[Shikaka]

Hello

After removing some viruses and trojans using spybot S&D, I suddenly can't log in. The computer starts normally, i get to the login screen, click my username, type password, hit enter and it says 'loading' or whatever it normally says. After a brief flash of my desktop wallpaper, it logs me off and i get returned to the login screen, only that instead of the windows xp logo on the left hand side, i see the word 'Welcome' which is displayed when logging in.

After reading most of the other threads in this forum about the same problem, i think that my problem is somewhat unique. I have copied Userinit.exe from the xp installation disk via the recovery console using roughly the same instructions in this thread, to no avail.

I then downloaded and made a Bart PE disk from which I used to access the registry. I tried to follow the instructions here however, I can't make a hive (what's that?) because according to the open dialogue, there's nothing in my Windows folder?! So, I navigated to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon and altered the Userinit key which read D:\i386\system32\userinit.exe, to C:\WINDOWS\system32\userinit.exe, again to no avail.

I am now stuck for what to do next. Any help/suggestions appreciated, thank-you!

[Advertisements]

Ok I think i've resolved the problem now. Basically, I couldn't load a hive for editing the registry because when I searched the Windows directory for the SOFTWARE file, there was nothing there. However, using the recovery console, I confirmed that the contents of my Windows directory hadn't gone awol so i loged back in using BartPE and used the command console to look into the Windows directory, specifically, Windows\system32\config for the SOFTWARE file. Once I had done that, I could access it from the load hive dialogue and subsequently fixed the problem by correcting the Userinit key in the appropriate registry directory and...whoopdedo I can now login normally!

[Shikaka]

Ok I think i've resolved the problem now. Basically, I couldn't load a hive for editing the registry because when I searched the Windows directory for the SOFTWARE file, there was nothing there. However, using the recovery console, I confirmed that the contents of my Windows directory hadn't gone awol so i loged back in using BartPE and used the command console to look into the Windows directory, specifically, Windows\system32\config for the SOFTWARE file. Once I had done that, I could access it from the load hive dialogue and subsequently fixed the problem by correcting the Userinit key in the appropriate registry directory and...whoopdedo I can now login normally!

[rshaffer61]

Congrats on resolving the issue BUT

I suggest you go to the Malware Removal and Spyware Removal Forum and run all the steps located in the START HERE. These self-help tools will help you clean up 70% of problems on your own. If you are still having problems after doing the steps, then please post the reguested logs in THAT forum. If you are unable to run any of the tools then start a new topic in the malware forum and put this in the subject line...I am unable to run any malware tools