Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Removed viruses and now Data Execution Protection blocks Userinit Logon Application!

  • Please log in to reply
1 reply to this topic

#1 Nate7410


  • Members
  • 1 posts
  • Local time:09:23 PM

Posted 09 November 2009 - 04:16 PM

Today I began to suspect I had some serious viruses/spyware on my computer. Whatever it was, it wasn't allowing me to run any virus scans. So I restarted my computer in safe mode and was able to run a complete scan with SuperAntiSpyware. After removing about 50 things, it asked me to reboot my computer.

Upon rebooting the computer, I received a message that Data Execution Prevention had prevented the Userinit Logon Application, and after I closed that message, I was faced with just a black screen. I wasn't able to find any way to load Windows Explorer or anything else.

I have tried rebooting in both Safe Mode and in Directory Services Restore mode but in both cases, I'm told that windows failed to start.

With my other computer I downloaded PC Regedit and burnt it to a CD, and booted my computer from that disc. I was able to check the registry entry for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit\C:\WINDOWS\system32\userinit.exe, and it appeared to be present and valid.

I don't know what else to do... I've reached the limit of my own knowledge. Please, can someone suggest a fix for this other than reformatting my computer?

BC AdBot (Login to Remove)


#2 garmanma


    Computer Masochist

  • Members
  • 27,809 posts
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:10:23 PM

Posted 10 November 2009 - 03:47 PM

If you cannot bootup normally, cannot transfer required tools to the infected machine and cannot download anything while in safe mode, then your options are limited to what security tools you have on your computer. If those tools do not work, then your options become even more limited.

Have you tried using System Restore from a command prompt in Safe Mode to return to a previous state before your problems began?

If that doesn't work. these are links to Anti-virus vendors that offer free LiveCD or Rescue CD utilities that are used to boot from for repair of unbootable and damaged systems, rescue data, scan the system for virus infections. Burn it as an image to a disk to get a bootable CD. All (except Avira) are in the ISO Image file format. Avira uses an EXE that has built-in CD burning capability.If you are not sure how to burn an image, please read How to write a CD/DVD image or ISO. If you need a FREE utility to burn the ISO image, download and use ImgBurn.

Note: In order to use a rescue disk, the boot order must be set to start from the CD-ROM drive. If the CD is not first in the boot order, the computer will attempt to start normally by booting from the hard drive. The boot order is a setting found in the computerís BIOS which runs when it is first powered on. This setting controls the order that the BIOS uses to look for a boot device from which to load the operating system. The default will normally be A:, C:, CD-ROM. Different computers have different ways to enter the BIOS. If you're not sure how to do this, refer to:
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users