.exe changed to .lnk

mercurialtech · Oct 26, 2003

all .exe programs becomes unable to open

I was searching on google.com the other day, as soon as I pressed enter a lot of ads popped up and when i closed each one, even more comes up. I used End Task, selected all of the ads pages and finally closed them. Then my Norton AntiVirus programs tell me that there is a java.nocheat virus and it has quarantined the item. But then all of the icons in my desktop and Start Menu changed to the same icon as DOS files, and they all ended with .lnk, when i double click my executable program links on my desktop, a Microsoft window pops up and said "Windows cannot open this file" then let me choose "Use the Web service to find the appropriate program" or "Select the program from a list." If I go directly to the program folder and double click the original program, the icon changes to clear color (same as when you cut it), and nothing happens (the program is not opened). And also my Internet explorer start page changed to something else which i don't remember because i deleted it soon after. Also some porn sites were added to my Favorites folder. I can't open anything in my control panel. The only things that can be opened are music and video files, and also the Internet explorer. I don't know if it's this virus or something else i did. Can somebody help me with this please???

jgvernonco · Oct 26, 2003

Start by reviewing the link below, (SARC). Follow the instructions and lets see how the computer behaves afterward.

http://securityresponse.symantec.com/avcenter/venc/data/java.nocheat.html

If this does not solve your problem, please download Spybot search and destroy from the link below, run a scan and tell Spybot to fix everything in RED.

http://download.com.com/3000-2144-10122137.html?part=104443&subj=dlpage&tag=button

Then, download HiJack This from the link below( it is a quick start page with more info and instructions. Create and copy a log and paste it here. (Don't fix anything yet; we'll work with you on that).

http://www.tomcoyote.org/hjt/

mercurialtech · Oct 27, 2003

As I said earlier, I am not able to execute any programs that ends with .exe. I couldn't install the program you told me to download because nothing happens when i open it.

jgvernonco · Oct 27, 2003

I was just hoping...:upset:

I think we need to wait for more folks to chime in here. I'm not certain if going in a renaming the files is the thing to try...it might make things worse.

I don't use xp, so my knowledge of the ends and outs of system restore, repair/recovery, etc, is too little for this.

steamwiz · Oct 27, 2003

We really need to see your hijackthis log, so go to this site and download the exe fix for XP, and then try to post the log.

will check back later

steam

oops forgot the link - in too big a hurry - sorry

http://www.dougknox.com/xp/file_assoc.htm

idtent · Oct 27, 2003

Cut and paste the following into a notepad file and save it as fixexe.reg then put on floppy double click, click yes then you should be good to run the rest of the recommended.

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\exefile]
@="Application"
"EditFlags"=hex:38,07,00,00

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"

[HKEY_CLASSES_ROOT\exefile\shell]

[HKEY_CLASSES_ROOT\exefile\shell\open]
"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\runas]
"Extended"=""

[HKEY_CLASSES_ROOT\exefile\shell\runas\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shellex]

[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
@="{86C86720-42A0-1069-A2E8-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]
@="{86F19A00-42A0-1069-A2E9-08002B30309D}"

mercurialtech · Oct 29, 2003

re: idtent

I installed that registry, but the problem stays the same.

steamwiz · Oct 29, 2003

Merge this registry file with the registry

http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

It contains more information that that posted by idtent - and it might make the difference.

idtent - please don't take this as a criticism of your post, I downloaded the exe fix and noticed there was more data included.

steam

mercurialtech · Oct 29, 2003

to steamwiz

hi, steamwiz, that registry really worked, thanks! But what other effects did that do.
My computer's condition now is that if I make shortcuts of programs they still don't work, but if i go directly to the program folders and click on the .exe program it works. And the icons are still like before, has the image of a DOS file.

idtent · Oct 29, 2003

No problem Steamwiz.

As long as the problem gets solved!:winking:

jgvernonco · Oct 29, 2003

Hey, XP Guys, what about merc going into active desktop and changing the M$ theme, etc, etc?

This has worked in W2k for me before, appearing to reestablish the links with all my desktop shortcuts, but I just don't know about XP

steamwiz · Oct 29, 2003

Hi jg

I can't see how that would re-establish the links - but if you say it did for you, I believe you :winking:

I'm still on win98 (because I prefer it) but I can't see how it could have any adverse effect on any o\s if mercurialtech wants to try it.

mercurialtech - how about that HJT log ?

http://www.tomcoyote.org/hjt/

steam

jgvernonco · Oct 30, 2003

Well, I stumbled into it in my ignorance, but it worked again 2 years later.

Of course, I can tell you precisely where to hit my tower with the wrench to make it reboot. :bandit:

mercurialtech · Oct 30, 2003

hijackthis log

Here I thank everybody that are helping me. Thank you, guys. And by the way, I restarted the computer and the icons on the program folders reappeared as the original, but the shortcut icons are still not working.
I don't know if this is it, but here's the log:

Logfile of HijackThis v1.97.3
Scan saved at 8:00:44 PM, on 10/29/2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\PackethSvc.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\PROGRA~1\WinZip\winzip32.exe
C:\DOCUME~1\default\LOCALS~1\Temp\HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -

C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil

/RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe

/SYNC
O4 - HKLM\..\Run: [PHIME2002ASync]

C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A]

C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [ESS Daemon] C:\WINDOWS\ESSD.exe
O4 - HKLM\..\Run: [EM_EXEC]

C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [RealLink] C:\Program Files\RealLink\RealLink.exe
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Startup: AOM.lnk = C:\Program Files\Common Files\Adobe\Web\AOM.exe
O8 - Extra context menu item: Download with GetRight - C:\Program

Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program

Files\GetRight\GRbrowse.htm
O9 - Extra button: AIM (HKLM)
O9 - Extra button: ICQ Lite (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O15 - Trusted Zone: http://free.aol.com
O16 - DPF: Win32 Classes -
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) -

http://www.usmd.edu/wfplayer/tdserver.cab
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) -

http://office.microsoft.com/productupdates/content/opuc.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -

http://a840.g.akamai.net/7/840/537/2003080601/housecall.antivirus.com/housecall/xsca

n53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -

http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37799.8968055556
O16 - DPF: {BA0F088C-72C1-475A-92F8-42391DEF6961} (BlueskyAudio Class) -

http://202.96.140.88/vchat/blueskyvoice.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

steamwiz · Oct 30, 2003

That's a clean log

Try going to an exe in program files, and creating a new shortcut - put the shortcut on your desktop and see if it works.

If it works ok , you will have to create new shortcuts for all your programs, then delete the non-working ones.

steam

mercurialtech · Oct 31, 2003

Hi, steam, I already tried that method, but it didn't work. And also, I don't want to give up any chances, so I tried what jg said but nothing changes.

mercurialtech · Oct 31, 2003

:no: I have a new problem. The computer seems to shut down automatically, it has happened 3 times today. I walk away for a few minutes and it just shut down. It was not like that before and i didn't change any settings. It's frustrating. I hope it's not something that i did after I got the 1st problem.

steamwiz · Oct 31, 2003

Download and merge this file like you did the last one

Don't worry, it can't give you extra problems - just like the last one - it can have no connection with your new problem - we'll work on that later.

http://www.dougknox.com/xp/fileassoc/linkfile_fix.zip

jgvernonco · Oct 31, 2003

OK, Folks. Remember that I am using W2k, not XP.

I downloaded the October security updates from MS immediately when they became available. Shortly after that, I had a bunch of little problems, the most obnoxious of which was my desktop icons not loading properly.

I fooled around with this for almost a week, then received notice of some revised patches from MS

I downloaded the revisions, and, viola, all the little problems, including the icons, were solved!

Merc. Have you installed any updates recently?

mercurialtech · Nov 1, 2003

:winkgrin: Hey, cool Steam, it worked. I installed that file, at first I just restarted the computer it didn't work. I had to shut it down and then start it then all the icons are back. Thanks a lot! Now that the problems I could see are healed, I hope there are no hidden problems still in the computer.

hey jg I didn't install any updates so I think it's probably not the reason the computer does these. :tongue2:

.exe changed to .lnk

Registered

Registered

Registered

Registered

Registered

ID10T Circuit replacement

Registered

Registered

Registered

ID10T Circuit replacement

Registered

Registered

Registered

Registered

Registered

Registered

Registered

Registered

Registered

Registered