Solved

Vista Business 64 "Userinit logon application has stopped working" error after last Windows Update

Posted on 2009-07-07
16
1,709 Views
Last Modified: 2012-05-07
Hi all,

I am getting a popup after I log on using my password  "Userinit logon application has stopped working" . When you click on the" close program" button you get a black screen. I have no access to any menus, ctrl alt del brings up the task manager.

The processes running are:

csrss.exe
taskeng.exe
taskmgr.exe
nvvsvc.exe
rundll32.exe
ielowutil.exe*32

I have tried:

1.Restart in safe mode (No luck)
2.Restore to prev point before the last Windows Update(After which the error started) using Vista DVD (Same error)
3. Swopping Hard drives (I use the EZ Backup option on my asus motherboard that keeps an exact copy of my hard drive. The other hard drive gives the same error )
4. The only other similar error I could find was http://support.microsoft.com/default.aspx/kb/929825/en-us , I accessed the registry via the start new task function and the entries referred to in the registry from the above solution are all there.
5. I have removed the hard drive and scanned it using another pc with Norton 360. The scan found no viruses or malware.

I do not want to reinstall vista and all my other programs as this will take me forever with all the online updates. And i am not sure this error will not happen again once I reach the same windows update.

Please give me some ideas.

Thanks
0
Comment
Question by:wwagener
  • 10
  • 6
16 Comments
 
LVL 3

Assisted Solution

by:Pierellie
Pierellie earned 500 total points
ID: 24797109
the start new task function try "explorer.exe" see if that pulls up the desktop. You might try "msconfig" to pull a list of startup applications and services and remove unknown/unneeded processes.
0
 
LVL 3

Expert Comment

by:Pierellie
ID: 24797124
*be carefull in the services section, check the box that says "hide microsoft services",
0
 

Author Comment

by:wwagener
ID: 24797536
Thanks!  function "explorer.exe" has given me access to my menus, I have tried to:

1. Create a new user account and logging on with that  (Still get the same error).
2. Disabling all non microsoft startup tasks and services. (Still get the same error)

What else can i try?
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 3

Assisted Solution

by:Pierellie
Pierellie earned 500 total points
ID: 24797869
can you run "eventvwr" in that same function field. look in the "application" and "system" logs and look for any errors that might be relevent, cut and paste the errors here too.

you can look up "event id's" (kind of like a check engine light code in a car, for windows) at www.eventid.net to help you diagnose.
0
 

Author Comment

by:wwagener
ID: 24798052
Thanks, heres the event

Faulting application userinit.exe, version 6.0.6001.18000, time stamp 0x479195c9, faulting module userinit.exe, version 6.0.6001.18000, time stamp 0x479195c9, exception code 0xc0000005, fault offset 0x0000000000005589, process id 0xbf4, application start time 0x01c9ff3ed081ec7d.

   [ Name]  Application Error  
  - EventID 1000
   [ Qualifiers]  0  
   Level 2  
   Task 100  
   Keywords 0x80000000000000  
  - TimeCreated
   [ SystemTime]  2009-07-07T20:09:20.000Z  
   EventRecordID 3621  
   Channel Application  
   Computer CLONAN  
   Security
- EventData
   userinit.exe
   6.0.6001.18000
   479195c9
   userinit.exe
   6.0.6001.18000
   479195c9
   c0000005
   0000000000005589
   bf4
   01c9ff3ed081ec7d
0
 
LVL 3

Expert Comment

by:Pierellie
ID: 24798367
try these tips

http://eventid.net/display.asp?eventid=1000&eventno=970&source=Userinit&phase=1

there is a "source" from which the event is flagged.... it should be labeled as "Src" in teh event viewer... is that "userinit.exe"? if so the above link applies to your situation.
0
 

Author Comment

by:wwagener
ID: 24800497
Thanks I'll try the different solutions as soon as I can and I'll let you know!
0
 

Author Comment

by:wwagener
ID: 24804956

The Source is "Application Error" Event ID 1000 Task Category(100)

Hi I have looked at http://eventid.net/display.asp?eventid=1000&eventno=970&source=Userinit&phase=1
The registry entries do not exist in Vista 64, and there were no scripts deployed to this PC as this is a home PC

Is there anything else I can Try?
0
 
LVL 3

Expert Comment

by:Pierellie
ID: 24805622
boy this is a tough one. It appears that an application is crashing on bootup. If thats a windows application (assuming you set everything in msconfig's startup and services tab to off), is it possible to do a repair? Do you have the vista install cd?
0
 
LVL 3

Expert Comment

by:Pierellie
ID: 24805648
that exact error "Event ID 1000 Task Category(100)" is something that is logged when an application 'crashes'. Its more abundant in windows x64, with a 32bit app crashing
0
 

Author Comment

by:wwagener
ID: 24806517
I've done a repair using the Vista cd "no errors found" I have also disabled all in msconfig with no luck
0
 
LVL 3

Expert Comment

by:Pierellie
ID: 24814622
can you check and make sure your drivers are all up to date? like video, chipset, sound, network. those kind of things? If this doesn't work, then i would think its a curruption with windows. The quickest way would be to do a re-install.
0
 
LVL 3

Expert Comment

by:Pierellie
ID: 24814651
0
 

Accepted Solution

by:
wwagener earned 0 total points
ID: 24818239
I found a workaround,
I ran the  "sfc /scannow" tool from the command propt to fix startup files: It gave the following message

"Windows Resource Protection found corrupt files but was unable to fix some of them."
Details in the CBS.log

The file that could not be repaired according to the log was userinit.exe in the System32 folder.

A quick search found 4 userinit files. I copied the one from the C:\Windows\SysWOW64 folder to the System32 folder.

I could not replace the existing userinit.exe file, so I named the new one userinit2.exe.

I changed the Registry [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion
\Winlogon] value to C:\WINDOWS\system32\userinit2.exe"

On restart all is working!

How do I replace the corrupt userinit.exe?? Access is denied. I would like to reset my registry entry to the original with the new file that works IE.

How do I delete userinit.exe and rename userinit2.exe to userinit.exe??

Thanks!
0
 
LVL 3

Assisted Solution

by:Pierellie
Pierellie earned 500 total points
ID: 24818355
u know.... i've used that system file checker many times in the past... no idea why i didn't even suggest it... good job though! What I'd do is download a linux distro that is a bootable cd, boot into linux, and do your file work that way. Of course you'll probably want to make that registry chage back to original before you reboot and make the file changes. Good luck!
0
 
LVL 3

Expert Comment

by:Pierellie
ID: 24841159
u think maybe we could award points?
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Vista Video error 5 593
Windows 7 - How to SAVE my current desktop background picture 3 2,981
Can I use Vista machines with Windows 2012 Essentials (R2) 3 375
BSOD BugCode_USB_Driver 20 390
There are many reasons a PC runs slower than when it was new, ranging from malicious software intended to mess things up to simple general Windows use.  Your PC performance may slowly degrade over time without you noticing but when you buy a PC from…
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question