Questions

Can't Log On XP

+
0 Votes
Locked

Can't Log On XP

pt_morgan0828
I contracted virut.56 and finally got it cleaned using Cure It!, but it apparently deleted userinit.exe (and also frmwrk32.exe I think). Now I can no longer log in to the computer. It tries to log in, then immediately logs back out. I tried booting in safe mode with the same results. Then, I tried to boot from xp reinstall disc, it blinked a cursor for about a minute then booted normally. Any help would be much appreciated.
  • +
    0 Votes
    The Scummy One

    with the cd, then go to start -- run -- type
    sfc.exe /scannow

    +
    0 Votes
    Jacky Howe

    It can also be caused by a corrupt User Profile. Try logging on as the Administrator and if that works OK create another User account.

    Enter the Recovery Console

    Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console.

    1: C:\WINDOWS

    Which Windows Installation would you like to log on to
    (To cancel, press ENTER)?
    After you enter the number for the appropriate Windows installation, Windows will then prompt you to enter the Administrator account password.

    Note If you use an incorrect password three times, the Windows Recovery Console closes. Also, if the Security Accounts Manager (SAM) database is missing or damaged, you cannot use the Windows Recovery Console because you cannot have correct authentication. After you enter your password and the Windows Recovery Console starts, type exit to restart the computer.

    Type the following command and press Enter.

    CD SYSTEM32
    (If that does not work, try CHDIR SYSTEM32)
    At the prompt type in
    <b>COPY USERINIT.EXE WSAUPDATER.EXE</b>

    Quit Recovery Console by typing EXIT and restart Windows.

    You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

    <b>"WARNING MODIFYING REGISTRY INFORMATION IS DANGEROUS"</b>
    Backup the Key before making changes.

    Now, change the USERINIT value in the registry
    Click Start, Run and type <b>Regedt32</b> and press Enter.

    Navigate to:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon

    In the right pane you will see that the value of the Userinit key is incorrectly set to <b>"wsaupdater.exe,"</b>


    In the right-pane, change the value of Userinit to C:\WINDOWS\system32\<b>userinit.exe,</b>

    Type the above value exactly as given, including the comma. Also, change the path to userinit.exe appropriately if Windows is installed in a different drive.

    Close Registry Editor and restart Windows.

    <i>Keep us informed as to your progress if you require further assistance.</i>

    <HR>
    <i>If you think that any of the posts that have been made by all TR Members, have solved or contributed to solving the problem, please Mark them as <b>Helpful</b> so that others may benefit from the outcome. </i> :-bd

    +
    0 Votes
    pt_morgan0828

    I tried logging in as an Administrator in Safe Mode and it did the same thing, logs straight back out. Then I brought up the boot menu and tried to boot from IDE Cd-rom, it tried to read the CD but didn't do anything.

    +
    0 Votes
    Jacky Howe

    to make sure that the CD/DVD is listed as the first boot device. Clean the CD. Note Do not use a paper cloth to clean the disc because that can scratch the disc.
    5. Wipe the disc from the center, outward.

    Note Do not use a circular motion because that can scratch the disc.
    6. See whether the computer can read the disc.
    7. If the computer can still not read the disc, try cleaning the disc by using one of the following items:? A water-dampened cloth
    ? A commercial CD cleaning solution
    ? A commercial DVD cleaning solution

    8. When you are finished, dry the disc thoroughly, and then insert it in the disc drive again.
    9. See whether the computer can read the disc.


    How to troubleshoot common problems that occur when a Windows XP-based computer cannot read a CD or a DVD

    http://support.microsoft.com/kb/321641

    +
    0 Votes
    pt_morgan0828

    I cleaned the cd (which really didn't need cleaning because it's practically brand new) checked the Boot Sequence and set it to Cd-rom first, and restarted. The computer shows a black screen with a cursor, while the cd-rom drive blinks, then the splash screen shows up and it boots up to the log on screen (which I can't log on through).

    +
    0 Votes
    ws3d

    Sometimes it's easier to boot from the CD via the boot menu key, which is usually F10 or F12 depending on the system. If that won't work try another disc if you have one available. Let me know if you can't find one, I'll mail an XP disc to you.

    +
    0 Votes
    Jacky Howe

    The Windows Vista Recovery CD can be used to Boot your PC.

    <b>Creating a Windows Vista Recovery CD</b>

    http://blogs.techrepublic.com.com/window-on-windows/?p=622

    <b>Download from here:</b>

    http://coblitz.codeen.org/neosmart.net/downloads/guides/Vista_Repair/Vista_Recovery_Disc_x86.iso

    Burn it to CD with Nero or similar.


    The Windows Vista Recovery CD can be used to Boot to a Command Prompt where you can run these Commands.

    Boot from the Vista CD and on the first screen click Next, click Repair your computer, click Next and select Command Prompt.

    +
    0 Votes
    dixon

    ...and, with all due respect to the other posters, I doubt that any of the suggestions you've received are going to help much. Have a look at this post for an account of some of my travails:

    http://techrepublic.com.com/5208-6230-0.html?forumID=102&threadID=304663&messageID=3039806

    At the least, you're probably going to need to slave your drive to a working machine to retrieve your files, which would then need to be scanned. Then, if you're lucky, you might delete the partition(s)using that same machine and then be able to put the drive back in the original machine and reinstall Windows.

    On the other hand, you may find that various devices' firmware are infected as well, in which case, you'll likely be reinfected at the next reboot.

    Nasty business.

  • +
    0 Votes
    The Scummy One

    with the cd, then go to start -- run -- type
    sfc.exe /scannow

    +
    0 Votes
    Jacky Howe

    It can also be caused by a corrupt User Profile. Try logging on as the Administrator and if that works OK create another User account.

    Enter the Recovery Console

    Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console.

    1: C:\WINDOWS

    Which Windows Installation would you like to log on to
    (To cancel, press ENTER)?
    After you enter the number for the appropriate Windows installation, Windows will then prompt you to enter the Administrator account password.

    Note If you use an incorrect password three times, the Windows Recovery Console closes. Also, if the Security Accounts Manager (SAM) database is missing or damaged, you cannot use the Windows Recovery Console because you cannot have correct authentication. After you enter your password and the Windows Recovery Console starts, type exit to restart the computer.

    Type the following command and press Enter.

    CD SYSTEM32
    (If that does not work, try CHDIR SYSTEM32)
    At the prompt type in
    <b>COPY USERINIT.EXE WSAUPDATER.EXE</b>

    Quit Recovery Console by typing EXIT and restart Windows.

    You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

    <b>"WARNING MODIFYING REGISTRY INFORMATION IS DANGEROUS"</b>
    Backup the Key before making changes.

    Now, change the USERINIT value in the registry
    Click Start, Run and type <b>Regedt32</b> and press Enter.

    Navigate to:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon

    In the right pane you will see that the value of the Userinit key is incorrectly set to <b>"wsaupdater.exe,"</b>


    In the right-pane, change the value of Userinit to C:\WINDOWS\system32\<b>userinit.exe,</b>

    Type the above value exactly as given, including the comma. Also, change the path to userinit.exe appropriately if Windows is installed in a different drive.

    Close Registry Editor and restart Windows.

    <i>Keep us informed as to your progress if you require further assistance.</i>

    <HR>
    <i>If you think that any of the posts that have been made by all TR Members, have solved or contributed to solving the problem, please Mark them as <b>Helpful</b> so that others may benefit from the outcome. </i> :-bd

    +
    0 Votes
    pt_morgan0828

    I tried logging in as an Administrator in Safe Mode and it did the same thing, logs straight back out. Then I brought up the boot menu and tried to boot from IDE Cd-rom, it tried to read the CD but didn't do anything.

    +
    0 Votes
    Jacky Howe

    to make sure that the CD/DVD is listed as the first boot device. Clean the CD. Note Do not use a paper cloth to clean the disc because that can scratch the disc.
    5. Wipe the disc from the center, outward.

    Note Do not use a circular motion because that can scratch the disc.
    6. See whether the computer can read the disc.
    7. If the computer can still not read the disc, try cleaning the disc by using one of the following items:? A water-dampened cloth
    ? A commercial CD cleaning solution
    ? A commercial DVD cleaning solution

    8. When you are finished, dry the disc thoroughly, and then insert it in the disc drive again.
    9. See whether the computer can read the disc.


    How to troubleshoot common problems that occur when a Windows XP-based computer cannot read a CD or a DVD

    http://support.microsoft.com/kb/321641

    +
    0 Votes
    pt_morgan0828

    I cleaned the cd (which really didn't need cleaning because it's practically brand new) checked the Boot Sequence and set it to Cd-rom first, and restarted. The computer shows a black screen with a cursor, while the cd-rom drive blinks, then the splash screen shows up and it boots up to the log on screen (which I can't log on through).

    +
    0 Votes
    ws3d

    Sometimes it's easier to boot from the CD via the boot menu key, which is usually F10 or F12 depending on the system. If that won't work try another disc if you have one available. Let me know if you can't find one, I'll mail an XP disc to you.

    +
    0 Votes
    Jacky Howe

    The Windows Vista Recovery CD can be used to Boot your PC.

    <b>Creating a Windows Vista Recovery CD</b>

    http://blogs.techrepublic.com.com/window-on-windows/?p=622

    <b>Download from here:</b>

    http://coblitz.codeen.org/neosmart.net/downloads/guides/Vista_Repair/Vista_Recovery_Disc_x86.iso

    Burn it to CD with Nero or similar.


    The Windows Vista Recovery CD can be used to Boot to a Command Prompt where you can run these Commands.

    Boot from the Vista CD and on the first screen click Next, click Repair your computer, click Next and select Command Prompt.

    +
    0 Votes
    dixon

    ...and, with all due respect to the other posters, I doubt that any of the suggestions you've received are going to help much. Have a look at this post for an account of some of my travails:

    http://techrepublic.com.com/5208-6230-0.html?forumID=102&threadID=304663&messageID=3039806

    At the least, you're probably going to need to slave your drive to a working machine to retrieve your files, which would then need to be scanned. Then, if you're lucky, you might delete the partition(s)using that same machine and then be able to put the drive back in the original machine and reinstall Windows.

    On the other hand, you may find that various devices' firmware are infected as well, in which case, you'll likely be reinfected at the next reboot.

    Nasty business.