Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Data Execution Prevention prevents Userinit Logon Application


  • Please log in to reply

#1
Nate7410

Nate7410

    Member

  • Member
  • PipPip
  • 18 posts
So today I began to suspect I had some serious viruses/spyware on my computer. Whatever it was, it wasn't allowing me to run any virus scans. So I restarted my computer in safe mode and was able to run a complete scan with SuperAntiSpyware. After removing about 50 things, it asked me to reboot my computer.

Upon rebooting the computer, I received a message that Data Execution Prevention had prevented the Userinit Logon Application, and after I closed that message, I was faced with just a black screen. I wasn't able to find any way to load Windows Explorer or anything else.

I have tried rebooting in both Safe Mode and in Directory Services Restore mode but in both cases, I'm told that windows failed to start.

With my other computer I downloaded PC Regedit and burnt it to a CD, and booted my computer from that disc. I was able to check the registry entry for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit\C:\WINDOWS\system32\userinit.exe, and it appeared to be present and valid.

I don't know what else to do... I've reached the limit of my own knowledge. Please, can someone suggest a fix for this other than reformatting my computer?
  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 23,185 posts
  • MVP
You can try replacing system32\userinit.exe in the key value with explorer.exe. That may allow you to get on.

Apparently your userinit.exe in system32 has been infected. If you can do Start, Run, sfc /scannow, OK and it may replace it with a good one from system32\dllcache or if you use a boot cd you can manually replace it.


Ron
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP