please help with annoying problem!!!

[inthefleshlive]

hi to anyone who can help me.
every time i try to run regedit, msconfig or even other software i get the error message "windows cannot find (file) you may have typed the name incorrectly blah blah blah" but yet the programs still run, i sometimes also get the same when trying to install software, and when i search for the files in windows/temp they are there but setup will not continue.
Please anyone any ideas on whats causing this.
thanks in advance...

O/S: WINDOWS ME
CPU: AMD 2100XP+
M/B: JETWAY V266b
512Mb DDR RAM
HDD: 60Gb

[Tweaker]

Hey inthefleshlive :cool:

Just a hunch, have you ran a virus check?

Also have you tried a system restore point?

To reload the files, do Start > Run > SFC and follow the prompts

[TonyKlein]

Your file association for exefiles is probably mixed up.

Download Exefix08.com from this site: http://home.earthlink.net/~rmbox/Reticulated/Only_IE.html

Doubleclick it, and it will restore the default Windows file associations for exefiles.

Subsequently, please do the following:

Go to http://www.tomcoyote.org/hjt/, and download 'Hijack This!'.

Unzip it, launch Hijack This, then press "Config" > "Miscellaneous Tools", and press "Generate Startuplist Log"

This will generate a text file that will list all running processes, all applications that are loaded automatically when you start Windows, and more.

Go to Edit > select all, copy it and post its contents here.

Cheers,

[inthefleshlive]

thanks guys,
I have tried a virus scan & thats clean
Tried system restore - no effect
tried Exefix08.com
& these are the results from hijack:
StartupList report, 03/06/2003, 09:46:04
StartupList version: 1.52
Started from : C:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRAM FILES\COMMON FILES\ADAPTEC SHARED\CREATECD\CREATECD50.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\ELABORATE BYTES\CLONECD\CLONECDTRAY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\BROWSER MOUSE\BROWSER MOUSE\1.0\LWBWHEEL.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE
C:\WINDOWS\WUAUCLT.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SoundMan = soundman.exe
CreateCD50 = C:\PROGRA~1\COMMON~1\ADAPTE~1\CREATECD\CREATE~1.EX E -r
NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
CloneCDTray = "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"
QuickTime Task = "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
AVG_CC = C:\PROGRAM FILES\GRISOFT\AVG6\avgcc32.exe /startup
LWBMOUSE = C:\Program Files\Browser Mouse\Browser Mouse\1.0\lwbwheel.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\AutoCADScriptFile\shell\open\com mand

(Default) = C:\WINDOWS\NOTEPAD.EXE "%1"

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=Explorer.exe
SCRNSAVE.EXE=
drivers=mmsystem.dll power.drv

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 2/6/2003, 20:1:2)

[rename]
NUL=C:\WINDOWS\TEMP\$AVGUPD$.487
[Rename]
NUL=C:\PROGRA~1\BARGAI~1\BIN\APUC.DLL
NUL=C:\WINDOWS\TEMP\A~NSISU_.EXE

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND;C:\PROGRA~1\COM MON~1\AUTODE~1;"C:\PROGRAM FILES\COMMON FILES\GIS\TOOLS";C:\3dsmax5\backburner2\;"C:\Program Files\Common Files\Autodesk Shared\"

--------------------------------------------------

C:\WINDOWS\WINSTART.BAT listing:

C:\WINDOWS\tmpcpyis.bat

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\WINDOWS\MSIEBHO.DLL - {A096A159-4E58-45A9-8EE6-B11466851181}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
PCHealth Scheduler for Data Collection.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[AcPreview Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\ACPREV~1.OCX
CODEBASE = file://C:\Program Files\AutoCAD 2002\AcPreview.ocx

[AcDcToday Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\ACDCTO~1.OCX
CODEBASE = file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx

[NOXLATE-BANR]
InProcServer32 = C:\WINDOWS\DOWNLO~1\INSTBANR.OCX
CODEBASE = file://C:\Program Files\AutoCAD 2002\InstBanr.ocx

[InstaFred]
InProcServer32 = C:\WINDOWS\DOWNLO~1\INSTFRED.OCX
CODEBASE = file://C:\Program Files\AutoCAD 2002\InstFred.ocx

[Seagate DiscWizard English]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\NPDSCWIZ_EN.DLL
CODEBASE = http://www.seagate.com/support/disc/asp/dwiz/en/bin/npdscwiz.cab

[GSDACtl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\GSDA.DLL
CODEBASE = http://launch.gamespyarcade.com/software/launch/alaunch.cab

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37707.5946759259

[DivX Player]
CODEBASE = http://download.divx.com/player/DivXPlayerInstaller.exe

[Triplet Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TRIPLET.OCX
CODEBASE = http://mirror.worldwinner.com/games/v47/triplet/triplet.cab

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/drakken/us/win/QuickTimeInstaller.exe

[OPInstall Control]
InProcServer32 = C:\WINDOWS\SYSTEM\OPINST~1.DLL
CODEBASE = http://a14.g.akamai.net/f/14/7141/144000s/download.opistat.com/opistat/activex/opinstall_en_4.1.0.18.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL
AUHook: C:\WINDOWS\SYSTEM\AUHOOK.DLL

--------------------------------------------------
End of report, 6,837 bytes
Report generated in 0.029 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only


hope you guys can work it out from this.

[TonyKlein]

Your log looks pretty clean. There's just one browser plugin I'd like you to disable:

Download BHODemon (http://www.spywareinfo.com/downloads/bhod/), launch the program, and locate MSIEBHO.DLL

Highlight it, click 'details', and in "Select Status" click disabled

Click OK, and close the program

Now restart your computer.

I was wondering if you're still getting that error message, as Hijack This would have shown any modifications to your default Open/Command value for exefiles.

Anyway, after running Exefix, those would be reset to the Windows defaults and should be as good as new...

What happens now if you go to Start > Run, and type Regedit?

Also try Start > Run > Msconfig.

If you still get that error message, now browse to C:\Windows\Regdit.exe and doubleclick it. no error?
Now try doubleclicking C:\Windows\System\Msconfig.exe. again no error message now?

If you don't get that error when actually doubleclicking the file, and the application launches normally, there may be Registry corruption in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\App Paths.

But we'll look at that if and when we really need to.

[inthefleshlive]

Thanks tony
if i try start > run > msconfig or regedit i still get the error message but like you said I don't get them if i double click them.

[TonyKlein]

Well, in that case you'd need to check whether in Regedit, in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\App Paths, there are subkeys (subfolders) for "Regedit" and "Msconfig", and whether the defaults for those applications point to their correct location.


If either of those is not the case, you'll need to correct that.

Here's an article that ought to help: http://personal-computer-tutor.com/abc2/v9/vic9.htm

If you don't feel like going through all of this, you could of course simple create Desktop shortcuts to these applications, and execute them that way.

Cheers,

[inthefleshlive]

ok, I've followed instructions from link you gave me & set up new keys for regedit & msconig, restarted pc but still getting same error message, this message also occurs when running some applications from the desktop shortcuts

[TonyKlein]

Even if you create a NEW shortcut to C:\Windows\Regedit.exe??

If it were only the shortcuts we could try restoring the correct file associations for *.lnk files:

Download the attached Lnk98.txt, save the file anywhere you like as (rename to) Lnk98.reg (save as 'all file types') .

Doubleclick Lnk98.reg, and answer 'yes' when prompted to add its contents to the Registry.

Reboot when you're done.

However, how long has this been going on? Longer than a day of 5?

[TonyKlein]

You'll have to wait for one of the mods to make my attachment available... :rolleyes:

Check back in a little later, and it should be ready for download.

[inthefleshlive]

this has been going on for months, i have even tried re-installing windows before but nothing changed. if I remember rightly it all started when I upgraded my motherboard but I took the motherboard from one of my other pc's which ran windows me fine so i ruled that out as been the problem

[TonyKlein]

Originally posted by inthefleshlive
this has been going on for months, i have even tried re-installing windows

Hmm, a tough one, eh... :rolleyes:

By re-installing Windows I take it you mean: installing it on top of itself, and not formatting and doing a fresh install?

[inthefleshlive]

no i've done a clean boot, formatting hdd then re-installing

[TonyKlein]

And did the system start behaving like that right after the fresh install of Windows?

Or did it start after you installed some software?

[inthefleshlive]

it started during installing windows, it said setup could not find some file, so i reformatted hdd & installed again & had problem ever since