Re: Computer Won't Start, Returns To Logon Screen

Another file in the process that can be replaced in winlogon.exe

run from a boot to CD and Recovery Console (press 'r' for Repair), the command:

(cd drive letter here):/i386/expand.exe (cd drive letter here):/i386/winlogon.ex_ %windir%/system32/winlogon.exe

The registry entry for wsaupdater should be:
expand
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
..
3. In the right pane, right-click userinit, and then click Modify.
4. Replace wsaupdater.exe (or perhaps something else) with userinit.exe

The way to access the registry from recovery console is a bit different from the normal windows interface, using REG.EXE

How to edit the registry offline using BartPE boot CD: http://windowsxp.mvps.org/peboot.htm
--
Please use the Communities guidelines when posting. http://www.microsoft.com/wn3/locales/help/help_en-us.htm
Use the "Ratings" feature. It helps the new users.
Mark L. Ferguson MS-MVP
https://mvp.support.microsoft.com/profile/Mark.Ferguson

"Dell Boy" <Dell Boy@xxxxxxxxxxxxxxxx> wrote in message news:F2EE53AE-E873-4F72-8F8A-27C566F487D1@xxxxxxxxxxxxxxxx
Mark,

Thanks for your reply.

I successfully carried out step 1 in KB892893, i.e. Use Recovery Console to
copy Userinit.exe to Wsaupdater.exe, but the machine still cannot get past
the logon screen.

I think that the problem is probably that described in KB892893 as the user
ran Ad-Aware immediately prior to the problem occurring.

I guess System Restore might be an option but the user isn't sure when he
became infected and the last time he scanned the computer was around March
this year.

Any advice you can give would be greatly appreciated,
Malcolm

"Mark L. Ferguson" wrote:

You cannot log on to Windows XP after you remove Wsaupdater.exe:
http://support.microsoft.com/kb/892893

--
Please use the Communities guidelines when posting.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm
Use the "Ratings" feature. It helps the new users.
Mark L. Ferguson MS-MVP
https://mvp.support.microsoft.com/profile/Mark.Ferguson

"Dell Boy" <Dell Boy@xxxxxxxxxxxxxxxx> wrote in message
news:0A7D1E4C-8043-4BFA-A2AA-F63F63934E2E@xxxxxxxxxxxxxxxx
> I'm an IT Technician and I support small businesses and home users.
>
> I've got a call from a business user regarding a PC with Win XP Pro > plus
> latest updates. He has done some maintenance work on the computer
> defragging,
> spyware scan and removal, etc and now the PC won't start beyond the > user
> style (as opposed to CTRL-ALT-DEL) logon screen.
>
> When the computer starts it stops at the logon screen displaying an > icon
> for
> his user account. When he clicks this icon the computer tries to get to
> the
> desktop but comes right back to the logon screen with no error message
> displayed. He reports that the machine did not display the logon > screen,
> i.e. went straight through to the desktop, until this problem occurred.
>
> The user doesn't think the machine will boot in to safe mode but he's > not
> sure.
>
> The user will not be back in the office for 48hrs which is when I have > an
> appointment to examine the machine. If I can boot in to safe mode I > will
> try
> running system restore from the command prompt but wondered if anyone > else
> had any other ideas for resolving this?

.

Relevant Pages

  • Re: Xp wont start up
    ... XP installation CD or a bootable CD with the XP Recovery Console on ... as the first boot device instead of the hard disk. ... From the command prompt window run the chkdsk command on the drive ...
    (microsoft.public.windowsxp.general)
  • Re: Hal.dll startup message
    ... Well, if you don't want to do much tinkering, you can just boot to the setup ... and press 'r' for repair to open the Recovery Console prompt. ... >> the command 'type C:\boot.ini' save the file for backup, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Fixboot, Fixmbr ??
    ... Fixmbr repairs the master boot record of the boot disk. ... The fixboot command is only available when you are using the Recovery Console. ...
    (microsoft.public.windowsxp.general)
  • Re: Help! endless boot- check disk loop
    ... Boot to the Recovery Console and use the LISTSVC command to view services their start type. ... Ues the DISABLE command to disable vsdatant.sys. ...
    (microsoft.public.windowsxp.basics)
  • Re: Wont boot to a login or past that screen.
    ... If you have access to a bootable XP installation CD, ... Make a bootable CD with RC on it and then run chkdsk /r. ... You can make a bootable Recovery Console CD by downloading an ISO file ...
    (microsoft.public.windowsxp.general)