Main Forum > General Computer Support

Half way there... (SOLVED)

(1/7) > >>

cheongal:
Hi,

To whoever created and supporting the tool, I say thank you. After several days of tinkering and finally finding and using your tool, my nightmare is almost over. Almost !

My pc is running Windows 7 Home Premium. Issues were (1) Logging into Admin account , got black screen with cursor. Ctlr, Alt + Del and Run userinit.exe from task manager allows me into a normal session (2) Logging into standard account gets logoff right away. If convert to Admin account type, system allows that account in but with black screen and cursor. running userinit.exe will create a normal session. (3) ran chkdsk /f /r . got a bunch of 'Replacing invalid security id with default security id '. Also, I do have malwarebytes and there were a few malware which I quarantined.

Finally, yesterday, ran Windows Repair using my admin account. At the end of the repair, after a couple of restart... using my main admin account (the same I used to run Windows repair) , I was able to get a normal windows session (without having to run userinit.exe manually from task manager) . Yippee !

I said earlier, I am almost there... because I still have issue if I use a standard account, I would get logoff right away. If I use another different admin account, I would get the black screen with cursor (and running userinit.exe would create a normal session).
I have created a new user (after the repair) to perform some tests. New standard user has the same bad behaviour.

Note that I have checked the famous winlogon registries HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, (1) userinit  (C:\WINDOWS\system32\userinit.exe, ) (2) shell (explorer.exe). They both have the standard default values.

Question : I used my main admin account to run Windows Repair (all default choices checked). Is that enough ? It seems that the repair only applied for that main account, whatever fix it was.

Any idea is most welcome.

Thanks
Alain

Shane:
Each user account has their own registry file and that is the hkey_current_user

So when you ran the repairs on the admin account all permissions and such got fixed for that account, but the program cant do the other accounts.

Now here is the odd part though, when you created a new account i should have been fine but it wasnt. When a new account is created a default hkey_current_user and all the default files are taken from the default folder under C:\Users

I have a felling that something, a virus or a 3rd party program, might have messed with the permissions on the default hive. So one trick would be is to replace the files in the default folder with one from a good system, which will replace the "C:\Users\Default\NTUSER.DAT" which is the default hkey_current_user hive that is copied for a new user account.

If you like I can grab the default folder from my Windows 7 system in vmware and post it here for you and then you can replace the ones you have with it :wink:

Shane

cheongal:
Sounds like a plan, Shane. Yes, please.

And I would replace only my DEFAULT one but not for all the standard accounts right ? I can see that the existing NTUSER.DAT have different file sizes ranging from 256KB to 6-7 MB.
So, I am stuck with the existing active ones, am I not ?  if it is an issue with the NTUSER.DAT file.

Cheers,
Alain

Shane:
Teh default is system wide, it is only used when a new user logs in for the first time, the files from the default folder get copied to their newly created profile folder and then thats it. The default folder isnt touched by that user account again. So the small ntuser.dat that you see it in is the bare min for the profile that is needed. Then once a user starts doing things it growns pretty quick.

And no do not replace any other accounts with this, ONLY the default folder. Once done create a new user and login to see if it helps :wink:

This file is only about 1.5 MB uncompressed. So do not delete anything out of the C:\Users\Default folder. Make a backup of it, copy it to another folder just in case. Then extract this 7-zip file to "C:\Users\"

Tell it yes to overwrite everything. You may get some permissions denied errors, that is ok, that is just the protected folders in there not letting it write to them.

See how it goes :-)

Shane

cheongal:
Hi Shane,

It did not go well, unfortunately. Actually, my pc is now back to yesterday's state, i.e before I ran Windows Repair !

So, here is what I did :

1. Rename my DEFAULT folder to DEFAULTX (I could not copy all of it, some folders are not accessible like 'application data' and 'start menu' folders.
2. Extracted your copy of DEFAULT into C:\Users\
3. Create a new standard user
4. Logon with new Standard user. Got the logoff right away
5. Change user to Admin user. Got a pale blue screen and cursor. ctl, alt + del let me run userinit or explorer.
6. rollback my changes 1 and 2.
7. Delete new user
8. Restart computer
9. Surprise ! Using my main admin account, I get black screen and cursor. Use ctrl, alt and del to run userinit and I get my desktop.
10. Decide to restore (I created a restore point for the C drive last night after the Windows Repair yesterday) which I did.
11. Computer is restarted. Logon with admin account. Black screen with cursor. Use ctrl, alt and del to run userinit and I get my desktop. Back to square one.

Plan is to rerun Windows Repair once again. Other Ideas ?

Alain

Navigation

[0] Message Index

[#] Next page