Xp Pro Logs Off Immediately After You Log In
Updated: 01/07/2005 09:16 PM

Posted by: trumpet

All of a sudden, when I log onto XP Pro as administrator, the log on goes through the normal routine, and then XP Pro immediately goes through the logoff process.
There have been no changes knowlingly made to the machine. Is this a virus? Help please.



Posted by: compukeith

Ae you able to login normally with a different user account? What about through Safe Mode?



Posted by: Tarmacian

My computer is doing it also, it doesn't matter who i log in as......Help!!



Posted by: silentallusion

I work for the technology department at a university, and we have seen five Dell 5100 laptops in the past two days with this exact same problem. When you log onto the computer as any user (under regular or safe mode), you are almost immediately logged off. We are trying to determine if this is a Bagle/Beagle variant or if it is a service running on the machine. Any ideas?



Posted by: RogersHighspeed

I know why this is happening(in my case anyways), i just dont know how to fix it. WindowsXP is having a problem with the oobe timer. the computer has been de-activated and the log off function is called up in startup somewhere. For those of you running legal versions of XP, simply restart the computer with your XP CD and repair the installation. It will only replace your system files and hopefully clear up your corrupted registry.



Posted by: rib0n

HERE IS THE FIX


1. Navigate to
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"

2. If there is a key named "OldUserinit", delete the "Userinit" key and rename the "OldUserinit" key to "Userinit".

3. The "Userinit" key should now say
"WINDOWS_PATH\system32\userinit.exe,"

"WINDOWS_PATH" is relative to where you have your windows installed.
Mine would be "C:\WINDOWS\system32\userinit.exe,"

Now you can log in again




Who changed my Userinit key?


Spyware. The program is called "Search Assistant" and is located at "\Program Files\WindowsSA". It also has some "omni*.*" files in "\WINDOWS\system32\" dir that are linked to "Userinit" key. If you remove this spyware (using Ad-aware, etc.) the "omni*.*" files are deleted and you can't log in.



How to edit registry when I can't log in?


- Use recovery console - read the manual or browse the web on how to edit registry in recovery console.

OR


- Use another machine on your network: Open regedit and select "File->Connect Remote Registry..." and in the dialog box select computer that has log in problems to view its registry.



Please reply if you find this post useful




Posted by: rcmcom

Very easy solution.

Problem: Computer Logs off out when you login
Cause: Search Assistant (search bar aside the clock in windows)

3 Steps.

1.- Get into the recovery console (with boot disks, you can get them from microsoft page).

2.- Get the file userinit.exe from another NOT INFECTED computer. (located in windows/system32 folder)

3.- Overwrite the userinit.exe original file (from the infected computer) with the new one (use a cd or disk to transport it) (COMMAND: COPY e:/userinit.exe c:/windows/system32/userinit.exe)

4.- Rename the userinit.exe to wsaupdater.exe

5.- Exit and ENJOY.


Rodrigo CoutiƱo M.
rcmcom@live2net.com



Posted by: akrootje

You can get the "best and fastest solution from rcmcom" even faster.
Especially if you don't have a userinit.exe from another computer at hand.

Just skip step 2 and 3!
As far as a know userinit.exe did'nt get infected at all.
Just COPY userinit.exe to wsaupdater.exe. (overwrite wsaupdater.exe if needed - DON'T RENAME userinit.exe, you might need it later on, see further).

[In my case adaware deleted wsaupdater while this file was still registered as the winlogon-key in the registry, causing windows to logoff immediately after login.]

Reboot and see if it works.

Later on you can use the fix of rib0n to clean the registry.



Posted by: IOStream

I've found these posts to not help, but only hurt my computer.
I was able to at least get my computer to the log in screen, now it only blue screens. I had it working with safemode, and I did chkdsk hopeing it would fix something, and it didn't. Now nothing works but going into the recovery console on my XP disk, but I cant seem to do anything right to get windows to start up right. Maybe its that I dont know anything, but I'm in great need of help.



Posted by: PirateStrike

i would like to thank you all i just had this problem worked great thank you!



Posted by: Kaze

how do u edit regedit in recovery console? i can't seems to find the solution..



Posted by: Mississauga

akrootje's method is great. I experienced the same problem after I used ADware. I couldn't login my computer for a whole afternoon until I tried his method.

Url to this pages:
http://nade.dk/web/nade/site.nsf/FramesetHP?readform&wmain=files/10A302231B4704F5C1256F82006F3E07