Author Topic: cannot open email and registry files were restored  (Read 1513 times)

Guest_atomilano

  • Guest
cannot open email and registry files were restored
« on: December 28, 2004, 09:47:09 PM »
When I booted up my computer I received a message at the finish of the boot that the registry files were recovered from the log and it was successful.  I had this about a month ago and it really created a mess. The person on your forum helped me. I think it is coming from a webdsite that I was checking out but I am not sure. What is happening now is that when I open Outlook and try to open a mail  ( the mail is being recieved) ( even one previously opened) I receive a message "one or more parts of the message cannot be displayed'  click ok, then another message 'There was an error opening this message. There is not enough memory'.   The next problem is that I click on the Internet Explorer icon and I have the site set to www.cnn.com and I get a pop up box "File Download-Security Warning" Do you want to save this file: Name:www_cnn_com/
Type: unknown file type
From : www.cnn.com
Save or cancel.
I am wireless and I can see the connection is fine but it will not recognize any www. I put in.

I tried to run Norton Virus scan and when the box opens it is completely blank , an empty pop up box with the norton icon in the left upper corner.
Any help you can give me is greatly appreciated. I am using another computer since I cannot access the internet with mine.

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
cannot open email and registry files were restored
« Reply #1 on: December 28, 2004, 10:20:28 PM »
Hi again, I'm not sure if this will help

But could you please download Hijackthis, the latest version from
HERE or HERE

You can download it from one computer and put it on a floppy and transfer it to the other computer if it can't get online
Save it on the other computer to a permanent folder

Again, run a scan and save the log
Post the whole contents of the log
You can transfer the log from a floppy to the other computer

I just want to see if anything is hiding on your computer

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #2 on: December 28, 2004, 10:56:59 PM »
HI
The problem is the CD reader on the computer I am using for online purposes is not working . So I am stuck. The best I could do is fax it to you , is that an option?

It would be with the version of hijack from Nov v1.98.2.  any other things we could do?

Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #3 on: December 28, 2004, 11:10:09 PM »
I was able to get the cd reader to work on this old Dell so here is the Hijack 1.98.2
Logfile of HijackThis v1.98.2
Scan saved at 9:30:17 PM, on 12/28/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\hphmon05.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus8l.hpwis.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://qus8l.hpwis.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://qus8l.hpwis.com
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/activedat...ta/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac.../ActiveData.cab

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
cannot open email and registry files were restored
« Reply #4 on: December 29, 2004, 03:35:58 PM »
Quote
I received a message at the finish of the boot that the registry files were recovered from the log and it was successful

That part, I'm not really sure what you mean

The log looks ok

Try this for OE
http://insideoe.tomsterdam.com/problems/er...rrors.htm#crash

Look at the top 3 suggestions

This is a IE SP2 issue
"File Download-Security Warning"

The only thing I get when I visit the link below with IE and SP2 and Mozilla Firefox is it's blocking popups from that page
So I'm curious why it's asking you to download something
Try that link below, does the same thing happen?

http://www.cnn.com/

Also, to be on the safe side, have you been to Windows update and got all the latest High Priority updates?
« Last Edit: December 29, 2004, 03:58:20 PM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #5 on: December 29, 2004, 09:15:58 PM »
The message " I received a message at the end of the boot...." was the first thing that happened before I realized the email was not working and Internet explorer was not working.  It was strange and it was the same message that I received before in Nov when I worked with you to restore the registry files. I knew I was going into a troubled area when I saw this. I never see this message. What could cause this?

I am up to date on the Windows High priority updates as of last week.  I tried to launch it but it comes back and says in internet explorer:

File download: windowsupdate.microsoft.htm
type: HTLM document 3.11 kb
From: windowsupdate.microsoft.com
so I cannot give it a double check.


I have tried Http:/www.cnn.com/
and I get the message File download www_cnn_com
Type: unknown file type
From www.cnn.com

SAVE or Cancel

The virus scan job that I have scheduled launches with the pop-up box that normally would show me the number of files scanned, alerts etc , none of the information shows the pop-up is a white empty pop up , so I do not know if it is running or not.  I will check the task manager.  

I feel like something got into my laptop and corrupted files, especially when I received the message about the registery files were recovered successfully.
I am trying the suggestions on OE.

Guest

  • Guest
cannot open email and registry files were restored
« Reply #6 on: December 29, 2004, 09:20:12 PM »
Just to be safe, have you tried a System Restore to just before this happened
Start>>All programs>>Accessories>>System Tools>>System Restore
The dates allowed will be highlighted

Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #7 on: December 29, 2004, 09:24:26 PM »
When I try start>all programs

At this point I cannot go any further because nothing pops up when the cursor is on all programs,it looks like it is dead, no sub window comes up for me to select Accessories>system tools> system restore. I cannot get to it.

Guest

  • Guest
cannot open email and registry files were restored
« Reply #8 on: December 29, 2004, 09:28:13 PM »
What happens when you go to START>>RUN>>type in msconfig and hit OK

Do you get to the System config. utility?
Can you Launch System Restore from there?

Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #9 on: December 29, 2004, 09:42:22 PM »
when I click on  
START>     there is no RUN option, and I noticed it is opening as USER at the top of the box after clicking on START, should it be ADMIN? How do I switch to admin or get to see RUN?

I right clicked on start and said "open all users" then I saw the programs folder.
Here I clicked on Accessories, then opened System tools, then System REstore shortcut and  POPup screen appeared, with System RESTORE in the title of the box , upper left hand corner.

Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #10 on: December 29, 2004, 09:45:25 PM »
The System REstore screen was blank similar to the norton virus scan screen.

Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #11 on: December 29, 2004, 10:06:17 PM »
Hi
I was looking at the OE fix suggestions from the "when outlook Express crashes" and I am wondering what the first statement means or how to get to it:
"Close OE and open the store folder in windows explorer" . Should I try this suggestion even though there are other things going wrong besides OE problems?

Guest

  • Guest
cannot open email and registry files were restored
« Reply #12 on: December 29, 2004, 10:21:40 PM »
I think that there more issues than OE
You may be hiding the run command
Right click the bottom Task bar and select Properties

Click the Start Menu tab
Customize
Advanced tab
In the Start menu Items scroll down and put a check in Run Command
OK and Apply

See if you can now go to START>>RUN
copy and paste this into the Run command and click OK
c:\windows\system32\restore\rstrui.exe

Still no luck, this may not work, but try it in safe mode

In normal mode, try copying and pasting this into the run command
sfc /scannow --- close your browser and hit OK
This may take awhile
You may have to have your Windows CD ready

I would almost venture that you should try another online virus scan--if you can
at Trend Micro's--Set to Autoclean before you try sfc /scannow
Save the report and post it
http://housecall.trendmicro.com/

Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #13 on: December 29, 2004, 10:35:10 PM »
The RUN command was checked on and I unchecked and checked it again, did APPLY and it is still not showing up.  Do I need to be in ADMIN mode.  

I cannot get to the site you http:/houscall.trendmicro.com/  I keep getting the download message.

Offline atomilano

  • Newbie
  • *
  • Posts: 46
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #14 on: December 30, 2004, 12:39:36 AM »
I am taking a look at the Operating system cd and I get an error message ;
Windows set up

Set up cannot continue because the version of Windows on your computer is newer than the version on the CD . (maybe becasue of the windows fixes that have been applied since March 2004 , I am not sure) . Warning : If you decide to delete the the newer version of Windows that is currently installed on your computer, the files and settings cannot be recovered".
Can you give me any advice or a step by step process to reinstall the XP operating system. I have not ever done this before so I need some help.  I did back up whatever files I had created of my own first.  I think I will need to load all software CD's that I have.  I am wireless and I am wondering if this is part of the reason why I am having so many issues with my PC in the last few months.  I have a firewall and Norton Internet security. I am interested in changing from Norton to something else so if you can advise me that would be great. Thanks for all of your help this far

Guest

  • Guest
cannot open email and registry files were restored
« Reply #15 on: December 30, 2004, 01:41:46 AM »
Hi again, I'm not at my comp. that's why I'm not signed in
You could try restarting into safe mode and using the Admin account(you are using XP home?)and see what happens, see if you can access System Restore
If no go
With the troubles you're experiencing you may have better luck doing a clean install

This link will walk you through it
http://www.winsupersite.com/showcase/windo...xp_sg_clean.asp
If you run into any problems just reboot and start again

After you are installed
For now install Service Pack 1a and then visit Windows updates and get all Critical updates
As far as your wireless router check the manual, I don't know which one you use.....
Don't install Recommended updates and Service pack 2 at Windows Updates
Don't forget to get the latest Video card drivers from the manufacturer, don't get them from Microsoft and possibly motherboard drivers
check your manual

Here's a link to service pack 1a
http://www.microsoft.com/windowsxp/downloa...p1/default.mspx

Guest

  • Guest
cannot open email and registry files were restored
« Reply #16 on: December 30, 2004, 01:44:01 AM »
From that guide to clean install Windows XP, don't worry about updating the bios at this time

Guest

  • Guest
cannot open email and registry files were restored
« Reply #17 on: January 01, 2005, 11:28:16 AM »
Hi
I used the windows XP install cd and did a 'repair'  and it cleared up the problems that I was having.

thanks

Offline outlook

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
cannot open email and registry files were restored
« Reply #18 on: September 29, 2005, 04:00:53 AM »
I have been using it. view dbx file and outlook  express email recovery more stable and secure than other programs.