Userinit.exe error

Closed
c2323j Posts 2 Registration date Thursday February 4, 2010 Status Member Last seen February 8, 2010 - Feb 5, 2010 at 11:15 AM
Ambucias Posts 47356 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 - Feb 12, 2010 at 06:03 AM
Hello,
I am running win xp sp3. Problems started when installing programs…the last program I recall was “anti-porn”. After install didn’t appear to be correct, I attempted to open my program “your uninstaller” to delete it but was presented with pop-up and/or error message ‘userinit.exe-application error’ The application failed to initialize properly (0xc0000005). Click ok to terminate the application.

So, I restarted my system to get a blank screen (desktop picture only, no icons and the message…‘userinit.exe-application error’ The application failed to initialize properly (0xc0000005). Click ok to terminate the application.

I did some research and found a way to get my icons back…by doing an alt-ctrl-dlte then running a new task: c:\windows\explorer.exe – THEN all my icons come back but when I click on them, e.g. paint.exe, to include every cleaning utility application I am presented with pop-up box message (whatever the program name is) The application failed to initialize properly (0xc0000005). Click ok to terminate the application…it appears after pushing ok, another program tries to open but I get same error message and so on.

I downloaded software ‘super antispyware’ but when I try to execute the program I get same error message preventing the program from running.

NOTE: When I attempt to boot up in safe mode, all I get is a blank-black screen…nothing happens.

Please help!

P.S., ms word, pictures, etc. open fine.
Related:

3 responses

Ambucias Posts 47356 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,169
Feb 7, 2010 at 05:04 PM
Hello,

Sorry, I am late responding for your call for help.

Did you solve this problem? If not I will try to help.
1
c2323j Posts 2 Registration date Thursday February 4, 2010 Status Member Last seen February 8, 2010
Feb 8, 2010 at 07:59 AM
No and I have tried a plethora of things, see below:
1. Ok, I did everything listed below that a previous helper suggested but the disc only opened up to show me what files I burned to it...the disc did not act and/or open like a windows xp disc, e.g. welcome screen to click on "R" for repair console SEE BELOW, therefore I opened the i386 folder and copied the new userinit.exe to my infected computers i386 folder and the system booted to my normal desktop without the error message pop-up userinit.exe - application error BUT, now the the pop-up error message displayed is rundll.32.exe - application error, press ok then another appears, malwarebytes.exe, nod32kui.exe and so on for about 6-7 programs then the message disappears. However, STILL when I click on an application to run it - I get that applications error message.
Can anyone help me? Please...

Once the disk is burned, put it in the machine you want to fix and restart it.
Boot to the CD just as you would with a Windows XP disk.
At the Welcome to Setup screen, press R to enter the Recovery Console.

You will have to create a small 'fix CD' to solve this problem.
Please download RC.ISO and save it somewhere you can find it.
Also download MagicISO and install it.

Start MagicISO. You should see a window informing you about the full version of MagicISO.
In the bottom right select Try It! and the program will open.
Click on File and then on Open and navigate to the RC.ISO file you downloaded. Select it, and click Open.

First, You'll need to add a clean version of userinit.exe to the current RC.ISO•In the upper right pane, double click on the i386 folder.
•Right click in the upper right pane and select Add Files...•Navigate to C:\Windows\System32 and select userinit.exe•Then click Open to add userinit.exe to the CD image.
•Click File and select Save As...•Name the file RCplus and save it somewhere you can find it.
Next, we'll need to burn the newly created image to a disk that we can use to fix the problem.
•Put a blank CD-R disk in your CD burner and close the tray. If an AutoPlay window opens, close it.
•Click on Tools and select Burn CD/DVD with ISO.... A window will appear.
•Click on the little folder to the right of CD/DVD Image File then navigate to the newly created RCplus.iso Image file and click Open.
•In the CD/DVD Writing Speed drop-down menu choose the 8X setting.
•Under Format make sure that Mode 1 is selected.
•And finally, click on the Burn it! button to burn RCplus.iso to disk.Once the disk is burned, put it in the machine you want to fix and restart it.
Boot to the CD just as you would with a Windows XP disk.
At the Welcome to Setup screen, press R to enter the Recovery Console.
Choose the installation to be repaired by number (usually 1) and press Enter.
When you are asked for the Administrator password, enter the password or leave it blank (default) and press Enter.

At the C:\Windows> prompt, type the following commands pressing Enter after each one. Note: Watch the spaces.

D:
cd i386
copy userinit.exe c:\windows\system32
exit

After putting in the third command, you should receive the message 1 file copied which will indicate that the operation succeeded.
Now take out the CD and reboot your computer to normal mode. Try to log in and it should let you back in.

2. Please download Rkill by Grinler and save it to your desktop.
Reaction: Neither of them would run, and after att'g. to run all four prgms - they disappeared from my desktop (vanished).

I can boot my computer? But, when everything has loaded and I am at my desktop...the popup window runddll.exe, mbam.exe, nod.exe, and so on pops up until I click ok. I go to my taskbar to run utility promgs amd get same error message...mbam.exe - application error. program failed to initialize properly (oxc.0000005). click ok to terminate the application.

P.S., the firts application error was userinit.exe but not since I manua;;y copied that file to i386...granted that userinit.exe came from a clean computer running service pack 2 and infected system has service pack 3 - does that matter re: "R" console not popping up via made iso?

3a. Rkill appears to start up in safemode...states 'terminating known malware processes. Please be patient...
then an error window pops up: nircmdc.rkexe - application error. The applic. failed to initialize
properly (oxc0000005) click ok to terminate the application.

Then Rkill gives me this report:Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Ran as Dad on 02/06/2010 at 11:50:26.

Processes terminated by Rkill or while it was running:

C:\Documents and Settings\Dad\Desktop\rkill.pif

Rkill completed on 02/06/2010 at 11:53:02.

4. When I click on dds icon, prgm attempts to open but does not. If I right click on it then choose
install I get pop up box: dds.scr - application error - - The instruction at "0x7c9108d3"
referenced memory at "0x007e0059". The memory could not be "read".
click ok to terminate the program
click cancel to debug the program
However, the display properties box opens (where you would select a screen saver, etc.)
and it shows dds as a screen saver option to be chosen.
I thought this prgm. was to create a high-jack log? Is DDS a screen saver or just disguised with an .scr extension to by-pass malware from closing down .exe extension programs?

* In addition, the prgm. GMER will not run either...when I click it, the mouse pointer shows working (hour glass) then stops.

FOLLOWED - "Preparation Guide For Use Before Posting A Hijackthis Log". If you cannot complete a step, then skip it and continue with the next. In Step 6 there are instructions for downloading and running DDS which will create a Pseudo HJT Report as part of its log.

5. Please download runscanner.zip and save to your desktop
Reaction - DDS did not/will not run, moreover, no .exe files will open to run.

I attempted to run - C:\Runscanner...got this error: RunScanner.exe - application error
The application failed to initialize properly (0xc0000005). Click on OK to terminate the application.

P.S., none of the tools have been able to open/run w/o presenting me w/the abover error message.

When I boot up...I can see my desktop and all the icons but these windows, e.g. error messages pop up
one after another as I hit ok...

1. SBAMTRAY.exe - application error (the application failed to initialize properly
(0xc0000005). Click OK to terminate the application.
malwarebytes

2. RUNDLL32.EXE - application error (the application failed to initialize properly
(0xc0000005). Click OK to terminate the application.
runddl32

3. nod32kui.exe - application error (the application failed to initialize properly
(0xc0000005). Click OK to terminate the application.
nod eset antivirus

4. iprotect.exe - application error (the application failed to initialize properly
(0xc0000005). Click OK to terminate the application.
internet password lock prgm.

5. Wcescomm.exe - application error (the application failed to initialize properly
(0xc0000005). Click OK to terminate the application.
active sync

6. update.exe - application error (the application failed to initialize properly
(0xc0000005). Click OK to terminate the application.
update

7. EagleSvr.exe - application error (the application failed to initialize properly
(0xc0000005). Click OK to terminate the application.
anti-porn program - I believe this is the program that started my nightmare!

Then no more pop-up windows and I am at my desktop with same icons. When I click on most programs specifically .exe applications I get the above error message/window-pop up.

Thanks in advance,
0
Ambucias Posts 47356 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,169
Feb 12, 2010 at 06:03 AM
Hello C2323j,

It seems that my latest response to you failed to be posted, sorry!

I wish for you to have found a solution.

Have you thought of doing a non-destructive system restoration back to a date where you are positive your system was working fine?

Let us know

Best regards
0