Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

User account is not loading in XP


  • Please log in to reply
57 replies to this topic

#1 MaaD

MaaD

  • Members
  • 561 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 PM

Posted 07 July 2016 - 10:31 AM

My user account is not loading, therefore I am seeing a different desktop and all my desktop files are "missing" Help please



BC AdBot (Login to Remove)

 


#2 granada12

granada12

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 PM

Posted 07 July 2016 - 10:56 AM

This kind of solution worked for me on windows 7. I found the windows xp version of it.

 

 

 

How to resolve windows XP temp profile problem
 

If you are getting a new desktop whenever  loging in windows XP (You may miss your icons on desktop and customized settings in windows XP), Sure You are logged in temp profile.

How to resolve this problem

1. Log off the computer and login with another account that has Administrative priviledges.

2. Go to the system drive (may be C:) and open the document and settings you will see profile name like “TEMP” or [your login name].000 {where the 000 represents the addition which is placed on to the new temp profile if you are in a domain} new profile that was created.

3. Go to start->Run and type “Regedit” press enter. This command will open windows registry editor.

4. From registry editor, Go to the following path.

5. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList

6. Here you’ll see a list of Profile GUIDs. Click on each one and find your original profile name. The GUID Key will be renamed with .bak on the end and you’ll find that there is another Profile GUID Key with the same GUID, that is the replacement, delete it (don’t delete the .bak version. Now that the replacement Profile GUID key is deleted, or if you prefer – renamed with .new, you can now rename the .bak (original profile GUID) so the you only remove the .bak and hit the Enter key. Next, go into this GUID key and you’ll notice that the last DWORD value “State” is set to “8100”, remove the “8” from the beginning so that the value is “100”.
Exit out of the registry editor.

Windows-XP-temp-profile.jpg

correct-profile.pngbak-removed.png

bak-removed-profile-list.png

7. Restart the computer and login with the account you fixed.



#3 MaaD

MaaD
  • Topic Starter

  • Members
  • 561 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 PM

Posted 07 July 2016 - 10:44 PM

Hey Thanks much but  the path on my computer has no "ProfileList"....... HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion



#4 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:06:27 AM

Posted 08 July 2016 - 02:51 AM

Restart your computer and repeatedly tap F8 until you see the Advanced Boot Menu. If you do not see this menu, start over again and repeatedly tap F8 key on your keyboard until you see this. When you see this select Safe Mode. Click "Start Menu --> Run" type rstrui.exe into Run dialog box then Click OK. Select a restore point by looking at the dates when your computer was working fine. Click Next and Finish.


2GvnEq2.gif


#5 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,995 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:04:27 AM

Posted 08 July 2016 - 10:27 AM

Hi,

 

Can you post a Minitoolbox log?

 

Download MiniToolBox and save the file to the Desktop.
Restart the computer, after login run the tool, check the following options:

  • List last 10 Event Viewer Errors

Click on Go.

Post the resulting log in your next reply.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#6 MaaD

MaaD
  • Topic Starter

  • Members
  • 561 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 PM

Posted 08 July 2016 - 10:43 AM

Thanks, I tried the Microsoft instruction for  system restore but it never worked. When i typed rstrui.exe   a message popped up..."Windows cannot find rstrui.exe"



#7 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:06:27 AM

Posted 08 July 2016 - 10:52 AM

Please follow SleepyDude instruction for running the MiniToolBox program. Open the Command Prompt and type Sfc /scannow command you may be ask for the Windows XP setup CD with same installed service packs. The Sfc command will repair any missing and damage system files.


2GvnEq2.gif


#8 MaaD

MaaD
  • Topic Starter

  • Members
  • 561 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 PM

Posted 08 July 2016 - 11:13 AM

Here's the result of MiniToolBox
 
 
 
 
MiniToolBox by Farbar  Version: 17-06-2016
Ran by Student (administrator) on 08-07-2016 at 12:00:31
Running from "C:\Documents and Settings\TEMP\Desktop"
Microsoft Windows XP Professional Service Pack 3 (X86)
Model: 444638U Manufacturer: LENOVO
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (07/07/2016 07:25:01 AM) (Source: Userenv) (User: DONDADA)
Description: Windows has backed up this user's profile. Windows will automatically try to use the backed up profile the next time this user logs on.
 
Error: (07/07/2016 07:25:00 AM) (Source: Userenv) (User: NT AUTHORITY)
Description: Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile. If this problem persists, contact your network administrator. 
 
 
DETAIL - The process cannot access the file because it is being used by another process.
 
Error: (07/07/2016 07:24:29 AM) (Source: Userenv) (User: NT AUTHORITY)
Description: Windows was unable to load the registry. This is often caused by insufficient memory or insufficient security rights. 
 
 
DETAIL - The process cannot access the file because it is being used by another process.  for C:\Documents and Settings\Student\ntuser.dat
 
Error: (06/23/2016 03:36:15 PM) (Source: Application Hang) (User: )
Description: Fault bucket 431588683.
 
Error: (06/23/2016 03:36:10 PM) (Source: Application Hang) (User: )
Description: Hanging application AcroRd32.exe, version 11.0.8.4, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
Error: (06/21/2016 03:56:31 PM) (Source: Application Hang) (User: )
Description: Fault bucket 431588683.
 
Error: (06/21/2016 03:56:24 PM) (Source: Application Hang) (User: )
Description: Hanging application AcroRd32.exe, version 11.0.8.4, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
Error: (06/21/2016 12:36:32 PM) (Source: Application Hang) (User: )
Description: Fault bucket 431588683.
 
Error: (06/21/2016 12:36:24 PM) (Source: Application Hang) (User: )
Description: Hanging application AcroRd32.exe, version 11.0.8.4, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
 
Error: (05/27/2016 12:07:26 PM) (Source: Application Hang) (User: )
Description: Fault bucket 431588683.
 
 
System errors:
=============
Error: (07/08/2016 12:00:28 PM) (Source: DCOM) (User: )
Description: The machine wide Default Launch and Activation security descriptor is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool.
 
Error: (07/08/2016 12:00:28 PM) (Source: DCOM) (User: )
Description: The machine wide Default Launch and Activation security descriptor is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool.
 
Error: (07/08/2016 11:59:24 AM) (Source: Service Control Manager) (User: )
Description: The Mikogo-Service service failed to start due to the following error: 
%%193
 
Error: (07/08/2016 11:56:19 AM) (Source: DCOM) (User: )
Description: The machine wide Default Launch and Activation security descriptor is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool.
 
Error: (07/08/2016 11:50:20 AM) (Source: Service Control Manager) (User: )
Description: The System Update service failed to start due to the following error: 
%%1053 = The service did not respond to the start or control request in a timely fashion.
 
 
Error: (07/08/2016 11:50:20 AM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for the System Update service to connect.
 
Error: (07/08/2016 11:50:00 AM) (Source: Service Control Manager) (User: )
Description: The Mikogo-Service service failed to start due to the following error: 
%%193
 
Error: (07/08/2016 11:46:57 AM) (Source: DCOM) (User: )
Description: The machine wide Default Launch and Activation security descriptor is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool.
 
Error: (07/08/2016 11:44:14 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: DCOM got error "%%1084 = This service cannot be started in Safe Mode
" attempting to start the service EventSystem with arguments ""
in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error: (07/08/2016 11:36:55 AM) (Source: DCOM) (User: DONDADA)
Description: DCOM got error "%%1084 = This service cannot be started in Safe Mode
" attempting to start the service netman with arguments ""
in order to run the server:
{BA126AE5-2166-11D1-B1D0-00805FC1270E}
 
 
Microsoft Office Sessions:
=========================
Error: (07/07/2016 07:25:01 AM) (Source: Userenv)(User: DONDADA)
Description: 
 
Error: (07/07/2016 07:25:00 AM) (Source: Userenv)(User: NT AUTHORITY)
Description: The process cannot access the file because it is being used by another process.
 
Error: (07/07/2016 07:24:29 AM) (Source: Userenv)(User: NT AUTHORITY)
Description: The process cannot access the file because it is being used by another process. C:\Documents and Settings\Student\ntuser.dat
 
Error: (06/23/2016 03:36:15 PM) (Source: Application Hang)(User: )
Description: 431588683
 
Error: (06/23/2016 03:36:10 PM) (Source: Application Hang)(User: )
Description: AcroRd32.exe11.0.8.4hungapp0.0.0.000000000
 
Error: (06/21/2016 03:56:31 PM) (Source: Application Hang)(User: )
Description: 431588683
 
Error: (06/21/2016 03:56:24 PM) (Source: Application Hang)(User: )
Description: AcroRd32.exe11.0.8.4hungapp0.0.0.000000000
 
Error: (06/21/2016 12:36:32 PM) (Source: Application Hang)(User: )
Description: 431588683
 
Error: (06/21/2016 12:36:24 PM) (Source: Application Hang)(User: )
Description: AcroRd32.exe11.0.8.4hungapp0.0.0.000000000
 
Error: (05/27/2016 12:07:26 PM) (Source: Application Hang)(User: )
Description: 431588683
 
 
**** End of log ****


#9 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:06:27 AM

Posted 08 July 2016 - 11:54 AM

From Safe Mode open the Command Prompt and type Net user administrator /active:yes and press Enter key. Restart your computer normally and try login to Windows build in Administrator user account. If you can check and see if the  ProfileList key missing. If you cannot login to Administrator account from Safe Mode open the command prompt and type reg query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList" and press Enter key copy the output of this command to your next post please.


Edited by FreeBooter, 08 July 2016 - 11:55 AM.

2GvnEq2.gif


#10 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:06:27 AM

Posted 08 July 2016 - 12:21 PM

I forget to mention to use the Last Known Good Configuration option from Advance Boot Options menu which is where you can select to start Windows into Safe Mode state.


2GvnEq2.gif


#11 MaaD

MaaD
  • Topic Starter

  • Members
  • 561 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 PM

Posted 08 July 2016 - 04:24 PM

Here's what I found I wasn't able to do the second option, keep getting an error message "path is not defined" But I was able to restart my computer normally and  login to an Administrator user account I created yesterday



#12 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:06:27 AM

Posted 08 July 2016 - 10:23 PM

The ProfileList key exist all you need to is to follow the granada12 instructions at post #2 to resolve the issue.

2GvnEq2.gif


#13 hamluis

hamluis

    Moderator


  • Moderator
  • 55,550 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:27 PM

Posted 09 July 2016 - 04:45 PM

FWIW:  Windows cannot load your profile because it may be corrupted - http://windowsxp.mvps.org/corruptprofile.htm

 

Louis



#14 MaaD

MaaD
  • Topic Starter

  • Members
  • 561 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 PM

Posted 09 July 2016 - 05:18 PM

. Now that the replacement Profile GUID key is deleted, or if you prefer – renamed with .new, you can now rename the .bak (original profile GUID) so the you only remove the .bak and hit the Enter key.

I didn't understand this clearly, do you think you could explain a bit more please?



#15 MaaD

MaaD
  • Topic Starter

  • Members
  • 561 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:27 PM

Posted 10 July 2016 - 07:40 AM

Thanks Louis, but that's for Windows 7






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users