Greetings,

I am in dire need for help for my laptop. I was trying out the option of changing my pen drive's icon through autorun.ini. I believe I typed the icon incorrectly, but I didn't know at the time. After I saved the changes done in the autorun file (It is in the pen drive), my explorer.exe just crashes. I thought it was normal until it started to crash repeatedly.Scans and restarts won't do any good. The problem even persisted in safe mode. I have no idea how to deal with it anymore. I can't go formatting or re-installing due to the massive data within.

Thanks to that, I am unable to access almost anything in my laptop. Thank goodness I still have my low-performance desktop to request help XD

Any form of help is greatly appreciated.

Here's the log I managed to get from HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:38:46, on 2008/10/27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesGrisoftAVG Anti-Spyware 7.5guard.exe
C:Program FilesIVT CorporationBlueSoleilBTNtService.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesDiskeeper CorporationDiskeeperDkService.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesHewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe
C:Program FilesGrisoftAVG Anti-Spyware 7.5avgas.exe
C:Program FilesEsetnod32krn.exe
C:Program FilesUnlockerUnlockerAssistant.exe
C:Program FilesCyberLinkShared filesRichVideo.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:WINDOWSsystem32igfxpers.exe
C:Program FilesEsetnod32kui.exe
C:Program FilesDAEMON Toolsdaemon.exe
C:WINDOWSsystem32igfxsrvc.exe
C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesHewlett-PackardSharedhpqwmiex.exe
C:Program FilesVidalia BundlePrivoxyprivoxy.exe
C:WINDOWSsystem32taskmgr.exe
C:WINDOWSsystem32SNDVOL32.EXE
C:Program FilesEsetnod32.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
C:WINDOWSexplorer.exe
C:WINDOWSsystem32imapi.exe

O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:PROGRA~1FlashGetfgiebar.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:PROGRA~1MEGAUP~1MEGAUP~1.DLL
O4 - HKLM..Run: [QlbCtrl] %ProgramFiles%Hewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe /Start
O4 - HKLM..Run: [!AVG Anti-Spyware] "C:Program FilesGrisoftAVG Anti-Spyware 7.5avgas.exe" /minimized
O4 - HKLM..Run: [UnlockerAssistant] "C:Program FilesUnlockerUnlockerAssistant.exe"
O4 - HKCU..Run: [PHIME2002ASync] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 - HKCU..Run: [PHIME2002A] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName
O4 - HKCU..Run: [MSPY2002] C:WINDOWSsystem32IMEPINTLGNTImScInst.exe /SYNC
O4 - HKCU..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 - HKCU..Run: [nod32kui] "C:Program FilesEsetnod32kui.exe" /WAITSERVICE
O4 - HKCU..Run: [DAEMON Tools] "C:Program FilesDAEMON Toolsdaemon.exe" -lang 1033
O4 - HKCU..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 - HKCU..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKCU..Run: [mount.exe] C:Program FilesGiPo@UtilitiesFileUtilities.3mount.exe /z
O4 - Startup: Webshots.lnk = C:Program FilesWebshotsLauncher.exe
O4 - Global Startup: Privoxy.lnk = C:Program FilesVidalia BundlePrivoxyprivoxy.exe
O8 - Extra context menu item: &Download All with FlashGet - C:Program FilesFlashGetjc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:Program FilesFlashGetjc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_03binssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_03binssv.dll
O9 - Extra button: ニッムクタラ5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:Program FilesThunder NetworkThunderThunder.exe
O9 - Extra 'Tools' menuitem: ニッムクタラ5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:Program FilesThunder NetworkThunderThunder.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:Program FilesFlashGetFlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:Program FilesFlashGetFlashGet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O15 - ESC Trusted Zone: [url]http://*.update.microsoft.com[/url]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [url]http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[/url]
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:Program FilesHewlett-PackardHP Quick Launch ButtonsAddFiltr.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:Program FilesGrisoftAVG Anti-Spyware 7.5guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:Program FilesIVT CorporationBlueSoleilBTNtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:Program FilesDiskeeper CorporationDiskeeperDkService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:Program FilesHewlett-PackardSharedhpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:Program FilesEsetnod32krn.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared filesRichVideo.exe
O23 - Service: Virtual PDF Printer (Service1) - Unknown owner - C:Program FilesVirtual PDF PrinterVirtualPrinting.exe
O23 - Service: ServiceLayer - Nokia. - C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:Program FilesAlcohol SoftAlcohol 120StarWindStarWindService.exe

--
End of file - 6863 bytes

Recommended Answers

All 7 Replies

insert your OS disk and then boot from it -- perform a repair and then reboot from the hard disk

Thanks for the reply & help. Just to be safe, if I perform a repair will my data be lost?

Regardless, I'll give it a try as soon as I can. Thanks again.

Sorry,cant find the edit button.Anyway,I tried repairing,but the problem still persists :(

System restore may be your best friend.

It would have been my great friend indeed if I had it on...but to save space, I had turned it off. Now suffering the outcome -_-"

On a side note, I've tried almost everything including repair (that alone took me hours) but to no effect. A desperate attempt made me change explorer.exe to something else. It stopped the crashing, but it caused my virtual memory to go down the drain and another explorer.exe was created. Now I have no idea how to deal with it anymore :(

Remove the hard drive from the pc and connect it to another pc. Retrieve the files you need, then put the hard drive back and do a format/install.

I see. Guess a format couldn't be avoided. I was hoping such measures can be avoided, but thanks for the tip. It'll be hard for me (since it's laptop and I have no knowledge on removing laptop hardwares) but I think I can pull something off. Thanks again~

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.