It is currently Tue Jul 22, 2014 7:43 pm

All times are UTC - 8 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 7 posts ] 
Author Message
 Post subject: Trouble navigating through registry editor.
PostPosted: Mon Feb 16, 2009 6:41 am 
Offline

Joined: Mon Feb 16, 2009 6:28 am
Posts: 4
Hey guys, I am having the problem explained here

http://www.hmtech.ca/xp-logs-login/

How exactly do I "navigate to the Userinit key"?

Thanks in advance :D


Top
 Profile  
 
 Post subject:
PostPosted: Mon Feb 16, 2009 8:08 am 
Offline

Joined: Fri Jan 11, 2008 2:52 pm
Posts: 1278
Use Offline password and registry editor on UBCD to edit or view the registry.

_________________
Download Ultimate Boot CD v5.0: http://www.ultimatebootcd.com/download.html
Use Parted Magic for handling all partitioning task: http://partedmagic.com/


Top
 Profile  
 
 Post subject:
PostPosted: Mon Feb 16, 2009 8:31 am 
Offline

Joined: Mon Feb 16, 2009 6:28 am
Posts: 4
Yeah I will get that far but then locating that file is where I get lost


Top
 Profile  
 
 Post subject:
PostPosted: Mon Feb 16, 2009 8:56 am 
Offline

Joined: Fri Jan 11, 2008 2:52 pm
Posts: 1278
Run the registry editor of Offline password and registry editor.
Look at: http://www.governmentsecurity.org/articles/WindowsNTRegistryTutorial.php to see which hive file you need to load.

I your case you need to view HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit, which is located in the %systemroot%\SYSTEM32\CONFIG\SOFTWARE hive file.

I just searched a little bit on the internet to find it :wink: .

_________________
Download Ultimate Boot CD v5.0: http://www.ultimatebootcd.com/download.html
Use Parted Magic for handling all partitioning task: http://partedmagic.com/


Top
 Profile  
 
 Post subject:
PostPosted: Wed Feb 18, 2009 7:22 am 
Offline

Joined: Mon Feb 16, 2009 6:28 am
Posts: 4
Thank you for your time and patience, this is really confusing for me :) but I'm not exactly sure how to even navigate that far, I pressed enter a few times to get past the first few questions then I press 9 to get to the registry editor, at least I'm guessing that's where I need to be to do all this. Sorry that It's taking me so long to understand all this!


Top
 Profile  
 
 Post subject:
PostPosted: Wed Feb 18, 2009 9:20 am 
Offline

Joined: Fri Jan 11, 2008 2:52 pm
Posts: 1278
Select the right hard drive.
Select which part of the registry to load, ...:
[1]: software

9 Registry editor, now with full write support.
What to do? [1] -> 9

Quote:
> cd Microsoft
\Microsoft> cd Windows NT
\Microsoft\Windows NT> cd CurrentVersion
\Microsoft\Windows NT\CurrentVersion> cd Winlogon
(..)\Windows NT\CurrentVersion\Winlogon> cat Userinit
Value <Userinit> of type REG_SZ, data length 68 [0x44]
C:\WINDOWS\system32\userinit.exe,


If the value of Userinit didn't change, you just have to replace the file 'C:\WINDOWS\system32\userinit.exe' with a virus free copy (recovery console).
If it did change from name
You can type
Code:
ed Userinit

to set the value to:
Code:
C:\WINDOWS\system32\userinit.exe,


Press ? if you need any help for the commands.
ls will display subkeys & values
cat will show the value of a key
ed allows you to edit a value of a key
cd will change the current key (cd .. will bring you back a level higher)

_________________
Download Ultimate Boot CD v5.0: http://www.ultimatebootcd.com/download.html
Use Parted Magic for handling all partitioning task: http://partedmagic.com/


Top
 Profile  
 
 Post subject:
PostPosted: Wed Feb 18, 2009 6:33 pm 
Offline

Joined: Mon Feb 16, 2009 6:28 am
Posts: 4
Thanks a TON! :D


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 7 posts ] 

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Protected by Anti-Spam ACP Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group