I have a Windows 7 Ultimate Notebook (Acer 1420p - PDC edition) that sometimes hangs at the "Logging off..." screen.
The Eventlog has the following entries:
The machine has all Windows Update fixes installed. I am unable to reproduce the problem immediately after startup but it will happen if the machine is running for some time (with suspends/hibernate).
Any ideas on what's the problem or how I could diagnose it?
I discovered that the Live Mesh client is to blame. (workaround: exit before logging off)
Do you have an external harddrive attached? For some reason, my rig hangs on shutdown if I do not disconnect my drive. It'll immediately continue the process once I do though. Weird bug and worth trying if you have a USB EHDD.
I've got a Windows 7 installation with 2 users, one administrator and the other is not. If I try to logon with the standard user it show the Welcome Screen and then logs them off immediately. If I logon with the administrator user or if I set the standard used as an administrator it works without problems.
Any idea what may be causing this?
Windows 7 Ultimate running on a netbook, AVG Antivirus, no special software or any other specific configuration.
Well, this is hard to diagnose/solve since there really isn't any information and its not very widespread...
Does it happen in safe mode?
And does this link by chance help in any way?
And make sure this file C:\WINDOWS\System32\Userinit.exe exists. Apparently if you have AVG free installed it might have destroyed it and messed with login.
I have had the same problem. Looking for a solution, i followed the link given by Nano8Blazex.
The instructions by Microsoft Support led me to the registerkey for the location of userinit.exe. The value contained not only the location in the Windows\system32 directory, but also a location which was added by HP ProtectTools. The software was already deleted before i discovered the logon problem, but apparently this register value was left behind.
Deleting the ProtectTools location from the value, leaving only the windows\system32 location, solved my logon problem.
I had exactly the same problem:
I installed the free Ad-Aware Internet Security application by Lavasoft and ran a full scan. It found some malware - after restarting the PC the problem was completely gone.
I had this problem today and also created a new profile. I ran malware bytes in the new profile, which picked up and quarantined a trojan. I logged back into my original profile and the problem is now gone.
My first thought was check the event log.
My first hypothesis is that there is a misbehaving program that is set to run on login. This program is trying to perform some operation that mistakenly thinks it requires administrative access. Because it cannot do what it wants, it assumes that some file is locked, and initiates a logout to try to release the file lock.
Try starting the computer in safe mode, or use msconfig to run a Diagnostic Startup, so that everything else is disabled.
My other theory is that anti-virus is causing problems. i have no evidence to support that at this time: except that nearly every PC problem i've ever seen is related to anti-virus/security products in some way.
I had the same problem yesterday. I installed ESET NOD 32 Antivirus and after that, every time I opened my computer and chose my profile (administrator), it started logging off. I was then stuck on the log on screen.
What I did to fix it is start in "SAFE MODE", went to my profile, created a new profile, and deleted the old profile. It's fixed now.
Remember guys, using regedit improperly can harm your
type regedit in the box
look at string userinit
it should look like this with the trailing ,
if not change it
, coz if it doesn't, you have a virus infecting that file.
Any modification to the registry key HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows NT > CurrentVersion > Winlogon -> Userinit can cause this issue.
HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows NT > CurrentVersion > Winlogon -> Userinit
Now, the modification may be done by a malware or some OEM bloatware installed by the system manufacturer. In my case, the client had HP security tools installed, which modified the key with a protect tools entry along with C:\WINDOWS\system32\userinit.exe. Uninstalling the protect tools program will not help. You have to navigate to this registry key and delete the HP Protect tools part, leaving just the C:\WINDOWS\system32\userinit.exe part.
I had the same problem when I made an extra account for some one else. What I did was I scanned my computer for spy/mail-ware and I came up with a trojan. Then what I did was I did what Samashan suggested and I went to regedit and I found that there was all this extra crap at the end of the registry userinit.exe. right clicked to modify it, deleted all of it and made it "C:\WINDOWS\system32\userinit.exe". Then I was able to log on as the other user.
Hope this helped every one!