HELP!!! lost userinit.exe file and its reference in regist. can't logon to window XP pro

[gordon]

Hi windows experts!

when I do the spyware clean up, I accidentally deleted the userinit.exe
file from windows\system32\config directory and deleted also its
reference in registry file in KEY_LOCAL_MACHINE ON LOCAL MACHINE
/SOFTWARE/MICROSOFT/WINDOWS NT/CURRENT VERSION/WINLOGON

Now I am not able to logon to windows, I try user and administrator
account, but when I click click on any of them it goes to the desktop
for a second and logs off and goes to saving settings and back to the
logon screen.

I've tried the following methods recommended from the groups but have
no luck.

1) I ran to the recovery console(I can only get the DOS command prompt
from recovery console, I tried using F8 with safe mode with command
prompt option, but it always brings me to window xp logon screen
instead of DOS command prompt), in the commmand prompt
c:\windows\system32\restore\, I tried to run rstrui.exe but I always
got the "The command is not recognized...", may be the recovery console
is not an environment to run executable file. I stuck, don't know how
to run rstrui.exe

2) I tried boot the system from xp CD-ROM, in the first screen, I
choose setup, then perform a repair installation, the machine took
15min to repair and eventually comes to the administrator logon screen,
BUT it keeps showing the saving settings and back to the logon screen.


any suggestion to fix this logon problem will be highly appreciated.

gordon

 

[Ricky]

Have you looked here?..
See section "Unable to logon to Windows after removing BlazeFind using a
spyware removal utility? " here:
http://www.winxptutor.com/wsaremove.htm

 

[gordon]

Tks Ricky,

I have read that article, but the problem is: I have physically
shift-deleted the userinit.exe file in system32\config directory,
not only the reference in registry file.


gordon

 

[Ramesh, MS-MVP]

Gordon,

Expand a copy of userinit.exe via Recovery Console. And you can fix the
registry entry using this method:

How to edit the registry offline using BartPE boot CD ?:
http://windowsxp.mvps.org/peboot.htm

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows XP Shell/User]
Windows® XP Troubleshooting http://www.winhelponline.com


Tks Ricky,

I have read that article, but the problem is: I have physically
shift-deleted the userinit.exe file in system32\config directory,
not only the reference in registry file.


gordon

 

[gordon]

Thanks very much Ramesh,

I grab the userinit.exe file from another pc using USB drive, then copy
that file to system32 directory in recovery console. after I rebooted
the system with safe mode with command prompt option, I can run
rstrui.exe this time under the system32\restore directory. Now I can
logon to my system again. Thanks all for your help.

gordon

 

[gordon]

Thanks very much Ramesh,

I grab the userinit.exe file from another pc using USB drive, then copy
that file to system32 directory in recovery console. after I rebooted
the system with safe mode with command prompt option, I can run
rstrui.exe this time under the system32\restore directory. Now I can
logon to my system again. Thanks all for your help.

gordon

 

[Ramesh, MS-MVP]

I'm glad that helped, Gordon.
Thanks for posting back.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows XP Shell/User]
Windows® XP Troubleshooting http://www.winhelponline.com


Thanks very much Ramesh,

I grab the userinit.exe file from another pc using USB drive, then copy
that file to system32 directory in recovery console. after I rebooted
the system with safe mode with command prompt option, I can run
rstrui.exe this time under the system32\restore directory. Now I can
logon to my system again. Thanks all for your help.

gordon