Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Cant Boot Tried Reatogo-X-pe dont't work


  • This topic is locked This topic is locked

#31
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,037 posts
Still I believe is not complete. The files I am interested in are those without a company name, which usually means trouble. Lets search for two important files:

  • Boot the computer with the USB drive again.
  • Click on File
  • Expand mnt
  • Expand your USB (sdb1)
  • Confirm that you see driver.sh.
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh -af
  • Press Enter
  • You will be prompted to input a filename.
  • Type the following:

    Userinit.exe

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    Winlogon.exe

  • Press Enter
  • After the search is completed type Exit and press Enter.
  • After it has finished a report will be located in the USB drive as filefind.txt
  • Please post it for my review

  • 0

Advertisements


#32
msdawn

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
Search results for Userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008
  • 0

#33
msdawn

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
Search results for Userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008


Search results for userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008


Search results for winlogon.exe

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/ERDNT/cache/winlogon.exe
496.0K Apr 14 2008

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/ServicePackFiles/i386/winlogon.exe
496.0K Apr 14 2008

01c3346c241652f43aed8e2149881bfe /mnt/sda1/WINDOWS/$NtServicePackUninstall$/winlogon.exe
490.5K Aug 4 2004

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/system32/winlogon.exe
496.0K Apr 14 2008
  • 0

#34
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,037 posts
I don't see the results for Winlogon.exe. Make sure you type the correct file name.

  • Boot the computer with the USB drive again.
  • Click on File
  • Expand mnt
  • Expand your USB (sdb1)
  • Confirm that you see driver.sh.
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh -af
  • Press Enter
  • You will be prompted to input a filename.
  • Type the following:

    Winlogon.exe

  • Press Enter
  • After the search is completed type Exit and press Enter.
  • After it has finished a report will be located in the USB drive as filefind.txt
  • Please post it for my review

  • 0

#35
msdawn

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
its there only took few times to do it before it got on...
  • 0

#36
msdawn

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
Posted 15 minutes ago

Search results for Userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008


Search results for userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008


Search results for winlogon.exe

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/ERDNT/cache/winlogon.exe
496.0K Apr 14 2008

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/ServicePackFiles/i386/winlogon.exe
496.0K Apr 14 2008

01c3346c241652f43aed8e2149881bfe /mnt/sda1/WINDOWS/$NtServicePackUninstall$/winlogon.exe
490.5K Aug 4 2004

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/system32/winlogon.exe
496.0K Apr 14 2008
  • 0

#37
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,037 posts
Files are legit. We will need to check the Registry entries.

In XPUD browse to the mnt/sda1/WINDOWS/System32/config folder and copy the Software file to your USB drive. This is a huge file. Please be patient while copying and uploading the file. If unable to upload, try to zip the file (Right click on it and select Send to, select Compressed (zipped) folder. that should create a zip folder. Upload that file.

Please upload this file to the Spykiller forum as follows:

Please go here:
The Spy Killer Forum
  • Click on "New Topic"
  • Put your name, e-mail address, and this as the title: "For JSntgRvr"
  • Put a link to this thread in the description box.
  • Then next to the file box, at the bottom, click the browse button, then navigate to this file:

    • Software
  • Click Open.
  • Click Post.

You wont be able to see if uploaded. Just follow the instructions and let me know when done.
  • 0

#38
msdawn

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
how do i put a link in there...not sure how to do that...not sure what ur talkin about...at that site...subject ur name mesagage icon standard....lost u big time after that.
  • 0

#39
msdawn

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
sorry but i have to go to bed...i didnt understand what u meant...have to work tomorrow... appreciate you helping me.....i dont know what else to do....im no computer person...and I know i must aggravaite you....have good nite
  • 0

#40
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,037 posts
Copy and paste this:

http://www.geekstogo.com/forum/topic/294486-cant-boot-tried-reatogo-x-pe-dontt-work/page__pid__1959892__st__30#entry1959892

  • 0

Advertisements


#41
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,037 posts
I will check on you in the am. Good night!
  • 0

#42
msdawn

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
ok just got off work....where were we?
  • 0

#43
msdawn

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
because i used the AVG recover disk it had me rename all the trojan virus with a .arl extension would that make a difference? It still wont let me boot my computer though.
  • 0

#44
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,037 posts
Standby for instructions.
  • 0

#45
JSntgRvr

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,037 posts
Since we weren't able to load the Software hive, let check it manually. Read the instructions and be careful. Make no changes on the registry. Follow these steps.

Boot the computer with the Reatogo CD (OTLPE). No need to run the application.

  • Go to the Start button and select Run. Type regedit and click Ok. The Registry editor will be displayed.
  • Click on the HKEY_LOCAL_MACHINE key. Then select File from the Menu. Select Load Hive.
  • Browse to the Local drive (Usually C:\) WINDOWS\System32\config folder.
  • Select the Software file and click on Open. You will be asked for the name of the key to load the file to, type Test.
  • You should now have an additional key under HKEY_LOCAL_MACHINE labeled Test.
  • Click on the +sign next to Test. Scroll down to Microsoft and click on the + sign next to it, then scroll down to Windows NT, click on the +sign next to it, then on the + sign next to Currentversion. Scroll down to Winlogon and click on the Winlogon key to highlight it.
  • On the right pane you will see the Userinit value. For the time being, let me know what it says under Data for this value.

Leave the registry editor opened until I give you further instructions, depending upon your findings
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP