nopro

Hi,
Can anyone help?
When I start xp up I keep getting (Application failed to initialize properly (0xc0000005) userinit.exe Application Error.
And the desktop dose not start up.

Nopro

PhillTheQuad

ITS A WINDOWS\SYSTEM32 FILE
maybe corrupted? u got a ubuntu cd or something, copy same file over from elsewhere. safemode work?

nopro

Can not get in to safe mode

PhillTheQuad

id get same file from watever your on now and do a copy over job
ubuntu,dos,barts cd ,anything u know how.
or its windows R or F for you.

nopro

I have just copped it to a floppy its only 24kb I will try that Thanks

nopro

Tried that put the HD in another computer and coped the file over it did not work I get the same userinit.exe Application Error.

Dose anyone know what program is initialize it, I know its windows but what part of windows

PhillTheQuad

its part of the login
sounds like its been affected by spyware or such
Windows Log on and Log off immediately.
fix userinit.exe - Yahoo!7 Search Results
hope your backed up, i reckon its gunna take longer to find a fix than to format\install.
try the ms fix

nopro

I am back after 5 years I had to do a format and a new install.
I have been down for a week I lost money opportunities and a lot of good data.
It was class as an adware bug but you have got to ask when dose adware become computer-damaging virus

Keepleft

An obvious question, but do you run an anti spyware program such as AdAware or Spybot etc? In Spybot, you can 'immunize' the system after each update download.

(Along with other generalised anti-virus apps...).

__________________
Buy a "hazard-warning triangle" for your car, I suggest Hella Pt No 2901. See weblink 'why';- http://www.dpi.wa.gov.au/mediaFiles/lic_drivesafe4.pdf

Studio1

Why did you have to reformat? Was there a sector table problem?

I had a client bring me a PC last week with this very issue. In the end I reinstalled Windows after the various fixes people suggested didn't work, but there was no need to reformat.
This way there was no loss of the client's data.

Incidentally, this problem is caused by a trojan, spyware or virus - take your pick.

nopro

I run Noadware, superantiSpywaer, Trojan Remove, Ccleaner and Norton
I had to reformat because I ended up run windows from G drive HOW you say well 6months ago I coped C drive to G drive file for file using Western Digital Data Lifeguard Tools so what I did then was copy the system32 file from G drive to C drive at first it looked like I had don a role back but what was happening was C drive and G drive swapped over but C drive was running from G drive? It got to wired so I formatted

PunX0r

Got 4 PC's all infected with this crap on the work benches here all waiting to be fixed.

I wish people would bring them in sooner, the longer this virus stay on here they harder it is to get rid of.

astro_boy

Anyone got a answer?
I jsut got a pc come in with exactly same issue.
Doing a few scans on it now, not much on google though.

PhillTheQuad

Run Regedit.exe
• Point your cursor to HKEY_LOCAL_MACHINE
• Select File > Connect Remote Registry
• Type computer name (infected computer)
• Navigate to the following location in registry of destination or infected computer


HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

• Edit these two values in right pane:

Shell
Userinit

• Change these two values to
Shell=explorer.exe
Userinit = x:\windows\system32\userinit.exe

• Exit from Registry
• Restart Infected computer.
• You should be able to log on to computer.

ocd_csv

Do a couple of things first.

1) Run Hijackthis and generate a logfile and attach here

2) Download rootrevealer and run this. Post log contents here.
RootkitRevealer

3) Get a bootable CD that allows access to the harddisk and allows editing of registry entries.

PhillTheQuad

WHO WOULD NAME there pc Kronic?

Studio1

I had a machine 2 weeks ago with this userinit problem and it wouldn't actually boot into Windows - so there was no way to run Regedit. Even in Safe Mode it still wouldn't boot into Windows. It starts to, but then the error message comes up and it won't go any further.
Looks like using an NT boot disc is the only solution.

astro_boy

Humm.. the thing is i can login.
but when i do, i get the init error in the first post.
then i get no desktop, only a background picture.
I can Ctrl Alt Del and get the taskmanager up,
and i see explorer is not running.
start that though task manager and desktop pops up !
though if i try and run a few things i get a error that they couldn't start.
Such as add remove programs.

window blind

On Monday I found the same problem as nopro. Google has led me here... so nopro, how did you go with PhillTheQuad's solution?

I can run regedit at the moment. Norton's found a virus called trojan.lowzones which I've deleted, but obviously the effects of the virus are still there (if indeed it was this that has caused the problem.

PhillTheQuad, what is the ms fix you refer to? If I do the regedit thing, is there anything further to be dealt with?

Thanks

EDIT: I've just PhillTheQuad's instructions and 1. userinit.exe should have a comma after it, 2. I doubt this works as this is exactly how it is on my system.

Any other suggestions?

ocd_csv

On that screenshot get rid of everything after the comma after userinit.exe including the comma
Some of these spywares put heaps of space after userinit.exe to hide themselves

Run Hijackthis and rootkitrevealer and post logs