Question

Locked

My computer is in trouble I need some help!!

By Mikeb14 ·
Hey guys I'm not very good with computers I knwobmy way around but not that experianced the other day I installed avira intivir to my computer and scaned it found a few things and removed them I colsed out and walked away...later I came back and on the screen there was a windows message saying new information was installed and needed to be restarted... But my computer was frozen so I had to physicall push the button to turn it off... I turned it back on later begins booting normally then at loading personal settings and error message comes up pretaining to userinit.exe says something like 0x0005ex0 could not be "written" ok to termiante cancel to debug. That's not the exact code but close not matter which I click
My pc continues loading till the desktop loads the desktop image and that's it no Icons nothing and the only thing that works is task manager.. Explorer.exe I do not see running.... When I do safe boot I recieve a BSOD! I am not sure what to do any ideas? Thank you I have windows xp sp2 and am on a desktop dell computer with plenty of ram and memory and it is not over heating... Thanks


Mike

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

So you want an exact answer for a highly vague question?...

by OldER Mycroft In reply to My computer is in trouble ...

That's not really the way it works - without the exact code you can't really expect anyone to provide an 'exact' answer.

"says something like 0x0005ex0" could mean anything.

Collapse -

The exact code is 0x00ec024d

by Mikeb14 In reply to So you want an exact answ ...

0x00ec024d

Collapse -

Vague response

by Jacky Howe In reply to My computer is in trouble ...

Have you run the Dell Diagnostics yet. After you do work your way through this.

Userinit may have been damaged so you can replace it with these instructions. Overwrite the file if necessary.

Insert the XP CD and reboot the computer. You may need to configure your computer to boot from the CD-ROM drive.
When the Windows XP Setup has started, press "R" to "repair the Windows XP installation using Recovery Console".
Select the Windows installation to repair (generally this is C:\Windows) by typing its number and then pressing ENTER.
Type the Administrator password and press ENTER.
Type the following commands: and press Enter after each.

CD I386
EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32
NOTE: If your CD-ROM drive has a different letter assigned to it, enter "X:" instead, where X is the appropriate drive letter.
After entering "EXPAND USERINIT.EX_ C:\WINDOWS\SYSTEM32" you should see the text "1 file(s) copied", in which case all went well.

Remove the Windows XP CD, type "EXIT" and press ENTER to restart your computer. You should now be able to log on as normal.


<b>"WARNING MODIFYING REGISTRY INFORMATION IS DANGEROUS"</b>
Backup the Key before making changes by right clicking the Key and select Export.


Press ctrl+alt+del and then go to file, start process, and start explorer.exe and then your desktop should show up

Click Start, Run and type regedt32 and press Enter.

Navigate to: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\winlogon\

You will have to set the Shell variable in the right hand pane by right clicking and select Modify. It should = Explorer.exe


Now, check the USERINIT value in the registry


In the right-pane, check that the value of Userinit is equal to C:\WINDOWS\system32\<b>userinit.exe,</b>

Type the above value exactly as given, including the comma if it is different.


Follow the steps below with the System started and restarted in Safe Mode with Networking if you are now able to access Safe Mode. Running in Safe Mode loads a minimal set of drivers for the Operating System. You can use these options to start Windows so that you can modify the registry or load or remove drivers.

With the new strains of Virus that have been created you may find it necessary to rename the executable files so that they will work. Rename mbam-setup.exe and then navigate to the install folder and rename mbam.exe. Do not change the files extension from .exe. Do the same with Spybot.

Removing malware from System Restore points
To remove the malware, you must first disable System Restore, then scan the system with up-to-date antivirus software - allowing it to clean, delete, or quarantine any viruses found. After the system has been disinfected, you may then re-enable System Restore. The steps for disabling System Restore vary, depending on whether the default Start Menu or the Classic Start Menu is being used.

Default Start Menu XP
If using the default Start Menu, click Start | Control Panel | Performance and Maintenance | System. Select the System Restore tab and check "Turn off System Restore".

Classic Start Menu XP
If using the Classic Start Menu, click Start | Settings | Control Panel and double-click the System icon. Select the System Restore tab and check "Turn off System Restore".

Vista
Start, right mouse click Computer and select Properties. Select Advanced System Properties, click contine and then System Protection. Untick the box nect to Local Disk C: and click on Turn System Restore off.


After scanning the system and removing the offending malware, re-enable System Restore by repeating the steps, this time removing the check from "Turn off System Restore".

Download Malwarebytes Anti-Malware, install it and update it.

<a href="http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe" target="_blank"><u>Malwarebytes</u></a>

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform Quick Scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
<a href="http://malwarebytes.gt500.org/mbam-rules.exe" target="_blank"><u>mbam-rules</u></a>

I would keep scanning with it until it is clean by closing out and rebooting and running it again.


Download Spybot - Search & Destroy and install it. Update it and run it.

<a href="http://www.safer-networking.org/en/download/index.html " target="_blank"><u>Spybot</u></a>

Also run this Rootkit Revealer GMer
http://www.gmer.net/index.php

FAQ
http://www.gmer.net/faq.php

Just to be on the safe side when you finish do an online scan with Bitdefender or Google for an online scanner.

http://www.bitdefender.com/scan8/ie.html

As a last resort try this if the above doesn't help.

Click Start, Run type msconfig and press Enter.

Now if you have the Configuration Utility open.
Configure selective startup options
In the System Configuration Utility dialog box, click the General tab, and then click Selective Startup.
Click to clear the Process SYSTEM.INI File check box.
Click to clear the Process WIN.INI File check box.
Click to clear the Load Startup Items check box. Verify that Load System Services and Use Original BOOT.INI are checked.
Click the Services tab.
Click to select the Hide All Microsoft Services check box.
Click Disable All, and then click OK.
When you are prompted, save the settings and restart the System.
When the System is working properly re-run the Configuration Utility and in the System Configuration Utility dialog box, click the General tab, and then click Normal Startup.

Now you will have to re-enable each item or do up to three at a time to see what is causing it.

Collapse -

OK

by Jacky Howe In reply to Vague response

Neither of those error codes match anything. If Avira has removed all of the infections it should be good to go. It looks like something has glitched and it has effected your System. Hence my suggestion to run the Malware tools. You can check the Registry settings following the instructions that were provided and it may get you your desktop back.

You could remove and then add the Drive as a Slave to a PC or a USB enclosure and then copy off the Data. Another alternative is to use a Linux CD to burn it or to copy it elsewhere. Then use your Recovery CD to Reinstall the Operating System.

Edit: not enough coffee

I wouldn't mind betting that you didn't turn off System Restore when you ran Avira. There could be remnents in the restore folder. As Sinister has suggested you can try a System Restore to an earlier time and if it is working turn it off and then run MBAM.

Removing malware from System Restore points
To remove the malware, you must first disable System Restore, then scan the system with up-to-date antivirus software - allowing it to clean, delete, or quarantine any viruses found. After the system has been disinfected, you may then re-enable System Restore. The steps for disabling System Restore vary, depending on whether the default Start Menu or the Classic Start Menu is being used.

Default Start Menu XP
If using the default Start Menu, click Start | Control Panel | Performance and Maintenance | System. Select the System Restore tab and check "Turn off System Restore".

Classic Start Menu XP
If using the Classic Start Menu, click Start | Settings | Control Panel and double-click the System icon. Select the System Restore tab and check "Turn off System Restore".

Vista
Start, right mouse click Computer and select Properties. Select Advanced System Properties, click contine and then System Protection. Untick the box nect to Local Disk C: and click on Turn System Restore off.


After scanning the system and removing the offending malware, re-enable System Restore by repeating the steps, this time removing the check from "Turn off System Restore".

Collapse -

Do a In Place Install by following the Advice of M$

by OH Smeg In reply to My computer is in trouble ...

This will repair the OS which is what is corrupt here

http://support.microsoft.com/kb/315341

This is what you want though

Method 2: Repair install of Windows XP by starting your computer from the Windows XP CD
Note If Windows XP was preinstalled on your computer, you may need the installation CD to reinstall. Contact your computer manufacturer to make sure that you have the installation CD for a repair installation.

To reinstall Windows XP by starting your computer from the Windows XP CD, follow these steps:
Insert the Windows XP CD into your computer's CD drive or DVD drive, and then restart your computer.
When you receive the "Press any key to boot from CD" message on the screen, press a key to start your computer from the Windows XP CD.
The following message on the Welcome to Setup screen will appear:
This portion of the Setup program prepares Microsoft Windows XP to run on your computer: To setup Windows XP now, press ENTER. To repair a Windows XP installation by using Recovery Console, press R. To quit Setup without installing Windows XP, press F3.
Press ENTER to set up Windows XP.
On the Windows XP Licensing Agreement screen, press F8 to agree to the license agreement.
Make sure that your current installation of Windows XP is selected in the box, and then press R to repair Windows XP.
Follow the instructions that appear on the screen to reinstall Windows XP. After you repair Windows XP, you may have to reactivate your copy of Windows XP. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
310064 (http://support.microsoft.com/kb/310064/ ) How to troubleshoot Windows XP Setup problems when you upgrade from Windows 98 or Windows Millennium Edition
If you successfully completed the reinstallation, congratulations. You are almost done. Please continue to the "After you reinstall Windows XP" section to finish.

If you received an error or if the reinstallation did not finish, unfortunately, this article did not resolve your problem. For your next steps, you may want to ask someone whom you know for help. Or, you may want to contact Microsoft Support to help you resolve this problem.
Back to the top
After you reinstall Windows XP
After you finish the reinstallation, complete the following final tasks.

Note You may also want to enable the firewall in Internet Explorer. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
283673 (http://support.microsoft.com/kb/283673/ ) How to turn on or turn off the firewall in Windows XP
Reinstall Windows XP Service Pack 2
If Windows XP Service Pack 2 (SP2) was installed on your computer before you reinstalled Windows XP, you must reinstall SP2. If you did not already reinstall SP2 with the Windows XP in the previous section, use one of the following methods to reinstall SP2 now.
Method 1: Obtain the service pack CD and reinstall the service pack after you reinstall Windows XP
To order Windows Service Pack 2 on CD, visit the following Microsoft Web site:
http://www.microsoft.com/windowsxp/downloads/updates/sp2/cdorder/en_us/default.mspx (http://www.microsoft.com/windowsxp/downloads/updates/sp2/cdorder/en_us/default.mspx)
Method 2: Download the service pack after you reinstall Windows XP
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
322389 (http://support.microsoft.com/kb/322389/ ) How to obtain the latest Windows XP service pack
Reinstall all updates to Windows
After you reinstall Windows XP, you must reinstall all updates to Windows also. To reinstall Windows updates, visit the following Microsoft Web site:
http://windowsupdate.microsoft.com (http://windowsupdate.microsoft.com)
Reinstall Internet Explorer 7
When Windows XP is repaired and is running correctly, reinstall Internet Explorer 7. To do this, you will need the Internet Explorer 7 installation package. This package is available through Windows Update. Also, the package may still be on the computer from the first time that you installed Internet Explorer 7. Locate the installation package in the folder in which you saved the files, and reinstall the program.

Note This package may be located in the Temporary Internet Files folder. If you cannot locate the Internet Explorer 7 installation package, visit the following Microsoft Web site to obtain this package:
http://www.microsoft.com/windows/ie/downloads/default.mspx (http://www.microsoft.com/windows/ie/downloads/default.mspx)
To connect to the Microsoft download site, you must have a functional Web browser. If Internet Explorer 6 does not work on the computer after you uninstall Internet Explorer 7, you cannot download the Internet Explorer 7 installation package. In this situation, you can use a computer that has a functional Web browser to download the Internet Explorer 7 installation package. Then, use a shared network drive to install the program onto the repaired computer. If you cannot use a shared network for this purpose, copy the Internet Explorer 7 installation package onto a CD, and install Internet Explorer 7 on the repaired computer from the CD.

If you had difficulty completing these final steps, unfortunately, this content is unable to help you any further. So, you might want to ask someone for help, or you might want to contact Support.


Just on a Side Note here you'll need a M$ Branded Install Disc to do this not a System Makers Recovery Disc like the one supplied by Dell.

Col

Collapse -

Ummm

by Mikeb14 In reply to Do a In Place Install by ...

I can't use my dell preinstall cd? Because that's all I have

Collapse -

hmm

by Snuffy09 In reply to My computer is in trouble ...

Do you have the operating system disk?

Sounds like an important system file got deleted or corrupt.

Boot from cd and see if you can do a repair of the OS.

OR if you can boot to the OS see if you can get to cmd screen. When you boot to your desktop (see no icons) hold ctrl+alt+del, click task manager,click file, new task (run), type cmd,insert your OS cd, type sfc /scannow... let this run.

Collapse -

I've had this before

by Slayer_ In reply to My computer is in trouble ...

A chkdsk C: /R fixed it right up.


Give that a try. or you can also try a system restore, or, try uninstalling service pack 2 (which will revert your system back to before you got the service pack, as if you went back in time)

Back to Hardware Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums