Author Topic: XP Help (Read 1731 times)

Guest_Scott · « **on:** December 19, 2004, 11:27:52 PM »

I have been having problems with my little brothers laptop. He has Windows XP. Whenever I try to open up most applications, I get a message that says, "To open this file, Windows needs to know what program created it." I get this message when trying to open regedit, realplayer, calculator, internet explorer, etc. I can open a few things. I cannot get online and safe mode does not change any of the outcomes. Is there any help with this?

Guest · « **Reply #1 on:** December 19, 2004, 11:35:53 PM »

First:
Try download this registry fix
http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

Save it and UNZIP it to your desktop
Double click on xp_exe_fix.reg and Allow it to merge to the registry

Restart your computer

Does that resolve your problem?

Can't run it or doesn't help try this
ownload this Zipped file http://www.dougknox.com/xp/fileassoc/xp_fileassoc.zip
UNZIP it to your desktop and Double click on the
xp_fileassoc.bat to run it
Follow the prompts

RESTART your computer afterwards

No:
Try this,
Download and save to desktop UnHookExec.inf
from Symantec

Right-click the UnHookExec.inf file and click install. (This is a small file. It does not display any notice or boxes when you run it.)

Try posting a Hijackthis log--If you don't know how to post one let me know

Guest_Scott · « **Reply #2 on:** December 19, 2004, 11:54:59 PM »

This is not working. When I add the program to my desktop, it does not recognize it as anything. I just get the same generic icon. Double-clicking gives me the same responses as before.

Guest · « **Reply #3 on:** December 19, 2004, 11:56:25 PM »

You tried all 3 fixes?

No Double clicking on the last one
You must Unzip the first 2

Guest_Scott · « **Reply #4 on:** December 19, 2004, 11:56:41 PM »

And I don't know anything about hijackthis...?

Guest_Scott · « **Reply #5 on:** December 19, 2004, 11:57:39 PM »

I did try the unzip and did according to the directions.

Guest · « **Reply #6 on:** December 20, 2004, 12:14:11 AM »

The last one I linked too
Don't try and double click on it

Save it to your desktop or try saving in on another computer to a floppy
Put the Floppy in the other computer

RIGHT CLICK on it and Choose INSTALL

Guest · « **Reply #7 on:** December 20, 2004, 12:21:59 AM »

This still does not work. I am on a different laptop now and downloaded the file to a floppy. When I put the disk in the drive of the other drive, I get nothing but the generic windows icon with the same message. Don't know if this info helps at all, but no matter what I do...I cannot install anything. I have a NERO and Britannica CR-ROM that I tried to reinstall, but windows does not recognize the exe files...or any others for that matter.

Guest · « **Reply #8 on:** December 20, 2004, 12:30:51 AM »

Set Windows to Show Know Extensions
* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
*
* Uncheck the Hide Extensions for known file types
* Click Yes to confirm.
* Click OK.

Navigate to this folder C:\Windows\System32
open it and look for REGEDT32.exe

is it named with a .exe extension, if not try to rename it to Regedit32.exe

All those Icons may be just Shortcuts your trying to run which may be corrupt
Try browsing to the program folders and running them from there

Guest_Scott · « **Reply #9 on:** December 20, 2004, 12:32:22 AM »

I just retried to ad the "fix" into the registry. I got most (from what I can see so far) of the initial windows files back. Do I need to reinstall all of the other files that I lost? It looks like I can now get online with the other laptop...do I double click on my files that are missing info and chose the get online to open deal? And what causes this problem in the first place? How do I prevent it? Someone had told me that it was a problem with Compaq laptops going into sleep mode...is that true? Thanks for your help so far by the way.

Guest · « **Reply #10 on:** December 20, 2004, 12:40:32 AM »

We just reassociated the file-associations for exe files

You may want to post a hijackthis log to be safe
Download Hijackthis, this will help to determine if there are any nasties on your computer
Create a Permanent Folder for Hijackthis
Double Click "MY Computer"
Open your C: drive
Click "File" >>> "New" >>>> "Folder"
A new folder will be created, name it HJT

Now you will have C:\HJT

Download Hijackthis
Save it to that new folder

Do a SCAN----Scan will change to SAVE LOG----copy and paste the WHOLE contents of the log
here... Don't try and fix anything yet----It is all important

Download links for Hijackthis are from HERE

Sorry, I'm ususally signed in as Guestolo, but I'm not on my computer right now

Guest · « **Reply #11 on:** December 20, 2004, 12:41:15 AM »

Well...I take that back, I am still missing several files or .exe's.

Guest · « **Reply #12 on:** December 20, 2004, 12:43:03 AM »

Sorry, I meant to rename that file
REGEDT32.EXE If it doesn't have the .exe extension

Guest · « **Reply #13 on:** December 20, 2004, 01:27:00 AM »

Should I start fixing?

Guest · « **Reply #14 on:** December 20, 2004, 01:33:21 AM »

Logfile of HijackThis v1.99.0
Scan saved at 11:59:21 PM, on 12/19/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\dllcache\SPOOLSVC.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\AVENGINE.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\WebProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\IFACE.EXE
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PAVJOBS.EXE
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O4 - HKLM\..\Run: [SystemData] C:\WINDOWS\system32\dllcache\SPOOLSVC.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe"
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\RunServices: [PANDA ANTISPAM SERVER SERVICE] "C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PasSrv.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: LdsSingles Messenger.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01111F00-3E00-11D2-8470-0060089874ED} (Support.com Installer) - http://supportsoft.adelphia.net/sdccommon/...ad/tgctlins.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1098575631511
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Panda Antispam Server Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PaSSrv.exe
O23 - Service: Panda Firewall Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\PavFires.exe
O23 - Service: Panda Function Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavFnSvr.exe
O23 - Service: Panda Pavkre - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Pavkre.exe
O23 - Service: Panda PavProt - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PavProt.exe
O23 - Service: Panda Process Protection Service - Unknown - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\pavsrv51.exe
O23 - Service: Panda Preventium+ Service - Unknown - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\prevsrv.exe
O23 - Service: Panda IManager Service - Panda Software Internacional - C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\PsImSvc.exe

Guest · « **Reply #15 on:** December 20, 2004, 01:49:56 AM »

I see a Nasty on your computer that has to be taken care of first

Set Windows To Show Hidden Files and Folders
* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Uncheck the Hide Extensions for known file types
* Click Yes to confirm.
* Click OK.

Go to this site
Give the link time to load
http://virusscan.jotti.dhs.org/

Use the Browse button and Navigate to this file
C:\WINDOWS\system32\dllcache\SPOOLSVC.exe <--file

Right click on it and Select it and then use the Submit button

Copy and paste back here the Scanner results

Just in case, do you have any Spyware removal software
If not, I definitely recommend that you install this one, hold onto it
Download and Install the free version of Ad-Aware SE Personal 1.05
Ensure you have this version, or the Professional series
Open Ad-Aware, ensure to click the check for updates online link and Connect to download the latest updates
Perform a Full system scan
When it's finished scanning
At this point you should either right click on the screen and and choose the "Select All" Objects option or individually put a checkmark in each objects checkbox
click on the Next button. Ad-Aware SE will now present you with a confirmation box as to whether or not you would like to remove the objects you have just selected. Press the "OK" button

RESTART your computer again to finish the cleaning process

Post back a fresh hijackthis log after you have ran Ad-Aware and let me see those scanner results of that file, thanks

I may not see your response until tomorrow

Guest · « **Reply #16 on:** December 20, 2004, 02:12:17 AM »

I cannot find this at all.

C:\WINDOWS\system32\dllcache\SPOOLSVC.exe

Guest · « **Reply #17 on:** December 20, 2004, 02:13:06 AM »

Did you set Windows to Show Hidden Files and folders?

Guest · « **Reply #18 on:** December 20, 2004, 02:18:25 AM »

For some unknown reason, I cannot set the folder options like I used to. Under folder options there is "file types" and "Offline Files"

Guest · « **Reply #19 on:** December 20, 2004, 02:19:44 AM »

The "View" tab is missing.

News:

Author Topic: XP Help (Read 1731 times)

Guest_Scott

Guest

Guest_Scott

Guest

Guest_Scott

Guest_Scott

Guest

Guest

Guest

Guest_Scott

Guest

Guest

Guest

Guest

Guest

Guest

Guest

Guest

Guest

Guest