66shelby Posted March 20, 2009 ID:66241 Share Posted March 20, 2009 i did a full systen scan removed threats restarted pc now do password an logs on an off an i'm back at password does the log in music an log off music tried all the safe mode boots any ideas Link to post Share on other sites More sharing options...
Staff miekiemoes Posted March 21, 2009 Staff ID:66325 Share Posted March 21, 2009 Hi,There are two scenarios here that could have caused this..1). The scanner you used detected your userinit.exe as infected and deleted it. MBAM won't delete userinit.exe, even though if infected.2). There was a reference set to a malicious file under the userinit registry value in the registry.When the malicious file gets deleted, but the reference stays in the registry, then you won't be able to log in either.For the second scenario, you can use these instructions:http://windowsxp.mvps.org/peboot.htmThis explains how to use BartPe bootcd to edit the registry and restore the userinit value in the registry.In case your userinit.exe got deleted (you can also use BARTPE for that to check and replace), then you can replace it again from your Windows cd. userinit.exe should be in your system32 folder.In both cases, a Windows repair install will solve the problem as well. THis won't erase your data - it will only restore keys/system files (replace) to default.http://www.michaelstevenstech.com/XPrepairinstall.htm Link to post Share on other sites More sharing options...
66shelby Posted March 21, 2009 Author ID:66411 Share Posted March 21, 2009 Hi,There are two scenarios here that could have caused this..1). The scanner you used detected your userinit.exe as infected and deleted it. MBAM won't delete userinit.exe, even though if infected.2). There was a reference set to a malicious file under the userinit registry value in the registry.When the malicious file gets deleted, but the reference stays in the registry, then you won't be able to log in either.For the second scenario, you can use these instructions:http://windowsxp.mvps.org/peboot.htmThis explains how to use BartPe bootcd to edit the registry and restore the userinit value in the registry.In case your userinit.exe got deleted (you can also use BARTPE for that to check and replace), then you can replace it again from your Windows cd. userinit.exe should be in your system32 folder.In both cases, a Windows repair install will solve the problem as well. THis won't erase your data - it will only restore keys/system files (replace) to default.http://www.michaelstevenstech.com/XPrepairinstall.htm Link to post Share on other sites More sharing options...
Staff miekiemoes Posted March 23, 2009 Staff ID:66769 Share Posted March 23, 2009 Any progress yet? Link to post Share on other sites More sharing options...
Staff miekiemoes Posted March 30, 2009 Staff ID:68619 Share Posted March 30, 2009 Due to the lack of feedback, this Topic is closed.If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.Everyone else please begin a New Topic. Link to post Share on other sites More sharing options...
Recommended Posts