• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Help, Removed Virus now I can't log in to Windows

FXGuy3369

Senior member
Ok I have 2 computers I am working on for friends with the exact same symptoms.
Both had different viruses that had hijacked desktop, homepage, etc.
Both PC's had Spybot S&D and MBAM ran on them.
Upon rebooting when you get to the Windows Logon Screen you can select any user and it will say "Loading Personal Settings" flash your desktop background for a split second then "Saving Personal Settings, Logging out etc"
I have done tons of internet research, and found the
Registry Key userinit.exe that everyone says usually gets hijacked and then removed by the spyware killing software. But on both these machines the reg key value is what it's supposed to be.
Any help would be greatly appreciated.
Sorry if I am missing any info that I should have listed, let me know and I will answer ASAP
 
Most likely your userinit.exe is borked. Either the path in the registry or the file is removed or modified.
Best thing to do would boot from a live cd (I prefer UBCD4Win, but any will work,) and verify which is causing the problem.
It should be located in system32.
In the reg make sure the userinit under "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" is pointed at the correct file in system 32

If its missing you can try to copy the userinit file from %windir%servicepackfiles/i386

Edit: guess I should read your full post. Sounds like it's just missing
 
Thanks, just got it actually. I had checked the registry path and the value was right but, userinit.exe itself was gone. I just copied the file from a working pc, inserted it and presto the pc boots now.
 
if its that far gone i wouldn't trust the system anyways, thats only the virus you could find😛
format c+windows reinstall time regardless
 
Back
Top