no access to xp home edition

G

Guest

We use xp home edition, based on SP 1. Due to having seemingly a trojan horse
on that comp, we changed stuff around, unfortunately in that way we also
changed the permit for the existing (only) user account. When we restart, we
log into from the password screen, but we are logged off right away again
(shall mean you cannot do anything, not one program has time to load). Now i
tried to start in save mode, but the same happens there, also when i try to
log in with the usually then existing administrator account. Login and right
away log out - back to the login screen.
Problem is furthermore, that this computer never got a XP cd (was
preinstalled), so i cannot use that one. Thus if anyone has a hint, how to
come around the loginscreen, or in any way to access windows, it would be
very kind of you to reply.

Greets,
Rudlfax
 
G

Guest

Well, i read that first page, but due to that i do not have n xp cd, i
created an boot cd with the help of the following site:
http://ubcd4win.com/howto.htm

With this CD i came into the dos prompt as well as into the regedit,
however, following the step i still face the same problems :(
But since i am in the registry edit, can i change the permit for the
accounts there, and if, how?
 
R

Ramesh [MVP]

Rudlfax,

Have you fixed the userinit.exe value, as stated in the article? Also, let us know how did you get access to the XP registry (load hive method, right?)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


Well, i read that first page, but due to that i do not have n xp cd, i
created an boot cd with the help of the following site:
http://ubcd4win.com/howto.htm

With this CD i came into the dos prompt as well as into the regedit,
however, following the step i still face the same problems :(
But since i am in the registry edit, can i change the permit for the
accounts there, and if, how?
 
G

Guest

Dear Ramesh,

yes i tried to fix it, but it did not work. To explain, i entered the comp
over the mentioned UBCD (Ultimate Boot CD), which brings a regedit with it.
There i went to the announced location and changed the adress. I tried to log
on afterwards, but it didnt work. Checked back to the regedit, and
userinit.exe was set back to d:, instead of c: where i changed it to.

On a side note, i managed to install the recovery platform, however, it asks
me for the admin password. Since we never changed anything on the hidden
admin, there shouldnt be one. It is said to just press enter for a blank
password, but it is refused, and i got no idea what it should be, i didnt
enter one.

So now i try to find out if it is possible to create a new account with
admin rights using regedit (or via copying a executable file from my working
comp), respectively doing right now a virus search on the not working comp.
 
R

Ramesh [MVP]

Rudlfax,

Not used UBCD. But, try this:

Visit http://www.dougknox.com/xp/tips/xp_adv_reg_editing.htm and follow the steps there.

But, in the 4th step, select "SOFTWARE" file (instead of NTUSER.DAT). Then fix the Userinit value in the loaded hive.

-or-

Make a copy of userinit.exe and name it wsaupdater.exe in your Windows\system32 folder in the hard drive. This should allow you to logon into Windows.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


Dear Ramesh,

yes i tried to fix it, but it did not work. To explain, i entered the comp
over the mentioned UBCD (Ultimate Boot CD), which brings a regedit with it.
There i went to the announced location and changed the adress. I tried to log
on afterwards, but it didnt work. Checked back to the regedit, and
userinit.exe was set back to d:, instead of c: where i changed it to.

On a side note, i managed to install the recovery platform, however, it asks
me for the admin password. Since we never changed anything on the hidden
admin, there shouldnt be one. It is said to just press enter for a blank
password, but it is refused, and i got no idea what it should be, i didnt
enter one.

So now i try to find out if it is possible to create a new account with
admin rights using regedit (or via copying a executable file from my working
comp), respectively doing right now a virus search on the not working comp.
 
G

Guest

Dear Ramesh,

first of all thanks to you n Michael for the quick replys. Now, to the
second part of ur suggestion, i tried this already on Michaels suggestion,
and it didnt work. I even used the userinit.exe from the cd (which stems from
my working computer), copied in the place of the userinit.exe of the
corrupted comp and then named it wsaupdater.exe - with still no result.

For the first part, i went into the regedit again, found the path, but i do
not understand ur last suggestion, i find the ntuser.dat, but i dont find a
software file.

I tried something then myself, using dosprompt. with *net user **** /add* u
can create, it seems a new account. i tried, i told me created, but it
couldnt add it to the user group. Then i tried *net localgroup administrator
**** /add* and it told me account created, but could not be added to group.
thus i finally created the group and then the account, but still it doesnt
allow me to log on. Any idea how to proceed this, e.g. which groups do exist,
esp. which one is the admin group. Is this anyway a feasible way n how do i
assign rights to these thus created accounts?

Greets rudl
 
R

Ramesh [MVP]

Hi Rudlfax,

The "Software" file will be present here:

c:\windows\system32\config\software

Load it and fix the Userinit value, then unload the hive.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


Dear Ramesh,

first of all thanks to you n Michael for the quick replys. Now, to the
second part of ur suggestion, i tried this already on Michaels suggestion,
and it didnt work. I even used the userinit.exe from the cd (which stems from
my working computer), copied in the place of the userinit.exe of the
corrupted comp and then named it wsaupdater.exe - with still no result.

For the first part, i went into the regedit again, found the path, but i do
not understand ur last suggestion, i find the ntuser.dat, but i dont find a
software file.

I tried something then myself, using dosprompt. with *net user **** /add* u
can create, it seems a new account. i tried, i told me created, but it
couldnt add it to the user group. Then i tried *net localgroup administrator
**** /add* and it told me account created, but could not be added to group.
thus i finally created the group and then the account, but still it doesnt
allow me to log on. Any idea how to proceed this, e.g. which groups do exist,
esp. which one is the admin group. Is this anyway a feasible way n how do i
assign rights to these thus created accounts?

Greets rudl
 
G

Guest

Dear Ramesh,

i tried, but faced again some problems, it might be coz i dont open regedit
from inside windows, but from so to say outside. First question, it always
asks me when opening it, if i want to load the remote user accounts, i
usually say yes and load them up. However, if i do so, i´m not able to open
for instance the ntuser.dat, because its currently in use. The same happened
when i tried to open the software file, though it worked with software.dat.
Next i´m not too sure bout load hive, unload hive, i´m working with a german
xp. there i got import, export, load structure (guess u mean the latter one).
when i did load structure, it asked me for a key, i told it j, then a new
account (?) appeared, where i changed the userinit.exe to the
c:\windows\system32\userinit.exe
rebooted n faced still the same problem. I also tried meanwhile to restore
registry to the oldest available restore point, without success, still facing
the same problem.
 
R

Ramesh [MVP]

Hi Rudlfax,

The Userinit entry should be:

c:\windows\system32\userinit.exe,
(note the comma at the end)

If that does not help, try a repair install:
http://www.michaelstevenstech.com/XPrepairinstall.htm

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


Dear Ramesh,

i tried, but faced again some problems, it might be coz i dont open regedit
from inside windows, but from so to say outside. First question, it always
asks me when opening it, if i want to load the remote user accounts, i
usually say yes and load them up. However, if i do so, i´m not able to open
for instance the ntuser.dat, because its currently in use. The same happened
when i tried to open the software file, though it worked with software.dat.
Next i´m not too sure bout load hive, unload hive, i´m working with a german
xp. there i got import, export, load structure (guess u mean the latter one).
when i did load structure, it asked me for a key, i told it j, then a new
account (?) appeared, where i changed the userinit.exe to the
c:\windows\system32\userinit.exe
rebooted n faced still the same problem. I also tried meanwhile to restore
registry to the oldest available restore point, without success, still facing
the same problem.
 
M

Michael Solomon \(MS-MVP\)

I just want to state for the record, the information I posted was actually
purloined from one of Ramesh's past posts. The MVPs do tend to steal links
from each other and when the information is rather generic we don't usually
give credit but since you included me in your thanks, the gracious thing for
me to do is to give credit where it is due; I humbly bow to the wisdom of my
compatriot, Ramesh!:)

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

Rudlfax said:
Dear Ramesh,

first of all thanks to you n Michael for the quick replys. Now, to the
second part of ur suggestion, i tried this already on Michaels suggestion,
and it didnt work. I even used the userinit.exe from the cd (which stems
from
my working computer), copied in the place of the userinit.exe of the
corrupted comp and then named it wsaupdater.exe - with still no result.

For the first part, i went into the regedit again, found the path, but i
do
not understand ur last suggestion, i find the ntuser.dat, but i dont find
a
software file.

I tried something then myself, using dosprompt. with *net user **** /add*
u
can create, it seems a new account. i tried, i told me created, but it
couldnt add it to the user group. Then i tried *net localgroup
administrator
**** /add* and it told me account created, but could not be added to
group.
thus i finally created the group and then the account, but still it doesnt
allow me to log on. Any idea how to proceed this, e.g. which groups do
exist,
esp. which one is the admin group. Is this anyway a feasible way n how do
i
assign rights to these thus created accounts?

Greets rudl
 
G

Guest

For the records:

Repair is difficult since i dun have a cd, however, i tried the trick with
replacing system, software, sam, security, default from
c:\windows\system32\config\ with the ones from c:\windows\repair\ - it didnt
let me log on still, coz the newly admin n owner account do not contain user
data, when copying them in from the old accounts, it still doesnt work.
However, this trick allowed me now to enter the recovery console, since
seemingly the admin password was set back to what it was - blank.
trying now to figure out, what to do with this achievment ;)
And still, on a beside note, thks to u both for caring bout this tricky
problem.
Btw had running another antivirus program (part of ubcd), it found another
virus runnin on that comp, also made sysclean, but without result. deleted
winssv.exe via dos prompt.
 
R

Ramesh [MVP]

Thank you very much for the compliments, Michael :)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


I just want to state for the record, the information I posted was actually
purloined from one of Ramesh's past posts. The MVPs do tend to steal links
from each other and when the information is rather generic we don't usually
give credit but since you included me in your thanks, the gracious thing for
me to do is to give credit where it is due; I humbly bow to the wisdom of my
compatriot, Ramesh!:)

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

Rudlfax said:
Dear Ramesh,
<snip>
 
M

Michael Solomon \(MS-MVP\)

You are welcome, Ramesh.

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

Thank you very much for the compliments, Michael :)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


I just want to state for the record, the information I posted was actually
purloined from one of Ramesh's past posts. The MVPs do tend to steal links
from each other and when the information is rather generic we don't usually
give credit but since you included me in your thanks, the gracious thing for
me to do is to give credit where it is due; I humbly bow to the wisdom of my
compatriot, Ramesh!:)

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

Rudlfax said:
Dear Ramesh,
<snip>
 
G

Guest

Heya u 2,

well, it doesnt get easier. I tried to start reinstall with the on C:
available I386 folder, it started, but then came the message hal.dll is
damaged or missing - of coz :p
I replaced ntldr and ntdetect.com without result, also editings in the
boot.ini as well as a reinstallation of hal.dll did not bring anything.
therefore a change happened when replacing system, software, sam, security,
default from repair - it loads the accounts after restart, but logs off
immediately again. Tried then to go into regedit again to adjust
userinit.exe, but it told me it couldnt find system, software, sam, security,
default, since it looked into the $WIN_NT$.~LS folder, established from the
started and not finished setup.
So now shall i remove the setup from boot.ini and delete the folder or what
do you suggest to do?
 
G

Guest

I had restored the registry entry back 2 weeks, without effect. System
Restore was not possible due to using UBCD and a locked C:. Thus i decided to
format C and install a new XP, which luckily isnt that expensive in China.
Now i tried to format using UBCD, which did not work. Thus i exchanged again
the system, software, security, sam and default - was able again to go to
recovery console. typed format c:, enter permission, nothin happens. tried to
establish a new partition to install a working xp there, not workin. Now i
ask myself, what is a recovery console for if it is not working at all?
Luckily it seems to work when using the new xp cd, went from there to the
reovery console, now at least it tells me that its formatting - i´m hoping
very much.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top