Shutdown follows turnon

robapacl · 07-04-2009, 11:27 PM

I have an HP5000 laptop, XP Media edition. It's been infected with something that proceeds directly to shutdown after turnon. I don't want to reinstall until I've copied the HD. Any suggestions about accessing the HD without removing it? Or, any references to how to remove it?

krazyko · 07-05-2009, 04:53 PM

It sounds like you have a problem with your userinit.exe file. You'll need to restore the file from your original Windows CD. Boot from your Windows CD and choose Repair Windows using Recovery Console. When in the recovery console go to the i386 folder on your CD-ROM drive. Then type the following: expand userinit.ex_ c:\windows\system32. Overwrite the existing file... then type exit and let the system reboot. After you get back into windows check for spyware and viruses.

Geekgirl · 07-05-2009, 08:10 PM

The security team can help you with this. We cannot assist you with this issue here in the Microsoft Support Forum.
Please follow their pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic in the Virus/Trojan/Spyware Help , as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your thread.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

07-04-2009, 11:27 PM	#1 (permalink)
robapacl Registered User Join Date: Jul 2009 Location: New England Posts: 1 OS: win xp	Shutdown follows turnon I have an HP5000 laptop, XP Media edition. It's been infected with something that proceeds directly to shutdown after turnon. I don't want to reinstall until I've copied the HD. Any suggestions about accessing the HD without removing it? Or, any references to how to remove it?

07-05-2009, 04:53 PM	#2 (permalink)
krazyko Registered User Join Date: Nov 2008 Posts: 97 OS: 2000 SP4, XP Pro SP2&SP3, 2003	Re: Shutdown follows turnon It sounds like you have a problem with your userinit.exe file. You'll need to restore the file from your original Windows CD. Boot from your Windows CD and choose Repair Windows using Recovery Console. When in the recovery console go to the i386 folder on your CD-ROM drive. Then type the following: expand userinit.ex_ c:\windows\system32. Overwrite the existing file... then type exit and let the system reboot. After you get back into windows check for spyware and viruses.

07-05-2009, 08:10 PM	#3 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,142 OS: 98SE/WinXP Home/WinXP Pro/Vista/Windows 7	Re: Shutdown follows turnon The security team can help you with this. We cannot assist you with this issue here in the Microsoft Support Forum. Please follow their pre-posting process outlined here: NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help After running through *all* the steps, you shall have a proper set of logs. Please post them in a new topic in the Virus/Trojan/Spyware Help , as this one shall be closed. If you have trouble with one of the steps, simply move on to the next one, and make note of it in your thread. Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply. __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*