=======

At the Recovery Console command prompt, type:

cd system32

and then press ENTER.

Type:

copy userinit.exe wsaupdater.exe

and then press ENTER.

Type:

exit

and then press ENTER.

=====

If you are not sure how to gain access to the Recovery Console
then see:

Description of the Windows XP Recovery Console for advanced
users http://support.microsoft.com/?kbid=314058

Use Option 2 to gain access to the Recovery Console.

--
William Crawford



Alan wrote:

Thanks for your posts, I have tried your suggestions regedit ,
Wsaupdater.exe and chkdsk, no luck
Just to clarify, windows is booting to the log in screen,
where there are 2 users but when I try to log into windows it
immediately logs back out to the log in window. Same in safe
mode


:

Alan wrote:

I’ve got a laptop that logs itself out as soon as it
logs itself in, with all users and the same, in safe mode.
Can anyone help me solve this? Is it possible to fix it
without using system recovery?

Try this soluton first.



If you have performed the above KB article and you cannot
still log on your computer then try the solution below.

--or--

The problem may be an incorrect system drive letter. With a
networked machine, open the registry and connect to the
problematic machine and navigate to:

[MACHINE_NAME\HKLM\SYSTEM\MountedDevices]

and delete all values that look like this:

\DosDevices\C
\DosDevices\D
\DosDevices\E
and so on

When finished, make sure you disconnect the machine from the
registry. There are other ways to gain access to the
registry if you cannot connect to the problematic machine
via networked Registry. Please let me know if you need
information on how to gain access to the Registry if you
cannot by a networked registry.

How to restore the system/boot drive letter in Windows
http://support.microsoft.com/?kbid=223188
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top