Editing registry in recovery console?  
Author Message
PS





PostPosted: Thu Sep 01 06:49:56 CDT 2005 Top

Windows XP Support >> Editing registry in recovery console? I was clearing the Aurora adware out of a user's computer and it took the
userinit.exe registry entry with it. Now whenever I try to logon to Windows
XP it immediately logs me back out to the Welcome screen.

I need to put the Userinit value back into the
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon registry key, but
can't figure out any way to do that without access to the Windows regedit.exe.
In a possibly unrelated problem, I'm not able to remotely access the machine
either and I don't think it's set up for remote registry services; at least,
I wasn't able to get into it over the network on my machines own regedit (nor
am I able to do any sort of remote access, the machine immediately closes any
connection I establish). All of this just means that I can't make this very
simple and easy fix through the methods I'd normally use.

My question is if there's a way to manually add values to the registry
through the recovery console, or if there's some bootable utility out there
which would let me do that.

Windows XP1030  
 
 
Ricky





PostPosted: Thu Sep 01 06:49:56 CDT 2005 Top

Windows XP Support >> Editing registry in recovery console? Maybe something here will help..
See section "Unable to logon to Windows after removing BlazeFind using a
spyware removal utility? " here:
http://www.winxptutor.com/wsaremove.htm

"A51" <EMail@HideDomain.com> wrote in message
news:EMail@HideDomain.com...
>I was clearing the Aurora adware out of a user's computer and it took the
> userinit.exe registry entry with it. Now whenever I try to logon to
> Windows
> XP it immediately logs me back out to the Welcome screen.
>
> I need to put the Userinit value back into the
> HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon registry key,
> but
> can't figure out any way to do that without access to the Windows
> regedit.exe.
> In a possibly unrelated problem, I'm not able to remotely access the
> machine
> either and I don't think it's set up for remote registry services; at
> least,
> I wasn't able to get into it over the network on my machines own regedit
> (nor
> am I able to do any sort of remote access, the machine immediately closes
> any
> connection I establish). All of this just means that I can't make this
> very
> simple and easy fix through the methods I'd normally use.
>
> My question is if there's a way to manually add values to the registry
> through the recovery console, or if there's some bootable utility out
> there
> which would let me do that.


 
 
A51





PostPosted: Thu Sep 01 13:07:03 CDT 2005 Top

Windows XP Support >> Editing registry in recovery console? Thanks for the suggestion, unfortunately in my case it's a matter of the
entire registry value being missing, rather than simply pointing to an .exe
which no longer exists.

"Ricky" wrote:

> Maybe something here will help..
> See section "Unable to logon to Windows after removing BlazeFind using a
> spyware removal utility? " here:
> http://www.winxptutor.com/wsaremove.htm

 
 
A51





PostPosted: Thu Sep 01 13:09:01 CDT 2005 Top

Windows XP Support >> Editing registry in recovery console? Thanks for the suggestion. Unfortunately in my case it's a matter of the
registry value being missing completely, rather than it pointing to an .exe
which doesn't exist anymore.


---

"Ricky" wrote:

> Maybe something here will help..
> See section "Unable to logon to Windows after removing BlazeFind using a
> spyware removal utility? " here:
> http://www.winxptutor.com/wsaremove.htm

 
 
David





PostPosted: Thu Sep 01 13:30:15 CDT 2005 Top

Windows XP Support >> Editing registry in recovery console? Take the file to another computer.

--=20
-------------------------------------------------------------------------=
-------------------------
http://webdiary.smh.com.au/archives/_comment/001075.html
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
"A51" <EMail@HideDomain.com> wrote in message =
news:EMail@HideDomain.com...
> Thanks for the suggestion. Unfortunately in my case it's a matter of =
the=20
> registry value being missing completely, rather than it pointing to an =
.exe=20
> which doesn't exist anymore.
>=20
>=20
> ---
>=20
> "Ricky" wrote:
>=20
>> Maybe something here will help..
>> See section "Unable to logon to Windows after removing BlazeFind =
using a
>> spyware removal utility? " here:
>> http://www.winxptutor.com/wsaremove.htm
>
 
 
A51





PostPosted: Thu Sep 01 18:42:02 CDT 2005 Top

Windows XP Support >> Editing registry in recovery console? I was able to get the registry fix I needed in using this utility:

http://home.eunet.no/~pnordahl/ntpasswd/

The commands were a little tricky to figure out the syntax at first but once
I got that down the machine was back up and running in no time.

My next step would have been to try Bart PE with this plugin:

https://sourceforge.net/projects/regeditpe/


Hope this helps anyone who finds this post in the future.