Printable View
I am using XP Home, whenever I click on my name to logon , my wallpaper shows momentarilly and then it just automatically logging me off. Is there anything I can do?
I have tried booting into safe mode and from my latest good configuration and neither worked, please help, will I just have to boot from the installation disc and reformat?
try going back into safemode, control panel, user accounts, remove your account, just use the welcome screen.
should fix it
i cant get into the control panel since i cant log in past the welcome screen
Try pressing Ctrl-Alt-Del twice and then logging in as Administrator (try a blank password).
Once there, go Start | Run and type "eventvwr", then see if there are any recent entries in the System or Application logs that might explain why your other user is being logged off straight away. One of the logs being full can cause that as well (in which case you should get a popup when you log in as Administrator).
If none of that helps, you can try deleting your user profile. The first step there is to go into C:\Documents And Settings, find the directory with your username, and copy it somewhere else. That's because stuff like your Favourites, My Documents folder and email could all be stored in there. After you've done that, you can go into Control Panel | System | Advanced | User Profiles and delete your user's profile. Then reboot and see if you can log in as the normal user again.
when i tried to log into the admin it said unable to log on due to account restriction
Try holding in the Shift key when you log in as the normal user. Press Shift before you click on the name, and hold it in until everything has completely settled down.
I think this is WSAUPDATER.EXE you have picked up and I have only found one way to fix it so far.
Put you XP CD in and boot up. Let setup run and choose the first "R" you come to. This is the Recovery Console
C:\windows now follow from here:
C:\windows
type 'cd system32' the directory should now be
C:\windows\system32
type 'copy userinit.exe wsaupdater.exe'
1 file should be copied, now REBOOT!
Login might hang for a while.
Once in windows run Regedit and go to the key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Look in the right pane for the Userinit value/subkey. Double click the Userinit subkey and change it's value to C:\Windows\System32\userinit.exe,
Make sure you have the comma at the end. Exit Regedit.
You can delete the WSAUPDATER.EXE you created before now.
Elaine
How do I enter regedit and where is wsaupdater.exe to delete , like where is it found if I am ever able to get up to that point.
Regedit
Start/RUN and type regedit Then click OK
If you do not want to edit the registry, look for “wsaupdater.exe" on your system and delete it
I think you should find it here
C:\Windows\System32\wsaupdater.exe
Then download
Hijack This http://www.majorgeeks.com/download3155.html
Make a special folder to download it to. Set it to "Scan" and then to create its "Log". This will be long, but copy all of it into Notepad and post it back here to be checked.
I think we should get rid of it this way, but you must delete it immediately from your system as above or it will just all come back
Elaine
how do i boot from the disk
the disk i have is windows xp home edition re-installation disk
is that the right disk
do i just it f8 when the computer boots up and run from disk
It sounds as if you have a Restore disc rather than a proper Windows CD. Have a look on the CD to see if it has a folder called i386. If it does, boot the PC with a Win98 or ME Startup floppy, and at the A:\> prompt navigate to the i386 folder by typing "CD i386". At the A:\i386 prompt type Winnt.exe. That will run Setup and you can follow Elaine's instructions above. You can get a startup floppy here if you don't already have one:
Bootdisks
Thats the disk.
Put the CD in and boot up. If the CD does not run automatically here ( You should see "Press any key to boot fom the CD" ) you will have to go into the BIOS and change the boot order.
This is not difficult. Take the CD out, and while booting up again try pressing DEL. This should take you into the BIOs. If DEL does not get you in you will have to look at your manual to see how to access the BIOS.
Right, you are in the BIOS now, so look at the order of booting and use the arrow keys to make the CD Rom first to boot. Then exit. Put the XP CD in again and reboot. It will now run automatically when you boot up.
Then follow previous instructions
Hope this is enough to help. If not juat keep asking :)
Elaine
Oops!!
Elaine
the cd rom is currently the third boot device so i would move that up to first?
Yes you would move it up to first.
If you actually just have a Restore disc as Nick said you will have to follow his instructions.
If it boots up and gives you the "Press any key to boot from the CD", then follow my instructions.
Elaine
Floppy first, CDROM second and HDD0 third.
Forgot about the floppy since I don`t have one.
Tend to think in terms of my machine.
Elaine
when I boot from disk it still automatically logs me off , This is being posted from another computer, it said press any key to boot from CD , I did that and then it took me to the normal login screen and the same error occurred
I dont have floppy either but yeah the booting from the CD didnt really help me.
I tried again and now windows setup is coming up, I am a litle worried?
I hit R like you said and it says Which Windows Installalaion would you like to login into, I tried htiing cd system32 but it will only let me type in one key max
If I choose the first option when xp boots up will that just let me reinstall it?
I think you have gone too far
See here
1.When the Press any key to boot from CD message is displayed on your screen, press a key to start your computer from the Windows XP CD.
2.Press ENTER when you see the message To setup Windows XP now, and then press ENTER displayed on the Welcome to Setup screen.
Then you should be at the page headed
WINDOWS XP HOME SETUP
To set up XP now press ENTER
To repair a Windows XP installation using Recovery Console press R
This is the one you want, so press R
This is only a couple of pages into the installation so look out for it and do not go too far.
I`ll stay online this time in case you need more help. Just shout
Do you want to reinstall? You will lose everything on the "C" partition if it is not backed up.
Elaine
Ok I am on that page , and I just hit R, now it says this.
Microsoft Windows XP Recovery Console
The Recovery console proviedes system repair and recovery functionality.
Type EXIT to quit the Recovery Console and restart the computer
1: C:\Windows
Which Windows installation would you like to log onto(To canel, press Enter)?
and after that you can only type 1 character, I tried hitting C it said invalid selection please select a valid installation #
Assuming you only have one operating system installed
Type 1 (the number 1)
Elaine
Thank you that worked now it says C:\Windows> , now how would I delete the file or whatever , Im not really familiar with just like deleting stuff or whatever I have to do by just typing stuff in
Hit ENTER
If you are asked for the Administrator password just press ENTER
Elaine
yes I did do that, now the screen says
C:\WINDOWS>
Type in the commands like this hitting ENTER at end of each line
C:\windows
type 'cd system32' the directory should now be
C:\windows\system32
type 'copy userinit.exe wsaupdater.exe'
1 file should be copied, now REBOOT!
Elaine
on the italicized line it siad The system could not find the file specifiedQuote:
Originally posted by dunedin
Type in the commands like this hitting ENTER at end of each line
C:\windows
type 'cd system32' the directory should now be
C:\windows\system32
type 'copy userinit.exe wsaupdater.exe'
1 file should be copied, now REBOOT!
Elaine
Nevermind that, I made a typing error, it said 1 file(s)copied, now should I turn the computer off and boot from the CD agian or just boot regularly?
OK. GREAT :)
Type EXIT to quit the Recovery Console and restart your Computer
When booting up again do NOT "Press any key to boot from the CD"
Just let it boot normally and remove the CD.
With luck you should now get into XP normally but I believe logon might take a while, so wait for it.
Go immediately and delete "wsaupdater.exe"
I think you will find it here
C:\Windows\System32\wsaupdater.exe
Elaine
It worked , thank you so much for being so patient and leading me through this, again thank you so much for the help.
You are very welcome. That`s what we are here for :)
You did delete that file didn`t you? That is a MUST or the problem will return.
You must clean up your system now to get rid of anything left by the nasty
Spybot Search & Destroy http://www.majorgeeks.com/download2471.html
After you install it get it to search for updates . If it finds any put a tick at them and download them. Then click on "Search and Destroy". then "Check for problems". Get it to fix all the RED entries.
Then download
Hijack This http://www.majorgeeks.com/download3155.html
Make a special folder to download it to. Set it to "Scan" and then to create its "Log". This will be long, but copy all of it into Notepad and post it back here to be checked.
Elaine
yes I did delete the file, I will now do those other things you mentioned.
how exactly do I run Hijack this, it downloads as a .zip , also I was able to logiin and I deleted that file but now no one else in my family is able to login?
If you right click the zip file do you have an "Extract to..." option?
If you do , extract to the same folder.
Do a clean up with these programs and see if the others can log in. The problem you had is a new one and so the fix has only been used a couple of times. If the other users still can`t login see if Safe Mode works for them
Elaine
I've split the log off and moved it to our specialist Hijack This logfiles forum:
http://discussions.virtualdr.com/sho...hreadid=173435
what would be the next step If I reboot and it wont turn on? Can I do a system restore right now or something , I dont really know what system restorre does.
OK. I have just been to the other forum to see what has been happening.
Have you run ALL the scans and removed ALL the HijackThis entries as instructed?
I can`t say what you would have to do if it won`t reboot. Not without knowing the symptoms.
You cannot do a System Restore as that will just replace all the nasties you have removed.
If you wish you can look for the files you were supposed to remove in Safe Mode and remove them if you find them.
You will however have to reboot eventually.
I think it was "wsaupdater.exe' which was stopping it turning on again, so if you have removed it here
C:\Windows\System32\wsaupdater.exe
it should boot up OK.
If you have not removed that file the problem of not rebooting will recur.
Elaine
I did reboot and was not able to login, I folllowed your old instructions, deleted the file and it seems to be working now.
I don`t quite understand.
Are you saying that it would not boot back into Windows, so you did the Recovery Console fix again? Then you deleted
C:\Windows\System32\wsaupdater.exe
If you deleted that previously it should not have been back again.
Anyway, you say it is all working now. That`s good, but you must finish the clean up job properly or you will find yourself in trouble again soon.
Check if everyone can logon, then run HijackThis again and post the log on the HijackThis forum. You have to keep posting logs until is is totally clean.
Here is a program which will help protect you from getting so badly infected again ( you were really badly infected). Once installed it will stop a lot of nasties installing themselves without your knowledge. It does not get them all but it really makes a huge difference. After installing it click on "Updates". Download them and then click "Enable all Protection". Close it down and it will do its thing in the background.
Then the only thing you have to do is open it regularly and update it.
SpywareBlaster http://www.javacoolsoftware.com/spywareblaster.html
Elaine
Yes I dont know, maybe I didnt properly delete it before, I will do all that others tuff when I get home from school.