Virus changed registry... (Another problem as well)
Yup log on and log off loop is normally when windows can't
find the userinit.exe file.
I have came across some virusses / malware that modify the registry
and puts their own file location in the registry.
Here is how I fix it.
1. Connect HDD onto another PC > Boot into 2nd PC's windows
2. Make sure that the userinit.exe is on PC1's HDD in Windows\system32
3. Open registry on PC2
4. Go to HKEY_LOCAL_MACHINE
5. Go File, Load hive
6. PC1 HDD browse to Windows\System32\Config
7. Select the file called SOFTWARE (should only say software no extension) and open it,
registry will ask name for hive > I just put PC1 to make it easy
8. Once hive is loaded go to
HKEY_LOCAL_MACHINE\PC1\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
9. Look for the string called Userinit > It should read (C:\Windows\system32\userinit.exe,)
if it's not the same change it to "C:\Windows\system32\userinit.exe,"
10. Go back to HKEY_LOCAL_MACHINE
11. Select PC1 then File, Unload Hive
12. You can put PC1 HDD back into PC1 and try boot.
I would suggest first running a full virus scan on PC1 HDD while it's plugged into PC2.
Hope that is helpful too.
I saw this on another forum along time ago.. So big thank to whom ever posted it on that site...
