Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Cant Boot Tried Reatogo-X-pe dont't work

Started by msdawn , Jan 23 2011 10:25 AM

  • This topic is locked This topic is locked

#31
JSntgRvr
Posted 23 January 2011 - 07:37 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,591 posts
Still I believe is not complete. The files I am interested in are those without a company name, which usually means trouble. Lets search for two important files:

  • Boot the computer with the USB drive again.
  • Click on File
  • Expand mnt
  • Expand your USB (sdb1)
  • Confirm that you see driver.sh.
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh -af
  • Press Enter
  • You will be prompted to input a filename.
  • Type the following:

    Userinit.exe

  • Press Enter
  • If successful, the script will search for this file.
  • After it has completed the search enter the next file to be searched
  • Type the following:

    Winlogon.exe

  • Press Enter
  • After the search is completed type Exit and press Enter.
  • After it has finished a report will be located in the USB drive as filefind.txt
  • Please post it for my review

  • 0

Advertisements

#32
msdawn
Posted 23 January 2011 - 07:44 PM

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
Search results for Userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008
  • 0

#33
msdawn
Posted 23 January 2011 - 07:49 PM

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
Search results for Userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008


Search results for userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008


Search results for winlogon.exe

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/ERDNT/cache/winlogon.exe
496.0K Apr 14 2008

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/ServicePackFiles/i386/winlogon.exe
496.0K Apr 14 2008

01c3346c241652f43aed8e2149881bfe /mnt/sda1/WINDOWS/$NtServicePackUninstall$/winlogon.exe
490.5K Aug 4 2004

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/system32/winlogon.exe
496.0K Apr 14 2008
  • 0

#34
JSntgRvr
Posted 23 January 2011 - 07:50 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,591 posts
I don't see the results for Winlogon.exe. Make sure you type the correct file name.

  • Boot the computer with the USB drive again.
  • Click on File
  • Expand mnt
  • Expand your USB (sdb1)
  • Confirm that you see driver.sh.
  • Press Tool at the top
  • Choose Open Terminal
  • Type bash driver.sh -af
  • Press Enter
  • You will be prompted to input a filename.
  • Type the following:

    Winlogon.exe

  • Press Enter
  • After the search is completed type Exit and press Enter.
  • After it has finished a report will be located in the USB drive as filefind.txt
  • Please post it for my review

  • 0

#35
msdawn
Posted 23 January 2011 - 07:53 PM

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
its there only took few times to do it before it got on...
  • 0

#36
msdawn
Posted 23 January 2011 - 08:05 PM

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
Posted 15 minutes ago

Search results for Userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008


Search results for userinit.exe

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ERDNT/cache/userinit.exe
25.5K Apr 14 2008

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/ServicePackFiles/i386/userinit.exe
25.5K Apr 14 2008

39b1ffb03c2296323832acbae50d2aff /mnt/sda1/WINDOWS/$NtServicePackUninstall$/userinit.exe
24.0K Aug 4 2004

a93aee1928a9d7ce3e16d24ec7380f89 /mnt/sda1/WINDOWS/system32/userinit.exe
25.5K Apr 14 2008


Search results for winlogon.exe

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/ERDNT/cache/winlogon.exe
496.0K Apr 14 2008

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/ServicePackFiles/i386/winlogon.exe
496.0K Apr 14 2008

01c3346c241652f43aed8e2149881bfe /mnt/sda1/WINDOWS/$NtServicePackUninstall$/winlogon.exe
490.5K Aug 4 2004

ed0ef0a136dec83df69f04118870003e /mnt/sda1/WINDOWS/system32/winlogon.exe
496.0K Apr 14 2008
  • 0

#37
JSntgRvr
Posted 23 January 2011 - 08:11 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,591 posts
Files are legit. We will need to check the Registry entries.

In XPUD browse to the mnt/sda1/WINDOWS/System32/config folder and copy the Software file to your USB drive. This is a huge file. Please be patient while copying and uploading the file. If unable to upload, try to zip the file (Right click on it and select Send to, select Compressed (zipped) folder. that should create a zip folder. Upload that file.

Please upload this file to the Spykiller forum as follows:

Please go here:
The Spy Killer Forum
  • Click on "New Topic"
  • Put your name, e-mail address, and this as the title: "For JSntgRvr"
  • Put a link to this thread in the description box.
  • Then next to the file box, at the bottom, click the browse button, then navigate to this file:

    • Software
  • Click Open.
  • Click Post.

You wont be able to see if uploaded. Just follow the instructions and let me know when done.
  • 0

#38
msdawn
Posted 23 January 2011 - 08:30 PM

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
how do i put a link in there...not sure how to do that...not sure what ur talkin about...at that site...subject ur name mesagage icon standard....lost u big time after that.
  • 0

#39
msdawn
Posted 23 January 2011 - 08:38 PM

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
sorry but i have to go to bed...i didnt understand what u meant...have to work tomorrow... appreciate you helping me.....i dont know what else to do....im no computer person...and I know i must aggravaite you....have good nite
  • 0

#40
JSntgRvr
Posted 23 January 2011 - 08:39 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,591 posts
Copy and paste this:

http://www.geekstogo.com/forum/topic/294486-cant-boot-tried-reatogo-x-pe-dontt-work/page__pid__1959892__st__30#entry1959892

  • 0

Advertisements

#41
JSntgRvr
Posted 23 January 2011 - 08:40 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,591 posts
I will check on you in the am. Good night!
  • 0

#42
msdawn
Posted 24 January 2011 - 04:17 PM

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
ok just got off work....where were we?
  • 0

#43
msdawn
Posted 24 January 2011 - 04:47 PM

msdawn

    Member

  • Topic Starter
  • Member
  • PipPip
  • 94 posts
because i used the AVG recover disk it had me rename all the trojan virus with a .arl extension would that make a difference? It still wont let me boot my computer though.
  • 0

#44
JSntgRvr
Posted 24 January 2011 - 06:53 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,591 posts
Standby for instructions.
  • 0

#45
JSntgRvr
Posted 24 January 2011 - 07:06 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,591 posts
Since we weren't able to load the Software hive, let check it manually. Read the instructions and be careful. Make no changes on the registry. Follow these steps.

Boot the computer with the Reatogo CD (OTLPE). No need to run the application.

  • Go to the Start button and select Run. Type regedit and click Ok. The Registry editor will be displayed.
  • Click on the HKEY_LOCAL_MACHINE key. Then select File from the Menu. Select Load Hive.
  • Browse to the Local drive (Usually C:\) WINDOWS\System32\config folder.
  • Select the Software file and click on Open. You will be asked for the name of the key to load the file to, type Test.
  • You should now have an additional key under HKEY_LOCAL_MACHINE labeled Test.
  • Click on the +sign next to Test. Scroll down to Microsoft and click on the + sign next to it, then scroll down to Windows NT, click on the +sign next to it, then on the + sign next to Currentversion. Scroll down to Winlogon and click on the Winlogon key to highlight it.
  • On the right pane you will see the Userinit value. For the time being, let me know what it says under Data for this value.

Leave the registry editor opened until I give you further instructions, depending upon your findings
  • 0
Back to Computer Won't Boot - Malware Related · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Computer Won't Boot - Malware Related

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP