Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Virus Infection - Programmes Disabled


  • Please log in to reply

#46
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,028 posts
  • MVP
Double-click on the My Computer icon.
    Select the Tools menu and click Folder Options.
    After the new window appears select the View tab.
    Put a checkmark in the checkbox labeled Display the contents of system folders.
    Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
    Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
    Remove the checkmark from the checkbox labeled Hide protected operating system files.
    Press the Apply button and then the OK button
 
Right click on the Start button and select Explore then navigate to C:\Windows\system32\Drivers.
 
Find http.sys and right click on it and Rename to http.old
 
Does that work?

  • 0

Advertisements


#47
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

nope

same message as before


  • 0

#48
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,028 posts
  • MVP

Were you able to rename http.sys to http.old?

 

Did XP replace the http.sys?

 

does

 

sc start http

 

give an error?


  • 0

#49
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts
Yes I was able to rename
Sc http old brings up a list under 4 headings:
Description
Usage
Bitrary name
Example

Finally it says :would you like to see help for the query and query s commands

Ignore the above
Sc start http brings up an error message

Edited by elielieli, 25 November 2015 - 03:25 PM.

  • 0

#50
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,028 posts
  • MVP
What error?
  • 0

#51
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

sc is not recognised as an internal or external command , operable programme or batch file


  • 0

#52
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,028 posts
  • MVP
Does
\ Windows\ sc.exe

Exist?
  • 0

#53
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

i am not able to open c drive to check : insufficient system resources exist to complete the requested command


  • 0

#54
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,028 posts
  • MVP

Too many weird things going on.  Suggest you run a memory check:

 

http://pcsupport.abo.../memorytest.htm

 

You will need a USB drive or a blank CD.  Create it on a working PC.


  • 0

#55
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

Downloaded , but unable to open file.


  • 0

Advertisements


#56
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,028 posts
  • MVP

You don't open it.  You have to burn it to a CD or put it on a USB drive then boot from it.  Read the instructions on:

 

http://pcsupport.abo...r/memtest86.htm

 

Start with:

How To Use MemTest86

Then you may need to read the tutorials about how to burn the CD.  You need a program like free iso burner to do it.  Alternatively you can make a Hiren's Boot CD

 

 
This a BIG! Zip File so save it.  Then right click on it and Extract all.  Put a blank CD in the drive and then double click on BurnToCD.cmd.  When it finishes you boot off it and run the memtest.  
 
You can also have Hiren's boot into MiniXP.  See if that works normally.  

  • 0

#57
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

okay , after attempting the usb option and freeisoburner with no success , I've download hiren , double clicked burntocd.cmd , only to receive the message : there is no application set to open the document. 


Edited by elielieli, 03 December 2015 - 04:14 PM.

  • 0

#58
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,028 posts
  • MVP

You can use Free Iso Burner instead:

 

http://www.freeisoburner.com/

 

Download, run it, click on Open and point it at the Hiren's.BootCD.15.2.iso file and Burn

 

If that doesn't work use another computer or  get a friend to burn it for you.

 

Also as an alternative you can try the following:

 

Copy the text between the inses of stars:

 

***************************************************

[Version]
Signature="$Chicago$"
Provider=Symantec

[DefaultInstall]
AddReg=UnhookRegKey

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"
HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe ""%1"""
HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0x00000020,0

 

**************************************

Open Notepad and Edit, paste.  File, Save As, to your desktop, "unhookexe.inf"

hit Enter (Make sure you use the quotes)

 

Now ringth click on the file on your unhookexe.inf desktop  and install.  See if that helps.


  • 0

#59
elielieli

elielieli

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 174 posts

Im running Memtest

How many times should I let it pass?

Its been running for well over an hour now , 

with three passes complete.


Edited by elielieli, 04 December 2015 - 03:58 PM.

  • 0

#60
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,028 posts
  • MVP

6 passes is usually what people recommend.  Sounds like it's not going to be the memory so if it passed 6 passes then let's check the disk again.  

 

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:
2. Click Properties, and then click Tools.
3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,
4. Check both boxes and then click Start.
You will receive the following message:
The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?
Click Yes to schedule the disk check, but don't restart yet.
 
Start, Run, eventvwr.msc, OK to bring up the Event Viewer.  Right click on System and Clear All Events, No (we don't want to save the old log), OK. Repeat for Application. 
 
Reboot. 
 
The disk check will run and will probably take an hour or more to finish.
 
Start, Run, sfc /scannow, OK
 
SPACE after sfc. This will check your critical system files. If it asks for a CD and you don't have one or it doesn't like your CD just tell it to SKIP.  This often doesn't work very well in XP so if it appears to be asking for the CD each time and you don't have it then just do Ctrl + c and stop it.
 
Start, Run, sigverif, OK
 
Press Start. This will check your drivers. If you just get a few when it finishes tell me what they are. If you get a lot just look for those with newish dates (since about the time the problem started.)
 
 
1. Please download the Event Viewer Tool by Vino Rosso
and save it to your Desktop:
2. Double-click VEW.exe
3. Under 'Select log to query', select:
 
* System
4. Under 'Select type to list', select:
* Error
* Warning
 
 
Then use the 'Number of events' as follows:
 
 
1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.
 
 
Please post the Output log in your next reply then repeat but select Application.

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP