You computer will not log off immediately now. Note: if anything differs repeat step 5 with HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogonĥ) Restart and log back into Recovery ConsoleĨ) Log back into Windows normally. – Double click on the key and type C:\windows\system32\userinit.exe, This renames the current software hive to software.oldĬ.) type copy C:\windows\repair\software enterĭ.) Type exit to quit Recovery Console and restart.ģ) Hit F8 before Windows starts to enter Safe Mode – You should hopefully be able to log in nowī.) Select or highlight “HKEY_LOCAL_MACHINE”ĭ.) Find where you saved the software.old file (C:\windows\system32\config\software.old)į.) Navigate to “test\software\microsoft\windows nt\currentversion\winlogon” HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogonġ) Use the XP Install disk and go into the Recovery Console to open Command prompt from repair your computer option that comes when pressing F8 during startup in windows Vista and above.Ģ) “We need to replace the software hive with a previous good backup temporarily to stop logging off immediately .” When you scan the computer with Ad-Aware by Lavasost it removes the Wsaupdater.exe file from the computer, but it cannot change the registry subkey back to Userinit.exe. Wsaupdater.exe is spyware that changes Userinit.exe, to Wsaupdater.exe in the registry and that’s why windows logs off immediately after logging in. If there is a key named “OldUserinit”, delete the “Userinit” key and rename the “OldUserinit” key to “Userinit”.įor Windows XP – Infected with Wsaupdater.exe virus Open Registry Editor and Change the value of the following two entries in Registry key. Try to boot the computer in safe mode with command prompt by pressing F8 during startup and selecting safe mode with command prompt.If it can be boot to safe mode with command prompt. If you don’t have any other computer try the following step. You should be able to log on to computer and it won’t do log off immediately. Userinit = x:\windows\system32\userinit.exeĨ. HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinlogonĮdit these two values in the right pane as mentioned.
0 kommentar(er)
