Unable to open root folder by double clicking

Discussion in 'Malware Help (A Specialist Will Reply)' started by tapasbni, Jul 10, 2009.

  1. tapasbni

    tapasbni Private E-2

    Hi ,

    I am not able to open any drive(c:,d:,e:,etc) folder in my system by double clicking.It is opening the window 'Open With'.
    The initial problem started when my spybot scan detected Win32.rungbu.a and I searched the fix for it.Then I found an old thread in this site and tried following the instruction.I did the below mentioned.
    1) Downloaded the MGTools.exe and run it.
    2) I received the error C:\WINDOWS\SYSTEM32\AUTOEXEC.NT. The system file is not suitable for running MS-DOS and Microsoft Window applications.
    Then I downloaded XPHomefiles.exe and extracted them in c:\Windows\System32 and run my MGTools.exe again.
    3) While trying to find the vgmtool.exe to be deleted I realized that my drive folders are not opening by double clicking.

    Here I am attaching the MGTools.log file.Kindly check and let me know the fix.

    BR,
    Tapas.
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You need to follow all of the instructions here:
    READ & RUN ME FIRST. Malware Removal Guide

    Then attach these logs:
    SAS
    MBAM
    ConboFix
    RootRepeal

    In the meantime:

    Please Disable Spybot's TeaTimer

    * Run Spybot and click Mode
    * Select Advanced Mode.
    * Then click Tools and select Resident.
    * Now in the right window pane, uncheck TeaTimer.
    * Also while this is open, in the left column now select IE Tweaks
    * and then in the right pane make sure all the Miscellaneous locks are unchecked.
    * Now quit Spybot!

    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Now Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.


    Now use windows explorer to find and delete:
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCALSETTINGS\Temp\olhrwef.exe
    C:\3j2h0tf.bat
    C:\cj1m.com
    C:\ix8bmwx.bat

    Run CCLeaner and then make sure this folder is empty:
    C:\Documents and Settings\Administrator\Local Settings\Temp\

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

    Then attach the below logs:
    * SAS, MBAM and RootRepeal logs
    * C:\ComboFix.txt
    * C:\MGlogs.zip

    Make sure you tell me how things are working now!
     
  3. tapasbni

    tapasbni Private E-2

    Hi ,

    Thanks for your help.But I am not facing the problem currently.
    Actually, I edited my registry and then found(ctrl+f) 'mountpoints2' entry and removed all the instances.
    It worked.

    BR,
    Tapas.
     
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Good to know. Let us know if you have any malware issue. :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds