XP logs off when I try to log on

[Guest]

For no reason I can think of, starting today XP starts up by asking me to log
on (it used to bypass the logon screen as I am the only user), and when I
click on my user name the screen flashes and then logs off with a message
that it is saving my personal settings. Since I can't log on, I can't check
or change anything. What can I do? Thanks.

 

[Rick \Nutcase\ Rogers]

Hi,

Run a spyware cleaner lately? The userinit value may have been corrupted by
the removal of blazefind. It adds wsaupdater.exe to the logon value in the
system registry, sometimes appending it, sometimes replacing it. Running
Adaware or other cleaners detects and removes wsaupdater.exe, but doesn't
correct the registry damage. If this is the case, then you may need to load
the registry hive from another installation and change it. This is the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Userinit string value should be:

C:\WINDOWS\system32\userinit.exe,

On the damaged installations it's one of these:

C:\WINDOWS\system32\wsaupdater.exe,
C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wsaupdater.exe,

Another "quickie" method of resolution is to load the Recovery Console (see
below), copy userinit.exe as wsaupdater.exe from the command prompt, then
restart normally. Once in, go and change the registry value back to what
it's supposed to be and delete the copied file. To do this, use these
commands:

C:\Windows>CD\windows\system32
C:\Windows\System32>copy userinit.exe wsaupdater.exe

Then you can exit once completed.

HOW TO: Install and Use the Recovery Console in Windows XP [Q307654]
http://support.microsoft.com/?kbid=307654

This can also be done by using the 6 disk boot floppy set mentioned in the
above article, as it loads enough of the Recovery Console so that you can
copy the file. This is particularly useful if you have an OEM installation
that includes only a Restore CD, or no disk at all.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Larry Samuels]

Sounds like you recently removed BlazeFind.
Thanks go to Rick Rogers, MVP for the following instructions:

Did you run a spyware removal program lately? The userinit value may have
been corrupted by the removal of blazefind. It adds wsaupdater.exe to the
logon value in the system registry, sometimes appending it, sometimes
replacing it. Running Adaware or other cleaners detects and removes
wsaupdater.exe, but doesn't correct the registry damage. If this is the
case, then you may need to load the registry hive from another installation
and change it. This is the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Userinit string value should be:

C:\WINDOWS\system32\userinit.exe,

On the damaged installations it's one of these:

C:\WINDOWS\system32\wsaupdater.exe,
C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wsaupdater.exe,

Another "quickie" method of resolution is to load the Recovery Console (see
below), copy userinit.exe as wsaupdater.exe from the command prompt, then
restart normally. Once in, go and change the registry value back to what
it's supposed to be and delete the copied file.

HOW TO: Install and Use the Recovery Console in Windows XP [Q307654]
http://support.microsoft.com/?kbid=307654

This can also be done by using the 6 disk boot floppy set mentioned in the
above article, as it loads enough of the Recovery Console so that you can
copy the file. This is particularly useful if you have an OEM installation
that includes only a Restore CD, or no disk at all.



--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Expert Zone -
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm

 

[Guest]

Thank you! That fixed the problem (for now, at least). You have my undying
gratitude.

One "bump" I ran into was when I tried to copy userinit.ext as
wsaupdater.exe, I couldn't change directories no matter what I tried. I
finally just entered the copy command using the full paths for the files and
that worked.

Thanks again.

Hi,

Run a spyware cleaner lately? The userinit value may have been corrupted by
the removal of blazefind. It adds wsaupdater.exe to the logon value in the
system registry, sometimes appending it, sometimes replacing it. Running
Adaware or other cleaners detects and removes wsaupdater.exe, but doesn't
correct the registry damage. If this is the case, then you may need to load
the registry hive from another installation and change it. This is the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Userinit string value should be:

C:\WINDOWS\system32\userinit.exe,

On the damaged installations it's one of these:

C:\WINDOWS\system32\wsaupdater.exe,
C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wsaupdater.exe,

Another "quickie" method of resolution is to load the Recovery Console (see
below), copy userinit.exe as wsaupdater.exe from the command prompt, then
restart normally. Once in, go and change the registry value back to what
it's supposed to be and delete the copied file. To do this, use these
commands:

C:\Windows>CD\windows\system32
C:\Windows\System32>copy userinit.exe wsaupdater.exe

Then you can exit once completed.

HOW TO: Install and Use the Recovery Console in Windows XP [Q307654]
http://support.microsoft.com/?kbid=307654

This can also be done by using the 6 disk boot floppy set mentioned in the
above article, as it loads enough of the Recovery Console so that you can
copy the file. This is particularly useful if you have an OEM installation
that includes only a Restore CD, or no disk at all.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

For no reason I can think of, starting today XP starts up by asking me to
log
on (it used to bypass the logon screen as I am the only user), and when I
click on my user name the screen flashes and then logs off with a message
that it is saving my personal settings. Since I can't log on, I can't
check
or change anything. What can I do? Thanks.