TheTechGuide Forum

General Category => Tech Clinic => Topic started by: Guest_Scott on December 19, 2004, 11:27:52 PM

Title: XP Help
Post by: Guest_Scott on December 19, 2004, 11:27:52 PM

I have been having problems with my little brothers laptop.  He has Windows XP.  Whenever I try to open up most applications, I get a message that says, "To open this file, Windows needs to know what program created it."  I get this message when trying to open regedit, realplayer, calculator, internet explorer, etc.  I can open a few things.  I cannot get online and safe mode does not change any of the outcomes.  Is there any help with this?

Title: XP Help
Post by: Guest on December 19, 2004, 11:35:53 PM

First:
Try download this registry fix
http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip (http://\"http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip\")

Save it and UNZIP it to your desktop
Double click on xp_exe_fix.reg and Allow it to merge to the registry

Restart your computer

Does that resolve your problem?

Can't run it or doesn't help try this
ownload this Zipped file http://www.dougknox.com/xp/fileassoc/xp_fileassoc.zip (http://\"http://www.dougknox.com/xp/fileassoc/xp_fileassoc.zip\")
UNZIP it to your desktop and Double click on the
xp_fileassoc.bat to run it
Follow the prompts

RESTART your computer afterwards

No:
Try this,
Download and save to desktop UnHookExec.inf (http://\"http://securityresponse.symantec.com/avcenter/UnHookExec.inf\")
from Symantec

Right-click the UnHookExec.inf file and click install. (This is a small file. It does not display any notice or boxes when you run it.)

Try posting a Hijackthis log--If you don't know how to post one let me know

Title: XP Help
Post by: Guest_Scott on December 19, 2004, 11:54:59 PM

This is not working.  When I add the program to my desktop, it does not recognize it as anything.  I just get the same generic icon.  Double-clicking gives me the same responses as before.

Title: XP Help
Post by: Guest on December 19, 2004, 11:56:25 PM

You tried all 3 fixes?

No Double clicking on the last one
You must Unzip the first 2

Title: XP Help
Post by: Guest_Scott on December 19, 2004, 11:56:41 PM

And I don't know anything about hijackthis...?

Title: XP Help
Post by: Guest_Scott on December 19, 2004, 11:57:39 PM

I did try the unzip and did according to the directions.

Title: XP Help
Post by: Guest on December 20, 2004, 12:14:11 AM

The last one I linked too
Don't try and double click on it

Save it to your desktop or try saving in on another computer to a floppy
Put the Floppy in the other computer

RIGHT CLICK on it and Choose INSTALL

Title: XP Help
Post by: Guest on December 20, 2004, 12:21:59 AM

This still does not work.  I am on a different laptop now and downloaded the file to a floppy.  When I put the disk in the drive of the other drive, I get nothing but the generic windows icon with the same message.  Don't know if this info helps at all, but no matter what I do...I cannot install anything.  I have a NERO and Britannica CR-ROM that I tried to reinstall, but windows does not recognize the exe files...or any others for that matter.

Title: XP Help
Post by: Guest on December 20, 2004, 12:30:51 AM

Set Windows to Show Know Extensions
* Click Start.
    * Open My Computer.
    * Select the Tools menu and click Folder Options.
    * Select the View Tab.
    *
    * Uncheck the Hide Extensions for known file types
    * Click Yes to confirm.
    * Click OK.


Navigate to this folder C:\Windows\System32
open it and look for REGEDT32.exe

is it named with a .exe extension, if not try to rename it to Regedit32.exe

All those Icons may be just Shortcuts your trying to run which may be corrupt
Try browsing to the program folders and running them from there

Title: XP Help
Post by: Guest_Scott on December 20, 2004, 12:32:22 AM

I just retried to ad the "fix" into the registry.  I got most (from what I can see so far) of the initial windows files back.  Do I need to reinstall all of the other files that I lost?  It looks like I can now get online with the other laptop...do I double click on my files that are missing info and chose the get online to open deal?  And what causes this problem in the first place?  How do I prevent it?  Someone had told me that it was a problem with Compaq laptops going into sleep mode...is that true?  Thanks for your help so far by the way.

Title: XP Help
Post by: Guest on December 20, 2004, 12:40:32 AM

We just reassociated the  file-associations for exe files

You may want to post a hijackthis log to be safe
Download Hijackthis, this will help to determine if there are any nasties on your computer
Create a Permanent Folder for Hijackthis
Double Click "MY Computer"
Open your C: drive
Click "File" >>> "New" >>>> "Folder"
A new folder will be created, name it HJT

Now you will have C:\HJT

Download Hijackthis
Save it to that new folder

Do a SCAN----Scan will change to SAVE LOG----copy and paste the WHOLE contents of the log
here... Don't try and fix anything yet----It is all important

Download links for Hijackthis are from HERE (http://\"https://ssl.perfora.net/tools.radiosplace.com/HijackThis.exe\")

Sorry, I'm ususally signed in as Guestolo, but I'm not on my computer right now

Title: XP Help
Post by: Guest on December 20, 2004, 12:41:15 AM

Well...I take that back, I am still missing several files or .exe's.

Title: XP Help
Post by: Guest on December 20, 2004, 12:43:03 AM

Sorry, I meant to rename that file
REGEDT32.EXE If it doesn't have the .exe extension

Title: XP Help
Post by: Guest on December 20, 2004, 01:27:00 AM

Should I start fixing?

Title: XP Help
Post by: Guest on December 20, 2004, 01:33:21 AM

Logfile of HijackThis v1.99.0
Scan saved at 11:59:21 PM, on 12/19/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\dllcache\SPOOLSVC.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\AVENGINE.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\WebProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\IFACE.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PAVJOBS.EXE
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ (http://\"http://www.yahoo.com/\")
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O4 - HKLM\..\Run: [SystemData] C:\WINDOWS\system32\dllcache\SPOOLSVC.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe"
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\RunServices: [PANDA ANTISPAM SERVER SERVICE] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PasSrv.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: LdsSingles Messenger.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://supportsoft.adelphia.net/sdccommon/...ad/tgctlins.cab (http://\"http://supportsoft.adelphia.net/sdccommon/download/tgctlins.cab\")
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1098575631511 (http://\"http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1098575631511\")
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Panda Antispam Server Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
O23 - Service: Panda Firewall Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
O23 - Service: Panda Function Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
O23 - Service: Panda Pavkre - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
O23 - Service: Panda PavProt - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
O23 - Service: Panda Process Protection Service - Unknown - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
O23 - Service: Panda Preventium+ Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
O23 - Service: Panda IManager Service - Panda Software Internacional - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe

Title: XP Help
Post by: Guest on December 20, 2004, 01:49:56 AM

I see a Nasty on your computer that has to be taken care of first

Set Windows To Show Hidden Files and Folders
    * Click Start.
    * Open My Computer.
    * Select the Tools menu and click Folder Options.
    * Select the View Tab.
    * Under the Hidden files and folders heading select Show hidden files and folders.
    * Uncheck the Hide protected operating system files (recommended) option.
    * Uncheck the Hide Extensions for known file types
    * Click Yes to confirm.
    * Click OK.

Go to this site
Give the link time to load
http://virusscan.jotti.dhs.org/ (http://\"http://virusscan.jotti.dhs.org/\")

Use the Browse button and Navigate to this file
C:\WINDOWS\system32\dllcache\SPOOLSVC.exe <--file

Right click on it and Select it and then use the Submit button

Copy and paste back here the Scanner results

Just in case, do you have any Spyware removal software
If not, I definitely recommend that you install this one, hold onto it
Download and Install the free version of Ad-Aware SE Personal 1.05 (http://\"http://www.lavasoftusa.com/support/download/\")
Ensure you have this version, or the Professional series
Open Ad-Aware, ensure to click the check for updates online link and Connect to download the latest updates
Perform a Full system scan
When it's finished scanning
At this point you should either right click on the screen and and choose the "Select All" Objects option or individually put a checkmark in each objects checkbox
click on the Next button. Ad-Aware SE will now present you with a confirmation box as to whether or not you would like to remove the objects you have just selected. Press the "OK" button

RESTART your computer again to finish the cleaning process

Post back a fresh hijackthis log after you have ran Ad-Aware and let me see those scanner results of that file, thanks

I may not see your response until tomorrow

Title: XP Help
Post by: Guest on December 20, 2004, 02:12:17 AM

I cannot find this at all.

C:\WINDOWS\system32\dllcache\SPOOLSVC.exe

Title: XP Help
Post by: Guest on December 20, 2004, 02:13:06 AM

Did you set Windows to Show Hidden Files and folders?

Title: XP Help
Post by: Guest on December 20, 2004, 02:18:25 AM

For some unknown reason, I cannot set the folder options like I used to.  Under folder options there is "file types" and "Offline Files"

Title: XP Help
Post by: Guest on December 20, 2004, 02:19:44 AM

The "View" tab is missing.

Title: XP Help
Post by: Guest on December 20, 2004, 02:23:41 AM

Go into the Control Panel and make sure your in Classic view and double click on the Folder Options tab

Title: XP Help
Post by: Guest_Scott on December 20, 2004, 02:43:40 AM

Still a no-go.

Title: XP Help
Post by: Guest on December 20, 2004, 01:33:32 PM

I also have another problem...in addition to stuff still not working, I cannot type in any boxes online with my little brothers laptop.  Example: I would not be able to use this message box or type in a search in yahoo or type in my email username and password.

Title: XP Help
Post by: Guest on December 20, 2004, 01:40:24 PM

The above mentioned os regarding internet use.  I was hoping to get online and find some type of fix, but seeing as how I cannot type in any fields, that is not possible.

Title: XP Help
Post by: Guest_guest on December 20, 2004, 04:53:57 PM

What ype of laptop is it? A new or older one? Anything on it that you really, really need? If not, I would just say to format and start over. Put the restore disc's in and restart. If you have them. Souns like the easiest thing to do...

Title: XP Help
Post by: guestolo on December 20, 2004, 08:49:35 PM

Guest-guest may be right, but if you go that route, make sure to backup any files that you need

But first try this
Make sure that you download and ran Ad-Aware, if you have trouble updating it you can manually update from this link
http://www.lavasoftusa.com/support/download/ (http://\"http://www.lavasoftusa.com/support/download/\")

You should also try an Online Virus Scan if you can get online at
Trend Micro's Housecall's---Set to Autoclean
http://housecall.trendmicro.com/ (http://\"http://housecall.trendmicro.com/\")
and/or Panda's Active Scan
http://www.pandasoftware.com/activescan/co...n_principal.htm (http://\"http://www.pandasoftware.com/activescan/co...n_principal.htm\")

If still no go
Open Hijackthis>>Click the Open Misc Tools>>Open Process Manager and Kill this process
C:\WINDOWS\system32\dllcache\SPOOLSVC.exe

Still in Misc Tools
Open the Delete a File on Reboot
Copy and paste the bolded text below into the File Name field

C:\WINDOWS\system32\dllcache\SPOOLSVC.exe

and then click the Open button
Hijackthis will prompt you that the file will be deleted and you must reboot your computer
DON'T restart yet

Instead

Do another scan with Hijackthis and put a check next to these entries:

O4 - HKLM\..\Run: [SystemData] C:\WINDOWS\system32\dllcache\SPOOLSVC.exe

After you have ticked the above entries, close All other open windows, including this one
Leave Hijackthis open and click FIX CHECKED
YES and exit Hijackthis

RESTART your computer and post back a fresh hijackthis log
Try doing the online virus scans if you can

Title: XP Help
Post by: Guest on December 20, 2004, 10:28:23 PM

I don't want to reformat because it's my little brothers computer and he is out of the country for awhile.  I don't have access to his copy of windows and the one I have is not exactly legal.  Don't wanna use that one.  He has stuff on his computer that I need to save for him, but I don't have any of the exe files that I need.  Even after trying to reinstall a good copy of nero, I can't bring it up.  The laptop is a somewhat new (a year or so old) Compaq Presario 2500.

Title: XP Help
Post by: Guest on December 20, 2004, 10:40:21 PM

Do what I suggested above with Hijackthis and then try the online virus scans

Title: XP Help
Post by: Guest on December 20, 2004, 11:04:30 PM

I will try this now.  gets a little crazy having to swap internet lines and disks between working and non working laptops.

Title: XP Help
Post by: Guest on December 21, 2004, 12:04:25 AM

Well, I have just about had it for this evening.  Still not working.  What's the deal with the .lnk files that I keep seeing?

Title: XP Help
Post by: Guest on December 21, 2004, 12:09:55 AM

Try something for me
One of the .Ink files you see

try right clicking on the file
Let's say one that leads to Nero in the programs folder, not the shortcut
Right click the start button, left click Explorer

Go to C:\Program Files
Open up a folder to a program your having trouble with and see if the .exe is named .ink
if so, right click on it and  rename it back to .exe and then right click on it again and send the shortcut to desktop
Does that work?

Title: XP Help
Post by: Guest on December 21, 2004, 12:21:45 AM

Sorry dude...I am off to bed.  I will try this tomorrow.  Hopefully that may do something for me.  Thanxz again for your help.

Title: XP Help
Post by: Guest on December 27, 2004, 07:41:14 AM

************* THANKYOU  /biggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />  ************

I had a similar problem. No files were associated with .exe files.

<I still don't know how it got in that state, maybe I was too suspicious with startup apps in an anti-virus configuration tool?>
Strange though.. MS IE ran fine and also Explorer.  Note: a2 StartCentre could only be run via Explorer, on a right click option of a folder or driver letter !?

Anyway couldn't use any program that relied on using regedit32.exe or rundll32.exe, so options (1) and (2) wouldn't work.

The last option 'UnHookExec.inf' was a lifesaver. All OK now.  /tongue.gif\' class=\'bbc_emoticon\' alt=\':P\' />

Title: XP Help
Post by: Guest on January 03, 2005, 10:47:19 AM

well... i got the same problem (XP) and i tryed all... online virus scan didnt work.. already noticed that... Adaware doesnt catch it either.. so I was hoping on UnHookExec.inf...

when I rightclick>install UnHookExec.inf it says:

"The file 'grpconv.exe' was corrupted during download. To fix the problem please delete your temporary Internet  files and try downloading this file again.

Instructions... blablabla

Note: no significant effect on your computer"

Title: XP Help
Post by: Guest on January 04, 2005, 04:44:38 AM

[quote name=\'Guest\' date=\'Jan 3 2005, 09:47 AM\']well... i got the same problem (XP) and i tryed all... online virus scan didnt work.. already noticed that... Adaware doesnt catch it either.. so I was hoping on UnHookExec.inf...

when I rightclick>install UnHookExec.inf it says:

"The file 'grpconv.exe' was corrupted during download. To fix the problem please delete your temporary Internet  files and try downloading this file again.

Instructions... blablabla

Note: no significant effect on your computer"[/quote]
 o en de temp. internet files wegpleuren helpt niet natuurlijk, anders zet ik t niet neer.

Title: XP Help
Post by: Guest on January 04, 2005, 04:45:35 AM

dat zijn namelijk de instructies