I had a similar error after removing several Virus' from a clients
computer. The Virus had substituted a dll file with what seemed to be
a random name (Basegmiw32.dll in this instance) the genuine file is
(basesrv.dll) which is the "Windows NT Base API Server DLL" however
the registry had been changed to target the other file. I pulled the
hard drive and installed it into another system and opened the registry
editor. Next I mounted the "System" Hive into a Tree I called temp. I
found the "windows" key that needed changed under:
\HKLM\System\Controlset001\control\session Manager\subsystems\
The correct value for the "Windows" String is:
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows
SharedSection=1024,3072,512 Windows=On SubSystemType=Windows
*ServerDll=basesrv,1 *ServerDll=winsrv:UserServerDllInitialization,3
ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off
MaxRequestThreads=16
The bold portion is the corrected form.
After changing the value, I selected the "Temp" tree and uloaded the
hive.
I reinstalled the drive in the computer and voilla problem solved.
Hope this helps someone
--
pdxgoofy
------------------------------------------------------------------------
pdxgoofy's Profile:
http://forums.techarena.in/member.php?userid=50957
View this thread:
http://forums.techarena.in/showthread.php?t=956809
http://forums.techarena.in