Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93085 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

PC boots up but can't open software [Solved]


  • This topic is locked This topic is locked
123 replies to this topic

#91 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 24 November 2013 - 01:05 PM

Hi cousinkevin,
 

The earliest restore point is 27 August 2013. This seems strange as I did have a technician re-install XP but that was 2-3 years ago.
There has been a noticeable drop in performance post August 27 so do you think I should try that date?
There are two options on that date "software distribution service 3.0" and "system checkpoint" which is about 10 minutes earlier.
Even if it means repeating some steps that would be acceptable.

  • Your system removes old restore points periodically.
  • The date you choose is up to you, the further you go back the potentially more updates and newly added software you will have to re-install. You are just trying to restore to before the malware issues started. Keep in mind restoring will not correct the lack of system resources issue.
  • The preferred restore point is probably the "system checkpoint".

OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.

    Advertisements

Register to Remove


#92 cousinkevin

cousinkevin

    Authentic Member

  • Authentic Member
  • PipPip
  • 66 posts

Posted 24 November 2013 - 03:12 PM

I might have had malware issues before August without being aware, that could have been contributing to a lack of performance and errors correct? It doesn't sound like I've anything to lose from trying at the very least shut down might work properly again.



#93 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 24 November 2013 - 03:29 PM

Hi cousinkevin,

I'm just trying to give you any information that will help you determine what restore point you would like to select, which date to choose is your decision.
OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#94 cousinkevin

cousinkevin

    Authentic Member

  • Authentic Member
  • PipPip
  • 66 posts

Posted 24 November 2013 - 03:55 PM

Will emails in OE be deleted or retained?



#95 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 24 November 2013 - 04:07 PM

Hi cousinkevin,

What files are changed during a system restore?

System Restore affects Windows system files, programs, and registry settings. It can also make changes to scripts, batch files, and other types of executable files on your computer.

Note:System Restore does not affect personal files, such as e-mail, documents, or photos, so it cannot help you restore a deleted file. If you have backups of your files, you can restore the files from a backup.
 


OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#96 cousinkevin

cousinkevin

    Authentic Member

  • Authentic Member
  • PipPip
  • 66 posts

Posted 25 November 2013 - 03:07 PM

No available restore dates worked right through September & October as the message stated there were no system changes. I went as far as the first OTL restore point on November 4th but still the same message.

 

I noticed the very slow ( 30 mins ) shut down started around time we started the processes, could there be a connection?



#97 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 25 November 2013 - 05:13 PM

Hi cousinkevin,

After reviewing your logs from the beginning I noticed you have numerous what appear to be Skype Toolbar logs.

C:\Documents and Settings\Lynda\Local Settings\Temp\
  • Do you know what they are?
  • Do you need to save them?
I don't know if they are causing any issues but at this point I'm trying find anything that might be giving you problems.

=========================

This symptoms are pointing to either corrupt system files or possibly a failing hard drive.
 
Let's re-try System File Checker.

bullseye_zpse9eaf36e.gif System File Checker
  • Click Start, in the run box:
  • Type: sfc /scannow (There's a space between sfc and /scannow.)
  • Type: exit to close the command prompt window
  • Include the findings in your next reply
=========================

In your next post please provide the following:
  • Answers to questions
  • Results of SFC

OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#98 cousinkevin

cousinkevin

    Authentic Member

  • Authentic Member
  • PipPip
  • 66 posts

Posted 26 November 2013 - 02:59 PM

I don't know what the skype toolbar logs are, although we did have skype installed until I uninstalled the other day.

 

No I don't need to save them.

 

I couldn't see a temp folder on the Lynda ( my Mother ) account.

 

The command prompt window only appeared for a fraction of a second then disappeared.

 

Then two windows came up one on top of the other stating "windows file protection". The PC will not allow me to take screenshots for you.

 

One states "files that are required for Window to run properly must be copied to the DLL Cache". Then " Insert you Windows XP Professional service pack 3 CD now"


Edited by cousinkevin, 26 November 2013 - 04:21 PM.


#99 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 26 November 2013 - 04:55 PM

Hi cousinkevin,
 

This seems strange as I have XP home SP 2 disk. The technician who reinstalled XP about 3 years ago said he didn't need the original disk. Could have he installed a non original version of XP?

 

Not likely, if they are a reputable company. All he needs is an installation disk for the same OS you had installed. Your product key code is what differentiates your copy from another and the sticker may be mounted on your computer, they could just re-register the computer with the code. Or they possibly just installed a fresh copy (new CD & new product code number).

You can check by running this tool:

bullseye_zpse9eaf36e.gif Windows Genuine Advantage Notifications

  • Please go to http://www.microsoft...s.aspx?id=20888
  • Select the download button to install the software on your computer.
  • Click Save to save the file to your computer, select a location of your choice.
  • Double click the .exe file to launch the program, select Run.
  • Post the results in your next reply.

=========================

bullseye_zpse9eaf36e.gif How to display Hidden Files & Folders XP

  • Close all programs so that you are at your desktop.
  • Double-click on the My Computer icon.
  • Select the Tools menu and click Folder Options.
  • After the new window appears select the View tab.
  • Put a check mark in the check box labeled "Display the contents of system folders".
  • Under the Hidden files and folders section select the radio button labeled "Show hidden files and folders".
  • Press the Apply button and then the OK button and shutdown My Computer.

=========================

bullseye_zpse9eaf36e.gif Locate the following folder

  • Click Start Menu > Search > All Files and Folders
  • Copy and Paste "i386" (without quotes)
  • Look In field Select your local hard drive (most likely C:)
  • Select Search - the correct folder should have about 7000 files or be about 475 MB is size
  • Close when finished

=========================

If the folder is not present on your hard drive, load the Windows XP SP2 disk you have and see if it's located on the disk.

=========================

bullseye_zpse9eaf36e.gif Delete a File/Folder

Using Windows Explorer (Windows Key + E), locate the following files/folders, and DELETE them (if still present):

  • C:\Documents and Settings\Lynda\Local Settings\Temp\__skype_toolbar_v5_logs\ <-- delete the folder, if present

Exit Explorer

=========================

In your next post please provide the following:

  • Report on steps requested
  • Do you have the i386 folder?

OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#100 cousinkevin

cousinkevin

    Authentic Member

  • Authentic Member
  • PipPip
  • 66 posts

Posted 26 November 2013 - 06:14 PM

My copy of XP was validated as authentic. It got stuck for a bit but finally completed, I noticed the "cancel" button was greyed out ( oh sorry US spell grayed ).

 

The "i386" was located on the XP disk.

 

I couldn't see any skype toolbar files/folders in the temp folder after displaying hidden files & folders.


    Advertisements

Register to Remove


#101 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 26 November 2013 - 07:47 PM

Hi cousinkevin,

 

The "i386" was located on the XP disk.

 

 

 

Can you tell me the size of the folder?


OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#102 cousinkevin

cousinkevin

    Authentic Member

  • Authentic Member
  • PipPip
  • 66 posts

Posted 27 November 2013 - 11:24 AM

497MB, 6363 files & 154 folders



#103 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 27 November 2013 - 04:42 PM

Hi cousinkevin,

Before we proceed, we need to back up the Registry.

=========================

bullseye_zpse9eaf36e.gif Backing Up Your Registry with ERUNT

ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed. Compatible with Windows NT, 2000, 2003, XP, Vista, 7, 32 & 64-bit versions.
**Remember if you are using Windows Vista as your operating system right-click the executable and Run as Administrator.

  • Download ERUNT (save to your desktop)
  • Double-click erunt_setup.exe to run.
  • Follow the prompts and install using the default configuration:
  • Select your preferred Setup language.

    erunt-language.png
  • At the Setup screen click Next.

    erunt-confirm.png
  • Accept the default destination folder by clicking Next.

    erunt-folder.png
  • Accept the default Start Menu Folder.

    erunt-startmenu.png
  • Accept the default Additional Tasks by Clicking Next.

    erunt-tasks.png
  • Ready to Install. Click the Install button.

    erunt-ready.png
  • Say No to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later.

    erunt-setup.png
  • Setup has completed. Tick the check boxes to Show documentation, or Launch.

    erunt-finish.png
  • Start ERUNT

    erunt-start.png
  • Choose a location for the backup
    • The default location C:\WINDOWS\ERDNT\[today's date] is preferred
    • The first two check boxes are ticked by default (System registry and Current user registry).
  • Press OK

    erunt.png
  • When prompted, click YES to create a new folder.

    erunt-newfolder.png
  • Progress bars will show backup status.

    erunt-progress.png
  • A confirmation window will popup when complete.

    erunt-confirmation.png
  • Click OK to close.

=========================

  • Load your Windows XP SP2 CD into the drive bay.
  • Locate the i386 folder
  • Copy (not move) the folder to the root drive of your computer. ( C:\ )
  • When finished you should have a folder located here - C:\i386
  • Remove the CD from the drive bay, then continue.

=========================

Open Notepad, and copy and paste the text below in the code box into Notepad. (do not copy the word code)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup]
"Sourcepath"="C:\" 

Save the file to your desktop as cousinkevin.reg (be sure to name the file with the .reg extension)
Double click the file regfile-1.jpg to update the changes to the Registry.

=========================

bullseye_zpse9eaf36e.gif Reboot

=========================

bullseye_zpse9eaf36e.gif System File Checker

  • Click Start, in the run box:
  • Type: sfc /scannow (There's a space between sfc and /scannow.)
  • Type: exit to close the command prompt window
  • Include the findings in your next reply

=========================

Update on procedure


OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.


#104 cousinkevin

cousinkevin

    Authentic Member

  • Authentic Member
  • PipPip
  • 66 posts

Posted 28 November 2013 - 12:13 PM

Completed tasks. I didn't see the word "code" to not copy into notepad as warned.

 

I notice the .reg file is very small only 129 bytes does that sound right?

 

SFC still freezes at "Windows File Protection" window and states "Please wait while Windows verifies that all protected Windows files are intact and in their original versions".

 

Tried SFC several times again and the black box appears and disappears in a fraction of a second every time.


Edited by cousinkevin, 28 November 2013 - 12:16 PM.


#105 OCD

OCD

    SuperHelper

  • Malware Team
  • 5,574 posts

Posted 29 November 2013 - 11:19 AM

Hi cousinkevin,

Offline yesterday due to Thanksgiving I appreciate your patience.

=========================
 

Tried SFC several times again and the black box appears and disappears in a fraction of a second every time.


So it's safe to say it doesn't appear to be completing the scan, correct?

Has there been any change in performance?
OCD

Proud Graduate of WTT Classroom
Member of UNITE

Threads will be closed if no response after 5 days








If you are satisfied with the help you have received, please consider making a donation.

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users