Page 5 of 7 FirstFirst 1234567 LastLast
Results 41 to 50 of 61

Thread: Hellzlittlespy (great work guys)

  1. #41
    Member walker's Avatar
    Join Date
    Jul 2008
    Location
    Toasted from Brasil living in Florida
    Posts
    65

    Default

    delete delete
    "Toasted by hellzlittlespy born in Brasil living in America"

  2. #42
    Senior Member
    Join Date
    Oct 2005
    Posts
    202

    Default

    @Walker

    Sorry, I was sleeping. So you have chosen "Method 4", the hardest fix. Didn't really saved your time.

    Shame2's description is easier because booting with another Windows system allows you to use the familiar Windows interface where you don't have to use many command lines.

    Anyway, you have almost finished "Method 4" then you'll have to proceed with "Method 2".

    It seems that you have already done this because you can boot Windows in safe mode again.

    Windows 2000:

    Code:
    cd c:\Winnt\system32\config
    rename software software.bak
    copy c:\Winnt\repair\software software
    The line

    Code:
    rename software software.bak
    is very important. If you have forgotten this line or entered it wrong it would be overwritten by the default registry if you proceed with the next line. With other words your old registry is lost if you make any mistakes here.

    I will explain the command lines in order to clarify what they do.

    Code:
    cd c:\Winnt\system32\config
    (enter)
    This will "open" the directory "c:\Winnt\system32\config".

    Code:
    rename software software.bak
    (enter)
    This will rename your old registry filename "software" to the filename "software.bak". At this point it would be advisable to confirm that it was successful before you proceed. Eg.:
    Code:
    dir
    (enter)
    This command shows the containing files of the directory. After confirming that there is a file called "software.bak" you can proceed with the next step.
    Code:
    copy c:\Winnt\repair\software software
    (enter)
    This should copy the file "software" from the directory "c:\Winnt\repair" to the directory "c:\Winnt\system32\config". This syntax is a little bit different from the normal DOS syntax. Again, you can confirm if it has worked with the command:
    Code:
    dir
    (enter)
    Now there should be a file called "software" and a file called "software.bak". After that you should be able to boot in Windows safe mode because now Windows should load the default registry. Reboot two times so that Windows "thinks" that the registry is OK.(to be continued)

  3. #43
    Senior Member
    Join Date
    Oct 2005
    Posts
    202

    Default

    @walker

    In order to use "Method 2" for restoring your original registry we have to undo the renaming first. Again, I will explain the command lines. The procedure is explained in the blog.

    Windows 2000:
    Code:

    cd c:\Winnt\system32\config
    rename software software.oldbackup
    rename software.bak software
    Code:
    cd c:\Winnt\system32\config
    (enter)
    We open the directory "c:\Winnt\system32\config" again.

    Code:
    rename software software.oldbackup
    (enter)
    Don't know if it is neccessary but this couldn't harm you. It will rename your default registry file "software" to "software.oldbackup".
    Code:
    rename software.bak software
    (enter)
    Renaming your damaged registry file to its old name. In order to ensure that everything was entered correctly, you should use the command:
    Code:
    dir
    (enter)
    There should be a file called "software" and a file called "software.oldbackup" now. The file "software.bak" shouldn't be there anymore.
    Your old damaged registry is back. At this point you shouldn't boot Windows if you don't want to repeat "Method 4" again.

    After that we can proceed with "Method 2". Reboot with the bootcd where you have the software "Ntpasswd".

    I hope this has explained what the command lines are doing and why you have to use them. If you have any questions by regarding "Method 2" then please ask. Just tell me where exactly you need an explaination and I will try to clarify it.
    Last edited by chi-va; 2008-07-05 at 14:04. Reason: Comment added.

  4. #44
    Senior Member
    Join Date
    Oct 2005
    Posts
    202

    Default

    By the way, it is not neccessary to use "Method 2" after beeing able to boot in Windows safe mode again. Just skip these steps:

    4. restore latest Software registry key
    Now boot with NTFS4Dos again.
    This time we will restore the file we renamed to software.bak earlier:

    Windows 2000:
    Code:

    cd c:\Winnt\system32\config
    rename software software.oldbackup
    rename software.bak software

    Windows XP:
    Code:

    cd c:\Winnt\system32\config
    rename software software.oldbackup
    rename software.bak software

    Remember that you now have a corrupted Registry again , so do not try to boot Windows now or the NTFS may get "dirty" again.


    5. reboot directly to bootcd and apply method 2
    Now follow the steps described in Method 2.
    Changes should be writeable now.

    edit3: corrected paths as reported by shame2
    edit4: added Method 4 , removed Method 3 to save space
    Then proceed as following:

    1. Boot Windows 2000 in safe mode.

    2. Type "regedt32" in the run prompt

    3. Click on the "HKEY_LOCAL_MACHINE" window and Highlight/Select the line
    Code:
    HKEY_LOCAL_MACHINE
    with the mouse

    4. Go to menu "File - load hive..."

    5. Select your damaged registry file which should be in C:\windows\system32\config\software.bak

    6. It will ask for a name it should load in your registry. Just choose "Test". It really doesn't matter what name you choose as long as it is not already in use. We choose "Test" so that we can easily find it later. Your damaged registry should be loaded now.

    7. Navigate to the new hive which should be
    Code:
    HKEY_LOCAL_MACHINE\test\microsoft\windows nt\currentversion\winlogon
    8. Search for the entry "userinit:..." and make a doubleclick with the mouse on it.

    9. Enter this line(if your default system letter is C: )
    c:\winnt\system32\userinit.exe,
    and confirm it with OK.

    10. Now highlight/select the "Test" hive and unload it, menu "File - unload hive..."

    11. Now you just have to rename the registry. So boot with "NTFS4Dos" again.

    12. Execute this here:

    Windows 2000:
    Code:
    cd c:\Winnt\system32\config
    Open the folder
    Code:
    rename software software.oldbackup
    Rename the default registry
    Code:
    rename software.bak software
    Rename the old repaired registry to the name "software" which is normally loaded when you boot your system. After that you should be able to boot your Windows normally again. Don't forget to change the boot sequence in your bios if you don't want to boot from cd again.
    Last edited by chi-va; 2008-07-05 at 15:20. Reason: syntax error

  5. #45
    Member walker's Avatar
    Join Date
    Jul 2008
    Location
    Toasted from Brasil living in Florida
    Posts
    65

    Default

    I am up to #12.....I don't understand what to do here. Everything else went OK.....got into windows....it went in normally (not safe mode)...to a messed up software situation (programs had a lot of error messages but this is expected I think)...then edited as directed using regedt32. OK...shut down normally and booted to NTFS4DOS. By the way, has anyone actually looked at this disk? (it is pretty messed up in itself...but not for now).

    In any case, I am at the a prompt now.....what is next?








    Quote Originally Posted by chi-va View Post
    By the way, it is not neccessary to use "Method 2" after beeing able to boot in Windows safe mode again. Just skip these steps:



    Then proceed as following:

    1. Boot Windows 2000 in safe mode.

    2. Type "regedt32" in the run prompt

    3. Click on the "HKEY_LOCAL_MACHINE" window and Highlight/Select the line
    Code:
    HKEY_LOCAL_MACHINE
    with the mouse

    4. Go to menu "File - load hive..."

    5. Select your damaged registry file which should be in C:\windows\system32\config\software.bak

    6. It will ask for a name it should load in your registry. Just choose "Test". It really doesn't matter what name you choose as long as it is not already in use. We choose "Test" so that we can easily find it later. Your damaged registry should be loaded now.

    7. Navigate to the new hive which should be
    Code:
    HKEY_LOCAL_MACHINE\test\microsoft\windows nt\currentversion\winlogon
    8. Search for the entry "userinit:..." and make a doubleclick with the mouse on it.

    9. Enter this line(if your default system letter is C: ) and confirm it with OK.

    10. Now highlight/select the "Test" hive and unload it, menu "File - unload hive..."

    11. Now you just have to rename the registry. So boot with "NTFS4Dos" again.

    12. Execute this here:

    Windows 2000:
    Code:
    cd c:\Winnt\system32\config
    Open the folder
    Code:
    rename software software.oldbackup
    Rename the default registry
    Code:
    rename software.bak software
    Rename the old repaired registry to the name "software" which is normally loaded when you boot your system. After that you should be able to boot your Windows normally again. Don't forget to change the boot sequence in your bios if you don't want to boot from cd again.
    "Toasted by hellzlittlespy born in Brasil living in America"

  6. #46
    Member walker's Avatar
    Join Date
    Jul 2008
    Location
    Toasted from Brasil living in Florida
    Posts
    65

    Default

    "Rename the old repaired registry to the name "software" which is normally loaded when you boot your system. After that you should be able to boot your Windows normally again".

    ...and I don't get the above line......is this part of what you have printed out in the instructions...or something after

    rename software.bak software

    ??????????????????????????????????
    "Toasted by hellzlittlespy born in Brasil living in America"

  7. #47
    Senior Member
    Join Date
    Oct 2005
    Posts
    202

    Default

    Ok, you are back in NTFS4DOS, right? Now you just have to enter the three command lines below.

    Code:
    cd c:\Winnt\system32\config
    (enter)


    Code:
    rename software software.oldbackup
    (enter)


    Code:
    rename software.bak software
    (enter)

    That is all. After that you should be able to boot normally again. The rest was only a comment what we do with these commands and why we are doing this.

  8. #48
    Member walker's Avatar
    Join Date
    Jul 2008
    Location
    Toasted from Brasil living in Florida
    Posts
    65

    Default

    Code:
    cd c:\Winnt\system32\config(enter)
    We open the directory "c:\Winnt\system32\config" again.



    Code:
    rename software software.oldbackup(enter)


    Code:
    rename software.bak software(enter)

    Then re-booted to Windows......same old version with many software errors got booted to.

    Please advise.
    "Toasted by hellzlittlespy born in Brasil living in America"

  9. #49
    Senior Member
    Join Date
    Oct 2005
    Posts
    202

    Default

    It seems it hasn't loaded the correct registry. Please navigate in Windows and look in the folder:
    Code:
    c:\Winnt\system32\config
    Can you find the files:

    software

    and

    software.oldbackup

    Or is there still a file called "software.bak"? Please also compare the file size of these files and tell me them. In order to see the file size make a right mouse click on the file and choose "properties".

  10. #50
    Member walker's Avatar
    Join Date
    Jul 2008
    Location
    Toasted from Brasil living in Florida
    Posts
    65

    Default

    Quote Originally Posted by chi-va View Post
    It seems it hasn't loaded the correct registry. Please navigate in Windows and look in the folder:
    Code:
    c:\Winnt\system32\config
    Can you find the files:

    software

    and

    software.oldbackup

    Or is there still a file called "software.bak"? Please also compare the file size of these files and tell me them. In order to see the file size make a right mouse click on the file and choose "properties".

    I have;

    software
    software.old
    software.sav

    Properties gives 55.7 mb for the config folder.....it does not give each file individually but refers to the entire config folder....of which the three files are included


    (also when trying from C:\winnt\system32\config
    on the NTFS disk.....I get the following;
    rename software software.oldbackup (not enough memory)
    rename software.bak software (file not found)
    Last edited by walker; 2008-07-05 at 23:25.
    "Toasted by hellzlittlespy born in Brasil living in America"

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •