Wsaupdater.exe is spyware that changes Userinit.exe, to Wsaupdater.exe in the registry. Some anti-malware programs will remove the Wsaupdater.exe file from the computer, but cannot change the registry subkey back to Userinit.exe,.

The registry subkey that is changed is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Fix With A Windows CD/Recovery Console

Boot to the CD (you may need to enter a temporary boot menu).

When prompted, Press "R" to enter the recovery console. At the command prompt type the following then press ENTER after each line:

Exit and reboot normally. Next >>

Fix With A Second PC

Connect the Hard Disk Drive (HDD) to the computer that you will be working from.

Open My Computer. Locate the Hard Drive Letter you are working on and browse to [Drive Letter]:\WINDOWS\system32
example: E:\WINDOWS\system32 <(drive letter may vary)

Right click userinit.exe select Copy . Find an empty area in that folder and Right click select Paste. Rename the file to wsaupdater.exe.

Put the HDD back in the PC it came from and boot normally. Next >>