Help no programmes

Hello m 41 with very little knowledge of how computers work. Have ad aware se I think it is running and when I started pc today had a load of boxes open up. Now I cant get anything to run at start up lots of boxes with windows canot find… .lnk for several programmes EVERY programm icon has turned to a white square with the top right corner folded over and red,blue,green dots inside the square??? cant run msconfig it wont work tried to start in safemode I think it is pressing F8 get a very large white box 1 Japanese/chinese symbol top left corner and an OK box bottom center. Any advice help?? Would hate to wipe pc clean as I have photos I really dont want to lose (sentimental value) the only reason I can open internet explorer is when it fails a message comes up open with: and choice of list programs or web advice, web page opens and I use ctrl and n and go from there. Thanks in advance

Click here for Instructions on how to Scan with Spybot S&D and Ad-Aware


Then click here for instructions on how to set up a HijackThis folder.

There is a newer of HijackThis Download it here
Please scan with this version.


When the program launches, hit the "Scan and save log" button
Press that, and save the log anywhere you like.

Now if you doubleclick the log file.Go to Edit > Select all, then to Edit > copy.
Now you've copied the entire text to the Windows Clipboard

Next, go back to this forum thread, and click "Add Reply".
In an empty area click your RIGHT mouse button, and choose 'Paste' from the context menu.
There's your Hijack This log.

thanks for the reply but i cant access any of my programmes, I have hijack this and s& d but when I go to any programme nothing runs they all say choose from list or use web for advice??? Have access to wmp azureus (but downloads dont work) they come up as a squre with top right corner folded over and a red,green,blue dot in the middle?? Wont let me copy and paste to show either?

Please download Ewido Security Suite it is a trial version of the program.

• Install ewido security suite
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Then click on Start Update

The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update Ewido.
Ewido manual updates

Once the updates are installed try to do the following:

• Click on scanner
• Click on Complete System Scan and the scan will begin.
• NOTE: During some scans with ewido it is finding cases of false positives.**
  • You will need to step through the process of cleaning files one-by-one.
  • If ewido detects a file you KNOW to be legitimate, select none as the action.
  • DO NOT select "Perform action on all infections"
  • If you are unsure of any entry found select none for now.
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
• Click Save report.
• Save the report .txt file to your desktop.

Now close ewido security suite.
**(Ewido for example has been flagging parts of AVG Anti-Virus, pcAnywhere and the game "Risk")


If this doesn't work Reboot in safe mode. Click here for instructions.

And run Spybot.

Downloaded ewido same thing square with corner folded on top right 3 coloured dots currently running ewido online scanner so far only spyware cookies?? so updating ewido is out also. will delete threats when ewido is ended and try then safe mode but previously that hasnt worked either get a large white box with a chinese symbol in top left corner wont let me close box using the red X and a large ok written in a box bottom center of larger white box Edit: which when I press ok takes me to a normal start up screen with my name on it and back to the same problem

To create a mergeable .reg file follow these simple instructions

1) Create a new file on your Desktop with Notepad
2) Copy the information with CTRL+C from the reg file on this page starting with the line that reads REGEDIT4.
3) Paste the information into the Notepad file
4) You must hit the Enter Key to place an extra line at the end
5) Then save it with a descriptive name and the extension .reg
6) Double click to merge it into your registry. That's it.

REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Desktop]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Desktop\General]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"ClassicShell"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"ForceActiveDesktopOn"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoViewContextMenu"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"Wallpaper"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoViewContextMenu"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoActiveDesktop"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop"="%USERPROFILE%\\Desktop"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders]
"Custom Desktop"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders]
"Desktop"=hex(2):25,55,53,45,52,50,52,4f,46,49,4c,45,25,5c,44,65,73,6b,74,6f,\
  70,00

[HKEY_CURRENT_USER\Control Panel\desktop]
"ConvertedWallpaper"="C:\\WINDOWS\\Web\\Wallpaper\\Windows XP.jpg"
"ConvertedWallpaper Last WriteTime"=hex:00,88,40,84,d3,2b,c1,01
"OriginalWallpaper"="%USERPROFILE%\\Application Data\\Microsoft\\Wallpaper1.bmp"
"Wallpaper"="%USERPROFILE%\\Application Data\\Microsoft\\Wallpaper1.bmp"   
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders]
"Common Desktop"=hex(2):25,00,41,00,4c,00,4c,00,55,00,53,00,45,00,52,00,53,00,\
  50,00,52,00,4f,00,46,00,49,00,4c,00,45,00,25,00,5c,00,44,00,65,00,73,00,6b,\
  00,74,00,6f,00,70,00,00,00

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders]
"Desktop"=hex(2):25,55,53,45,52,50,52,4f,46,49,4c,45,25,5c,44,65,73,6b,74,6f,\
  70,00

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders]
"Desktop"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,00,49,00,\
  4c,00,45,00,25,00,5c,00,44,00,65,00,73,00,6b,00,74,00,6f,00,70,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General]
"ComponentsPositioned"=dword:00000001
"TileWallpaper"="0"
"WallpaperStyle"="2"
"Wallpaper"=hex(2):25,41,50,50,44,41,54,41,25,5c,4d,69,63,72,6f,73,6f,66,74,5c,\
  57,61,6c,6c,70,61,70,65,72,31,2e,62,6d,70,00
"BackupWallpaper"=hex(2):25,41,50,50,44,41,54,41,25,5c,4d,69,63,72,6f,73,6f,66,\
  74,5c,57,61,6c,6c,70,61,70,65,72,31,2e,62,6d,70,00
"WallpaperFileTime"=hex:00,77,28,0a,07,2e,c5,01
"WallpaperLocalFileTime"=hex:00,37,05,fc,c3,2d,c5,01

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\SafeMode\General]
"Wallpaper"="C:\\WINDOWS\\Web\\SafeMode.htt"
"VisitGallery"=dword:00000000

Can only open a new text document? Did that and opened it with notepad copy and paste your list plus "enter" for extra line saved as trouble.reg doubleclick and nothing happens tho it has been saved to my desktop agin with the right edge folded over and 3 coloured dots have also tried opening new file off the above notepad file and did the same saving this as moretrouble.reg nothing again

Goto http://www.kellys-korner-xp.com/xp_tweaks.htm

run #16 and #20

# 16 worked fine # 20 had to save to desktop corner folded over again so that hasnt run Q whats rundll32.exe ? cant find that either

rundll32.exe is a process which executes DLL's an places their libraries into the memory, so they can be used more efficiently by applications.This program is important for the stable and secure running of your computer.

rundll32.exe is also a process which is registered as the W32.Miroot.Worm.

Go here and run online scans, allow them to delete whatever they find:

TrendMicro HouseCall
eTrust AntiVirus Web Scanner

Note any thing that can't be fixed
Reboot when done. Rescan with HJT and post a new log here.

Ewido online showed up clear trendmicro I think I used prior to your help but that and 3ca.com are running now will let you know when theyre complete

You are using XP lets try to move to a point a week before the trouble started. click start > accessories > system tools > system restore , then move to a point before you started having trouble.

dont have Start>accesories?? start>run,search,help&support,set program access & defaults,control panel,my network places,my computer (right click properties doesnt work)my music,my pictures,my documents

Click start button > then control panel > performance & maintenance , Make sure you have switch to classic view in the top left corner, do not click it. If category view is up there top left you will see system restore.

C:\windows\system32\restore\rstrui.exe This file does not have a program associated with it for performing this action. create an association in the folder options control panel?? Edit: this is what I get when I click on system restore