reqopflip.blogg.se

Your newsreader so that others may learn and benefit When responding to posts, please "Reply to Group" via ND.A to ensure the system is completely cleaned up. However, I would recommend following the guidlines in this Next in Windows Explorer delete the c:\windows\system32\wsaupdater.exeĪt this point your system will be stable and allow you to logonĬonsistently. NT\CurrentVersion\Winlogon and modify the value of Userinit toĦ. Navigate to the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Open regedit (from start->run type regedit)ĥ. Wsaupdater.exe file and allow the system to boot.Ĥ. Into booting by copying the legitimate XP userinit.exe file to the Quotes) "copy userinit.exe wsaupdater.exe". Navigate to the c:\windows\system32 folder and type (without the Wsaupdater.exe is removed, but the registry still points to it and tries toġ. (via Adaware, SpyBot S&D, or another spyware detection tool), the You logon the wsaupdater.exe file is executed. It then modifies the registry so that when

This sounds like it might be caused by the removal of the wsaupdater.exe.Ī piece of spyware replaces the C:\Windows\system32\userinit.exe file withĪ file called wsaupdater.exe. Archived from groups: _manage ( More info?)