Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93122 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

spyware.spyeyes


  • Please log in to reply
177 replies to this topic

#151 oldman960

oldman960

    Forum God

  • Retired Classroom Teacher
  • 14,770 posts

Posted 08 January 2011 - 07:13 PM

Hi lthsinc, The way chkdsk behaved with the last tool we tried means that the HDD was not recognized in the NTBR environment. I'm looking for a possible solution. Thanks for your patience.

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation 5Iv60h9.jpg
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

    Advertisements

Register to Remove


#152 oldman960

oldman960

    Forum God

  • Retired Classroom Teacher
  • 14,770 posts

Posted 09 January 2011 - 07:32 PM

Hi lthsinc,


Lets rule out the possiblity of a harddrive problem. You can use the Seagate diagnostics which will work on Maxtor. (Seagate owns Maxtor) HERE

Use the one for DOS. There is also a link there for a tutorial for not only using the tool but how to create the CD or floppy version. If you use the one for a floppy disk you should be able to save the log to the floppy.

Just run the short test for now.

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation 5Iv60h9.jpg
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#153 lthsinc

lthsinc

    Authentic Member

  • Authentic Member
  • PipPip
  • 103 posts

Posted 12 January 2011 - 03:48 PM

I was able to burn to CD and boot from that, and I took a picture of the screen so you can see the log. Hope that helps.

Attached Thumbnails

  • SeaTools_log.jpg


#154 oldman960

oldman960

    Forum God

  • Retired Classroom Teacher
  • 14,770 posts

Posted 13 January 2011 - 06:15 AM

Hi lthsinc, At least we can comunicate with the HD. Please run the long test and report anything it finds. Thanks

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation 5Iv60h9.jpg
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#155 lthsinc

lthsinc

    Authentic Member

  • Authentic Member
  • PipPip
  • 103 posts

Posted 17 January 2011 - 10:04 AM

ok, get back to you soon.

#156 oldman960

oldman960

    Forum God

  • Retired Classroom Teacher
  • 14,770 posts

Posted 17 January 2011 - 07:06 PM

:thumbup:

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation 5Iv60h9.jpg
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#157 lthsinc

lthsinc

    Authentic Member

  • Authentic Member
  • PipPip
  • 103 posts

Posted 20 January 2011 - 04:18 PM

Ran the full test, it seemed to have made one repair, then passed. I've attached pic of log.

Attached Thumbnails

  • photo_3.jpg


#158 oldman960

oldman960

    Forum God

  • Retired Classroom Teacher
  • 14,770 posts

Posted 20 January 2011 - 11:39 PM

Hi lthsinc, Have you tried running chkdsk since the repair either from the Recovery Console or from the drive's tools?

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation 5Iv60h9.jpg
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#159 lthsinc

lthsinc

    Authentic Member

  • Authentic Member
  • PipPip
  • 103 posts

Posted 21 January 2011 - 12:38 PM

Yes, sorry I meant to include that, I did try to run chkdsk, through the command window, and it said it would run on the next startup, but it still no go.

#160 oldman960

oldman960

    Forum God

  • Retired Classroom Teacher
  • 14,770 posts

Posted 25 January 2011 - 12:26 AM

Hi lthsinc, I haven't been ignoring you or forgotten you. I've been trying to find something we haven't tried. Given the problems you are having with chkdsk, the occasional restart at startup and the inability to install SP3 have you considered backing up your data and reinstalling windows? I don't know if the file association problem had anything to do with SP3 failure or not. There's no way of telling how long the associations have been messed up and I'm not certain if windows uses that type of files for the update.

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation 5Iv60h9.jpg
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

    Advertisements

Register to Remove


#161 lthsinc

lthsinc

    Authentic Member

  • Authentic Member
  • PipPip
  • 103 posts

Posted 27 January 2011 - 04:45 PM

Not sure, the chkdsk thing has happened before where it will work, then not work, then work again, obviously right now it's in an uncooperative mood. The computer has never been able to take the SP3 update, so don't know what's up with that, but I've never had a file association issue, only came up when you mentioned it, so can't say how that started. In fact the only file that I've ever had a problem with was the dds file, but that seemed to have downloaded as a screen saver file. In any case, that issue got resolved as well, as it finally worked. So not really sure what's the deal either. Will try the chkdsk again, see if it's in an on-again mood, will let you know. Thanks for all your help.

#162 oldman960

oldman960

    Forum God

  • Retired Classroom Teacher
  • 14,770 posts

Posted 28 January 2011 - 12:05 AM

Hi

DDS by default downloads as a .scr file. That was one of the file associations that was set incorrectly. It was set to open in notepad so when you tried to run DDS the file was opening in notepad instead of running.

You should still have SystemLook on your computer.

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield
  • Do not copy the word CODE , please note the script starts with the :
    :reg
    HKEY_CLASSES_ROOT\.JSE
    HKEY_CLASSES_ROOT\.JSEFile /s
    HKEY_CLASSES_ROOT\.vbs
    HKEY_CLASSES_ROOT\VBSFile /s
    HKEY_CLASSES_ROOT\.VBE
    HKEY_CLASSES_ROOT\VBEFile /s
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation 5Iv60h9.jpg
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#163 lthsinc

lthsinc

    Authentic Member

  • Authentic Member
  • PipPip
  • 103 posts

Posted 28 January 2011 - 10:28 AM

Here you go: SystemLook 04.09.10 by jpshortstuff Log created at 08:26 on 28/01/2011 by TEST Administrator - Elevation successful ========== reg ========== [HKEY_CLASSES_ROOT\.JSE] @="JSEFile" [HKEY_CLASSES_ROOT\.JSEFile] (Unable to open key - key not found) [HKEY_CLASSES_ROOT\.vbs] @="VBSFile" [HKEY_CLASSES_ROOT\.vbs\PersistentHandler] [HKEY_CLASSES_ROOT\VBSFile] @="VBScript Script File" "FriendlyTypeName"="@%SystemRoot%\System32\wshext.dll,-4802" [HKEY_CLASSES_ROOT\VBSFile\DefaultIcon] @="%SystemRoot%\System32\WScript.exe,2" [HKEY_CLASSES_ROOT\VBSFile\ScriptEngine] @="VBScript" [HKEY_CLASSES_ROOT\VBSFile\ScriptHostEncode] @="{85131631-480C-11D2-B1F9-00C04F86C324}" [HKEY_CLASSES_ROOT\VBSFile\Shell] (No values found) [HKEY_CLASSES_ROOT\VBSFile\Shell\Edit] @="&Edit" [HKEY_CLASSES_ROOT\VBSFile\Shell\Edit\Command] @="%SystemRoot%\System32\Notepad.exe %1" [HKEY_CLASSES_ROOT\VBSFile\Shell\Open] @="&Open" [HKEY_CLASSES_ROOT\VBSFile\Shell\Open\Command] @="NOTEPAD.EXE %1" [HKEY_CLASSES_ROOT\VBSFile\Shell\Open2] @="Open &with Command Prompt" [HKEY_CLASSES_ROOT\VBSFile\Shell\Open2\Command] @="%SystemRoot%\System32\CScript.exe "%1" %*" [HKEY_CLASSES_ROOT\VBSFile\Shell\Print] @="&Print" [HKEY_CLASSES_ROOT\VBSFile\Shell\Print\Command] @="%SystemRoot%\System32\Notepad.exe /p %1" [HKEY_CLASSES_ROOT\VBSFile\ShellEx] (No values found) [HKEY_CLASSES_ROOT\VBSFile\ShellEx\DropHandler] @="{60254CA5-953B-11CF-8C96-00AA00B8708C}" [HKEY_CLASSES_ROOT\VBSFile\ShellEx\PropertySheetHandlers] (No values found) [HKEY_CLASSES_ROOT\VBSFile\ShellEx\PropertySheetHandlers\WSHProps] @="{60254CA5-953B-11CF-8C96-00AA00B8708C}" [HKEY_CLASSES_ROOT\.VBE] @="VBEFile" [HKEY_CLASSES_ROOT\VBEFile] @="VBScript Encoded Script File" "FriendlyTypeName"="@%SystemRoot%\System32\wshext.dll,-4803" [HKEY_CLASSES_ROOT\VBEFile\DefaultIcon] @="%SystemRoot%\System32\WScript.exe,2" [HKEY_CLASSES_ROOT\VBEFile\ScriptEngine] @="VBScript.Encode" [HKEY_CLASSES_ROOT\VBEFile\Shell] (No values found) [HKEY_CLASSES_ROOT\VBEFile\Shell\Edit] @="&Edit" [HKEY_CLASSES_ROOT\VBEFile\Shell\Edit\Command] @="%SystemRoot%\System32\Notepad.exe %1" [HKEY_CLASSES_ROOT\VBEFile\Shell\Open] @="&Open" [HKEY_CLASSES_ROOT\VBEFile\Shell\Open\Command] @="NOTEPAD.EXE %1" [HKEY_CLASSES_ROOT\VBEFile\Shell\Open2] @="Open &with Command Prompt" [HKEY_CLASSES_ROOT\VBEFile\Shell\Open2\Command] @="%SystemRoot%\System32\CScript.exe "%1" %*" [HKEY_CLASSES_ROOT\VBEFile\Shell\Print] @="&Print" [HKEY_CLASSES_ROOT\VBEFile\Shell\Print\Command] @="%SystemRoot%\System32\Notepad.exe /p %1" [HKEY_CLASSES_ROOT\VBEFile\ShellEx] (No values found) [HKEY_CLASSES_ROOT\VBEFile\ShellEx\DropHandler] @="{60254CA5-953B-11CF-8C96-00AA00B8708C}" [HKEY_CLASSES_ROOT\VBEFile\ShellEx\PropertySheetHandlers] (No values found) [HKEY_CLASSES_ROOT\VBEFile\ShellEx\PropertySheetHandlers\WSHProps] @="{60254CA5-953B-11CF-8C96-00AA00B8708C}" -= EOF =-

#164 oldman960

oldman960

    Forum God

  • Retired Classroom Teacher
  • 14,770 posts

Posted 29 January 2011 - 10:10 AM

Hi lthsinc,

First create a registry fix.

Open a new Notepad session
  • Click the Start button, click run
  • in the run box type notepad
  • click ok
  • In the notepad, Click "Format" and be certain that Word Wrap is not checked.
  • Copy and paste all the text in the code box below into the Notepad. Do Not copy the word CODE

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.vbs\PersistentHandler]
@="{5e941d80-bf96-11cd-b579-08002b30bfeb}"

[HKEY_CLASSES_ROOT\VBSFile\Shell\Open\Command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,57,00,53,00,\
  63,00,72,00,69,00,70,00,74,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,\
  00,22,00,20,00,25,00,2a,00,00,00

[HKEY_CLASSES_ROOT\VBEFile\Shell\Open\Command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,57,00,53,00,\
  63,00,72,00,69,00,70,00,74,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,\
  00,22,00,20,00,25,00,2a,00,00,00

[HKEY_CLASSES_ROOT\JSEFile\Shell\Open\Command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,57,00,53,00,\
  63,00,72,00,69,00,70,00,74,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,\
  00,22,00,20,00,25,00,2a,00,00,00

  • Ensure there is no space above the Windows Registry Editor Version 5.00.
  • ensure the text matches including the space between lines
  • in notepad go to FILE > SAVE AS and in the dropdown box, set the top box SAVE IN to DESKTOP
  • in the FILE NAME box type (including the " " marks), "fix.reg"
Click save.

This will create a fix.reg file on your desktop Posted Image

To use this file you will need to right click the icon and select merge, accept the warning if it appears and you are done.


Next

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield
  • Do not copy the word CODE , please note the script starts with the :
    :reg
    HKEY_CLASSES_ROOT\.vbs\PersistentHandler 
    HKEY_CLASSES_ROOT\VBEFile\Shell\Open\Command
    HKEY_CLASSES_ROOT\VBSFile\Shell\Open\Command
    HKEY_CLASSES_ROOT\JSEFile\Shell\Open\Command
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Proud Graduate of the WTT Classroon
If you are happy with the help you recieved, please consider making a Donation 5Iv60h9.jpg
Curiosity didn't kill the cat. Ignorance did, curiosity was framed.
Learn how to protect Yourself

Microsoft MVP 2011-2015

Threads will be closed if no response after 5 days.

#165 lthsinc

lthsinc

    Authentic Member

  • Authentic Member
  • PipPip
  • 103 posts

Posted 31 January 2011 - 02:51 PM

Done, and done. Here you go: SystemLook 04.09.10 by jpshortstuff Log created at 12:48 on 31/01/2011 by TEST Administrator - Elevation successful ========== reg ========== [HKEY_CLASSES_ROOT\.v bs\PersistentHandler] @="{5e941d80-bf96-11cd-b 579-08002b30bfeb}" [HKEY_CLASSES_ROOT\V BEFile\Shell\Open\Command ] @="%SystemRoot%\System 32\WScript.exe "%1" %*" [HKEY_CLASSES_ROOT\V BSFile\Shell\Open\Command ] @="%SystemRoot%\System 32\WScript.exe "%1" %*" [HKEY_CLASSES_ROOT\J SEFile\Shell\Open\Command ] @="%SystemRoot%\System 32\WScript.exe "%1" %*" -= EOF =-

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users