Search Assitant toolbar problem- can't log into XP

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
Just received a laptop to fix from some friends. Compaq running XP. Apparently they had Search Assistant toolbar for IE installed. Friend saw online that it was a Bad Thing and was going to uninstall it. Saw something in the Add/Remove Programs list that said blahblah SA, but after clicking on it, hit Cancel when it asked to Uninstall. However, upon startup the next morning, a window popped up telling him that Search Assistant had been successfully uninstalled.

He was looking in the Add/Remove Programs later and saw something that looked like the Search Assistant (I took notes, but unfortunately don't have them anymore :( ) and uninstalled it. Upon rebooting, he found that he was no longer able to login to XP.

He's running XP Home and has 2 accounts in addition to the Admin acct. None of the accounts are password protected.

Upon startup, XP looks to load normally and comes to the screen where choose which user to login with. Upon clicking a user, it generally immediately says saving Network Settings and goes into Shutdown mode. Sometimes there's a bit of lag, but other than that, it's like that for both 2 accts and the Admin.

I started it up in Safe Mode to see if I could login to the Admin acct and get around that, but the Admin acct was the same- upon clicking the Admin icon, it immediately said it was saving settings, etc. and preparing for Shutdown (which, actually just kicked back to the User selection screen).

Upon doing a Google search, it looks like the Search Assistant might possibly be called Home Search Assitant and looks to be like a fairly ugly little juggernaut of a bug once it's in the system. However, I haven't seen any posts on it stating that it's done anything like the problem I've been presented with.

Kind o' scratchin' my head on this one. Sure, easiest route would be a format/reinstall, but there's a lot of unbacked up data on the HD that my friend wants saved. So I'm looking to try to get this thing back on its feet w/o a major overhaul.

Any thoughts?
 

tbalon

Senior member
Nov 20, 2000
419
0
0
It almost sounds like something has triggered the XP activation function. You have a 30-day grace period in which to activate your Windows product installation. If the grace period expires and you have not completed activation, all features of Windows XP except the product activation feature will stop working.

If the same version of the software is reinstalled on the same machine and the hard disk is not reformatted prior to reinstalling, the software will remain activated. Reactivation will be required if the hard disk is reformatted and the software is reinstalled. This is because the software's activation status is stored on the hard drive and reformatting the hard drive erases that status.
 

dclive

Elite Member
Oct 23, 2003
5,626
2
81
Originally posted by: FriedToast
Just received a laptop to fix from some friends. Compaq running XP. Apparently they had Search Assistant toolbar for IE installed. Friend saw online that it was a Bad Thing and was going to uninstall it. Saw something in the Add/Remove Programs list that said blahblah SA, but after clicking on it, hit Cancel when it asked to Uninstall. However, upon startup the next morning, a window popped up telling him that Search Assistant had been successfully uninstalled.

He was looking in the Add/Remove Programs later and saw something that looked like the Search Assistant (I took notes, but unfortunately don't have them anymore :( ) and uninstalled it. Upon rebooting, he found that he was no longer able to login to XP.

He's running XP Home and has 2 accounts in addition to the Admin acct. None of the accounts are password protected.

Upon startup, XP looks to load normally and comes to the screen where choose which user to login with. Upon clicking a user, it generally immediately says saving Network Settings and goes into Shutdown mode. Sometimes there's a bit of lag, but other than that, it's like that for both 2 accts and the Admin.

I started it up in Safe Mode to see if I could login to the Admin acct and get around that, but the Admin acct was the same- upon clicking the Admin icon, it immediately said it was saving settings, etc. and preparing for Shutdown (which, actually just kicked back to the User selection screen).

Upon doing a Google search, it looks like the Search Assistant might possibly be called Home Search Assitant and looks to be like a fairly ugly little juggernaut of a bug once it's in the system. However, I haven't seen any posts on it stating that it's done anything like the problem I've been presented with.

Kind o' scratchin' my head on this one. Sure, easiest route would be a format/reinstall, but there's a lot of unbacked up data on the HD that my friend wants saved. So I'm looking to try to get this thing back on its feet w/o a major overhaul.

Any thoughts?

The part of Windows that is called once you log in is "Winlogon", and it appears that may be corrupt or bad. Since you're technically able to log in, LastKnownGood won't help you. So, boot up that machine, then connect to it over your network with another machine using RegEdit (on another XP machine, File menu, then Connect ... Network Registry...) and look into HKLM/Software/Microsoft/Windows NT/CurrentVersion/Winlogon, and see what the value for UserInit is. I'm betting it was changed to something else. It should read something like "c:\windows\system32\userinit.exe,". Can you confirm that is what you see (or don't see) in that key?
 

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
tbalon- how would I figure out if it's the activation that's triggered this? I didn't see anything that looked like it would allow me to do anything other than click on a user or Shutdown.

dclive- Thanks. I'll try to network it with my notebook when I get home from work tonight and will post the results when I can.
 

mechBgon

Super Moderator<br>Elite Member
Oct 31, 1999
30,699
1
0
You might also try this, not sure if you'll get away with it on XP or not:

1) Plug the system into the network and fire it up. Let it sit at the logon screen, that's good enough.

2) Open an Internet Exploder window (on another computer on the network, obviously).

3) In the address bar, type \\computername\C$ or try ADMIN$ too. If it challenges you for a username &amp; password, use computername\Administrator with the password (in this case, blank).

If it lets you access either of those shares, then copy out the data files you need if possible, then nuke that thing :evil:

Another option would be to do a parallel installation of WinXP using a regular WinXP CD, for the purposes of getting the data retreived.
 

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
Gah. I have no idea what the computer's freakin' name is! And my friends are on vacation for a week. Crap.

How would I do a parallel install? And how would that be able to retrieve the info? (Having never done that, I'm not clueing in on the science here).
 

dclive

Elite Member
Oct 23, 2003
5,626
2
81
Originally posted by: FriedToast
Gah. I have no idea what the computer's freakin' name is! And my friends are on vacation for a week. Crap.

How would I do a parallel install? And how would that be able to retrieve the info? (Having never done that, I'm not clueing in on the science here).

Concerning the name, does it show up in network neighborhood? Does your router show what IP addresses its' leased out that you could do a tracert to its' IP address, which would tell you the computer name?

You'd do a parallel install by booting from the XP CD and going thru all the steps of an install, but choose not to format the disk, and choose to hit ESC when it tells you Windows is already installed on the volume in question, and to specify an alternate directory to install Windows to. But that's a lot of work - I'd rather fix the problem, myself....

Another thing you could do is boot to the recovery console from Win XP (F10 at that very first screen, after you've given it 5 minutes to load) then swap the c:\windows\repair and c:\windows\system32\config files around (see my sig for the details, including the "How do you do this?" detailed step a few posts down) ... that would let you boot, and then from there you could send me your system and software files (originally found in c:\windows\system32\config, but at that time they'd be found in c:\windows\system32\config\backup, hopefully) and I could fix it for you....

It's probably a very easy fix - under a minute once I get that file... or if you're patient, do that swap step, and then I'll tell you how to load the System file once you're booted using the c:\windows\repair registry files....
 

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
Ok, I'm back. Thank you for being helpful and sorry about disappearing. Car/Computer/Woman troubles all at the same time. Friends' computer was the last thing on my mind.

Connected my notebook to theirs w/ a crossover cable. I can see the Compaq in the Network Neighborhood as Bauhart family. However, that's as far as I can get. Tells me that I don't have permission to access that directory or whatnot. Tried the regedit bit, but I'm not quite getting how to get into the Compaq. File... Connect... then it says to Enter the object name. I tried bauhartfamily, Bauhart family, etc. (a few different variations), but got nothing. I don't generally play w/ regedit, so I'm not familiar with it at all. Perhaps it's easy once you know how, but I'm kind o' clueless here.

mech, I don't know the computer name. I've tried the Bauhart family and XP doesn't see it in the Search for other computers on my network. Tried all sorts of different combinations of what the name might be according to ideas from my friends.

Tried booting the Compaq from my XP Home CD and doing a Recovery, but it asks for a Admin password, even though my friends insist that one wasn't set. I tried using Peter Nordahl's Offline NT Password Recovery .iso. When I got in, it said that the Admin password was blank (consistent w/ what my friends said). However, XP Home refuses to let me past the Admin login- insists that there's a password. I tried resetting it as 12345 w/ the Nordahl disc, but that yielded no results whatsoever. Recovery won't budge.

dclive, since I can't get past the Admin login, there's no way to get the files swapped that you're asking for.

I also tried another utility called Austrumi, but I got to the point where it was asking me about partitions and no matter what I entered, it was wrong, so my lack of Linux knowledge got me there. It might've worked, but I have no clue as I don't know how to answer all the questions properly, apparently.

:(

 

imported_Phil

Diamond Member
Feb 10, 2001
9,837
0
0
In Network Neighbourhood, right-click on the Bauhart computer, and select properties. What does that say?
 

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
Doesn't say much at all. Shows the network icon, Bauhart family next to that and underneath, it says Type: Microsoft Windows Network.

There's nothing else at all.
 

dclive

Elite Member
Oct 23, 2003
5,626
2
81
A quick fix would be to pop the drive out, put a 3.5" to 2.5" converter on there, attach it to a desktop, and swap the registry hives that way....

The administrator password is crucial....
 

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
Tried a version of that already. I've got an 2.5" 80gig drive in an external drive. Pulled my 80 and threw in the Compaq's drive. Thought I'd pull info that way. Didn't work. My Sager 8790 didn't recognize it (however, I must note that recently it quit recognizing the 80gig, too), so I thought I'd try it w/ my VAIO. No go. The VAIO's HD flickered and thought about it all night long (it's a 700mhz), but it never did recognize the drive. I'm not sure if my enclosure is dead or what. But yes, I tried the pulling part.

I don't have a desktop up and running at the moment, so it doesn't do me much good to try that route...

Gonna have to pull a miracle out o' my butt here pretty soon to get this figured out. Kind of scared to try the parallel XP install bit. I'd hate to screw up and write over everything that they're trying to save :(
 

imported_Phil

Diamond Member
Feb 10, 2001
9,837
0
0
Could you post a screenshot of the computer's property page from Network Neighbourhood? I'll bet that the name of the machine is there, it's usually the first line of text in the upper left corner of the page.
 

dclive

Elite Member
Oct 23, 2003
5,626
2
81
Originally posted by: FriedToast
Bump

Install Windows XP to a different directory (ie boot from the XP CD and install to C:\XP-Par) and then you'll be able to examine the registry and otherwise work on the machine to fix the original installation.

Obviously, choose to leave the partition as-is.
 

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
Update 1

Started to reinstall XP Home and realized that there was a separate option for repair of the current installation further into the options. Figured I'd give it a try. It didn't ask me for an Admin password this time, so I figured I might be good to go. It did ask for the Windows Key and the laptop's code didn't fit my Home upgrade disc, so I used my personal key for the time being. However, the repair error'd out eventually:

unregmp2.exe - Entry Point Not Found
The procedure entry point GetIUMS could not be located in the dynamic link library MSDART.DLL.

I only mention this because I thought it might be useful to know later on (for someone that knows what that particular problem might entail). Will update again when the parallel install has been finished.
 

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
Update 2

Parallel Home install finished. Access to the My Documents from the previous install has been gained. I've hooked up my external DVD burner (bought here on AT :) ) and once I install some burning software and get all the files burnt to DVD, I'm going to tell my friend to get his Restore CD from his parents back home so we can nuke this thing. It'll be bugging them to register Windows, but I used my key, so I don't want that.

Thanks to everyone that's replied! And thanks to dclive especially for not giving up :) I haven't rebooted yet, so hopefully that won't be a complication with there being 2 installs on the drive.
 

dclive

Elite Member
Oct 23, 2003
5,626
2
81
Originally posted by: FriedToast
Update 2

Parallel Home install finished. Access to the My Documents from the previous install has been gained. I've hooked up my external DVD burner (bought here on AT :) ) and once I install some burning software and get all the files burnt to DVD, I'm going to tell my friend to get his Restore CD from his parents back home so we can nuke this thing. It'll be bugging them to register Windows, but I used my key, so I don't want that.

Thanks to everyone that's replied! And thanks to dclive especially for not giving up :) I haven't rebooted yet, so hopefully that won't be a complication with there being 2 installs on the drive.

There shouldn't be any problems; just remember the new install is listed first.

If you'd like, go into Start/Run/Regedt32 and then do this:

Highlight/select HKEY Local Machine
Go to File/Load Hive/go to c:\windows\system32\config\software and load that file
When prompted, call it 'new'.
Now, back in RegEdit (the dialog boxes will close) go to NEW and then under that (open it up) go to
Microsoft/WindowsNT/CurrentVersion/Winlogon
and confirm that the UserInit value has a data field of "C:\WINDOWS\system32\userinit.exe," - if it's not *exactly* that, report back.

I'm assuming your original install was to c:\windows. If not, change to suit.
 

FriedToast

Golden Member
Apr 4, 2001
1,252
0
71
dclive, made the registry changes as listed above. It's a little different.

The Userinit value is "C:\WINDOWS\system32\userinit.exe,C:\Windows\System32\wsaupdater.exe,"