Unable to login after SEP cleans the virus

Bijay.Swain's picture

I have a problem on 2 windows xp machine. I had SAv10.1 earlier on those machines whic got corrupted by some virus so I decided to install SEp11MR4 and updated those machines . after updating i scanned the pc and sep detected some threats.

but after restarting the pc now i am unable to login to the pc as when i click on the usernames and enter the password it tries to login and then logs off automatically. this happens in safe mode also. Unable to access the registry.

what to do as I am unable to use system restore also.

Abhishek Pradhan's picture

The Userinit.exe file has

The Userinit.exe file has been corrupted.

Bot into recovery console and expand the userinit.ex_ to userinit.exe from thw Windows bootable cd to c:\windows\system32.

The following KB ought to help - http://support.microsoft.com/kb/892893

Abhishek Pradhan, PMP, MCT
Sr. Consultant - System Center, Windows Server, Hyper-V, Exchange, Forefront
Blog: http://hackatac.blogspot.com | LinkedIn: http://www.linkedin.com/in/hackatac
SIG Lead - Pune IT Pro (Microsoft Pune User Group) | http://www.

Bijay.Swain's picture

Thanks I tried but didn't

Thanks I tried but didn't worked

Abhishek Pradhan's picture

Do you get any error message

Do you get any error message when the login process kicks you back to the logo screen?

Abhishek Pradhan, PMP, MCT
Sr. Consultant - System Center, Windows Server, Hyper-V, Exchange, Forefront
Blog: http://hackatac.blogspot.com | LinkedIn: http://www.linkedin.com/in/hackatac
SIG Lead - Pune IT Pro (Microsoft Pune User Group) | http://www.

Bijay.Swain's picture

No error .It just logs off

No error .It just logs off and shows the logon screen.

Paul Mapacpac's picture

Re

Please try to replace winlogon.exe

Abhishek Pradhan's picture

Right. Like Paul says, try to

Right. Like Paul says, try to replace the winlogon.exe file.

You can try to access the problematic computer over the network from another computrer in another way like this>

Click on Start > RUN

Type in the following: \\IP_address_of_computer\c$\Windows\system32

Copy the files Userinit.exe, and Winlogon.exe from a computer not facing issues to the computers facing this issue, and then reboot them and try to login again and see.

Please let us know if this helps, or if the issue still persists.

Abhishek Pradhan, PMP, MCT
Sr. Consultant - System Center, Windows Server, Hyper-V, Exchange, Forefront
Blog: http://hackatac.blogspot.com | LinkedIn: http://www.linkedin.com/in/hackatac
SIG Lead - Pune IT Pro (Microsoft Pune User Group) | http://www.

Bijay.Swain's picture

will try it tommorow and post

will try it tommorow and post it back.

Paul Mapacpac's picture

Re

You don't need to expand it just copy will do using the WinXP cd. just use the copy command.