[leanneqld]

appreciate it..i have made the 6 disks...I'll be back tomorrow

[Advertisements]

ok...got all 6 disks done

[leanneqld]

ok...got all 6 disks done

[wannabe1]

I've got to step out for a bit this morning but shouldn't be gone too awful long.

In the meantime, try to do a system restore from command prompt (cmd.exe) by typing the following at the prompt in the command window and pressing "Enter":

%systemroot%\system32\restore\rstrui.exe

If no joy, download the attached file, extract it to a floppy, put it in the bad machine, right click on the file, select "Merge", and accept the change.

Try to open regedit

wannabe1

Attached Files

•  exefix.zip   1.22KB   359 downloads

[leanneqld]

good morning, no luck with either option

in the cmd box i typed c:\.%systemroot%\systemrestore\rstui.exe and i got the message "is not recognised as an internal or external command,operable program or batch file.

i merged the exe file and it said it was successfully entered into the registry but regedit still comes u with the autoexec.nt error message

[wannabe1]

Let's try one more thing before we use Recovery Console..

From Task Manager/New Task, type explorer.exe and press "Enter". Does Windows Explorer open?

If yes, in the left pane, navigate to C:\WINDOWS\system32 (click on System32), locate and double click on the regedt32.exe icon. This should open the Registry Editor.

If the Registry Editor opens, in the left pane, expand (click +) HKEY_LOCAL_MACHINE, then SOFTWARE, then Microsoft, then Windows NT, then CurrentVersion, and click on Winlogon.

In the right pane, scroll down to Shell. If the value (under the Data column) is not Explorer.exe, double click on Shell, type Explorer.exe in the Value Data field, and click "Ok".

Close all open windows and reboot.

Let me know how this goes.

[leanneqld]

ctr-alt-del will not bring up task manager
I then tried run/taskmgr.exe and got a message that taskmanager was being used by another program

(i have nothing running..well at least not that I know of)

[wannabe1]

(i have nothing running..well at least not that I know of)

There's the 64 dollar question!

From run, type regedt32.exe and press "Enter".

[leanneqld]

BINGO...we have success(you are good)

i have to go out for a while , will be ready for the next step when I get back

[wannabe1]

In the left pane, expand (click +) HKEY_LOCAL_MACHINE, then SOFTWARE, then Microsoft, then Windows NT, then CurrentVersion, and click on Winlogon.

In the right pane, scroll down to Shell, and click on it to select it. What is the value in the Data column?

(We'll look for the cd-rom problem in the registry in a bit, too.)

Edited by wannabe1, 26 April 2006 - 05:29 PM.

[leanneqld]

hi, there's no value..its been replaced with

Explorer.exe C:\WINDOWS\Nail.exe

[wannabe1]

Double click on Shell and type Explorer.exe in the Value Data field...click "Ok".

[leanneqld]

OK, done

[wannabe1]

Nail.exe is malware...you'll definitely have to have the malware folks help you cliean this thing up once it's running.

Let's take a look at the upper and lower filters for the cd-rom problem.

Collapse all the currently expanded keys by clicking the -

Then in the left pane, expand (click +) HKEY_LOCAL_MACHINE, then SYSTEM, then CurrentControlSet, then Control, then Class, and click on {4D36E965-E325-11CE-BFC1-08002BE10318} In the right pane, are UpperFilters and LowerFilters listed?

Edited by wannabe1, 26 April 2006 - 08:10 PM.

[leanneqld]

lower filter is not listed but upper filter is...Type=REG_MULTI_SZ and
Data= GEARAspiWDM

[wannabe1]

Right click on UpperFilter and choose "Delete"...Accept the change.

Close Regisetry Editor.

From Run, type control.exe and press "Enter" Does Control Panel open?