System deleted User Account

[Ushnell]

I know this post seems a little leghntly but it's because the problem takes
much to explain.

A few weeks ago I made a mistake in the registry by gettings permissions to
read the contents of SAM.

but after I was done I deleted my permissions and let the System have full
control of that key, did some work and restarted the pc but that's when I
realized I did something wrong because a message saying: LSASS.EXE-SSYSTEM
ERROR with the instructions to restart th pc in safe mode and read the system
events for info but that meassege box still appears and it causes Windows
Logon to freeze.

What I ideally decided to do is plug the hard disk into my other Windows
2000 PC and use regedit to restore the SAM from the C:\WINNT\repair folder to
the C:\WINNT\cofig folder but their I made another mistake because it seems
that SAM was a fresh file and wh it did is disaled my original suer account
and created a fresh new one.

The System profiles list seems to consider the former administrator and
Guest acount as unknown even though they are in the Windows NT registry key
list.

Being able to login I used System Restore to reverse the system to a ealier
point but I keep getting the "Restore Incomplete" "no changes have been made
to your system" message. There's some problems such as Explorer.exe restarts
when I do right click and click the File menu and I can't access the Control
Panel.

I know what I should do is re-install Windows XP but I Don't have the CD
because I picked up this PC up in front a moved neighbors house. Is there an
alternative way around this? please help!

 

[jake]

Do the same thing you did with the sam file except pull the files from
C:\System Volume Information (restore files) Note:Check the date that each
file was created and that will tell which restore it is.You'll need
Sam,System,Security,Software and maybe default.It should get you far enough
to do a true restore.You will have to rename the files from volume
information as the file are named _REGISTRY_MACHINE_SAM
_REGISTRY_MACHINE_SECURITY
ect
also make sure you back the files up just incase something goes wrong.

 

[Ushnell]

Thanks Jake even though I taught of doing that in advance before posting the
recent post to see if group members would recommend restoring XP that way.

Well I did and it worked Jake but here's the new problem:- while I was
using XP with that user account that the System created there were some XP
updates and new software installed such as Mcafee to fend off the Malware
stuff I realized that the pc was infected with.

the reason I say new problem is because now that I have reverted back to the
original user account, it seems that those updates and the software(s) were
not administered to it while that user account was deleted because of the SAM
fresh file replacement.

Now what I'm thinking of doing is reloading those registry files and go back
to that user account and uninstall the updates and software(s) but as a
caution I keep telling my self to not uninstall any updates because it's
doing something like that which has put my Windows 2000 PC in a almost
useless state.

What do you recommend?

 

[jake]

If you replaced all the registry files mentioned then there will be no
reference to the updates in the registry but they will still exist on your
harddrive.Now if the original problem only corrupted the sam file then you
will only have to replace the sam file.Now if you only replaced the sam file
when you installed the updates.Then the only registry file you should replace
is the sam file from C:/system volume.
Hope this makes sense

 

[jake]

If my previous post does apply then all you have to do is change all your
registry files except your sam file back to the previous user.
If not then yes go back to previous user and uninstall the updates.Then go
back in your current user and reinstall them.

 

[Ushnell]

Thanks again for your support Jake and here's the update on this: I opened
the Add/Remove Programs on the fresh SAM account and looked up what date the
updates were installed and it indicated that they were all installed on
2/11/2008 which is the same date the restore files in the System Volume
folder have that I used to fix the SAM problem.

That there makes no sense because I remember that it is was on the 15th that
the SAM problem occurred. as for the registry files, it seems that it's the
SOFTWARE that was being used after the SAM got corrupted that's causing
Explorer to not allow me to do right click and open the Control Panel.

Another thing that does now make sense is that one of the programs that I
installed on the fresh account (Winzip 11.1, Digital Locker) is considered a
newly installed program on the original account before SAM got corrupted.

this is so confusing that I don't know where to start.

 

[jake]

ok let me try and make sense of this
1 you had problems and had to revert to using sam file from repair
folder.and updated windows and downloaded a few programs
2 you changed sam,software,security,ect. files from system volume folder. Is
this correct?
3.What did you do here?

 

[Ushnell]

1. Correct
2. Correct
3. Nothing but trying to figuring out which updates are to be uninstalled
which are using up sector space on the hard drive and take a collum to scroll
the WINNT system folder. But like I said in my second post, I'm thinking very
cautious about uninstalling those updates because doing that and a Service
Pack is what made my Windows 2000 PC almost useless.

Another thing that I need to look at is what updates Windows Update is
telling me that are available for the computer and compare them between those
updates currently installed on the drive and if their KB numbers are the same
then that means that WU looked up to see if they are installed in the user
account that the System deleted which I restored.

 

[Ushnell]

Ok I have finally gotten the chance to respond to give you the newest post of
this problem Jake and what I said is what exactly happened: after looking up
the list of the updates that are not listed in the registry but are stored in
the Windows folder and decided to uninstall them this is what is now the
problem:

What now happens is that while XP is at loading up screen it now proceeds to
a short black screen that usually is the screen that brings up Winlogon but
now what happens is the hard drive automatically shuts down and a blue screen
pops up with the message: Stop:00000c139- missing component: this application
failed to start because Winsrv.dll could not be found. Re-installing the
application may fix this problem.

That right there is bull because I looked up the locations which this file
is and it's also in the main System32 folder so how can the freakin' program
that is looking for it not find it?

Just like my ME version problem the computer does not allow running in Safe
Mode. there's more to this but I forgot and can't bring them up especially
I'm not at home typing while typing this post but can you help from what I
just drew up here Jake?

 

[need to date]

hey buddy, sorry to bother you guys but i dont know where else to go. I have
been going Plenty of fish.com its a free online dateing site. All of a sudden
my account was deleted, I then created another one and that to was deleted. I
have since tried over a dozen new ones with new email addresses but they keep
getting deleted after recieving an email from them saying it was succesfull.
It seems to know it is my laptop how do I get past it. oh and I did not do
anything wrong to get deleted, there forum says it happens sometimes
Please help me here.

 

[PD43]

hey buddy, sorry to bother you guys but i dont know where else to go. I have
been going Plenty of fish.com its a free online dateing site.

This does NOT belong here. Contact that dating site for help.