Solved

Vista Business 64 "Userinit logon application has stopped working" error after last Windows Update

Posted on 2009-07-07
16
1,700 Views
Last Modified: 2012-05-07
Hi all,

I am getting a popup after I log on using my password  "Userinit logon application has stopped working" . When you click on the" close program" button you get a black screen. I have no access to any menus, ctrl alt del brings up the task manager.

The processes running are:

csrss.exe
taskeng.exe
taskmgr.exe
nvvsvc.exe
rundll32.exe
ielowutil.exe*32

I have tried:

1.Restart in safe mode (No luck)
2.Restore to prev point before the last Windows Update(After which the error started) using Vista DVD (Same error)
3. Swopping Hard drives (I use the EZ Backup option on my asus motherboard that keeps an exact copy of my hard drive. The other hard drive gives the same error )
4. The only other similar error I could find was http://support.microsoft.com/default.aspx/kb/929825/en-us , I accessed the registry via the start new task function and the entries referred to in the registry from the above solution are all there.
5. I have removed the hard drive and scanned it using another pc with Norton 360. The scan found no viruses or malware.

I do not want to reinstall vista and all my other programs as this will take me forever with all the online updates. And i am not sure this error will not happen again once I reach the same windows update.

Please give me some ideas.

Thanks
0
Comment
Question by:wwagener
  • 10
  • 6
16 Comments
 
LVL 3

Assisted Solution

by:Pierellie
Pierellie earned 500 total points
Comment Utility
the start new task function try "explorer.exe" see if that pulls up the desktop. You might try "msconfig" to pull a list of startup applications and services and remove unknown/unneeded processes.
0
 
LVL 3

Expert Comment

by:Pierellie
Comment Utility
*be carefull in the services section, check the box that says "hide microsoft services",
0
 

Author Comment

by:wwagener
Comment Utility
Thanks!  function "explorer.exe" has given me access to my menus, I have tried to:

1. Create a new user account and logging on with that  (Still get the same error).
2. Disabling all non microsoft startup tasks and services. (Still get the same error)

What else can i try?
0
 
LVL 3

Assisted Solution

by:Pierellie
Pierellie earned 500 total points
Comment Utility
can you run "eventvwr" in that same function field. look in the "application" and "system" logs and look for any errors that might be relevent, cut and paste the errors here too.

you can look up "event id's" (kind of like a check engine light code in a car, for windows) at www.eventid.net to help you diagnose.
0
 

Author Comment

by:wwagener
Comment Utility
Thanks, heres the event

Faulting application userinit.exe, version 6.0.6001.18000, time stamp 0x479195c9, faulting module userinit.exe, version 6.0.6001.18000, time stamp 0x479195c9, exception code 0xc0000005, fault offset 0x0000000000005589, process id 0xbf4, application start time 0x01c9ff3ed081ec7d.

   [ Name]  Application Error  
  - EventID 1000
   [ Qualifiers]  0  
   Level 2  
   Task 100  
   Keywords 0x80000000000000  
  - TimeCreated
   [ SystemTime]  2009-07-07T20:09:20.000Z  
   EventRecordID 3621  
   Channel Application  
   Computer CLONAN  
   Security
- EventData
   userinit.exe
   6.0.6001.18000
   479195c9
   userinit.exe
   6.0.6001.18000
   479195c9
   c0000005
   0000000000005589
   bf4
   01c9ff3ed081ec7d
0
 
LVL 3

Expert Comment

by:Pierellie
Comment Utility
try these tips

http://eventid.net/display.asp?eventid=1000&eventno=970&source=Userinit&phase=1

there is a "source" from which the event is flagged.... it should be labeled as "Src" in teh event viewer... is that "userinit.exe"? if so the above link applies to your situation.
0
 

Author Comment

by:wwagener
Comment Utility
Thanks I'll try the different solutions as soon as I can and I'll let you know!
0
 

Author Comment

by:wwagener
Comment Utility

The Source is "Application Error" Event ID 1000 Task Category(100)

Hi I have looked at http://eventid.net/display.asp?eventid=1000&eventno=970&source=Userinit&phase=1
The registry entries do not exist in Vista 64, and there were no scripts deployed to this PC as this is a home PC

Is there anything else I can Try?
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 3

Expert Comment

by:Pierellie
Comment Utility
boy this is a tough one. It appears that an application is crashing on bootup. If thats a windows application (assuming you set everything in msconfig's startup and services tab to off), is it possible to do a repair? Do you have the vista install cd?
0
 
LVL 3

Expert Comment

by:Pierellie
Comment Utility
that exact error "Event ID 1000 Task Category(100)" is something that is logged when an application 'crashes'. Its more abundant in windows x64, with a 32bit app crashing
0
 

Author Comment

by:wwagener
Comment Utility
I've done a repair using the Vista cd "no errors found" I have also disabled all in msconfig with no luck
0
 
LVL 3

Expert Comment

by:Pierellie
Comment Utility
can you check and make sure your drivers are all up to date? like video, chipset, sound, network. those kind of things? If this doesn't work, then i would think its a curruption with windows. The quickest way would be to do a re-install.
0
 
LVL 3

Expert Comment

by:Pierellie
Comment Utility
0
 

Accepted Solution

by:
wwagener earned 0 total points
Comment Utility
I found a workaround,
I ran the  "sfc /scannow" tool from the command propt to fix startup files: It gave the following message

"Windows Resource Protection found corrupt files but was unable to fix some of them."
Details in the CBS.log

The file that could not be repaired according to the log was userinit.exe in the System32 folder.

A quick search found 4 userinit files. I copied the one from the C:\Windows\SysWOW64 folder to the System32 folder.

I could not replace the existing userinit.exe file, so I named the new one userinit2.exe.

I changed the Registry [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion
\Winlogon] value to C:\WINDOWS\system32\userinit2.exe"

On restart all is working!

How do I replace the corrupt userinit.exe?? Access is denied. I would like to reset my registry entry to the original with the new file that works IE.

How do I delete userinit.exe and rename userinit2.exe to userinit.exe??

Thanks!
0
 
LVL 3

Assisted Solution

by:Pierellie
Pierellie earned 500 total points
Comment Utility
u know.... i've used that system file checker many times in the past... no idea why i didn't even suggest it... good job though! What I'd do is download a linux distro that is a bootable cd, boot into linux, and do your file work that way. Of course you'll probably want to make that registry chage back to original before you reboot and make the file changes. Good luck!
0
 
LVL 3

Expert Comment

by:Pierellie
Comment Utility
u think maybe we could award points?
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Windows Operating Systems Version 2 418
HELP!! Hard Drive Issues 21 353
compressed folders? 3 397
move Windows 10 apps to diff disk 39 121
Hi All Just a quick one for everybody. I was recently looking into setting the default User Account Picture for all my vista clients within the network but on closer inspection the group policy setting only allows you to set the default pictur…
There are many reasons a PC runs slower than when it was new, ranging from malicious software intended to mess things up to simple general Windows use.  Your PC performance may slowly degrade over time without you noticing but when you buy a PC from…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
This video discusses moving either the default database or any database to a new volume.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now