Thursday, July 23, 2009

“System automatically logging off after giving username and password”

--------------------------------------------------------------------------------------------------------
OS Affected: Windows 2000,XP,2003,Vista

Problem
------------
Entering your Username & Password


Loading personal setting will appear




After the above loading settings it will "Log off" & below welcome screen will appear




This problem is due to the adware Adware.BlazeFind ,which will alter following registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon value “userinit” from “%Windir%\System32\Userinit.exe” to “%Windir%\System32\Wsaupdater.exe”
After removing this virus,this registry entry remain same. So while logging on the system it will try to execute “wsaupdater.exe” which may not be there in the given path so system unable to process user initialization and automatically logged off. In this scenario we cannot login into system even in “safe mode” or “safe mode with command prompt” also.

Solution
-----------

1. Boot system from XP cd and go to recovery console. (or boot from any media which will support NTFS Partition)
2. Go to %Windir%\system32
3. Check “userinit.exe” is exists in the system32 folder, if not copy from another working system.
4. Copy “userinit.exe” to “wsaupdater.exe” (NB: Do not rename, because both are needed for next boot.)
5. Reboot the machine in safe mode using F8 button while booting.
6. Navigate following registry key
a. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
b. Locate value “userinit” in left panel.
c. Change data from “%Windir%\System32\Wsaupdater.exe” to “%Windir%\System32\Userinit.exe”.
d. Close registry editor.
7. Restart windows in normal mode

FYI Naresh.....

0 comments:

Post a Comment