Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unable to log-in: probable cause: userinit.exe corrupted


  • This topic is locked This topic is locked
5 replies to this topic

#1 amal s

amal s

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:11 PM

Posted 21 February 2010 - 06:06 PM

Hi,

I have been trying to fix this login-logoff problem for over a week without any success. I have tried logging in through the Windows XP CD recovery console with no luck. I'm not able to log-in through safe mode as well.

I tried the BartPE method, but was getting errors while building the ISO file.

I saw a post here using Hiren's BootCD and tried that. Now I'm able to log-in through the Mini WinXP mode of Hiren's CD. I tried replacing the userinit.exe through my un-infected office computer, but that did not help either. I looked for the Userinit value in the registries for HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER. The current value is "X:\i386\system32\userinit.exe," - which I assume is value set by Hiren's BootCD since I see a drive under My Computer: (X:) MiniXP. I tried changing it to "C:\WINDOWS\system32\userinit.exe," but I'm still not able to log-in. Also the userinit.exe is present in "C:\WINDOWS\system32\".

Please advice what should be done! Thank you for your time in advance!

Regards,
Amal

Edited by Orange Blossom, 21 February 2010 - 09:41 PM.
Move to AII. ~ OB


BC AdBot (Login to Remove)

 


#2 amal s

amal s
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:11 PM

Posted 22 February 2010 - 08:48 PM

Can someone please help me solve this issue? Thanks!

#3 amal s

amal s
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:11 PM

Posted 22 February 2010 - 09:25 PM

I have tried running the dds.scr and gmer.exe after logging in through Hiren's BootCD, but I've not been successful in getting any kind of logs.

When I click on dds.scr, a black screen opens up and closes back without any warning or text.

When I click on gmer.exe, I get a warning: X:\i386\system32\config\system: The system cannot find the file specified. Then I get the box for the scan. I unchecked Sections and IAT/EAT, and checked C:\. It then scans for a little bit and closes with the same warning.

I am downloading these files and transferring the files to the infected computer using a flash drive. My flash drive is G:

#4 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,113 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:11 AM

Posted 01 March 2010 - 02:52 AM

Hello, my apologies for the delay.

OK this file is big Print these instruction out so that you know what you are doing

Two programs to download

First

ISOBurner this will allow you to burn OTLPE ISO to a cd and make it bootable. Just install the program, from there on in it is fairly automatic. Instructions

Second
  • Download OTLPE.iso and burn to a CD using ISO Burner. NOTE: This file is 292Mb in size so it may take some time to download.
  • When downloaded double click and this will then open ISOBurner to burn the file to CD
  • Reboot your system using the boot CD you just created.

    Note : If you do not know how to set your computer to boot from CD follow the steps here
  • Your system should now display a REATOGO-X-PE desktop.
  • Double-click on the OTLPE icon.
  • When asked "Do you wish to load the remote registry", select Yes
  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTL should now start. Change the following settings
    • Change Drivers to Use Safelist
  • Press Run Scan to start the scan.
  • When finished, the file will be saved in drive C:\OTL.txt
  • Copy this file to your USB drive if you do not have internet connection on this system
  • Please post the contents of the OTL.txt file in your reply.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#5 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,113 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:11 AM

Posted 05 March 2010 - 07:03 AM

Hello, are you still there?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#6 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,113 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:11 AM

Posted 13 March 2010 - 04:38 AM

Due to lack of feedback this topic will now be closed.

If you are the original topic starter and you need this topic reopened, please send me a PM.

Everyone else, please start a new topic.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users