Automatic logout when Windows XP logs in

Question: "This book uses the IE advanced cleanup function in Yahoo! Assistant to restart the system. At this time, the problem comes out. After the win xp login, the desktop is automatically logged off immediately. In safe mode, the reinstall and repair installation is not. Solved, my C drive information is important files can not be reloaded. Solution: After a MSN infected with a virus spread of the virus manually remove the files, reboot, log off the system every time you log on directly, Safe Mode is the last correctly configured useless.

Solution:

A. If the pathogenesis can be connected to the network:

1. Copy the system disk under normal machine: windowssystem32userinit.exe to the corresponding directory of the pathogenesis machine. ;

2. Connect to the registry of the disease machine by using the “Connect the network registry (C) under the “File” menu of the normal machine's registration editor to check whether the following registry sub-items exist ( Note that is not a key entry):

HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesEventlogApplicationUserinit

HKEY_LOCAL_MACHINESYSTEMControlSet002ServicesEventlogApplicationUserinit

HKEY_LOCAL_MACHINESYSTEMControlSet003ServicesEventlogApplicationUserinit2

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlogApplicationUserinito}}

key [the EventMessageFile] ( type & ldquo; expandable string value) content:% SystemRoot% System32userinit.exeH78

key [TypesSupported] (type & ldquo; DWORD value), content: 00000007 # WN

Also check:

HKEY_LOCAL_MACHINESOFTWARE MicrosoftWindows NTCurrentVersionWinlogon whether the following key values ​​exist: key [Userinit] (type: “ string value) content: & ldquo; E: WINDOWSsystem32userinit.exe, (Note: no quotes, and E: in the string for your WINXP Drive letter)

B, if the pathogenesis is not network connection:

Start with the system disk, log into the recovery console, copy c: windowssystem32userinit.exe userinit32.exe restart can be normal Signed in.

The reason is that the MSN FUNNY virus destroys the normal userinit.exe, and changes the Userinit key value in the registry under HKEY_LOCAL_MACHINESOFTWARE Microsoft Windows NTCurrentVersionWinlogon from C:WINDOWSsystem32userinit.exe to C:WINDOWSsystem32userinit32.exe So, after COPY, WINXP can find this login handler to log in successfully. After logging in to the system, you can restore this registry key again.