Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Registry Change Prevents Startup


  • Please log in to reply

#1
Jackpine

Jackpine

    Member

  • Member
  • PipPipPip
  • 416 posts

Hello, I have an HP laptop with Windows 8.1, and I think I messed it up big time.  Here is what happened.

 

I went to a website and found that I kept getting the same two popups.  I ran Junkware Removal Tool and adw Cleaner.  They removed some malware.  I rebooted and everything worked fine, except I got the following dialog box  (I wrote it down):

 

Windows Script Host

C:\Windows\run.vbs

Line: 39

Char: 1

The system cannot find the file specified.

Code: 80070002

Source: (null)

 

I then searched the web to find out what this means and how to fix it.  I came across one site that said maleware probably resulted in this change.

 

The fix was to go to regedit, and to the following location:

 

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENT VERSION\WINLOGON.  Then to double click the entry Userinit and change

wscript C:\WINDOWS\run.vbs, to C:\Windows/system 32\userinit.exe,

 

I deleted only wscript, and then exited regedit and restarted the computer.

 

It starts up with my username and icon, but then the screen remains totally black.  Only the cursor is visible.  I can press Ctr-Alt-Del and go into Task Manager if I want, and open it, but that's it.

 

When I looked at my notes, I see that I did not change the entry completely as required.  I am 99.9% sure that I forgot to change the run.vbs to system 32\userinit.exe

 

Is there any thing that I can do to correct my stupid mistake?  The laptop didn't come with a Windows disk.

 

Thank you.

 

UPDATE:  I found that for HP laptops, as soon as I turn on the power and hit the ESC key repeatedly, I can enter Advanced Options.  From there I did a system restore.  The computer then started up OK and the message that appeared earlier about the file that couldn't be found didn't appear.  I will monitor the computer over the next couple of days.  Hopefully everything is fine.  I will also avoid making registry changes in the future!


Edited by Jackpine, 28 March 2016 - 07:59 PM.

  • 0

Advertisements


#2
SleepyDude

SleepyDude

    Trusted Helper

  • Malware Removal
  • 4,885 posts

Hi,

 

Make sure you run Junkware Removal Tool and AdwCleaner again to make sure System Restore didn't put the malware back.


  • 0

#3
Jackpine

Jackpine

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 416 posts

Hi,  I reran Junkware Removal Tool and AdwCleaner. They both cleaned up some garbage.  The computer seems to run OK, but how can I check to ensure that it is truly clean?


  • 0

#4
SleepyDude

SleepyDude

    Trusted Helper

  • Malware Removal
  • 4,885 posts

Hi,

 

In that case its best to post on the Malware Section of the forum, follow the guide here from Step 3 for a malware check.


  • 0

#5
FreeBooter

FreeBooter

    Member 1K

  • Member
  • PipPipPipPip
  • 1,375 posts

What you did wrong is to input System32 as System 32 that cause the black screen also the data C:\Windows/system32\userinit.exe, there is no other entry except userinit.exe path which you also included the C:\WINDOWS\run.vbs, with C:\Windows/system32\userinit.exe path which cause the black screen also there is no run.vbs system file this mean this could be added by malware infection delete run.vbs form Windows folder and refer to this Guide to ask for malware infection checkup.


  • 0

#6
Jackpine

Jackpine

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 416 posts

FreeBooter, thanks for the info, but I don't really understand what you are saying.  I have taken SleepDude's advice and posted this on the malware forum.

 

Edit: Here is the link to the malware thread. Looks like problem is solved there. - Z

http://www.geekstogo...s/#entry2543703


  • 0

#7
FreeBooter

FreeBooter

    Member 1K

  • Member
  • PipPipPipPip
  • 1,375 posts

The default data of Userinit value is C:\Windows\system32\userinit.exe. Is this what you had trouble understanding or something else i said.


  • 0

#8
Jackpine

Jackpine

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 416 posts

That's clearer, thanks.  I'll see what happens on the malware removal forum.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP