![]() |
![]() |
![]() |
|||||
![]() |
![]() |
![]() |
![]() |
![]() |
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
|
|
LinkBack | Thread Tools |
|
|
#1 (permalink) |
|
Registered User
Join Date: Oct 2003
Posts: 10
OS: Win XP
|
I was searching on google.com the other day, as soon as I pressed enter a lot of ads popped up and when i closed each one, even more comes up. I used End Task, selected all of the ads pages and finally closed them. Then my Norton AntiVirus programs tell me that there is a java.nocheat virus and it has quarantined the item. But then all of the icons in my desktop and Start Menu changed to the same icon as DOS files, and they all ended with .lnk, when i double click my executable program links on my desktop, a Microsoft window pops up and said "Windows cannot open this file" then let me choose "Use the Web service to find the appropriate program" or "Select the program from a list." If I go directly to the program folder and double click the original program, the icon changes to clear color (same as when you cut it), and nothing happens (the program is not opened). And also my Internet explorer start page changed to something else which i don't remember because i deleted it soon after. Also some porn sites were added to my Favorites folder. I can't open anything in my control panel. The only things that can be opened are music and video files, and also the Internet explorer. I don't know if it's this virus or something else i did. Can somebody help me with this please???
Last edited by mercurialtech; 10-27-2003 at 07:30 AM. |
|
|
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
|
#2 (permalink) |
|
Old Timer
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27
|
Start by reviewing the link below, (SARC). Follow the instructions and lets see how the computer behaves afterward.
http://securityresponse.symantec.com...a.nocheat.html If this does not solve your problem, please download Spybot search and destroy from the link below, run a scan and tell Spybot to fix everything in RED. http://download.com.com/3000-2144-10...age&tag=button Then, download HiJack This from the link below( it is a quick start page with more info and instructions. Create and copy a log and paste it here. (Don't fix anything yet; we'll work with you on that). http://www.tomcoyote.org/hjt/ |
|
|
|
|
#4 (permalink) |
|
Old Timer
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27
|
I was just hoping...
I think we need to wait for more folks to chime in here. I'm not certain if going in a renaming the files is the thing to try...it might make things worse. I don't use xp, so my knowledge of the ends and outs of system restore, repair/recovery, etc, is too little for this. |
|
|
|
|
#5 (permalink) |
|
Security Team
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP
|
We really need to see your hijackthis log, so go to this site and download the exe fix for XP, and then try to post the log.
will check back later steam oops forgot the link - in too big a hurry - sorry http://www.dougknox.com/xp/file_assoc.htm Last edited by steamwiz; 10-27-2003 at 02:34 PM. |
|
|
|
|
#6 (permalink) |
|
ID10T Circuit replacement
Join Date: Aug 2003
Location: Wyoming
Posts: 1,014
OS: Windows 7, Vista, XP Home, Pro, Win2k, 98 SE
|
Cut and paste the following into a notepad file and save it as fixexe.reg then put on floppy double click, click yes then you should be good to run the rest of the recommended.
Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\exefile] @="Application" "EditFlags"=hex:38,07,00,00 [HKEY_CLASSES_ROOT\exefile\DefaultIcon] @="%1" [HKEY_CLASSES_ROOT\exefile\shell] [HKEY_CLASSES_ROOT\exefile\shell\open] "EditFlags"=hex:00,00,00,00 [HKEY_CLASSES_ROOT\exefile\shell\open\command] @="\"%1\" %*" [HKEY_CLASSES_ROOT\exefile\shell\runas] "Extended"="" [HKEY_CLASSES_ROOT\exefile\shell\runas\command] @="\"%1\" %*" [HKEY_CLASSES_ROOT\exefile\shellex] [HKEY_CLASSES_ROOT\exefile\shellex\DropHandler] @="{86C86720-42A0-1069-A2E8-08002B30309D}" [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers] [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps] @="{86F19A00-42A0-1069-A2E9-08002B30309D}" |
|
|
|
|
#8 (permalink) |
|
Security Team
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP
|
Merge this registry file with the registry
http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip It contains more information that that posted by idtent - and it might make the difference. idtent - please don't take this as a criticism of your post, I downloaded the exe fix and noticed there was more data included. steam |
|
|
|
|
#9 (permalink) |
|
Registered User
Join Date: Oct 2003
Posts: 10
OS: Win XP
|
hi, steamwiz, that registry really worked, thanks! But what other effects did that do.
My computer's condition now is that if I make shortcuts of programs they still don't work, but if i go directly to the program folders and click on the .exe program it works. And the icons are still like before, has the image of a DOS file. |
|
|
|
|
#11 (permalink) |
|
Old Timer
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27
|
Hey, XP Guys, what about merc going into active desktop and changing the M$ theme, etc, etc?
This has worked in W2k for me before, appearing to reestablish the links with all my desktop shortcuts, but I just don't know about XP |
|
|
|
|
#12 (permalink) |
|
Security Team
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP
|
Hi jg
I can't see how that would re-establish the links - but if you say it did for you, I believe you I'm still on win98 (because I prefer it) but I can't see how it could have any adverse effect on any o\s if mercurialtech wants to try it. mercurialtech - how about that HJT log ? http://www.tomcoyote.org/hjt/ steam |
|
|
|
|
#13 (permalink) |
|
Old Timer
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27
|
Well, I stumbled into it in my ignorance, but it worked again 2 years later.
Of course, I can tell you precisely where to hit my tower with the wrench to make it reboot. :bandit: |
|
|
|
|
#14 (permalink) |
|
Registered User
Join Date: Oct 2003
Posts: 10
OS: Win XP
|
Here I thank everybody that are helping me. Thank you, guys. And by the way, I restarted the computer and the icons on the program folders reappeared as the original, but the shortcut icons are still not working.
I don't know if this is it, but here's the log: Logfile of HijackThis v1.97.3 Scan saved at 8:00:44 PM, on 10/29/2003 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\PackethSvc.exe C:\Program Files\NavNT\defwatch.exe C:\Program Files\NavNT\rtvscan.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\Program Files\NavNT\vptray.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\MsgSys.EXE C:\PROGRA~1\WinZip\winzip32.exe C:\DOCUME~1\default\LOCALS~1\Temp\HijackThis.exe O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [ESS Daemon] C:\WINDOWS\ESSD.exe O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [RealLink] C:\Program Files\RealLink\RealLink.exe O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - Startup: AOM.lnk = C:\Program Files\Common Files\Adobe\Web\AOM.exe O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm O9 - Extra button: AIM (HKLM) O9 - Extra button: ICQ Lite (HKLM) O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM) O9 - Extra button: Yahoo! Messenger (HKLM) O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll O15 - Trusted Zone: http://free.aol.com O16 - DPF: Win32 Classes - O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.usmd.edu/wfplayer/tdserver.cab O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productu...ntent/opuc.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...housecall/xsca n53.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...799.8968055556 O16 - DPF: {BA0F088C-72C1-475A-92F8-42391DEF6961} (BlueskyAudio Class) - http://202.96.140.88/vchat/blueskyvoice.dll O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab |
|
|
|
|
#15 (permalink) |
|
Security Team
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP
|
That's a clean log
Try going to an exe in program files, and creating a new shortcut - put the shortcut on your desktop and see if it works. If it works ok , you will have to create new shortcuts for all your programs, then delete the non-working ones. steam |
|
|
|
|
#17 (permalink) |
|
Registered User
Join Date: Oct 2003
Posts: 10
OS: Win XP
|
:no: I have a new problem. The computer seems to shut down automatically, it has happened 3 times today. I walk away for a few minutes and it just shut down. It was not like that before and i didn't change any settings. It's frustrating. I hope it's not something that i did after I got the 1st problem.
|
|
|
|
|
#18 (permalink) |
|
Security Team
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP
|
Download and merge this file like you did the last one
Don't worry, it can't give you extra problems - just like the last one - it can have no connection with your new problem - we'll work on that later. http://www.dougknox.com/xp/fileassoc/linkfile_fix.zip |
|
|
|
|
#19 (permalink) |
|
Old Timer
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27
|
OK, Folks. Remember that I am using W2k, not XP.
I downloaded the October security updates from MS immediately when they became available. Shortly after that, I had a bunch of little problems, the most obnoxious of which was my desktop icons not loading properly. I fooled around with this for almost a week, then received notice of some revised patches from MS I downloaded the revisions, and, viola, all the little problems, including the icons, were solved! Merc. Have you installed any updates recently? |
|
|
|
|
#20 (permalink) |
|
Registered User
Join Date: Oct 2003
Posts: 10
OS: Win XP
|
Hey, cool Steam, it worked. I installed that file, at first I just restarted the computer it didn't work. I had to shut it down and then start it then all the icons are back. Thanks a lot! Now that the problems I could see are healed, I hope there are no hidden problems still in the computer.hey jg I didn't install any updates so I think it's probably not the reason the computer does these. :tongue2: |
|
|
| Thread Tools | |
|
|