Xp auto log off [Solved/Closed]

Edit these values and type the correct path of shell :

Shell = explorer.exe
Userinit=X:\windows\system32\userinit.exe

NOTE: These files may also be deleted by spywares. You may need to extract them using Windows CD.

Steps for rectifying this problem:


Log on to a networked computer.
Run Regedit.exe
Point your cursor to HKEY_LOCAL_MACHINE
Select File > Connect Remote Registry
Type computer name (infected computer)
Navigate to the following location in registry of destination or infected computer


HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon


Edit these two values in right pane:

Shell
Userinit


Change these two values to
Shell=explorer.exe
Userinit = x:\windows\system32\userinit.exe
Exit from Registry
Restart Infected computer.
You should be able to log on to computer.
if it not work then go to back steps and just copy orwrite the file userinit.exe

workded successfully tested 100 percent gauranted

WAQAR GILGITI

Hi There
You can try one of two things to start with.

Try booting into safe mode
On starting your pc hold down the F8 key you should be taken to a menu to boot in safe mode.
When you get to the logon screen select the Administrator account.

If you cant do that take you Hard drive out and put it in your mates pc or another pc if you have one and transfer the files that way.

These will only work If your hard drive is not faulty.

Let me know how you get on

Regards Tony B.

this one worked for me:

1. login to XP recovery console (after booting off XP CD)

2. from the c:\windows> prompt, type:

expand d:\i386\userinit.ex_ system32

Change d: to the drive letter of your CD-ROM.

Note that you must be in the c:\windows directory to type this command (this is the default directory in the Recovery Console)

The second parameter on the expand commandline tells it to write the expanded file into the system32 directory. (type expand /? for more info on the expand utility)

Cheers chaps! ;)

Hey ALL
I found the Solution of the problem.
When i lost my Userinit.exe file it may cause automatic logoff when we try to log on with any user.

Don`t try enything else.

Just bring a windows xp Bootable Cd Then Boot form that Disk
And Follow these Steps.
Start Recovery Console ( Press R in the First Screen)\
Choose your windows 1/2/3 or Other
provide password
Command Prompt will appears
type
copy g:\I386\USERINIT.EX_ C:\WINDOWS\system32\USERINIT.EXE
(G is the CD Rom Drive Replace it with your CD Rome Drive alphabet)

if 1 files coppied massege appears
You have done all well
type exit : The system will rebooted
You have done well Enjoy

THIS SOLUTION WORKS 100%

Let me explain what happen with ur computer (why u cant login into ur windows account).

1) u got a virus
2) it copied itslef, or it made a copy simmilar name to itself into ur WINDOWS/system32
3) it cahnged the registry key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon, and instead "Userinit.exe", it wrote its name

So, heres an example:

1) u got a virus, for an example, "winupdate86.exe"
2) it made a copy inside system32 as "winlogon86.exe"
3) changed registry key, and in entry putted "winlogon86.exe"

So, ur computer actualy loged on via virus, all time until ur antivirus deleted it (after that u couldnt be able to login). After ur antivurs detected and removed the virus( both "winupdate86.exe" and "winlogon86.exe") ur windows continues to look for "winlogon86.exe", couse it is on current place in registry,and its all it knowsto look for, when it try to login.

So, to solve the problem u need to (SOLUTION!!!)

1) only way to recover ur login is to find a copy of "userinit.exe" file (from XP DVD, from another computer...)
2) rename it to be as name of virus u had (u maybe dont know it, couse ur antivirus deleted it, but if u know u llbe able to fix ur login). So, sopy of "userinit.exe" rename to "winlogon86.exe"
3) put new renamed copy into ur system32 (Ofc, u dont have windows on ur computer, couse u cant login, but ucan plug off hard disk and plugin it to another computer. Other solution is if u can make bottable USB or Floppy disk DOS, and use simple copy function. 3th solution is if u have another operative system on ur computer, and manage coping there)
4) login ur windows normaly (now after u tricked ur regystry key, it still looks for same entry when it login, which was name of virus. But trick is u made a copy of real userinit.exe, and renamed to trick registry)
5) find via regedit HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ , and instead name of virus, put "userinit.exe"

Thats all, ofc if u still have virus would be great if u write its name before ur Antivirus delete.. If u still know it, just do steps. If u dont know actual name of virus u can do steps, but not gonna help u. Couse u need to know whats written in entry HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ . I found alctual name of my antivirus in way I go to search files inside my WINDOWS folder. And after it finished, I sorted all files with Modified Date, and Created Date... I found all files of virus in my system32... Deleted them and I had this problem... but after I saw all u people worte here I knew how to fix. Ofc I was lucky cuz I before deleting them, made a carantine. So I knew names. And with another comuter fixed.


Hope I gonna help

I have also the same problem... can you help somebody to solve this issues... I've tried in both modes Normal & Safe but no luck

Manual steps to recover a corrupted registry that prevents Windows XP from starting
The procedure that this article describes uses Recovery Console and System Restore. This article also lists all the required steps in specific order to make sure that the process is fully completed. When you finish this procedure, the system returns to a state very close to the state before the problem occurred. If you have ever run NTBackup and completed a system state backup, you do not have to follow the procedures in parts two and three. You can go to part four.
Part one
In part one, you start the Recovery Console, create a temporary folder, back up the existing registry files to a new location, delete the registry files at their existing location, and then copy the registry files from the repair folder to the System32\Config folder. When you have finished this procedure, a registry is created that you can use to start Windows XP. This registry was created and saved during the initial setup of Windows XP. Therefore any changes and settings that occurred after the Setup program was finished are lost.

To complete part one, follow these steps:
1. Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.
Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted to do so.
2. When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
3. If you have a dual-boot or multiple-boot computer, select the installation that you want to access from the Recovery Console.
4. When you are prompted to do so, type the Administrator password. If the administrator password is blank, just press ENTER.
5. At the Recovery Console command prompt, type the following lines, pressing ENTER after you type each line:
md tmp
copy c:\windows\system32\config\system c:\windows\tmp\system.bak
copy c:\windows\system32\config\software c:\windows\tmp\software.bak
copy c:\windows\system32\config\sam c:\windows\tmp\sam.bak
copy c:\windows\system32\config\security c:\windows\tmp\security.bak
copy c:\windows\system32\config\default c:\windows\tmp\default.bak

delete c:\windows\system32\config\system
delete c:\windows\system32\config\software
delete c:\windows\system32\config\sam
delete c:\windows\system32\config\security
delete c:\windows\system32\config\default

copy c:\windows\repair\system c:\windows\system32\config\system
copy c:\windows\repair\software c:\windows\system32\config\software
copy c:\windows\repair\sam c:\windows\system32\config\sam
copy c:\windows\repair\security c:\windows\system32\config\security
copy c:\windows\repair\default c:\windows\system32\config\default

6. Type exit to quit Recovery Console. Your computer will restart.
Note This procedure assumes that Windows XP is installed to the C:\Windows folder. Make sure to change C:\Windows to the appropriate windows_folder if it is a different location.

This is the Best of the Best But with One Problem I am Not responsible For Lost Data if You Lose data Just Get a Recovery data Software For your Pictures and Music Files...

Hi,


My name is Anand.


I system was infected this problem. so please send me solution if you have.


i am really thank to you..

I had the same problem and you guys pointed me in the right direction.
I had neither of these files so I copied userinit.exe from another machine in my house to the laptop and that fixed it.

OK, I see many people still have this problem.. and some of them didnt have their own computer for Christmas/NewYear, spent vacations tring to find solution, whats sad...



I) Read this: http://en.kioskea.net/forum/affich-22087-xp-auto-log-off?page=4#179


II) Try this

To solve the problem u need:

1) To know whats written in registry key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon


Should be written userini.exe, if isnt change it to be using some software which can change registry of instalaion of windows in another operative system other, computer, or from MSdos. Somehow, try to find one good program for changing registry from DOS... I dont know any, but u try.

2) make a copy of original userinit.exe in ur WINDOWS\system32


3) Login regulary, should works!

Or


II' ) If u know the name of virus which was deleted from antivirus:
1) Copy userinit.exe from other computer into ur WIDNOWS\system32

2) Rename it to be like name of virus u had (if ur virus was updaterServer.exe, rename userinit.exe to be updaterServer.exe. Why? Because its written in HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon, and ur computer try to login on virus. But virus is deleted, and ur comp dont have with what to init a user. )

3) Login regulary, should works!


FAQ: How to copy file into system, or cahnge the registry when I cant login? Use any DOS, or plug hard disk to another computer...


Good luck;)







http://en.kioskea.net/forum/affich-22087-xp-auto-log-off?page=4#179

Thank you so much for the information. This was a nasty virus/trojan. The following worked for me...
1) I was able to remove the hard drive and install it on a clean computer as a slave drive. I used Norton 360 to scan and rescan the drive until it was clean of virus.
2) I copied userinit.exe and winlogon.exe from the clean computer to the 2nd HD and replaced the existing files. And reinstalled the HD in the computer. Still had problems.
3) Created a BartPE recovery disk - best thing! Used BartPE to get access to the computer and used regedit to update the required information. (http://www.nu2.nu/pebuilder/)
4) This link was extremely valuable on how to load and edit the registry once BartPE had worked, as loading registries is not easy. http://windowsxp.mvps.org/peboot.htm
5) Added Shell and Winlogon information to Registry keys (as the antivirus had removed them altogether)
Under HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell=explorer.exe
Userinit = C:\windows\system32\userinit.exe,
(don't forget the , at the end)

System works now... Thank you all

Here's an easy fix if you have the XP install disk.

Enter the Recovery Console
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)
Type the following command and press Enter.
CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.
You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

Now, change the USERINIT value in the registry and change it accordingly.

Click Start, Run and type REGEDIT. Navigate to:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon
In the right-pane, change the value of Userinit to "C:\WINDOWS\system32\userinit.exe,"
Type the above value exactly as given, including the comma - exclude the quotes. Also, change the path to userinit.exe appropriately if Windows is installed in a different drive.
Close Registry Editor and restart Windows. The Quick Launch settings should be retained now.

IveTriedEnter the Recovery Console
Boot the system using the Windows XP CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows (Or any other drive-letter where you've installed XP)
Type the following command and press Enter.
CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)
COPY USERINIT.EXE WSAUPDATER.EXE
Quit Recovery Console by typing EXIT and restart Windows.
You'll be able to login successfully as you've created the wsaupdater.exe file (now, a copy of userinit.exe)

Now, change the USERINIT value in the registry and change it accordingly.

ive tried all the ones listed above actually not a single one worked anyone know anotherfix

hi,

hi to every one i have the same problem as what you have guys and it really pizz me off, i tried most of the procedures posted in this forum and it ends up on nothing..i tried to download PE builder and created a BARTPE, yes batrPE will boot on CD and you can edit registry but it is none sense, i tried to load a hive namely SOFTWARE and try to modify it, i restart my PC and it doesn't do anything or any progress. I also tried to repair it using windows xp but it doesn't do anything. Guys don't waste your on doing this procedure, the best thing to do is take out your hard drive connect it to other computer scan the hard drive, and back up your important files, then reformat you hard drive. For those who cannot remove their drive try to use BARTPE or ERD commander to back up your files.. ..

Thanks for all the help on this issue.

I have tried to fix if you have the XP install disk.

COPY USERINIT.EXE WSAUPDATER.EXE

but i get the error


The system cannot find the file specified.

thanks.,

heya's, my gf's comp has this same problem, cannot log in through safe mode iether
i understand that a virus or something has changes the "shell" and "userinit" files so that u cannot log in
we never had our comps networked and am unsure how to, so i connected her HD to my PC
but i'm not sure how to edit her
Shell
or Userinit

files.

i can edit my own though regedit.exe

so i know what to edit and i'm pretty sure i have to make them

Shell=explorer.exe
Userinit = x:\windows\system32\userinit.exe

i jus don't know how to do it to her HD

i have read about making a BartPE bootable CD, but then i have to use some windows xp disc that i cannot find. i would rather not do this, is there any other easier solution?

Many thanks

It works fine.

Props

What worked for me was to copy c:\windows\system32\userinit.exe from one user's computer to the others. The file was missing.
After I copied it and rebooted all is fine.

Can someone please reply to those of us who have followed these instructions and keep getting "The system cannot find the file or directory specified?"

Hi I have a mecer extreme when it boots up i am able to login then it would automatically shuts down and restart again. Sometime it takes 30 minutes after logging on to the internet that the same thing happens.

Hope you can assist me i am really lost here.