Computing.Net > Forums > Windows XP > deleted winlogon.exe from reg

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

deleted winlogon.exe from reg

Reply to Message Icon

Name: homer
Date: June 3, 2004 at 13:02:08 Pacific
OS: winXP
CPU/Ram: p4 2.4 256MB
Comment:

Hi
I deleted 'winlogon.exe' from the registry while trying to fix a trojan virus. Turns out, it was the wrong place so now when I start my machine, it comes to the logon in screen with the different users names. When I click on one any of the names, it tries to logon but it will flash the desktop then it will immediately log off and go back to the screen with all the logon names.

Is there any way I can fix this? I tried booting to the 'last know good configuration' but that didn't work. I am unable to logon in safe mode either.

Can I re-install XP without losing all my data?
Thanks.



Sponsored Link
Ads by Google

Response Number 1
Name: Johnw
Date: June 3, 2004 at 13:09:36 Pacific
Reply:

Lost or Corrupt User Profile

http://www.kellys-korner-xp.com/xp_l.htm

Create a new account/administrator profile and log in. Then go to C:\Documents and Settings\[Previous User Profile] and copy all folders to: C:\Documents and Settings\[New User Profile]. Then reboot.


0

Response Number 2
Name: XpUser
Date: June 3, 2004 at 13:44:17 Pacific
Reply:

dummy.

If I were you, I'd restart the computer using the Last Known Good Configuration feature. Here's how:

1. Restart the computer and press F8 key to bring up the menu "Please select the operating system to start"
2. When the Windows Advanced Options menu appears, use the ARROW keys to select Last Known Good Configuration (your most recent settings that worked), and then press ENTER. (If you are running other operating systems on your computer, use the ARROW keys to select Microsoft Windows XP, and then press ENTER.)

Source: http://support.microsoft.com/?kbid=307852
"How to start your computer by using the Last Known Good Configuration feature in Windows XP"


0

Response Number 3
Name: Lesley
Date: June 3, 2004 at 13:46:53 Pacific
Reply:


Or use System Restore?

Lesley


0

Response Number 4
Name: XpUser
Date: June 3, 2004 at 13:51:48 Pacific
Reply:

"Or use System Restore?"

in safe mode?


0

Response Number 5
Name: Lesley
Date: June 3, 2004 at 13:57:56 Pacific
Reply:

Sorry! - re-read the Post - no access to Safe Mode

Lesley


0

Related Posts

See More



Response Number 6
Name: per
Date: June 3, 2004 at 14:37:05 Pacific
Reply:

Yes you can repair windows. Boot from the XP Cd, go past the recovery console to the install menu. Select repair the existing installation. You won't lose any data except all the XP updates. You will have to reinstall them. Be sure to have your firewall enabled before going on the net as you will be susceptible to the msblaster and sasser worms. Good luck.


0

Response Number 7
Name: XpUser
Date: June 3, 2004 at 14:44:46 Pacific
Reply:

Per,

dummy didn't delete the actual file winlogon.exe. He deleted all references to it in the registry. So the only fix he needs to do is to the registry. maybe I'm mistaken but would using the RC be the way to go?

Kind Regards


0

Response Number 8
Name: per
Date: June 3, 2004 at 14:53:33 Pacific
Reply:

I don't know a way to recover a deleted registry entry. It doesn't even go to the recycle bin. Unless it was backed up I think it's gone forever. BACKUP-BACKUP-before deleting a registry key.


0

Response Number 9
Name: XpUser
Date: June 3, 2004 at 14:59:56 Pacific
Reply:

That was my dilemma and that's why I thought using the Last Known Good Configuration may help dummy. While we're on it, isn't Last Known Good Configuration the same thing as SR?



0

Response Number 10
Name: per
Date: June 3, 2004 at 15:06:49 Pacific
Reply:

Hi XpUser: I don't think so, as when you select it you don't get the reboot and all the pretty windows SR gives you. He said he tried that in his post and no joy. I vaguely recall a way to get to SR from a 98 boot disk to dos, but if he is ntfs it won't work. Don't recall the procedure anyway so I would be no help. Rgds.


0

Response Number 11
Name: homer
Date: June 3, 2004 at 15:08:27 Pacific
Reply:


Hi
Thanks for all the ideas!
I have tried the "last known good configuration" and that didn't work.
I will try booting from the cd and running a 'repair' installation and see how that works.
I'll let you all know.
Thanks so much!
dummy


0

Response Number 12
Name: XpUser
Date: June 3, 2004 at 16:24:35 Pacific
Reply:

dummy,

I'm afraid there's no way you can resuscitate the heart of the OS - the registry. Running a repair installation may not even work for you. Take a look at our other discussions that we recently had here.

http://computing.net/windowsxp/wwwboard/forum/106462.html


0

Response Number 13
Name: per
Date: June 3, 2004 at 16:38:51 Pacific
Reply:

XpUser- I think the repair will work as it should replace the registry entry he deleted.


0

Response Number 14
Name: XpUser
Date: June 3, 2004 at 16:47:09 Pacific
Reply:

I reallllly hope so. Let's wait and see dummy's report. Let's keep our fingers crossed on this one.

While we're at it, I did managed to find another MS KB revelant to this problem:

Damaged Registry Repair and Recovery in Windows XP

http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3BQ318159



0

Response Number 15
Name: XpUser
Date: June 3, 2004 at 16:58:51 Pacific
Reply:

Nope, sighs :-(

MS KB 318159 ISNT relevant as first thought. I took the time to read this one out and discovered that dummy had not experienced any of the symptoms:

When a registry hive becomes damaged, your computer may become unbootable, and you may receive one of the following Stop error messages on a blue screen:

Unexpected Shutdown

Stop:0xc0000135


0

Response Number 16
Name: per
Date: June 3, 2004 at 17:00:17 Pacific
Reply:

Looked at it. It appears to be a hotfix that fixes A problem that a program accesses the registry and doesn't remove the entry on shutdown. I have seen this from time to time that gives a window "windows has detected a registry error and has fixed it" on boot.


0

Response Number 17
Name: XpUser
Date: June 3, 2004 at 17:17:18 Pacific
Reply:

Per,

I consider this to be the worse case exemplifying why we tell people not to play with freaking thing!


0

Response Number 18
Name: per
Date: June 3, 2004 at 17:24:21 Pacific
Reply:

Maybe not the worst case, but I wish people wouldn't mess with it. Maybe it is partially our fault for suggesting it from time to time. I try to emphasize if you don't know what you are doing, DON'T. Oh well!


0

Response Number 19
Name: homer
Date: June 4, 2004 at 11:22:12 Pacific
Reply:

Hi
I ran the "Repair" installation from the Windows XP cd and now I'm back up and running without losing all my data.

Thanks so much to everybody who posted here trying to help me out. I really appreciate it a lot!
dummy


0

Response Number 20
Name: XpUser
Date: June 4, 2004 at 13:19:35 Pacific
Reply:

Glad everythings up and running well. Thanks for letting us know.

Happy Computing


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: deleted winlogon.exe from reg

ZoneAlarm deleted Winlogon.exe.. www.computing.net/answers/windows-xp/zonealarm-deleted-winlogonexe/162633.html

can't delete winlogon, hosts files www.computing.net/answers/windows-xp/cant-delete-winlogon-hosts-files-/87988.html

Hosts File hacked www.computing.net/answers/windows-xp/hosts-file-hacked/87449.html