Repair Userinit with BartPE rescue disk

Version: 1.2c
Revision: 21 Build 6

Repair Userinit with BartPE rescue disk

A few days ago, I was trying to repair a boot sector from a virus infection. It took me a while to resolve this dilemma. But, in the end, it wasn’t the “boot.ini” file that was eaten alive. It was actually a registry problem. The little bugger had removed one of the “userinit.exe” registry strings. How inconvenient…

For those who had this problem, I would recommend you to print this article and keep it as a copy for guidance. But, don’t forget to create a ‘bootable disk’ with BartPE program. You will need to do that first before reading this article.

http://www.nu2.nu/pebuilder/

Notes: building a live bootdisk requires a fresh copy of Windows XP CD. By any chance, if you don’t have one, you better ask the neighbour for a fresh copy. I would recommend “Ashampoo Burning Studio” for this task. However, if you don’t want to boot from a disk, then why not use a removable device and boot it from there. You will need this application: UNetbootin application.

http://unetbootin.sourceforge.net/

This program will help you transfer any ‘Rescue Disk / Windows OS’ onto a removable device. The software will also help you choose the correct disk. But, it will take a while and you got to have patient.

Manual Registry Repair
——————————–

1.] Insert your Live CD / USB system into your computer and let it boot. But, don’t forget to re-configure your BIOS.

2.] Click: ‘Start >> Run >> Type: cmd.exe’.

3.] Type in: ‘regedit’ and press Enter. Select the HKEY_USERS hive.

4.] From the file menu (tabs), just select the ‘Load Hive’ option. Browse through your internal drive (system drive) and locate the following director: ‘C:\Windows\System32\Config\

5.] Select this file name: SOFTWARE (File without extension), and click Open.

6.] Give your new registry hive a name. I would recommend you to keep it simple and short. For now, I would call this as: MyXPHive.

7.] Look into your new hive and locate this directory: HKEY_USERS \ MyXPHive \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon

8.] Modify this strings and set its value. But, don’t forget to include the trailing comma.

userinit (REG_SZ) – C:\Windows\System32\Userinit.exe,

9.] When you are done, you will need to unload your hive. To perform this task, just select ‘MyXPHive’ branch, and then in the File menu, choose ‘Unload Hive’.

10.] Exit BartPE and reboot your computer.

Copyrighted By Lair360

Comments are closed.