Please help with .exe stuff

[howmanykells]

I did the Read & Run Me first in the Malware forum. Well I have done these 4 steps as per chaslang's instructions, as I am on crappy dialup.

• run Ccleaner if already downloaded and installed
• run the AVG Antispyware scan since you have already downloaded it.
• And skip the Spybot, BitDefender, and Panda scans
• Then get the logs from GetRunKey, ShowNew, and HijackThis

Thus you should be attaching 4 logs:


Apparently I have no malware, so I went to the 'Protect From Malware' thread & I tried downloading the Outpost Firewall. The first time I pressed the 'Run' button on the download thingy & when it downloaded it said "C:\Documents and Settings\Kellie\Local Settings\Temporary Internet Files\Content.IE5\ER46768E\outpostinstall[1].exe is not a valid Win32 application".

So I downloaded it again but hit the save button this time & saved it to 'D' drive. When I tried to open it says "......is not a valid Win32 application" (I lost the screenshot sorry!). I tried rebooting in Diagnostic mode (I don't have safe? only 'Normal', 'Diagnostic' & 'Selective' in my startup options.

I have tried these things from a thread entitled "most of my programs stopped responding normally".

http://www.winhelponline.com/exefix_xp.com Tried this, rebooted, nothing.


The below I saved to notepad & saved as 'all files' as fixme.reg. When I double clicked on it, I get this: 'Cannot import C:\Documents: Error opening the file. There may be a disk or file system error'.

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[HKEY_CLASSES_ROOT\.exe\PersistentHandler]
@="{098f2470-bae0-11cd-b579-08002b30bfeb}"

[HKEY_CLASSES_ROOT\exefile]
@="Application"
"EditFlags"=hex:38,07,00,00
"TileInfo"="prop:FileDescription;Company;FileVersion"
"InfoTip"="prop:FileDescription;Company;FileVersion;Create;Size"

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"

[HKEY_CLASSES_ROOT\exefile\shell]

[HKEY_CLASSES_ROOT\exefile\shell\open]
"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\runas]

[HKEY_CLASSES_ROOT\exefile\shell\runas\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shellex]

[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
@="{86C86720-42A0-1069-A2E8-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PEAnalyser]
@="{09A63660-16F9-11d0-B1DF-004F56001CA7}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]
@="{86F19A00-42A0-1069-A2E9-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page]
@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"

[HKEY_CLASSES_ROOT\.lnk]
@="lnkfile"

[HKEY_CLASSES_ROOT\.lnk\ShellEx]

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{000214EE-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{000214F9-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{00021500-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellNew]
"Command"="rundll32.exe appwiz.cpl,NewLinkHere %1"

[HKEY_CLASSES_ROOT\lnkfile]
@="Shortcut"
"EditFlags"=dword:00000001
"IsShortcut"=""
"NeverShowExt"=""

[HKEY_CLASSES_ROOT\lnkfile\CLSID]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\lnkfile\shellex]

[HKEY_CLASSES_ROOT\lnkfile\shellex\ContextMenuHandlers]

[HKEY_CLASSES_ROOT\lnkfile\shellex\ContextMenuHandlers\Offline Files]
@="{750fdf0e-2a26-11d1-a3ea-080036587f03}"

[HKEY_CLASSES_ROOT\lnkfile\shellex\ContextMenuHandlers\{00021401-0000-0000-C000-000000000046}]

[HKEY_CLASSES_ROOT\lnkfile\shellex\DropHandler]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\lnkfile\shellex\IconHandler]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\lnkfile\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\lnkfile\shellex\PropertySheetHandlers\ShimLayer Property Page]
@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}]
@="Shortcut"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\InProcServer32]
@="shell32.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\PersistentAddinsRegistered]

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\PersistentAddinsRegistered\{89BCB740-6119-101A-BCB7-00DD010655AF}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\PersistentHandler]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\ProgID]
@="lnkfile"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\shellex]

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\shellex\MayChangeDefaultMenu]

I tried the UnhookExe & rebooted. Nope.


i looked at this, but the default for the first one was the same, but when I went to the second one there was no default in the right pane so I was too chicken to touch it.

Please help! I have not idea at all what I am doing & I could have screwed everything up with overzealous CCleanering or anything! A couple of other files aren't working either. Help!

Click Start, Run and type cmd and press ENTER
Type the following commands one by one:

Quote:
cd\windows PRESS ENTER
regedit PRESS ENTER

If Registry Editor opens successfully, then navigate to the following key:

Quote:
HKEY_CLASSES_ROOT \ exefile \ shell \ open \ command

Double-click the (Default) value in the right pane
Delete the current value data, and then type:

Quote:
"%1" %*
(ie., quote-percent-one-quote-space-percent-asterisk.)


Navigate to:

Quote:
HKEY_CLASSES_ROOT\.exe

In the right-pane, set (default) to exefile
Exit the Registry Editor.

[TimW]

First thing to try is to get your xp cd and go to start / run / type in "sfc /scannow" without quotes and put the cd in when prompted. Run it twice.

[howmanykells]

Originally Posted by TimW

First thing to try is to get your xp cd and go to start / run / type in "sfc /scannow" without quotes and put the cd in when prompted. Run it twice.

Thank you!

I can't find my original XP cd. All I have found is:

Supervoice 'Modem's Driver Included'

Norton Anti-Virus 2005

I think I may have been gypped!!

I DO have my Office Proffesional Edition 2003 CD that I purchased about a year after I got the computer, can I use this one instead????


Other than that I have a 'back up' disc I created myself 6/7/05 just after I got the 'puter.

[howmanykells]

i thought I would try it with my back up cd

BUT

When i went to run & typed in: sfc/scannow

I got a dialogue box that says "Windows cannot find 'sfc/scannow'. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search'.

So I couldn't try it with any disc.