Major problems with windows, possible virus?

Chris-Clark

Everything seemed just fine this morning. Then the computer froze for no particular reason after I added a powerpoint presentation from a data stick. I was forced to do a hard re-boot. When the computer restarted the only thing that was unusual was that "ad-Watch" which I installed in addition to Ad-Aware SE started up and found 50 apparent alterations to the registry. All were automatically blocked. Anyway I was in hurry and was going to look into it further but had a lecture.

After the lecture I couldn't open Internet Explorer (double clicked to no effect) so restarted the computer.

Main problem now:
All shortcuts on Desktop are simple white file boxes with ".lnk" extension. Windows no longer recognizes this file extension. None of the typical start up programs are functioning (box on lower right next to clock completely empty). All files in "my documents" are intact (thank god) but cannot operate the CD drive to copy them to CD.

Has anyone seen anything like this or does anyone have any ideas about what may have happened?

I'm fairly desparate here. If you need more information please just ask.

Thanks,

Chris

Chris-Clark

To be honest I am not sure that I am posting this in the right place but this is the story so far:

Yesterday ran Ad-Aware, Microsoft Antispyware and Hijack this, no threats found.

Everything seemed just fine this morning. Then the computer froze for no particular reason after I added a powerpoint presentation from a data stick. I was forced to do a hard re-boot. When the computer restarted the only thing that was unusual was that "ad-Watch" which I installed in addition to Ad-Aware SE started up and found 50 apparent alterations to the registry. All were automatically blocked. Anyway I was in hurry and was going to look into it further but had a lecture.

After the lecture I couldn't open Internet Explorer (double clicked to no effect) so restarted the computer.

Main problem now:
All shortcuts on Desktop are simple white file boxes with ".lnk" extension. Windows no longer recognizes this file extension. None of the typical start up programs are functioning (box on lower right next to clock completely empty). Cannot get and exe files to run including Hijack this.

All files in "my documents" are intact (thank god) but cannot operate the CD drive to copy them to CD.

Has anyone seen anything like this or does anyone have any ideas about what may have happened as I have absolutely no idea. I have not opened any suspicious e-mail in teh last little while and I have Sophos antivirus running? does this looklike a virus attack to anyone out there?

I'm fairly desparate here. If you need more information please just ask.

Thanks,

Chris

profdlp

Read this article and follow its advice. Pay special attention to the "Get the tools..." section. Even after you get this problem behind you you'll want to have them in your arsenal.

Run a full virus scan from your emergency disks, or from the cdrom if you A-V program came with one.

What happens when you boot in Safe Mode?

Good Luck!

Linc

threads merged. please only post a problem once.

Chris-Clark

Thanks fo rthe advice. the problem is that while I have all of those tools on the computer I cannot get Windows to recognize either a lnk file or an exe file. Consequently I cannot start any of the programs. The only way to open any programs that I have discovered is that if you click on a doc file you can open word for example although it is not possibel to open word directly.

The only other program that appears to be working fully is Microsoft Outlook.

I have tried again to use to the CD drive but it is not possible to get it to operate.

Restarting in safe mode results in exactly the same situation I am unable to get windows to start any of the programs.

The computer is also freezing repeatedly, task manager still works but I have to do a hard re-boot to get things started. there are 28 processes running right now and if it would help I will try to copy them to you.

Anything else that I could try?

Thanks

Chris-Clark

Ok, I have spent a large proportion of today searching for help using Google etc. The most fascinating thing that I found was that I am not the only one to have this problem. What is more it appaesr based on one quote that I saw that the problem can be related to programs designed to remove spy ware.

Quote from another forum:

As to cause...unknown. I've had people tell me they've just run anti-spyware software and had it happen and many other possible causes. So, my best guess is that the .EXE file problem is simply a side effect of some malware removal program's activities (with no particular software in mind as I write that). It would actually be counterproductive for a virus/worm to stop .EXE files from running as they often depend on that same type of file to spread


Anyway, the problem is that windows no longer recognizes the file extensions:
exe
lnk
reg

There are a number of repair patches avaialble on the internet but all are reg files that I cannot open.

Has anyone got a hint? I have no idea how to deal with this and I am uncofortable trying to edit the registry without advice from someone with a little more experience.

Thanks in advance.

Chris

Buckeye_Sam

Give this a try.

Click Start, Run and type Command
Type the following and then press Enter after typing each one:

cd\windows
regedit

Navigate to and select the following key:

[HKEY_CLASSES_ROOT\exefile\shell\open\command]

Double-click the (Default) value in the right pane.
Delete the current value data, and then type: "%1" %* [with quotes]
(ie., quote-percent-one-quote-space-percent-asterisk.)

Navigate to:

[HKEY_CLASSES_ROOT\.exe]

In the right-pane, set the (default) value to exefile

Exit the Registry Editor.


If this gets you back in business the very first thing I would do is download and run Stinger. You may find you have the Sircam virus.
http://download.nai.com/products/mcafee-avert/stinger.exe