windows XP wont recognize my EXE.files

Welcome to MG's Goku_13. Please follow the steps below.

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

 

Try downloading this file: http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

You will need to do this on another PC because you must extract the file that is in the ZIP file. Since you cannot run any EXE's on the problem PC, do it on another PC. After extractingxp_exe_fix.reg from the ZIP, get it onto your problem PC's desktop. Then double click on it.
This should rebuild you EXE file associations.

See this site for more info: http://www.dougknox.com/xp/file_assoc.htm

 

You need to merge it into your registry by double clicking on it. You do not want to open it in notepad (unless we need to edit it). What OS do you have (you said XP right)? Did you double click on the .reg file? Did it ask you about adding the contents into the registry?

 

Double clicking on the file is supposed to automatically do the merge. Are you sure you have the xp_exe_fix.reg file on your Desktop and not the ZIP? If you cannot get EXE files to run, then how did you bring up notepad that you said you ran. And how did you extract it to your Desktop?

 

If you click Start, Run, and type regedit and click OK, does regedit open up.

 

Does Task Manager run? Press CTRL-ALT-DEL at the same time

You may want to try running regedit and also HijackThis after boot in safe mode.

 

Can you provide a list of processes that are running. Ignore the following, they are valid
svchost.exe
csrss.exe
explorer.exe
iexplore.exe
lsass.exe
services.exe
smss.exe
taskmgr.exe
winlogon.exe

Tell me what else you see.

 

I don't see anything obviously bad in that list but try using Task Manager to end the below processes and then try running regedit.

shellmon.exe
avant.exe
waol.exe
ccevtmgr.exe
wanmpsvc.exe
spbbcsvc.exe
sndsrvc.exe
ccsetmgr.exe
ccproxy.exe
symlcsvc.exe
oodag.exe
navapsvc.exe
aoltpspd.exe
aoltsmon.exe
aolacsd.exe

It seems to me that you can run some EXE files. Taskmgr.exe, Notepad.exe, maybe more. Can you right click Start and select Explore? Does Windows Explorer come up? If that does not help, try what I said in message # 12, running from safe mode.

 

How about this? Click Start, Run and enter c:\windows\regedit then click OK

Does that work?

You may have more serious issues than not being able to run EXE files. Sounds like quite a bit of your user configuration is messed up. Can you open Control Panel? If so, can you create a new user account. If so, log into that account. How does it work?

 

You have too many problems to ID if this is even malware related.
How about Start, Run, and enter services.msc and click ok! Does that bring up your Service list. If so, we should check to see if any required Windows Service have been stopped or disabled. Especially Remote Procedure Call (RPC).

 

Check to see if any Services are stop and/or disabled. Tell me which ones. Start with the one I already mentioned ( Remote Procedure Call (RPC) )

 

In fact, what may be easier if it will run is to do the below:

Download GetService.zip from here: Getservice.zip

Extract the file to a folder where you can find it, then go to the folder and double-click on the getservices.bat file. A notepad will open up. Please paste the contents of that notepad file as an attachment too. Call it service.txt.

 

Those are all OK! But was Remote Procedure Call (RPC) actually started?

 

I did not ask you to open getservices.bat, I wanted you to run it! But since you cannot open Windows Explorer, that is a little more difficult. You will have to know where you put the files(probably best if you put them in c:\ ) Then you can try Start, Run and enter C:\getservices.bat and click OK.

I'm not sure if this is going to show us anything. You may be heading towards a reinstall.

But perhaps you can first try running sfc (not sure if you can even run it)
Or you can boot from your original WinXP CD and try a Repair.

 

I would suggest posting this in the Software Forum. This is more of a Windows configuration problem right now. It could very well have been cause by malware but I think right now some of the guys over in the software forum may be able to help you further on this. You really need to be able to merge the patch into your registry but without the ability to run anything I have asked, it is pretty difficult to do that.

I'm going to move this thread to the Software Forum and let's see what happens over there.