Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Wingdings Virus on Server 2008 wih Fix

  • Please log in to reply
1 reply to this topic

#1 ViperDan


  • Members
  • 8 posts
  • Gender:Male
  • Location:Tucson, Az
  • Local time:12:52 AM

Posted 16 April 2011 - 02:18 PM

Okay Guys, Here it is:

I went to a clients house and after updating their Comodo Antivirus (Puke), they rebooted after system and AV updates. The system rebooted with the Wingding Font that shut this person down for about a week...Yikes! After searching and searching on the internet, I found absolutely nothing except Here try this and try that. Since I Still have my Technet internal account I found a fix that works for Windows XP. This Fix worked for Windows Server 2008 Enterprise which my client was using.

After Dabbling with it and trying the fixes from the internet, I tried this and Vola! It worked and client is happy. So If you get this here is what I recommend doing:

1. Copy the following text to Notepad

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"Roman (All res)"="ROMAN.FON"
"Script (All res)"="SCRIPT.FON"
"Modern (All res)"="MODERN.FON"
"Small Fonts (VGA res)"="SMALLE.FON"
"Arial (TrueType)"="ARIAL.TTF"
"Arial Bold (TrueType)"="ARIALBD.TTF"
"Arial Bold Italic (TrueType)"="ARIALBI.TTF"
"Arial Italic (TrueType)"="ARIALI.TTF"
"Courier New (TrueType)"="COUR.TTF"
"Courier New Bold (TrueType)"="COURBD.TTF"
"Courier New Bold Italic (TrueType)"="COURBI.TTF"
"Courier New Italic (TrueType)"="COURI.TTF"
"Lucida Console (TrueType)"="LUCON.TTF"
"Lucida Sans Unicode (TrueType)"="L_10646.TTF"
"Times New Roman (TrueType)"="TIMES.TTF"
"Times New Roman Bold (TrueType)"="TIMESBD.TTF"
"Times New Roman Bold Italic (TrueType)"="TIMESBI.TTF"
"Times New Roman Italic (TrueType)"="TIMESI.TTF"
"WingDings (TrueType)"="WINGDING.TTF"
"Symbol (TrueType)"="SYMBOL.TTF"
"Symbol 8,10,12,14,18,24 (VGA res)"="SYMBOLE.FON"
"Verdana (TrueType)"="verdana.TTF"
"Verdana Bold (TrueType)"="verdanab.TTF"
"Verdana Italic (TrueType)"="verdanai.TTF"
"Verdana Bold Italic (TrueType)"="verdanaz.TTF"
"Arial Black (TrueType)"="ariblk.TTF"
"Comic Sans MS (TrueType)"="comic.TTF"
"Comic Sans MS Bold (TrueType)"="comicbd.TTF"
"Impact (TrueType)"="impact.TTF"
"Georgia (TrueType)"="georgia.TTF"
"Georgia Bold (TrueType)"="georgiab.TTF"
"Georgia Bold Italic (TrueType)"="georgiaz.TTF"
"Georgia Italic (TrueType)"="georgiai.TTF"
"Franklin Gothic Medium (TrueType)"="Framd.TTF"
"Franklin Gothic Medium Italic (TrueType)"="Framdit.TTF"
"Palatino Linotype (TrueType)"="pala.TTF"
"Palatino Linotype Bold (TrueType)"="palab.TTF"
"Palatino Linotype Bold Italic (TrueType)"="palabi.TTF"
"Palatino Linotype Italic (TrueType)"="palai.TTF"
"Tahoma Bold (TrueType)"="tahomabd.TTF"
"Trebuchet MS (TrueType)"="trebuc.TTF"
"Trebuchet MS Bold (TrueType)"="trebucbd.TTF"
"Trebuchet MS Bold Italic (TrueType)"="trebucbi.TTF"
"Trebuchet MS Italic (TrueType)"="trebucit.TTF"
"Webdings (TrueType)"="webdings.TTF"
"Estrangelo Edessa (TrueType)"="estre.TTF"
"Gautami (TrueType)"="gautami.TTF"
"Latha (TrueType)"="latha.TTF"
"Mangal (TrueType)"="mangal.TTF"
"Mv Boli (TrueType)"="mvboli.TTF"
"Raavi (TrueType)"="raavi.TTF"
"Shruti (TrueType)"="shruti.TTF"
"Tunga (TrueType)"="tunga.TTF"
"Sylfaen (TrueType)"="sylfaen.TTF"
"WST_Czec (All res)"="wst_czec.FON"
"WST_Engl (All res)"="wst_engl.FON"
"WST_Fren (All res)"="wst_fren.FON"
"WST_Germ (All res)"="wst_germ.FON"
"WST_Ital (All res)"="wst_ital.FON"
"WST_Span (All res)"="wst_span.FON"
"WST_Swed (All res)"="wst_swed.FON"
"Courier 10,12,15 (VGA res)"="COURE.FON"
"MS Sans Serif 8,10,12,14,18,24 (VGA res)"="SSERIFE.FON"
"MS Serif 8,10,12,14,18,24 (VGA res)"="SERIFE.FON"
"Tahoma (TrueType)"="TAHOMA.TTF"
"Microsoft Sans Serif (TrueType)"="MICROSS.TTF"
"Arial Narrow (TrueType)"="ARIALN.TTF"
"Book Antiqua (TrueType)"="BKANT.TTF"
"Bookman Old Style (TrueType)"="BOOKOS.TTF"
"Century Gothic (TrueType)"="GOTHIC.TTF"
"Garamond (TrueType)"="GARA.TTF"
"Haettenschweiler (TrueType)"="HATTEN.TTF"
"MS Outlook (TrueType)"="OUTLOOK.TTF"
"Monotype Corsiva (TrueType)"="MTCORSVA.TTF"
"Wingdings 2 (TrueType)"="WINGDNG2.TTF"
"Wingdings 3 (TrueType)"="WINGDNG3.TTF"
"Book Antiqua Bold (TrueType)"="ANTQUAB.TTF"
"Book Antiqua Bold Italic (TrueType)"="ANTQUABI.TTF"
"Book Antiqua Italic (TrueType)"="ANTQUAI.TTF"
"Arial Narrow Bold (TrueType)"="ARIALNB.TTF"
"Arial Narrow Bold Italic (TrueType)"="ARIALNBI.TTF"
"Arial Narrow Italic (TrueType)"="ARIALNI.TTF"
"Bookman Old Style Bold (TrueType)"="BOOKOSB.TTF"
"Bookman Old Style Bold Italic (TrueType)"="BOOKOSBI.TTF"
"Bookman Old Style Italic (TrueType)"="BOOKOSI.TTF"
"Bookshelf Symbol 7 (TrueType)"="BSSYM7.TTF"
"Garamond Bold (TrueType)"="GARABD.TTF"
"Garamond Italic (TrueType)"="GARAIT.TTF"
"Century Gothic Bold (TrueType)"="GOTHICB.TTF"
"Century Gothic Bold Italic (TrueType)"="GOTHICBI.TTF"
"Century Gothic Italic (TrueType)"="GOTHICI.TTF"
"MS Reference Sans Serif (TrueType)"="REFSAN.TTF"
"MS Reference Specialty (TrueType)"="REFSPCL.TTF"

2. Click file then Save as on Notepad
(Save this as Something like fonts.reg or something like that)

3. Just keep clicking okay where the okay button should be.

4. Restart your computer.

Thats it that is all there is to it. I spent about 3 hrs trying to figure this one out. Not too complicated since I knew it had to do with Fonts. What this .reg file does is it enters in the registry automatically the key that was either corrupt, damaged or missing when the update happened. Now May I remind all of you that this happened For Commodo, this may happen with other antivrus programs.

Hope this helps you out.

Edited by ViperDan, 16 April 2011 - 02:19 PM.

"Don't try and be a great man , just be a man and let history make it's own judgments"

BC AdBot (Login to Remove)


#2 boopme


    To Insanity and Beyond

  • Global Moderator
  • 72,917 posts
  • Gender:Male
  • Location:NJ USA
  • Local time:04:52 AM

Posted 16 April 2011 - 03:53 PM

Hello, thanks for you post. As we have many,many novices that come here for help I am posting a Back Up warning.
Also I will move this to the Antivirus discussion section.

A suggestion has been made that involves modifying the registry. Modifying the registry can be dangerous (and can render your system unbootable) so it's advisable that you make a backup of the registry before proceeding.
Modification of the registry can be EXTREMELY dangerous if you do not know exactly what you are doing so follow the steps that are listed below EXACTLY. if you cannot perform some of these steps or if you have ANY questions please ask BEFORE proceeding.

Backing Up Your Registry
  • Go Here and download ERUNT
    (ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
  • Install ERUNT by following the prompts
    (use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
  • Start ERUNT
    (either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
  • Choose a location for the backup
    (the default location is C:\WINDOWS\ERDNT which is acceptable).
  • Make sure that at least the first two check boxes are ticked
  • Press OK
  • Press YES to create the folder.
Registry Modifications

For more information about modifying the registry, see this Microsoft article: http://support.microsoft.com/default.aspx/kb/256986
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users