problem where windows 2003 server would immediately log out/logoff

PROBLEM
i had this problem where windows 2003 server would immediately log out/logoff after i logged in/logged on with my username (any user even administrator) and password. Please provide proper solution to resolve above mentioned issue. I shall be thankful to you.

Solution

wsaupdater.exe has likely been infected by malware and deleted or by antivirus

Boot the system using the Server 2003 CD-ROM. In the first screen when the Setup begins, read the instructions press "R" (in the first screen) enter the Recovery Console. Type-in the built-in Administrator password to enter the Console. You'll see the prompt reading C:\Windows

Type the following command and press Enter.

CD SYSTEM32
(If that does not work, try CHDIR SYSTEM32)

COPY USERINIT.EXE WSAUPDATER.EXE

Quit Recovery Console by typing EXIT and restart Windows.

You'll be able to login with the faked wsaupdater.exe file (userinit.exe)

run regedit

go to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

On the right you will see a key value with

C:\WINDOWS\System32\wsaupdater.exe,

Change it so that it reads:

C:\WINDOWS\System32\userinit.exe


Now run a full AV scan as well as a malware scan.
When done, run
sfc /scannnow

0 comments: