1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: .EXE wont work anymore

Discussion in 'Windows XP' started by acebro10, Jan 12, 2006.

Thread Status:
Not open for further replies.
Advertisement
  1. acebro10

    acebro10 Thread Starter

    Joined:
    Jan 12, 2006
    Messages:
    22
    i dont know if this has been asked before but i need help after i rebooted all my .exe files just get the unknown program error anyone know how to fix this
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
  3. acebro10

    acebro10 Thread Starter

    Joined:
    Jan 12, 2006
    Messages:
    22
    it works but once i restart it goes back it shows on adwatch that it just gets modified again
     
  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Don't restart immediately then. Do the patch and then remove the program blocking the change -- either that or launch System Restore to return you to a date before these problems.

    Unfortunately it sounds like you may have had some malware that created the problem in the first place and System Restore may restore that.
     
  5. acebro10

    acebro10 Thread Starter

    Joined:
    Jan 12, 2006
    Messages:
    22
    yes it doesnt do anything and ive done countless searches / scans and nothing works ive restored like 3 time nothnig works
     
  6. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Can you create and upload a Startdreck log?

    http://www.niksoft.at/download/startdreck.htm


    Instructions:

    Run StartDreck.exe. Click the 'Config'. In addition to the default checks, include the following:

    Under 'Registry' - All registry options
    Under 'System/Drivers' - Running Processes and List Modules
    Click 'OK'. Now, back on the main screen, click the 'Save' button > Give it a name and click 'Save' > locate it and launch it.

    Upload the log as an attachment since it should be far too long for a copy/paste

    Also do the same with "rootkitrevealer":

    http://www.sysinternals.com/Utilities/RootkitRevealer.html
     
  7. acebro10

    acebro10 Thread Starter

    Joined:
    Jan 12, 2006
    Messages:
    22
    this is the info from startdreck i could not work rootkit
     

    Attached Files:

  8. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    You are missing a great many file associations. In addition to "exe" you are missing .reg, .bat, .com, .pif, .scr and .lnk

    I don't think you saved the Startdreck configuration settings as I recommended before running it. It is missing most of the information I'd like to see.

    see the attachment.

    What happened with the attempt to run rootkitrevealer?

    Can you also post a HijackThis scanlog?

    Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply

    http://www.thespykiller.co.uk/files/hijackthis_sfx.exe


    >> you say you have run System Restore a few times -- how far back did you go? If you can go farther, try it.
     

    Attached Files:

  9. acebro10

    acebro10 Thread Starter

    Joined:
    Jan 12, 2006
    Messages:
    22
    her is the attachment again for hackthis the startdeck attachment is to large to be uploaded
     

    Attached Files:

  10. acebro10

    acebro10 Thread Starter

    Joined:
    Jan 12, 2006
    Messages:
    22
    i tired to do a system restore but i never noticed that they no longer work they get interrupted and say you can not restore to this point no matter when it was
     
  11. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    A similar startdreck log for my system is under 60 kb.

    Anyway, for now let's get rid of this:

    http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

    Print these instructions or have them in a notepad file on your desktop.

    1 >> Start by downloading and unzipping the attached regfix zip file. Completely unzip it and have it on the desktop. Do the same for piffile.zip

    2 >> Reboot in Safe Mode.

    3 >> Once the file is uzipped (not in a zip folder), right click on regfix.INF and select "install". There will be no prompts or confirmations.

    4 >> Run HijackThis and check and fix these entries:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R3 - Default URLSearchHook is missing

    F0 - system.ini: Shell=Explorer.exe C:\WINDOWS\system32\winmgd.win
    F1 - win.ini: run=C:\WINDOWS\system32\mouse_configurator.win

    5 >> In Folder Options > View, make sure "show hidden files" is enabled".

    6 >> go to Start > Run, and enter: services.msc

    Find and STOP these three services if running and then doubleclick it and set the startup mode to "disabled":

    NTBOOTMGR (NTBOOT), NTSVCMGR, and NTLOAD

    7 >> Go to Start > Run, and enter cmd

    At the prompt carefully type and enter each line:

    del C:\WINDOWS\system32\winmgd.win
    del C:\WINDOWS\system32\mouse_configurator.win
    del C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe
    del C:\WINDOWS\SYSTEM\DRIVER\ntsrv.exe
    sc delete NTBOOT
    sc delete NTLOAD
    sc delete NTSVCMGR




    8 > reboot and go to:

    http://www.dougknox.com/xp/file_assoc.htm

    Download and run the patches for the following files:

    exe, .reg, .bat, .com, .scr and .lnk and .vbs

    Unzip and run piffile.reg to merge it as well.

    Post another HijackThis Scanlog and try to do Startdreck again. Don't enable every option, just the ones I indicated. If necessary zip it and upload it.
     

    Attached Files:

  12. acebro10

    acebro10 Thread Starter

    Joined:
    Jan 12, 2006
    Messages:
    22
    it didnt work i noticed that the first 4 things you told me to delete could not be located
     
  13. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    That's not necessarily a problem. Just complete all the directions as far as you can. Then post a new log. Try to post startdreck as well. I can't confirm what has worked and what needs to be done if you just respond with "it didn't work".
     
  14. acebro10

    acebro10 Thread Starter

    Joined:
    Jan 12, 2006
    Messages:
    22
    statdeck is still to big
     

    Attached Files:

  15. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Did you run all the registry pateches? And did all the ones with .reg extensions indicate they were successfully merged to the registry?

    How big is the Startdrecklog unzipped and how big is it zipped?

    If It really shouldn't be too big for an upload here if you are just enabling what I indicated.

    If not, just do it as you did originally so I can see what the file association list shows after you have completed all the directions.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/433638

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice