Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 



Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > HijackThis Log Help (Inactive)
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


 
 
LinkBack Thread Tools
Old 10-26-2003, 10:02 AM   #1 (permalink)
Registered User
 
Join Date: Oct 2003
Posts: 10
OS: Win XP


Red Faced all .exe programs becomes unable to open

I was searching on google.com the other day, as soon as I pressed enter a lot of ads popped up and when i closed each one, even more comes up. I used End Task, selected all of the ads pages and finally closed them. Then my Norton AntiVirus programs tell me that there is a java.nocheat virus and it has quarantined the item. But then all of the icons in my desktop and Start Menu changed to the same icon as DOS files, and they all ended with .lnk, when i double click my executable program links on my desktop, a Microsoft window pops up and said "Windows cannot open this file" then let me choose "Use the Web service to find the appropriate program" or "Select the program from a list." If I go directly to the program folder and double click the original program, the icon changes to clear color (same as when you cut it), and nothing happens (the program is not opened). And also my Internet explorer start page changed to something else which i don't remember because i deleted it soon after. Also some porn sites were added to my Favorites folder. I can't open anything in my control panel. The only things that can be opened are music and video files, and also the Internet explorer. I don't know if it's this virus or something else i did. Can somebody help me with this please???

Last edited by mercurialtech; 10-27-2003 at 07:30 AM.
mercurialtech is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here

Old 10-26-2003, 11:17 AM   #2 (permalink)
Old Timer
 
jgvernonco's Avatar
 
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27


Start by reviewing the link below, (SARC). Follow the instructions and lets see how the computer behaves afterward.

http://securityresponse.symantec.com...a.nocheat.html

If this does not solve your problem, please download Spybot search and destroy from the link below, run a scan and tell Spybot to fix everything in RED.

http://download.com.com/3000-2144-10...age&tag=button

Then, download HiJack This from the link below( it is a quick start page with more info and instructions. Create and copy a log and paste it here. (Don't fix anything yet; we'll work with you on that).

http://www.tomcoyote.org/hjt/
jgvernonco is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-26-2003, 09:28 PM   #3 (permalink)
Registered User
 
Join Date: Oct 2003
Posts: 10
OS: Win XP


As I said earlier, I am not able to execute any programs that ends with .exe. I couldn't install the program you told me to download because nothing happens when i open it.
mercurialtech is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-27-2003, 08:18 AM   #4 (permalink)
Old Timer
 
jgvernonco's Avatar
 
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27


I was just hoping...

I think we need to wait for more folks to chime in here. I'm not certain if going in a renaming the files is the thing to try...it might make things worse.

I don't use xp, so my knowledge of the ends and outs of system restore, repair/recovery, etc, is too little for this.
jgvernonco is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-27-2003, 10:29 AM   #5 (permalink)
Security Team
 
steamwiz's Avatar
 
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP


We really need to see your hijackthis log, so go to this site and download the exe fix for XP, and then try to post the log.

will check back later

steam

oops forgot the link - in too big a hurry - sorry

http://www.dougknox.com/xp/file_assoc.htm

Last edited by steamwiz; 10-27-2003 at 02:34 PM.
steamwiz is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-27-2003, 02:27 PM   #6 (permalink)
ID10T Circuit replacement
 
idtent's Avatar
 
Join Date: Aug 2003
Location: Wyoming
Posts: 1,014
OS: Windows 7, Vista, XP Home, Pro, Win2k, 98 SE


Cut and paste the following into a notepad file and save it as fixexe.reg then put on floppy double click, click yes then you should be good to run the rest of the recommended.

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\exefile]
@="Application"
"EditFlags"=hex:38,07,00,00

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"

[HKEY_CLASSES_ROOT\exefile\shell]

[HKEY_CLASSES_ROOT\exefile\shell\open]
"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\runas]
"Extended"=""

[HKEY_CLASSES_ROOT\exefile\shell\runas\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shellex]

[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
@="{86C86720-42A0-1069-A2E8-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]
@="{86F19A00-42A0-1069-A2E9-08002B30309D}"
idtent is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-28-2003, 09:00 PM   #7 (permalink)
Registered User
 
Join Date: Oct 2003
Posts: 10
OS: Win XP


re: idtent

I installed that registry, but the problem stays the same.
mercurialtech is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-29-2003, 04:10 AM   #8 (permalink)
Security Team
 
steamwiz's Avatar
 
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP


Merge this registry file with the registry

http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

It contains more information that that posted by idtent - and it might make the difference.

idtent - please don't take this as a criticism of your post, I downloaded the exe fix and noticed there was more data included.

steam
steamwiz is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-29-2003, 05:18 AM   #9 (permalink)
Registered User
 
Join Date: Oct 2003
Posts: 10
OS: Win XP


Cool to steamwiz

hi, steamwiz, that registry really worked, thanks! But what other effects did that do.
My computer's condition now is that if I make shortcuts of programs they still don't work, but if i go directly to the program folders and click on the .exe program it works. And the icons are still like before, has the image of a DOS file.
mercurialtech is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-29-2003, 07:32 AM   #10 (permalink)
ID10T Circuit replacement
 
idtent's Avatar
 
Join Date: Aug 2003
Location: Wyoming
Posts: 1,014
OS: Windows 7, Vista, XP Home, Pro, Win2k, 98 SE


No problem Steamwiz.

As long as the problem gets solved!
idtent is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-29-2003, 09:03 AM   #11 (permalink)
Old Timer
 
jgvernonco's Avatar
 
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27


Hey, XP Guys, what about merc going into active desktop and changing the M$ theme, etc, etc?

This has worked in W2k for me before, appearing to reestablish the links with all my desktop shortcuts, but I just don't know about XP
jgvernonco is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-29-2003, 10:39 AM   #12 (permalink)
Security Team
 
steamwiz's Avatar
 
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP


Hi jg

I can't see how that would re-establish the links - but if you say it did for you, I believe you

I'm still on win98 (because I prefer it) but I can't see how it could have any adverse effect on any o\s if mercurialtech wants to try it.

mercurialtech - how about that HJT log ?

http://www.tomcoyote.org/hjt/

steam
steamwiz is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-29-2003, 05:18 PM   #13 (permalink)
Old Timer
 
jgvernonco's Avatar
 
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27


Well, I stumbled into it in my ignorance, but it worked again 2 years later.

Of course, I can tell you precisely where to hit my tower with the wrench to make it reboot. :bandit:
jgvernonco is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-29-2003, 06:11 PM   #14 (permalink)
Registered User
 
Join Date: Oct 2003
Posts: 10
OS: Win XP


Arrow hijackthis log

Here I thank everybody that are helping me. Thank you, guys. And by the way, I restarted the computer and the icons on the program folders reappeared as the original, but the shortcut icons are still not working.
I don't know if this is it, but here's the log:



Logfile of HijackThis v1.97.3
Scan saved at 8:00:44 PM, on 10/29/2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\PackethSvc.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\PROGRA~1\WinZip\winzip32.exe
C:\DOCUME~1\default\LOCALS~1\Temp\HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -

C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil

/RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe

/SYNC
O4 - HKLM\..\Run: [PHIME2002ASync]

C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A]

C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [ESS Daemon] C:\WINDOWS\ESSD.exe
O4 - HKLM\..\Run: [EM_EXEC]

C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [RealLink] C:\Program Files\RealLink\RealLink.exe
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Startup: AOM.lnk = C:\Program Files\Common Files\Adobe\Web\AOM.exe
O8 - Extra context menu item: Download with GetRight - C:\Program

Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program

Files\GetRight\GRbrowse.htm
O9 - Extra button: AIM (HKLM)
O9 - Extra button: ICQ Lite (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O15 - Trusted Zone: http://free.aol.com
O16 - DPF: Win32 Classes -
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) -

http://www.usmd.edu/wfplayer/tdserver.cab
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) -

http://office.microsoft.com/productu...ntent/opuc.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -

http://a840.g.akamai.net/7/840/537/2...housecall/xsca

n53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -

http://v4.windowsupdate.microsoft.co...799.8968055556
O16 - DPF: {BA0F088C-72C1-475A-92F8-42391DEF6961} (BlueskyAudio Class) -

http://202.96.140.88/vchat/blueskyvoice.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

http://download.macromedia.com/pub/s...sh/swflash.cab
mercurialtech is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-30-2003, 12:44 PM   #15 (permalink)
Security Team
 
steamwiz's Avatar
 
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP


That's a clean log

Try going to an exe in program files, and creating a new shortcut - put the shortcut on your desktop and see if it works.

If it works ok , you will have to create new shortcuts for all your programs, then delete the non-working ones.

steam
steamwiz is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-30-2003, 07:10 PM   #16 (permalink)
Registered User
 
Join Date: Oct 2003
Posts: 10
OS: Win XP


Question

Hi, steam, I already tried that method, but it didn't work. And also, I don't want to give up any chances, so I tried what jg said but nothing changes.
mercurialtech is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-30-2003, 10:14 PM   #17 (permalink)
Registered User
 
Join Date: Oct 2003
Posts: 10
OS: Win XP


:no: I have a new problem. The computer seems to shut down automatically, it has happened 3 times today. I walk away for a few minutes and it just shut down. It was not like that before and i didn't change any settings. It's frustrating. I hope it's not something that i did after I got the 1st problem.
mercurialtech is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-31-2003, 06:09 AM   #18 (permalink)
Security Team
 
steamwiz's Avatar
 
Join Date: Oct 2003
Location: yorkshire - uk
Posts: 113
OS: win98, XP


Download and merge this file like you did the last one

Don't worry, it can't give you extra problems - just like the last one - it can have no connection with your new problem - we'll work on that later.


http://www.dougknox.com/xp/fileassoc/linkfile_fix.zip
steamwiz is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-31-2003, 08:48 AM   #19 (permalink)
Old Timer
 
jgvernonco's Avatar
 
Join Date: Sep 2003
Location: Northern Arizona
Posts: 7,958
OS: Vista Home Premium, SP 27


OK, Folks. Remember that I am using W2k, not XP.

I downloaded the October security updates from MS immediately when they became available. Shortly after that, I had a bunch of little problems, the most obnoxious of which was my desktop icons not loading properly.

I fooled around with this for almost a week, then received notice of some revised patches from MS

I downloaded the revisions, and, viola, all the little problems, including the icons, were solved!

Merc. Have you installed any updates recently?
jgvernonco is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 11-01-2003, 07:50 AM   #20 (permalink)
Registered User
 
Join Date: Oct 2003
Posts: 10
OS: Win XP


Hey, cool Steam, it worked. I installed that file, at first I just restarted the computer it didn't work. I had to shut it down and then start it then all the icons are back. Thanks a lot! Now that the problems I could see are healed, I hope there are no hidden problems still in the computer.

hey jg I didn't install any updates so I think it's probably not the reason the computer does these. :tongue2:
mercurialtech is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
 


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




All times are GMT -7. The time now is 05:38 AM.



Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85