•
•
•
•
What is DaniWeb IT Discussion Community?
You're currently browsing the Windows NT / 2000 / XP / 2003 section within the Tech Talk category of DaniWeb, a massive community of 402,787 software developers, web developers, Internet marketers, and tech gurus who are all enthusiastic about making contacts, networking, and learning from each other. In fact, there are 2,769 IT professionals currently interacting right now! Registration is free, only takes a minute and lets you enjoy all of the interactive features of the site.
Please support our Windows NT / 2000 / XP / 2003 advertiser: Programming Forums
Views: 811 | Replies: 16 | Solved
 |
•
•
Join Date: Aug 2005
Location: philippines
Posts: 47
Reputation: 
Rep Power: 4
Solved Threads: 0
Light Poster
Hi. My PC got infected with trojans and other malware. I install Kaspersky AV and it disinfected all (maybe) of them. When I open My Computer to explore any of 2 local drives, a box appears asking me to choose which program I should choose to open the file. Why is it so? C: and D: drives are not files?! I don't know how did that happen.
Help please.
Help please.
•
•
Join Date: May 2005
Posts: 2,564
Reputation:
Rep Power: 9
Solved Threads: 132
Hi. Run this script... I think it will solve your problem...
==Please copy the text in the box to a notepad [format/wordwrap unchecked] and save as fixkey.reg, as type "all files", to your desktop; dclick it to run... agree; if it opens in notepad instead rclick the icon [file], choose Open with, Registry editor....
==Please copy the text in the box to a notepad [format/wordwrap unchecked] and save as fixkey.reg, as type "all files", to your desktop; dclick it to run... agree; if it opens in notepad instead rclick the icon [file], choose Open with, Registry editor....
Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\Drive\shell] @="none"
Last edited by gerbil : Jul 23rd, 2008 at 9:33 am.
Deep, deep in the woods, but walking about.
•
•
Join Date: Aug 2005
Location: philippines
Posts: 47
Reputation:
Rep Power: 4
Solved Threads: 0
Light Poster
Thanks for a quick reply.
I did what you told me. fixkey.reg as type "all files" saved on desktop.
Dclicking it will ask...
When I click yes, it says...
What could be the problem?
I did what you told me. fixkey.reg as type "all files" saved on desktop.
Dclicking it will ask...
•
•
•
•
Are you sure you want to add the information in C:\...\fixkey.reg to the registry?
•
•
•
•
Cannot import C:\...\fixkey.reg. The specified file is not a registry script. You can only import binary registry files from within the registry editor."
Last edited by spidey : Jul 23rd, 2008 at 1:28 pm.
•
•
Join Date: May 2005
Posts: 2,564
Reputation:
Rep Power: 9
Solved Threads: 132
Hi, spidey, make sure when you save it that there is a blank line below the @="none" line in your notepad .reg file, otherwise it will not be accepted.
Deep, deep in the woods, but walking about.
•
•
Join Date: Aug 2005
Location: philippines
Posts: 47
Reputation:
Rep Power: 4
Solved Threads: 0
Light Poster
Now it's accepted. It says it has been successfully entered into the registry.
But when I dclick C: or D:, it still asks for which program I should choose to open the drive.
But when I dclick C: or D:, it still asks for which program I should choose to open the drive.
•
•
Join Date: May 2005
Posts: 2,564
Reputation:
Rep Power: 9
Solved Threads: 132
Spidey, go Tools, Folder Options, View, choose to Show hidden files n folders. Check if in the root of both C: and D: you have an autorun.inf file. If so, delete them. When you click on a drive those files run... who knows what they are trying to initiate. If there they most likely were emplaced by malware. Run a scan, eg Spybot SD.
Last edited by gerbil : Jul 24th, 2008 at 2:13 am.
Deep, deep in the woods, but walking about.
•
•
Join Date: Aug 2007
Location: Nairobi
Posts: 11
Reputation:
Rep Power: 2
Solved Threads: 1
Newbie Poster
i don't know if this will solve your problem but considering it worked for me it just might. When the "open with" dialogue box comes up go to Browse. then go to your route folder i.e where you've installed XP either C: or D:. go to the windows folder and select EXPLORER. then make sure before you click OK you select "always use this program to select this kind of file". click ok and exit. hopefully it will work.
•
•
Join Date: Aug 2005
Location: philippines
Posts: 47
Reputation:
Rep Power: 4
Solved Threads: 0
Light Poster
@gerbil
I scanned my PC with Spybot S&D and it works now, but only for the main drive (C: ) and not in the partition D:.
It detected a trojan which I think hides the autorun file at C: that makes it unDclickable. I don't know why it didn't work on D:.
How about transferring all files in D: to C:, then reformat D: and rescan C: (since it seems like it only removes malware from the drive where it is installed)? Well transferring files and reformatting takes time so I hope there's a better and easier way.
@c-tech
Thanks for the help but even if it works, the trojan and the hidden nasty autorun file would still there.
I scanned my PC with Spybot S&D and it works now, but only for the main drive (C: ) and not in the partition D:.
It detected a trojan which I think hides the autorun file at C: that makes it unDclickable. I don't know why it didn't work on D:.
How about transferring all files in D: to C:, then reformat D: and rescan C: (since it seems like it only removes malware from the drive where it is installed)? Well transferring files and reformatting takes time so I hope there's a better and easier way.
@c-tech
Thanks for the help but even if it works, the trojan and the hidden nasty autorun file would still there.
Last edited by spidey : Jul 25th, 2008 at 7:27 am.
•
•
Join Date: May 2005
Posts: 2,564
Reputation:
Rep Power: 9
Solved Threads: 132
Hello spidey, well that is a start. What trojan did Spybot find?
Run these two scans in order given - the first is a scan for certain specified malwares, the second is also but will give me a look at some information, then make the hijackthis log.
==Please download Malwarebytes' Anti-Malware
from: http://www.majorgeeks.com/Malwarebyt...are_d5756.html
or: http://www.besttechie.net/tools/mbam-setup.exe
=Dclick that file to install the application and ensure that it is set to update and start, else start it via the icon.
Select "Perform Full Scan", then click Scan; the application will guide you through the remaining steps.
Make sure that everything is checked, and click Remove Selected.
Post the Notepad log [it is also saved under Logs tab in MBAM].
==Download this file to your desktop: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- to run it dclick combofix.exe and follow the prompts to start it. When finished, it will produce a log, C:\Combofix.txt - post that log in your next reply.
A word of caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs reboot to restore the desktop.
==download hijackthis: http://www.majorgeeks.com/download5554.html
-copy it to a new FOLDER placed either alongside your program files or on your desktop and then... rename hijackthis.exe to imabunny.exe
-in that folder start HijackThis by dclicking the .exe; now close ALL other applications and any open windows including the explorer window containing HijackThis.
-click the Scan and Save a Logfile button. Post the log here.
Run these two scans in order given - the first is a scan for certain specified malwares, the second is also but will give me a look at some information, then make the hijackthis log.
==Please download Malwarebytes' Anti-Malware
from: http://www.majorgeeks.com/Malwarebyt...are_d5756.html
or: http://www.besttechie.net/tools/mbam-setup.exe
=Dclick that file to install the application and ensure that it is set to update and start, else start it via the icon.
Select "Perform Full Scan", then click Scan; the application will guide you through the remaining steps.
Make sure that everything is checked, and click Remove Selected.
Post the Notepad log [it is also saved under Logs tab in MBAM].
==Download this file to your desktop: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- to run it dclick combofix.exe and follow the prompts to start it. When finished, it will produce a log, C:\Combofix.txt - post that log in your next reply.
A word of caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs reboot to restore the desktop.
==download hijackthis: http://www.majorgeeks.com/download5554.html
-copy it to a new FOLDER placed either alongside your program files or on your desktop and then... rename hijackthis.exe to imabunny.exe
-in that folder start HijackThis by dclicking the .exe; now close ALL other applications and any open windows including the explorer window containing HijackThis.
-click the Scan and Save a Logfile button. Post the log here.
Deep, deep in the woods, but walking about.
•
•
Join Date: May 2005
Posts: 2,564
Reputation:
Rep Power: 9
Solved Threads: 132
Spidey, I just saw your Kaspersky log in the other forum... do this before you run the other tools above; they will also make new restore points.
==You must clear all your system restore points because some have been infected.... you do this by toggling System Restore Off then On again. So go control panel > system > system restore tab, check Turn off sys res on all drives, Apply and OK. Do it all again but uncheck that box, Apply and OK.
[[a quick way in is Start > run, paste: control sysdm.cpl,,4 -and OK]]
Now make a fresh, clean restore point: Start > programs > accessories > system tools > system restore and create a restore point now!!
[[the quick way to System Restore is Start > run, paste: %systemroot%\system32\restore\rstrui.exe -and OK]]
We will have to do this again when your sys is clean.
==You must clear all your system restore points because some have been infected.... you do this by toggling System Restore Off then On again. So go control panel > system > system restore tab, check Turn off sys res on all drives, Apply and OK. Do it all again but uncheck that box, Apply and OK.
[[a quick way in is Start > run, paste: control sysdm.cpl,,4 -and OK]]
Now make a fresh, clean restore point: Start > programs > accessories > system tools > system restore and create a restore point now!!
[[the quick way to System Restore is Start > run, paste: %systemroot%\system32\restore\rstrui.exe -and OK]]
We will have to do this again when your sys is clean.
Last edited by gerbil : Jul 25th, 2008 at 9:30 am.
Deep, deep in the woods, but walking about.
|
•
•
•
•
•
•
•
•
DaniWeb Windows NT / 2000 / XP / 2003 Marketplace
•
•
•
•
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Linear Mode
- Previous Thread: Windows Freezes after Welcome Screen
- Next Thread: Difficulty with Copying/Pasting Word and other documents
