Click to See Complete Forum and Search --> : XP Logs in then logs out quickly


Hatcher
July 21st, 2005, 08:33 AM
If anyone can help me out with this problem I'd be very grateful.

Problem:

Recently after running Norton Antivirus and deleting a bunch of virus and spywares, my XP Home Edition will not even work in safe mode. It logs in and quickly logs off. I can't get past the login screen.

Possible Causes

I know it has to do with me editing the registry in order to remove a virus. The good thing is I made backup of the registry.

Questions

1. Is it possible to restore the old backed up registry file (.reg file) from Recovery Console?

2. How can I restore the old .reg file if above doesn't work?

3. Is there any alternative things I can do?

Any help offered here I'll be grateful for.

NooNoo
July 21st, 2005, 08:43 AM
Usually you can restore the registy there are various methods here (http://support.microsoft.com/default.aspx?scid=kb;EN-US;322756#XSLTH3269121122120121120120)

.... and welcome to Windrivers

Hatcher
July 21st, 2005, 10:17 AM
Is there anyway to edit xp registry keys from recovery console prompt? Ie: running a batch file or something?

NooNoo
July 21st, 2005, 10:57 AM
from the link I posted earlier (http://support.microsoft.com/kb/307545/) in the section labeled 307545 How to recover from a corrupted registry that prevents Windows XP from starting

Hatcher
July 21st, 2005, 11:49 AM
It didn't work. But now I know what the problem is, it has to do with me deleting a registry key and changing some others. Is it possible for me to change reg keys from recovery console mode?

cheeseh
July 21st, 2005, 06:11 PM
Try this solution, I have seen this problem several times at work.

http://www.kellys-korner-xp.com/xp_wel_screen.htm

slgrieb
July 21st, 2005, 06:42 PM
You can also run a repair installation of Windows. During Setup, take the option to continue installing Windows, and when setup detects the current installation, press R to repair it. Really suggest you go to the recovery console first and run chkdsk /r.

Hatcher
July 22nd, 2005, 11:20 AM
Thanks for the replies. I remember editing the WinLogon registry key into something else which I had to do to remove a virus. Now I dont know how to change it back since I cant login to safemode or normal mode. Are there any programs to edit registry from bootup or recovery console mode?

I tried chkdsk /r but it didnt do the job

Hatcher
July 22nd, 2005, 09:25 PM
Thanks again for taking the time for replying. The problem is mentioned at this site:

www.experts-exchange.com/Operating_Systems/WinXP/Q_20972739.html
Solution seems to be using a program called Austrumi

Thanks again for all the replies

slgrieb
July 22nd, 2005, 09:36 PM
OK, chkdsk /r didn't fix the problem, but have you gone on to try the repair installation? If that doesn't work, I think you are going to need to delete the current partition and do a fresh installation of Windows and all your software. Generally, unless you want to invest the time and money in data recovery, all your old files will be lost.

cheeseh
July 22nd, 2005, 10:33 PM
My link is the same exact solution as the experts exchange one, it's just easier to understand. :)

Hatcher
July 23rd, 2005, 03:00 PM
Thanks for the input.

slgrieb: I am still considering other options before doing partitioning

cheeseh: The new problem I have right now is that no welcome screen is there nor any accounts to log into. It just displays "Microsoft Windows XP" with the logo on the right hand side, even in safe mode. I think somehow its not recognizing the user profiles. Recently, I copied the SAM, SECURITY, DEFAULT, SOFTWARE, SYSTEM registry entries from \windows\repair into \windows\system32\config. I think this might have done something to the profiles. Is there anything I can do from this stage?

Hatcher
July 23rd, 2005, 06:54 PM
I am grateful for all the help. But I guess formatting is the way to go as slgrieb suggested.

confus-ed
July 24th, 2005, 06:26 AM
.. remember editing the WinLogon registry key into something else which I had to do to remove a virus. Now I dont know how to change it back since I cant login to safemode or normal mode...

Oooo ! so the only thing stopping you fixing it is this ? ... Mmm I'm sure I'm not really supposed to mention this :eek2: :devil: but if you google on 'reset the admininstrator password' you might well find something useful ..

[whistle's innocently & expects much comment ! :D]

Hatcher
July 24th, 2005, 10:09 AM
It appears that the profile has somehow been corrupted or the welcome screen is somehow corrupted so that I cant view the profiles. I tried resetting the password but no luck

CeeBee
July 25th, 2005, 11:01 AM
Try the offline registry editor:
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html