Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

.exe files will not run in normal mode


  • Please log in to reply
11 replies to this topic

#1 Crawfish

Crawfish

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Central Texas
  • Local time:07:54 AM

Posted 13 December 2012 - 03:03 PM

Hello all. A friend asked for help with her laptop (HP dv2700, Windows Vista Home Premium /SP2) and I find just running the virus removal tools were not enough.

Would not let her connect to the internet. I tried, found the same. Tried to run "network discovery" and got a windows box with the statement "The specified service does not exist as an installed service." I get the same "error" trying to run any .exe including Cobian.
Tried then to run "setup a connection~~~". The resulting windows box showed,"The wizard cannot continue." The error code "Error:(0x800706BA) <The error code could not be found>.Tried to save with Print screen but not successful.

Removed the HDD and slaved it to my desktop and ran updated Avira free, Malwarebutes, and Superantispyware. Each of them found something to remove. Replaced the HDD and was not able to even update her McAfee. I ran the McAfee in safe mode with the 11/23/12 update. I suppose the logs are available but I cannot locate the McAfee one.

I spent some time reading the forums and "before posting guide" and saw the reference to Malwarebytes rootkit tool. I ran that in safe mode and it found several instances of the Siredef-c and pup's. Got with Fireman4IT in the Malware, Spyware etc Forum and made sure the computer was clean, and did get the internet back if I was cable connected to the lan port.

The wireless connection will not connect "Cannot connect because Windows is not setup to connect automatically". When I try to run the HP wireless assistant it shows the wireless lan is "ON". When I click on the setup "button" there is movement to show a "click" but nothing happens.
At that point Fireman4it suggested I post here as he had taken me as far as he could. We ran several exe files in safe mode and that post is on page one as of 13:25 CST and is tittled "Trojan.Siredef.C--Not able to connect to the internet".
Here http://www.bleepingcomputer.com/forums/topic477898.html
Really am at wits end and need help.
Thanks.

Edited by Crawfish, 13 December 2012 - 04:31 PM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,867 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:54 AM

Posted 13 December 2012 - 05:06 PM

From previous malware topic: "Someone has deleted alot of crucial windows files needed to run the machine properly. Or they have been removed by some automated tools and malware scanners."

Try running the sfc /scannow command, please.

http://pcsupport.about.com/od/toolsofthetrade/ht/sfc-scannow.htm

Upon completion of that...please download MiniToolBox , save it to your desktop and run it.

Checkmark the following checkboxes:
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size.

Click Go and paste the content into your next post.

Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 .

Louis

#3 Crawfish

Crawfish
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Central Texas
  • Local time:07:54 AM

Posted 13 December 2012 - 09:06 PM

Hello Hamluis, sorry to be so long. Could get nothing to run from the desktop and ran what would in safe mode. In normal mode sfc produced a statement saying " You need to be an administrator running a console session to use the sfc utility." Got it to run in safe mode.
each exe effort produced the "services error";"The specified service does not exist as an installed service." Got a log from minitoolbox, but speccy failed to run either mode. error "cpu dll init failed (error 2)ome information will not be displayed. Then in 2 seconds a "report box popped up wanting a report filled in and sent to Pirform. Before I could type in the info, windows box popped up saying "Data Execution Prevention" stopped a promram from running--.
Tried it from protable 2 o3 times until it "blinked" past the boxes and ran placing a statment above each catagory speaking to the failure of the dll init. I didn't get the exact wording. sfc indicated it fix files and the log is 22,867KB. Can I get the system info some other way?
The toolbox log to follow.

MiniToolBox by Farbar Version: 25-11-2012
Ran by Isabel (administrator) on 13-12-2012 at 17:01:59
Running from "C:\Users\Isabel\Desktop\Desktop"
Windows Vista ™ Home Premium Service Pack 2 (X86)
Boot Mode: Network
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (12/13/2012 04:52:19 PM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (12/13/2012 04:48:38 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/13/2012 04:28:01 PM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (12/13/2012 10:52:04 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (12/13/2012 07:24:04 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (12/13/2012 06:01:21 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (12/13/2012 05:48:28 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (12/13/2012 05:37:05 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (12/13/2012 05:29:39 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (12/13/2012 05:12:50 AM) (Source: EventSystem) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp458007043c


System errors:
=============
Error: (12/13/2012 04:53:06 PM) (Source: Service Control Manager) (User: )
Description: spldr
Wanarpv6

Error: (12/13/2012 04:53:06 PM) (Source: Service Control Manager) (User: )
Description: Computer BrowserServer%%1068

Error: (12/13/2012 04:52:54 PM) (Source: DCOM) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (12/13/2012 04:52:19 PM) (Source: DCOM) (User: )
Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (12/13/2012 04:52:08 PM) (Source: DCOM) (User: )
Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (12/13/2012 04:44:50 PM) (Source: Service Control Manager) (User: )
Description: Windows Media Player Network Sharing ServiceUPnPHost

Error: (12/13/2012 04:44:50 PM) (Source: Service Control Manager) (User: )
Description: QuickPlay Task Scheduler (QTS)QuickPlay Background Capture Service (QBCS)%%1070

Error: (12/13/2012 04:44:50 PM) (Source: Service Control Manager) (User: )
Description: SharedAccess

Error: (12/13/2012 04:44:18 PM) (Source: Service Control Manager) (User: )
Description: QuickPlay Background Capture Service (QBCS)

Error: (12/13/2012 04:43:46 PM) (Source: Service Control Manager) (User: )
Description: Windows Media Player Network Sharing ServiceUPnPHost


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2012-12-12 16:01:07.309
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 16:01:07.060
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 16:00:09.542
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 16:00:09.293
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 10:48:00.831
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\igdumd32.dll because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 10:48:00.613
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\igdumd32.dll because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 10:47:30.777
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\igdumd32.dll because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 10:47:30.559
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\igdumd32.dll because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 10:47:07.895
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\igdumd32.dll because the set of per-page image hashes could not be found on the system.

Date: 2012-12-12 10:47:07.680
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\igdumd32.dll because the set of per-page image hashes could not be found on the system.


=========================== Installed Programs ============================

Update for Microsoft Office 2007 (KB2508958)
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Flash Player 11 ActiveX (Version: 11.0.1.152)
Adobe Reader 8.1.0 (Version: 8.1.0)
Adobe Shockwave Player (Version: 10.2.0.023)
Adobe Shockwave Player 11.6 (Version: 11.6.5.635)
AIM 6
Apple Software Update (Version: 2.1.1.116)
AT&T Internet Security Wizard 1.5.11 (Version: 1.5.11)
AT&T Toolbar
ATT-HSI
Bing Rewards Client Installer (Version: 16.0.345.0)
Cards_Calendar_OrderGift_DoMorePlugout (Version: 1.00.0000)
Cisco Network Magic (Version: 5.5.09195.0)
Cobian Backup 11 Gravity
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
Conexant HD Audio (Version: 4.36.7.60)
CyberLink YouCam (Version: 1.0.1002)
D3DX10 (Version: 15.4.2368.0902)
DailyBibleGuide
DVD Suite (Version: 5.5.0928)
EA Link (Version: 3.1.1.4)
Google Chrome (Version: 23.0.1271.97)
Hauppauge MCE XP/Vista Software Encoder (2.0.25149) (Version: 2.0.25149)
HDAUDIO Soft Data Fax Modem with SmartCP
Hewlett-Packard Active Check (Version: 1.1.11.0)
Hewlett-Packard Asset Agent for Health Check (Version: 2.0.62.5)
HP Active Support Library (Version: 2.3.0.2)
HP Customer Experience Enhancements (Version: 5.4.0.2430)
HP Doc Viewer (Version: 1.02.0001)
HP Easy Setup - Frontend (Version: 5.4.0.2430)
HP Help and Support (Version: 2.0.10.0)
HP Officejet 4620 series Basic Device Software (Version: 26.0.784.0)
HP Officejet 4620 series Help (Version: 6.0.0)
HP Officejet 4620 series Product Improvement Study (Version: 26.0.784.0)
HP Photosmart Essential 2.5 (Version: 1.02.0000)
HP Photosmart Essential 2.5 (Version: 2.5)
HP Quick Launch Buttons 6.30 E1 (Version: 6.30 E1)
HP QuickPlay 3.6
HP QuickTouch 1.00 C4 (Version: 1.0.7)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Total Care Advisor (Version: 1.4.19.2433)
HP Update (Version: 5.003.001.001)
HP User Guides 0090 (Version: 1.00.0000)
HP Wireless Assistant (Version: 3.00 H2)
HPNetworkAssistant (Version: 1.1.70)
HPPhotoSmartDiscLabel_PaperLabel (Version: 2.02.0000)
HPPhotoSmartDiscLabel_PrintOnDisc (Version: 2.02.0000)
HPPhotoSmartDiscLabel_Tattoo (Version: 2.02.0000)
HPPhotoSmartDiscLabelContent1 (Version: 2.02.0000)
hpphotosmartdisclabelplugin (Version: 2.02.0000)
HPPhotoSmartPhotobookHolidayPack1 (Version: 1.00.0000)
HPPhotoSmartPhotobookModernPack1 (Version: 1.00.0000)
HPPhotoSmartPhotobookPlayfulPack1 (Version: 1.00.0000)
HPPhotoSmartPhotobookScrapbookPack1 (Version: 1.00.0000)
HPPhotoSmartPhotobookWebPack1 (Version: 1.00.0000)
I.R.I.S. OCR (Version: 12.3.4.0)
Intel® Graphics Media Accelerator Driver
iSEEK AnswerWorks English Runtime (Version: 009.000.0002)
Java Auto Updater (Version: 2.0.2.1)
Java™ 6 Update 2 (Version: 1.6.0.20)
Java™ 6 Update 20 (Version: 6.0.200)
LabelPrint (Version: 2.20.2128)
Lexmark X1100 Series
Linksys Wireless Manager (Version: 4.9.9189.0)
Malwarebytes Anti-Malware version 1.65.1.1000 (Version: 1.65.1.1000)
Marvell Miniport Driver (Version: 10.22.4.3)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Default Manager (Version: 2.2.114.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (English) (Version: 12.0.6612.1000)
Microsoft Office Professional Edition 2003 (Version: 11.0.8173.0)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 4.1.10329.0)
Microsoft UI Engine (Version: 6.3.2380.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable - KB2467175 (Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Works (Version: 9.7.0621)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
muvee autoProducer 6.1 (Version: 6.10.050)
My HP Games (Version: HPCMPQ1902)
NetWaiting (Version: 2.5.46)
Network Magic (Version: 5.5.9195.0)
Office Depot PC Support Agent (Version: 53.0.62.1)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
Power2Go (Version: 5.6.3327)
PowerDirector (Version: 6.5.2129)
PSSWCORE (Version: 2.02.0000)
Pure Networks Platform (Version: 11.2.09195.1)
QuickPlay SlingPlayer 0.4.6 (Version: 0.4.6)
QuickTime (Version: 7.60.92.0)
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02 (Version: 3.52.02)
Segoe UI (Version: 15.4.2271.0615)
Skype Click to Call (Version: 6.4.11328)
Skype™ 6.0 (Version: 6.0.126)
Slingbox Flash Tour (Version: 1.0.0)
SlingPlayer (Version: 1.04.0206)
smartmontools (Version: 5.42 2011-10-20 r3458 (sf-win32-5.42-1))
SmartWebPrinting (Version: 140.0.186.000)
swMSM (Version: 12.0.0.1)
Touch Pad Driver
TurboTax 2009
TurboTax 2009 WinPerFedFormset (Version: 009.000.2881)
TurboTax 2009 WinPerReleaseEngine (Version: 009.000.0328)
TurboTax 2009 WinPerTaxSupport (Version: 009.000.0245)
TurboTax 2009 wrapper (Version: 009.000.0145)
Tweaking.com - Windows Repair (All in One) (Version: 1.9.2)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
VideoToolkit01 (Version: 100.0.128.000)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (Version: 9.0.30729.01)
Wal-Mart® Mini Movie (Version: 1.00.002)
WeatherBug Gadget (Version: 1.0.0.6)
WebEx Support Manager for Internet Explorer (Version: 6.5.4917)
Window Washer
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Yahoo! BrowserPlus 2.9.8
Yahoo! Install Manager
Yahoo! Messenger

========================= Memory info: ===================================

Percentage of memory in use: 14%
Total physical RAM: 3061.61 MB
Available physical RAM: 2613.81 MB
Total Pagefile: 6323.51 MB
Available Pagefile: 6071.73 MB
Total Virtual: 2047.88 MB
Available Virtual: 1967.36 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:221.2 GB) (Free:171.97 GB) NTFS
2 Drive d: (HP_RECOVERY) (Fixed) (Total:11.68 GB) (Free:1.99 GB) NTFS
4 Drive g: (LEXAR MEDIA) (Removable) (Total:0.97 GB) (Free:0.77 GB) FAT

========================= Users: ========================================

User accounts for \\ISABEL-PC

Administrator Guest Isabel


**** End of log ****

Edited by Crawfish, 13 December 2012 - 09:07 PM.


#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,867 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:54 AM

Posted 13 December 2012 - 10:29 PM

Please follow the stated steps, http://h10025.www1.hp.com/ewfrf/wc/document?docname=c00439024&tmp_task=solveCategory&cc=us&dlc=en&lang=en&lc=en&product=3559543 , post results of your effort, please.

Louis

#5 Crawfish

Crawfish
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Central Texas
  • Local time:07:54 AM

Posted 14 December 2012 - 10:21 PM

Hello Hamluis---Sorry about not getting back to you 'till now. I'v been called away for a family issue and am now one state over and 5 hours away from the laptop. Borrowing this computer to ask to please keep this thread open until Monday 17 Dec. If you cannot please post directions to restart.
Thank You.

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,867 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:54 AM

Posted 15 December 2012 - 05:22 PM

:thumbup2: , your convenience is our convenience...do what must be done without haste, the topic will remain open :).

Louis

#7 Crawfish

Crawfish
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Central Texas
  • Local time:07:54 AM

Posted 17 December 2012 - 01:01 AM

Hello Hamluis--Back again and the Best of the Holidays to you and yours, and thank you four your patience.
I ran the diagnostics and quick, comprehensive and S.M.A.R.T. test passed.
.exe files still fail to run in normal mode.
Reran sfc /scannow but in safe mode. Again the message "Windows Resourse protection found corrupt files and repaired. New CBS log generated 6000KB larger than previous (28,878 KB).Attempt to run cmd in normal mode got the "~service does not exist as an installed file." when "run as Admin clicked. When run as admin not clicked it tells me it must be. :>)
Looking forward to your reply.

#8 hamluis

hamluis

    Moderator


  • Moderator
  • 55,867 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:54 AM

Posted 17 December 2012 - 11:21 AM

Sounds to me like it needs a clean install or restore to factory defaults.

At least...that's the road that I would take.

Louis

#9 Crawfish

Crawfish
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Central Texas
  • Local time:07:54 AM

Posted 17 December 2012 - 07:37 PM

Hello Hamluis--Yeah that is the feeling I had towards the end of Fireman4it's efforts while I was in that "previous malware topic." So, I've copied all the pics and data I suppose the next step is a repair install? If that runs then it may "fix" it. If not then a fresh "format and install" will be the answer.
If you are turning me loose, then thanks for all your help and patience. I'll surely see you on Bleepingcomputer.com again as I check in now and again for news and views. And to watch the "fixes" succeed.
Ciao

#10 hamluis

hamluis

    Moderator


  • Moderator
  • 55,867 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:54 AM

Posted 17 December 2012 - 07:43 PM

:thumbup2: . my approach is simple...if I have no clues to what might be wrong, rather than spend excess hours guessing, I'd just rather format-and-forget and start with a situation where problems can only occur from situations that I can then track/investigate :).

As a former Win 98 user who realized the value of backups...reinstalling holds no terrors for me. Realistically, at times it's the best option.

Louis

#11 Crawfish

Crawfish
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:South Central Texas
  • Local time:07:54 AM

Posted 14 January 2013 - 11:53 AM

Well the holidays are past and things are well as far as that goes. :>) Hope they were great for you and yours.

On the topic of this laptop, the Recovery function from the D: drive sucessfuly restored the system to "Factory fresh." The recovered pics and docs were placed into a folder she could get them from.
With that said I guess this ends this topic and it can be closed.

I want to expres heartfelt THANKS to you Hamlis and your colleague's for the help you provide. The best of the New Year to you all.

#12 hamluis

hamluis

    Moderator


  • Moderator
  • 55,867 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:54 AM

Posted 17 January 2013 - 05:57 PM

Thanks for the kind words...happy computing :).

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users