Tech Problem Aggregator

Error: Action failed for file avgamsvr.exe: creating file - Virus:w32/bagle.hx.worm

Q: Error: Action failed for file avgamsvr.exe: creating file - Virus:w32/bagle.hx.worm

Details:

Windows XP Professional Version 2002 Service Pack 2
AVG Anti-Virus Free Edition (avg75free_503a1205.exe)
AVG Anti-Spyware Free Edition (avgas-setup-7.5.1.43.exe)
No other anti-virus software installed prior to problem.

Yesterday, my AVG Anti-Virus Free Edition stopped working. When I try to run the program I get a message saying some files are missing. I tried to "repair" it using the installer file but it didn't work. So I uninstalled it and tried to re-install the progarm. However I got this message

Local machine: installation failed
Installation:
Error: Action failed for file avgamsvr.exe: creating file....
No such file or directory

I uninstalled AVG Anti-Spyware without seeing if it was working or not. Now I can re-install it either

Error opening file of writing:
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

So anyway, I found this forum and followed the 5 steps before posting the log. The Panda scan showed I had a virus, I ran a second scan and it showed that it got rid of the virus. However I still can't install neither AVG Anti-Virus nor Anti-Spyware. I have already installed both ZonedOut and Spywareblaster as per your instructions. Here are the logs:


Incident Status Location

Virus:w32/bagle.hx.worm Disinfected Operating System
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\joegen\Cookies\[email protected][2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\joegen\Cookies\[email protected][1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\joegen\Cookies\[email protected][1].txt
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\joegen\Cookies\[email protected][2].txt
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\joegen\Cookies\[email protected][2].txt
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\joegen\Cookies\[email protected][1].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\joegen\Cookies\[email protected][1].txt


Deckard's System Scanner v20071014.68
Run by joegen on 2007-12-28 09:46:38
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.


-- Last 1 Restore Point(s) --
1: 2007-12-28 01:46:40 UTC - RP62 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as joegen.exe) ----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:50:24 AM, on 12/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Smart Web Printing\hpswp_clipbook.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Adobe\Acrobat 6.0\Acrobat\Acrobat.exe
D:\APPLICATIONS\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\joegen.exe

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe AcPro7_0_7
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {B7D07999-2ADB-4AEB-997E-F61CB7B2E2CD} (TSEasyInstallX Control) - http://www.trendsecure.com/easy_inst...syInstallX.CAB
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/is...93/mcfscan.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6696 bytes

-- HijackThis Fixed Entries (C:\PROGRA~1\TRENDM~1\HIJACK~1\backups\) -----------

backup-20071227-124736-187 O23 - Service: AVG Anti-Spyware Guard - Unknown owner - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (file missing)

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 srosa (Megadrv3) - c:\windows\system32\drivers\srosa.sys
R2 CdaC15BA - c:\windows\system32\drivers\cdac15ba.sys

S1 AVG Anti-Spyware Driver - c:\program files\grisoft\avg anti-spyware 7.5\guard.sys (file missing)


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
R2 C-DillaCdaC11BA - c:\windows\system32\drivers\cdac11ba.exe <Not Verified; C-Dilla Ltd; SafeCast Windows NT>

S4 AVG Anti-Spyware Guard - c:\program files\grisoft\avg anti-spyware 7.5\guard.exe (file missing)
S4 NMIndexingService - "c:\program files\common files\ahead\lib\nmindexingservice.exe" (file missing)


-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.


-- Scheduled Tasks -------------------------------------------------------------

2007-11-15 13:12:34 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job


-- Files created between 2007-11-28 and 2007-12-28 -----------------------------

2007-12-28 09:13:39 0 d-------- C:\Program Files\SpywareBlaster
2007-12-28 08:53:41 44928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS <Not Verified; Panda Software; Panda? Antivirus>
2007-12-28 08:52:47 8576 --a------ C:\WINDOWS\system32\drivers\uppewosamumk.sys <Not Verified; Panda Software International; RKPavProc Driver>
2007-12-28 07:17:50 8576 --a------ C:\WINDOWS\system32\drivers\gxtnpvoxusft.sys <Not Verified; Panda Software International; RKPavProc Driver>
2007-12-27 17:33:51 0 d-------- C:\WINDOWS\system32\ActiveScan
2007-12-27 11:57:23 0 d-------- C:\Program Files\Trend Micro
2007-12-27 11:20:57 0 d-------- C:\WINDOWS\McAfee.com
2007-12-27 08:46:22 0 d-------- C:\Documents and Settings\joegen\.housecall6.6
2007-12-27 06:51:28 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2007-12-10 13:16:59 1755 --a------ C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
2007-12-08 10:49:07 0 d-------- C:\Program Files\Common Files\Nero
2007-12-08 10:46:00 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll <Not Verified; Pegasus Software; TWNLIB20>
2007-12-08 10:45:52 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-12-08 10:45:52 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-12-08 10:45:51 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-12-08 10:45:50 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe <Not Verified; Ahead Software Gmbh; Ahead Software Gmbh NeroCheck>
2007-12-08 10:45:39 0 d-------- C:\Program Files\Ahead
2007-12-08 10:30:22 0 d-------- C:\WINDOWS\pss
2007-12-06 12:41:37 0 d-------- C:\Documents and Settings\joegen\Application Data\PlayFirst
2007-12-06 12:41:37 0 d-------- C:\Documents and Settings\All Users\Application Data\PlayFirst
2007-12-06 12:40:38 0 d-------- C:\Program Files\Diner Dash 2
2007-12-06 12:40:07 0 d-------- C:\Program Files\ReflexiveArcade
2007-12-05 12:09:36 0 d-------- C:\spoolerlogs
2007-12-01 15:48:09 57344 --a------ C:\WINDOWS\system32\Wnaspint.dll <Not Verified; NexiTech, Inc.; NexiTech ASPI for Win32>
2007-12-01 15:48:06 0 d-------- C:\Program Files\Acoustica Audio Converter Pro
2007-12-01 09:15:58 0 dr-h----- C:\$VAULT$.AVG
2007-11-29 14:20:22 0 d-------- C:\Program Files\Active Data Recovery Software
2007-11-29 07:35:35 0 d-------- C:\Documents and Settings\joegen\Application Data\HP


-- Find3M Report ---------------------------------------------------------------

2007-12-28 09:45:51 0 d-------- C:\Documents and Settings\joegen\Application Data\MegauploadToolbar
2007-12-28 09:09:44 0 d-------- C:\Program Files\Common Files\LightScribe
2007-12-28 08:51:43 0 d-------- C:\Program Files\Messenger
2007-12-28 08:51:35 0 d-------- C:\Program Files\ScannerU
2007-12-28 08:51:02 0 d-------- C:\Program Files\MegauploadToolbar
2007-12-27 09:28:49 0 d-------- C:\Documents and Settings\joegen\Application Data\AVG7
2007-12-27 07:17:57 0 d-------- C:\Program Files\eMule
2007-12-20 08:46:14 0 d-------- C:\Documents and Settings\joegen\Application Data\Adobe
2007-12-20 08:45:14 0 d-------- C:\Program Files\Common Files\Adobe
2007-12-20 08:41:57 0 d-------- C:\Documents and Settings\joegen\Application Data\HPAppData
2007-12-19 13:47:41 0 d-------- C:\Program Files\Common Files
2007-12-19 07:43:36 0 d-------- C:\Documents and Settings\joegen\Application Data\AdobeUM
2007-12-10 13:17:08 0 d-------- C:\Documents and Settings\joegen\Application Data\Apple Computer
2007-12-08 10:45:44 0 d-------- C:\Program Files\Common Files\Ahead
2007-11-29 07:40:43 0 d-------- C:\Program Files\HP
2007-11-27 10:51:44 0 d-------- C:\Program Files\Gabest
2007-11-27 08:25:19 137503 --a------ C:\WINDOWS\HPHins15.dat
2007-11-26 15:54:57 0 d-------- C:\Program Files\WinAVIVideoConverter
2007-11-26 15:53:19 0 d-------- C:\Program Files\Avi2Dvd
2007-11-26 15:52:12 0 d-------- C:\Program Files\DirectVobSub
2007-11-26 15:44:12 0 d-------- C:\Program Files\AviSynth 2.5
2007-11-24 0826 0 d-------- C:\Documents and Settings\joegen\Application Data\Real
2007-11-24 08:02:44 0 d-------- C:\Program Files\Real Alternative
2007-11-24 07:43:48 0 d-------- C:\Program Files\Common Files\Real
2007-11-24 07:38:32 0 d-------- C:\Program Files\Real
2007-11-23 14:57:07 0 d-------- C:\Program Files\K-Lite Codec Pack
2007-11-23 07:17:34 0 d-------- C:\Documents and Settings\joegen\Application Data\Media Player Classic
2007-11-21 13:39:07 0 d-------- C:\Documents and Settings\joegen\Application Data\Help
2007-11-17 11:22:37 0 d-------- C:\Documents and Settings\joegen\Application Data\Sun
2007-11-17 07:36:33 0 d-------- C:\Program Files\Java
2007-11-16 16:09:13 0 d-------- C:\Program Files\BitLord
2007-11-16 16:08:46 0 d-------- C:\Documents and Settings\joegen\Application Data\LimeWire
2007-11-16 15:39:02 0 d-------- C:\Program Files\Common Files\Java
2007-11-16 12:59:47 0 d-------- C:\Program Files\Red Kawa
2007-11-16 07:14:45 0 d-------- C:\Documents and Settings\joegen\Application Data\WinRAR
2007-11-15 15:34:08 0 d-------- C:\Program Files\Yahoo!
2007-11-15 13:13:39 0 d-------- C:\Program Files\iTunes
2007-11-15 13:13:28 0 d-------- C:\Program Files\iPod
2007-11-15 13:13:09 0 d-------- C:\Program Files\QuickTime
2007-11-15 13:12:31 0 d-------- C:\Program Files\Apple Software Update
2007-11-15 13:11:51 0 d-------- C:\Program Files\Common Files\Apple
2007-11-15 08:39:43 0 d-------- C:\Documents and Settings\joegen\Application Data\Ahead
2007-11-14 14:26:01 0 d-------- C:\Program Files\Nero
2007-11-14 14:20:56 0 d-------- C:\Program Files\VIA
2007-11-14 14:20:38 0 d-------- C:\Program Files\Common Files\InstallShield
2007-11-14 14:16:04 0 d-------- C:\Program Files\Analog Devices
2007-11-14 14:16:03 44 --a------ C:\WINDOWS\system32\msssc.dll
2007-11-14 14:16:03 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-11-14 14:00:20 0 d-------- C:\Documents and Settings\joegen\Application Data\Macromedia
2007-11-14 13:54:33 0 d-------- C:\Program Files\Common Files\HP
2007-11-14 13:47:05 0 d-------- C:\Documents and Settings\joegen\Application Data\ABBYY
2007-11-14 13:46:16 0 d-------- C:\Program Files\ABBYY
2007-11-14 13:45:06 0 d-------- C:\Program Files\NewSoft
2007-11-14 13:44:39 0 d-------- C:\Program Files\Page abc
2007-10-13 19:00:35 62 --ahs---- C:\Documents and Settings\joegen\Application Data\desktop.ini
2007-10-13 11:11:57 0 -rahs---- C:\MSDOS.SYS
2007-10-13 11:11:57 0 -rahs---- C:\IO.SYS
2007-10-13 11:11:57 0 --a------ C:\CONFIG.SYS
2007-10-13 11:11:57 0 --a------ C:\AUTOEXEC.BAT
2007-10-13 11:08:06 21640 --a------ C:\WINDOWS\system32\emptyregdb.dat


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
03/02/2007 04:52 PM 1298024 -ra------ C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
03/02/2007 04:52 PM 177768 -ra------ C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [03/11/2007 09:34 PM]
"Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" [05/05/2003 08:57 AM]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [10/19/2007 08:16 PM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [11/02/2007 06:36 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [09/25/2007 01:11 AM]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [07/09/2001 11:50 AM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 06:56 AM]
"LightScribe Control Panel"="C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe" [04/19/2007 01:26 PM]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" []
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" []
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [08/04/2004 01:06 AM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [4/7/2003 1:42:52 AM]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [3/11/2007 9:26:24 PM]
VIA RAID TOOL.lnk - C:\Program Files\VIA\RAID\raid_tool.exe [11/14/2007 2:20:56 PM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

SafeBoot registry key needs repairs. This machine cannot enter Safe Mode.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt hpqcxs08 hpqddsvc

*Newly Created Service* - GXTNPVOXUSFT
*Newly Created Service* - RKPAVPROC
*Newly Created Service* - RSWJQWUMGJUD
*Newly Created Service* - SDTHOOK
*Newly Created Service* - UPPEWOSAMUMK

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"



-- End of Deckard's System Scanner: finished at 2007-12-28 09:51:03 ------------



Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Professional (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: Intel(R) Pentium(R) 4 CPU 2.00GHz
Percentage of Memory in Use: 51%
Physical Memory (total/avail): 1022.73 MiB / 494.02 MiB
Pagefile Memory (total/avail): 2461.32 MiB / 2153.79 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1934.05 MiB

A: is Removable (No Media)
C: is Fixed (NTFS) - 39.06 GiB total, 31.58 GiB free.
D: is Fixed (NTFS) - 35.47 GiB total, 30.67 GiB free.
E: is CDROM (No Media)
F: is CDROM (No Media)
G: is Fixed (NTFS) - 19.53 GiB total, 19.47 GiB free.
H: is Fixed (NTFS) - 17.73 GiB total, 17.63 GiB free.

\\.\PHYSICALDRIVE1 - ST340014A - 37.27 GiB - 2 partitions
\PARTITION0 (bootable) - Installable File System - 19.53 GiB - G:
\PARTITION1 - Extended w/Extended Int 13 - 17.73 GiB - H:

\\.\PHYSICALDRIVE0 - ST380011A - 74.53 GiB - 2 partitions
\PARTITION0 (bootable) - Installable File System - 39.06 GiB - C:
\PARTITION1 - Installable File System - 35.47 GiB - D:



-- Security Center -------------------------------------------------------------

AUOptions is set to notify before install.
Windows Internal Firewall is enabled.

FirstRunDisabled is set.


[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:?Torrent"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\BitLord\\BitLord.exe"="C:\\Program Files\\BitLord\\BitLord.exe:*:Enabled:BitLord"
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"="C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE:*:Enabled:Internet Explorer"


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\joegen\Application Data
CLASSPATH=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=BEARING
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\joegen
LOGONSERVER=\\BEARING
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 7, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0207
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\QuickTime\QTSystem\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\joegen\LOCALS~1\Temp
TMP=C:\DOCUME~1\joegen\LOCALS~1\Temp
USERDOMAIN=BEARING
USERNAME=joegen
USERPROFILE=C:\Documents and Settings\joegen
windir=C:\WINDOWS


-- User Profiles ---------------------------------------------------------------

joegen (admin)


-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
--> MsiExec.exe /I{AF600F7B-67A7-48D9-BA3B-0FF97F35F970}
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ABBYY FineReader 5.0 Sprint --> MsiExec.exe /X{D1696920-9794-4BBC-8A30-7A88763DE5A2}
Acoustica Audio Converter Pro --> C:\PROGRA~1\ACOUST~1\UNWISE.EXE C:\PROGRA~1\ACOUST~1\INSTALL.LOG
Adobe Acrobat 6.0 Professional --> MsiExec.exe /I{AC76BA86-1033-0000-7760-000000000001}
Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe SVG Viewer --> C:\WINDOWS\IsUninst.exe -f"C:\WINDOWS\System32\Adobe\SVG Viewer\Uninst.isu"
Apple Mobile Device Support --> MsiExec.exe /I{B5C209B1-8DDB-4642-A573-375B951514CB}
Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
BitLord 1.1 --> C:\Program Files\BitLord\uninst.exe
Diner Dash 2 --> "C:\Program Files\Diner Dash 2\unins000.exe"
eMule --> "C:\Program Files\eMule\Uninstall.exe"
Genius Scanner --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CCEB2144-5F5D-49E8-AADC-05CA48AE9AA5}\setup.exe"
HijackThis 2.0.2 --> "C:\Documents and Settings\joegen\Local Settings\Temporary Internet Files\Content.IE5\Q55QB2TK\HijackThis.exe" /uninstall
HP Customer Participation Program 9.0 --> C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Deskjet Printer Driver Software 9.0 --> C:\Program Files\HP\Digital Imaging\{F5936267-D467-4e7b-8940-A7D9F0398EF3}\setup\hpzscr01.exe -datfile hphscr15.dat -showdisconnect -forcereboot
HP Imaging Device Functions 9.0 --> C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential 2.01 --> C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
HP Smart Web Printing --> MsiExec.exe /X{415CDA53-9100-476F-A7B2-476691E117C7}
HP Solution Center 9.0 --> C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
iTunes --> MsiExec.exe /I{E3FEE4E7-4488-4A3F-A6BD-13745936EADB}
Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
K-Lite Codec Pack 3.4.0 Full --> "C:\Program Files\K-Lite Codec Pack\unins000.exe"
Megaupload Toolbar --> C:\Program Files\MegauploadToolbar\uninstall.exe
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Nero Suite --> C:\Program Files\Common Files\Nero\Uninstall\setupx.exe /uninstall ExtraUninstallID=""
Page abc --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E188146F-D5B7-4C98-8E8C-6A0753334279}\setup.exe"
Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan
Presto! Mr. Photo --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\NewSoft\MrPhoto16\DeIsL1.isu"
Presto! PageManager --> C:\WINDOWS\uninst.exe -f"C:\Program Files\NewSoft\PageManager\DeIsL1.isu"
QuickTime --> MsiExec.exe /I{5B09BD67-4C99-46A1-8161-B7208CE18121}
Real Alternative 1.60 --> "C:\Program Files\Real Alternative\unins000.exe"
SoundMAX --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe"
SpywareBlaster v3.5.1 --> "C:\Program Files\SpywareBlaster\unins000.exe"
Ultra Video Joiner 4.0.2 --> "D:\APPLICATIONS\Aone Ultra Video Joiner v4.0.2+Serial\Ultra Video Joiner\unins000.exe"
VIA Integrated Setup Wizard --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{9497EBAA-87AD-41E6-8ED6-E1E52995A76C}
Videora iPod Converter 2.19 --> D:\APPLICATIONS\Videora iPod Video Converter\Video Converter\uninstaller.exe
VobSub v2.23 (Remove Only) --> "C:\Program Files\Gabest\VobSub\uninstall.exe"
WinAVIVideoConverter --> "C:\Program Files\WinAVIVideoConverter\unins000.exe"
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
WinZip --> "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
Yahoo! Messenger --> C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG


-- Application Event Log -------------------------------------------------------

Event Record #/Type1449 / Error
Event Submitted/Written: 12/28/2007 08:39:01 AM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application iexplore.exe, version 6.0.2900.2180, faulting module , version 0.0.0.0, fault address 0x00000000.
Processing media-specific event for [iexplore.exe!ws!]

Event Record #/Type1444 / Error
Event Submitted/Written: 12/27/2007 05:00:29 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Event Record #/Type1443 / Error
Event Submitted/Written: 12/27/2007 05:00:03 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application YahooMessenger.exe, version 8.1.0.421, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Event Record #/Type1442 / Error
Event Submitted/Written: 12/27/2007 02:59:41 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Event Record #/Type1441 / Error
Event Submitted/Written: 12/27/2007 01:25:14 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.



-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.


-- System Event Log ------------------------------------------------------------

Event Record #/Type4512 / Error
Event Submitted/Written: 12/28/2007 09:43:26 AM
Event ID/Source: 10005 / DCOM
Event Description:
DCOM got error "%%1058" attempting to start the service wuauserv with arguments ""
in order to run the server:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}

Event Record #/Type4511 / Error
Event Submitted/Written: 12/28/2007 09:43:23 AM
Event ID/Source: 10005 / DCOM
Event Description:
DCOM got error "%%1058" attempting to start the service wuauserv with arguments ""
in order to run the server:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}

Event Record #/Type4510 / Error
Event Submitted/Written: 12/28/2007 09:27:14 AM
Event ID/Source: 10005 / DCOM
Event Description:
DCOM got error "%%1058" attempting to start the service wuauserv with arguments ""
in order to run the server:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}

Event Record #/Type4509 / Warning
Event Submitted/Written: 12/28/2007 09:12:07 AM
Event ID/Source: 20 / Print
Event Description:
Printer Driver HP Deskjet 3740 Series for Windows NT x86 Version-3 was added or updated. Files:- hpz2ku10.dll, hpzpm310.dll, hpf2vw10.dat, hpfmom10.hlp, hpzimc10.dll, hpzstw10.exe, hpzslk10.dll, hpzr3210.dll, hpzrm310.dll, hpzcon10.dll, hpzcfg10.exe, hpzeng10.exe, hpzime10.dll, hpzjui10.dll, hpzpre10.exe, hpzstc10.exe, hpztbi10.dll, hpztbu10.exe, hpztbx10.exe, hpzsnt10.dll, hpzcoi10.dll.

Event Record #/Type4508 / Warning
Event Submitted/Written: 12/28/2007 08:41:33 AM
Event ID/Source: 20 / Print
Event Description:
Printer Driver Canon iP1200 for Windows NT x86 Version-3 was added or updated. Files:- CNMDR76.DLL, CNMUI76.DLL, CNMCP76.DLL, CNMMH76.CHM, CNMLR76.DLL, CNMCB76.DLL, CNMD576.DLL, CNMUR76.DLL, CNMSR76.DLL, CNMIN76.INI, CNMPI76.DLL, CNMSM76.DLL, CNMSS76.SMR, CNMSD76.DLL, CNMSQ76.DLL, CNMSH76.CHM, CNMUB76.DLL, CNMUM76.DLL, CNMOP76.DLL, CNMSB76.DLL, CNB_2580.TBL, CNMP076.DAT, CNMP176.DAT, CNMP276.DAT, CNMFU76.DLL, CNMPV76.DLL, CNMW376.DLL, CNMUR760.407, CNMSR760.407, CNMLR760.407, CNMMH760.407, CNMSH760.407, CNMUR760.40C, CNMSR760.40C, CNMLR760.40C, CNMMH760.40C, CNMSH760.40C, CNMUR760.410, CNMSR760.410, CNMLR760.410, CNMMH760.410, CNMSH760.410, CNMUR760.C0A, CNMSR760.C0A, CNMLR760.C0A, CNMMH760.C0A, CNMSH760.C0A, CNMUR760.816, CNMSR760.816, CNMLR760.816, CNMMH760.816, CNMSH760.816, CNMUR760.406, CNMSR760.406, CNMLR760.406, CNMMH760.406, CNMSH760.406, CNMUR760.414, CNMSR760.414, CNMLR760.414, CNMMH760.414, CNMSH760.414, CNMUR760.41D, CNMSR760.41D, CNMLR760.41D, CNMMH760.41D, CNMSH760.41D, CNMUR760.40B, CNMSR760.40B, CNMLR760.40B, CNMMH760.40B, CNMSH760.40B, CNMUR760.408, CNMSR760.408, CNMLR760.408, CNMMH760.408, CNMSH760.408, CNMUR760.415, CNMSR760.415, CNMLR760.415, CNMMH760.415, CNMSH760.415, CNMUR760.405, CNMSR760.405, CNMLR760.405, CNMMH760.405, CNMSH760.405, CNMUR760.419, CNMSR760.419, CNMLR760.419, CNMMH760.419, CNMSH760.419, CNMUR760.40E, CNMSR760.40E, CNMLR760.40E, CNMMH760.40E, CNMSH760.40E, CNMUR760.413, CNMSR760.413, CNMLR760.413, CNMMH760.413, CNMSH760.413, CNMUR760.41F, CNMSR760.41F, CNMLR760.41F, CNMMH760.41F, CNMSH760.41F, CNMUR760.804, CNMSR760.804, CNMLR760.804, CNMMH760.804, CNMSH760.804, CNMUR760.404, CNMSR760.404, CNMLR760.404, CNMMH760.404, CNMSH760.404, CNMUR760.412, CNMSR760.412, CNMLR760.412, CNMMH760.412, CNMSH760.412, CNMUR760.41E, CNMSR760.41E, CNMLR760.41E, CNMMH760.41E, CNMSH760.41E, CNMLR760.411, CNMUR760.411, CNMSR760.411, CNMMH760.411, CNMSH760.411.



-- End of Deckard's System Scanner: finished at 2007-12-28 09:51:03 ------------



I hope I posted everything you need. I'm not really familiar with this kind of problems. So I'd really, really appreciate your help.

A: Error: Action failed for file avgamsvr.exe: creating file - Virus:w32/bagle.hx.worm

bumping topic...

10 more replies
Answer Match 107.52%

My computer emailed itself and then AVG moved an infection to the virus vault. The infection found was....

The file 2332134.rar: Virus identified I-Worm/Bagle.BX.

I'd appreciate help in removing it. Here's my HJT logfile.

Logfile of HijackThis v1.99.0
Scan saved at 11:06:34 PM, on 3/4/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Weather Network\WeatherEye.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.secularbull.com/
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://secularbull.com"); (C:\Documents and Settings\Kelvin Kolman\Application Data\Mozilla\Profiles\default\rfaavem5.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5Cmozilla.org%5CMozilla%5Csearchplugins%5Cgoogle.src"); (C:\Documents and Settings\Kelvin Kolman\Application Data\Mozilla\Profil... Read more

A:The file 2332134.rar: Virus identified I-Worm/Bagle.BX.

Empty your AVG quarantine area. There is nothing in your log that indicates a problem.
 

3 more replies
Answer Match 96.6%

I am trying to install the free version of AVG on Windows XP and keep getting the following message....
Error: Action failed for file avgmfx86.sys: starting service....
Error 0x80070002

does anyone know how to fix this?

Thanks

Stephanie Boulton
 

A:Error: Action failed for file avgmfx86.sys: starting service.... Error

Are there any other antivirus or antispyware programs installed? I have found that that will cause this service to not start since multiple antivirus softwares installed can cause problems.

Also, another option is to uninstall/re-install AVG.
 

1 more replies
Answer Match 84.84%

Please take a look at my hijack this log file. I had Ssate.exe in my start up registry in Reg Cleaner. I deleted it and restarted my computer and it is no longer in the list. Take a look at my log file and let me know if there is anything that I need to do to get rid of the W32/Bagle virus. My computer has been extremely slow. Rhonda
Logfile of HijackThis v1.97.7
Scan saved at 8:33:20 PM, on 5/15/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C... Read more

A:Bagle virus?? My hijack this log file.........

8 more replies
Answer Match 81.06%

when running the GMER, it allowed me only to check the options: service, registry, file, C:\, ADS. i am not sure if that will be a problem.
thank you very much. i hope to hear from you soon.

A:failed to save all components to the file //system32// ... the file is corrupted or unreadable. this error might be caused by a...

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/430984 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

3 more replies
Answer Match 78.12%

Hello,

I'm infected with the above viruses which i have been battleing with for the last week and lost. The've beaten me big time. I've tried everthing i can think of to remove them (with my limited pc knowledge) but they always seem to be one step ahead... hope someone out there can help me.

They have disabled my anti virus (AVG free edition) which i tried to reinstall but they keep blocking me. PC Tools Spyware Doctor finds them but requires PC rebooting to finally remove them but they regenerate on start up. They block me from accessing safe mode by looping the start up sequence. I've dowloaded Superanti Spyware and updated it but everytime i do a scan it gets to the same point then crashes the PC. I don't know what else to do. It even seems to refresh the internet page which i was typing this email on which then clears the page, so i'm writing this on my laptop.

I'm running Windows XP Home Edition on a Vaio Desktop. I don't have a recovery cd as such (typical Sony) but i can get hold of one... sony only gives the option of reinstalling the software it came with. No option of repair. Don't want to write too much more as i'm not sure if it's useful or not.

If anyone is up for a challenge then please get in touch.

Thanks in advance

Steve

A:Infected With Trojan-downloader.bagle & Email-worm.bagle

Hello steve and welcome.See if you can run one,preferably two of these online scans and possibly post back a scan log.BitDefender Online Virus and Malware ScanESET's Online Antivirus Scan

12 more replies
Answer Match 78.12%

Please help guys little brother was downloading something off Kazaa lite and caught this freaking Virus Avg says it has removed 133 of 135 infected files yet I cant seem to get rid of it totally please help guys heres a hijack this log
Logfile of HijackThis v1.97.7
Scan saved at 11:58:01 PM, on 10/12/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SYSTEM32\USRmlnkA.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\SYSTEM32\USRshutA.exe
C:\WINDOWS\SYSTEM32\USRmlnkA.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\My Documents\Hijack this\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft ... Read more

A:Virus I Worm Bagle AB

10 more replies
Answer Match 78.12%

*******NO COMBO FIX LOG IS ATTACHED***********First, thank you for what you people do here. I suddenly began receiving the error "Windows - Delayed Write Failed. (Failed to save all the components for the file \System32\0000390c. The file is corrupted or unreadable. This error may be caused by a PC hardware problem)In addition, my desktop went black and lost my desktop icons. A box popped up saying I needed to purchase some time of computer fix. Researching the problem, I came across a forum that suggested running ComboFix from your site, which I did. After running it, I found the warning not to run it unless specifically instructed to. In any event, I did run it and currently my desktop icons are back, however my desktop background is still black and I have a new icon on my desktop that is a red circle with a white X on it. Please let me know what else I should do, if anything. I have not deleted ComboFix.exe from my computer or performed any other tasks.And again, thank you for what you do. Warmest regards

More replies
Answer Match 77.7%

After doing some research it appears that I have the "data recovery virus."every time I turn my computer on I get loads of pop ups that say "Windows Delayed Write Failed." Failed to save all the components for the file \System32\0000390c. The file is corrupted or unreadable. This error may be caused by a PC hardware problem. I don't know what to do... right now i'm on safe mode with network. when i go on normal mode i cant see any programs and all my icons are gone.I was told to post a link here to my other thread: http://www.bleepingcomputer.com/forums/topic424906.html======================================================================================DDS.TXT LOG.DDS (Ver_2011-08-26.01) - NTFSAMD64 NETWORKInternet Explorer: 9.0.8112.16421Run by Cory at 9:38:45 on 2011-10-25Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5943.4926 [GMT -7:00].AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}.============== Running Processes ===============.C:\Windows ... Read more

A:"Windows Delayed Write Failed." Failed to save all the components for the file \System32\0000390c. The file i...

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/424971 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Answer Match 77.28%

Another Clean-up
Was checking out this hjt line
Run: [sysformat] C:\WINDOWS\system32\sysformat.exe

I Googled and found this link http://www.antivirus-online.de/english/news050101.php

I've run Housecall and Grisoft full scans... see anything or have any suggestions.

HJT for review
Logfile of HijackThis v1.99.0
Scan saved at 10:42:53 PM, on 09/02/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\SYSTEM32\Brmfrmps.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\regsvc.exe
C:\WINDOWS\system32\MSTask.exe
C:\WINDOWS\system32\stisvc.exe
C:\WINDOWS\System32\WBEM\WinMgmt.exe
C:\WINDOWS\System32\mspmspsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\WINDOWS\System32\hphmon03.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
C:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTun... Read more

More replies
Answer Match 76.44%

Hi There!My housemate's laptop has a virus and they asked me to help fix it. By the looks of it they have the "Data Recovery Virus" on their laptop. Ran various virus scans and removed about 200 malicious files, but still no joy. Upon startup several boxes pop up stating:"Failed to save all the components for the file \System32\0000390c. The file is corrupted or unreadable." Each box has a different sys32 file, including ..em32\00004509 and ..em32\0000767d. I've ran spybot and SUPERAntiSpyware, both removed a whole load of crap on the laptop but not the damn virus im after!Also ran Security Check: Results of screen317's Security Check version 0.99.24 Windows 7 x64 (UAC is enabled) Internet Explorer 8 Out of date! `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Enabled! Norton 360 WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: MVPS Hosts File Spybot - Search & Destroy Java™ 6 Update 22 Out of date Java installed! Adobe Flash Player ( 10.3.183.10) Flash Player Out of Date! Mozilla Firefox (x86 en-GB..) ```````````````````````````````` Process Check: objlist.exe by Laurent Norton ccSvcHst.exe ``````````End of Log```````````` Running a comprehensive virus scan (again) atm, will post SAS results when its done.Any help with this would be greatly appreciated

A:Data recovery virus - Failed to save components for the file \System32\(several system32 files). The file is corrupte...

SUPERAntiSpyware Scan Log

http://www.superantispyware.com

Generated 10/27/2011 at 04:10 PM

Application Version : 5.0.1134

Core Rules Database Version : 7856

Trace Rules Database Version: 5668

Scan type : Complete Scan

Total Scan Time : 01:16:31

Operating System Information

Windows 7 Home Premium 64-bit (Build 6.01.7600)

UAC Off - Administrator

Memory items scanned : 306

Memory threats detected : 0

Registry items scanned : 71337

Registry threats detected : 0

File items scanned : 225087

File threats detected : 18

Adware.Agent/Gen-Pinball

C:\PROGRAM FILES (X86)\MOSSYSKY\BIN\1.0.16.0\MOSSYSKYSACB.EXE

C:\Windows\Prefetch\MOSSYSKYSACB.EXE-0EB24479.pf

Trojan.Agent/Gen-FakeAlert[Local]

C:\PROGRAMDATA\1KALMIG2KB7FZP.EXE

Adware.Tracking Cookie

cdn1.image.freeporn.com [ C:\USERS\LISA\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FLTEG34J ]

ec.atdmt.com [ C:\USERS\LISA\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FLTEG34J ]

files.youporn.com [ C:\USERS\LISA\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FLTEG34J ]

ia.media-imdb.com [ C:\USERS\LISA\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FLTEG34J ]

s0.2mdn.net [ C:\USERS\LISA\APPDATA\ROAMING&#... Read more

6 more replies
Answer Match 72.66%

I have a new computer with Vista on it. I tried to load a library program on it and get this error: Error opening\creating HOSTS file<C:\windows\system32\drivers\etc\hosts.>error=<5>
I have turned off the antivirus and tried loading it. I have contacted the program company. I have contacted Dell. Nobody can help me. I looked at the windows file and it says:

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost

I don't know what to do to make the program work. It worked on my XP system. Please help.
 

More replies
Answer Match 72.66%

If I try to create a new file in C: drive, I get this error:
Error 0x80070522: A required privilege is not held by client.
I first noticed this error after doing a 'frugal' install of BackTrack 5R3 (Linux distribution) setup on C: using UNetbootin. I thought it must be preventing me from creating files so that they don't interfere with the Backtrack setup.

I ran the setup, but did not install BackTrack. And after that, I installed UNetbootin. Uninstalling removed newly-created 'frugal' install files and UNetbootin boot entry.

UNetbootin had changed permissions for C: (It seemed so). I tried to revert them manually by changing one permission from 'Applies to: Subfolders and filers' to 'Applies to: This folder, subfolders and files'.

On some forums (including Microsoft Answers), people were recommending to use takeown and cacls. That did not solve my problem. And the commands they suggested applied on all subfolders and files as well. I have no problem with subfolders.

The previous Owner was 'TrustedInstaller'. After using takeown, icacls and cacls, I could not revert the Owner back to TrustedInstaller, or to SYSTEM (as the owner of other partitions is 'SYSTEM') using command-line.

I have checked the permissions and the permissions for C: seem to be the same as for D: or E:, and they work fine.

And, yes, a point of note:
This error appears when I try to create a file by using Right-click > New > Text document. Or when I use notepad (or any other application) to... Read more

A:Creating a new file in C: drive gives error 0x80070522

It was perfectly normal for you not to be able to create a file in the root of C. It is setup that way by default. Administrative power is required (aka, Run as Administrator) to create file (folders can be made, however!) in the root of C.

6 more replies
Answer Match 72.24%

OK i just got into the Econo Lodge hotel i got my computer and i started to realize it would keep getting hot. So sometimes it would crash or go into hibernation. But now its worse the computer keeps shutting down like in sleep mode where the screen dims and the wireless button becomes red accept now it shuts off is my harddrive shot or is there a remote accesser or worm in this. Let me note i do download ROMS and emulators but are these the cause. Even when my computer is just 34 or 48 degrees Faranheit it will do shall i call it a "sleep-mode shutdown" is this my BIOS doing a fail-safe worm by someone or is my hard-drive shot or is someone invading my computer and infecting it or remotely hacking and shutting it off with a .BAT i should also tell you i am in Safe Mode with Networking while i post this and my computer is Windows 7 Ultimate bought in 2007 and upgraded to Win7 2009.

Thank you. Ryan

- I will post a log as soon as i get a reply with what to do.

EDIT: I also get my ROMs from Emuparadise.com and since i use a hotel wireless access point i get a lot of pop-ups.

A:Weird virus??? (Remote access/WIN32.Worm/file virus/SHUTDOWN.exe PLEASE HELP)

My guess is your computer is getting to hot and being shutdown to protect it.

1 more replies
Answer Match 71.4%

Hi guys, (first time user, please be gentle!)

Basically, bought a new Sony netbook (windows 7), using an external hardrive for storage and a usb for transit. Theres a $RECYCLER file on all my drives, internal and external, its a hidden file.

I have changed the attributes, deleted the file, its keeps changing my folder back to shortcuts.

I have downloaded Flash Disinfector, it will not run.

I have downloaded MAlwarebytes, and all Anti-Virus programmes that I could find, they cannot see it.

I have downloaded a program to stop the .exe file from starting up, and kill the processes.

Its like Lazarus, it keeps rising from the dead!
I am at the end of my tether with this one, can someone please please help me out here?
Has anyone come across this one before and solved it??
Would really appreciate the help!

Thanks
Fi
 

More replies
Answer Match 70.56%

Hello

I am running Windows XP Home edition Version 2002, Service Pack 2.
My computer is a Compaq Presario SR1130NX with an AMD Athlon 3000+ processor and 1028 Megs of memory. I have NAV 9 and Kerio Personal Firewall installed. The problem I a having is that I picked up what I believe is a worm from a file that I downloaded. The worm seems to be similar to the Bayrob worm. I followed the instructions located here: http://www.symantec.com/security_response/writeup.jsp?docid=2007-030115-1234-99&tabid=2

I seem to have eliminated the windowsupdate.exe portion of the worm. The only symptom that I a now getting is that every time I reboot, NAV 9 detects MSRT07.sys, which it labels a &#8220;Backdoor.HackDefender. NAV successfully deletes the file at startup, but something is putting a new copy of MSRT07 in my windows32 folder on every startup. I am hoping you can help me to find the source. I have combed the internet, and have found no info on this particular worm variant. I have uploaded the file that infected my computer here in case someone wnats to examine it:

{this link removed by Moderator, I have it saved if anyone wants it

It's just one of the common fake files to a filesharing app distribution of Fox-Video-Studio-v7-9-8-1-LATEST----rar As I said, I have the link to where this poster has stored the file}


Here is my HighjackThis log. I have already removed all of the bad registry keys that I could find.

Thanks in advance for any help you can g... Read more

More replies
Answer Match 70.56%

Worm virus found in Autorun.int file on USB drive

Hi, I'm new to the technical side of managing my system and a friend suggested i post my hijackthis log here.

Yesterday i plugged one of my USB drives into my laptop and AntiVir popped up saying it had found a worm virus in the Autorun.int file. (I had previously been using the USB stick at university). I think i've deleted the virus but i just wanted to check that my system was clean.

I went through the 5 step process before running a scan in Hijackthis.
Although did not install IE-Spyad as i run firefox.

The online active scan found 10 infected files and i've attached the log to this thread. (Although i had to run my computer in safe mode as it took too long (it was at 25% after 2 hours) in normal mode)

Before running hijackthis i also updated my windows vista system to service pack 1.

I have SuperAntispyware and AntiVir installed on my computer.

Haven't noticed any major issues with my computer, only perhaps a bit slower?

Would be grateful if someone could tell me if i've managed to rid myself of this virus?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:25:19 p.m., on 11/10/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\Syn... Read more

More replies
Answer Match 68.46%

Local machine: prepared for the installation
Actions plan:
Error: Evaluating of the short file name failed for "".
Creating of the temporary folder "" failed.
Error 0x80070005 %PATH% = "Frogram Files\AVG help please? you smart people
 

A:AVG error Evaluating of the short file name failed

7 more replies
Answer Match 68.46%

Whenever I go on aol, internet explorer etc. an internet program I get the following errors: Creating of mapping failed in ReadWordListFile
Creating of mapping failed in ReadDisabledWordListFile

How do I get rid of these?

A:2 creation of mapping file failed error

Did you ever find out the solution for this?

1 more replies
Answer Match 68.04%

When I try to move a folder into another folder (sub-folders into the main "MY DOCS" folder, I get the error message: "The action can't be completed because the folder or a file in it is open. Close the file and try again."

NO, no other folders are open; went to task manager and made sure. No backup running. I've tried a web search others have had this issue. The suggestion was to empty the temp folder, but this didn't help.

Any advice? This happens for ANY folder I try to dump into the main one.
 

More replies
Answer Match 68.04%

Some clients of ours have difficulties installing our MSI application.
When looking into the MSI.log, You see the following error.

DIFXAPP: ENTER: ProcessDriverPackages()
DIFXAPP: ERROR - The operating system you are running on is not supported. Only Windows 2000, Windows XP, Windows Server 2003 and Windows codenamed Longhorn are supported.
CustomAction MsiProcessDrivers returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (E8:28) [15:06:16:300]: Machine policy value 'DisableRollback' is 0
Action ended 15:06:16: MsiProcessDrivers. Return value 3.

Looking around on the internet, there were 2 suggested fixes:

1)
To resolve this issue, check if the Windows Application Compatibility setting is turned off in Group Policy Object (GPO).

Turn off Windows Application Compatibility as follows:

1. Launch the Microsoft Management Console (mmc.exe) and add the Group Policy Object snap-in
2. Browse to the Computer Configuration\Administrative Templates\Windows Components\Application Compatibility folder
3. Select "Turn Off Application Compatibility Engine"
4. Set this policy to be enabled in order to turn off Windows Application Compatibility
2)
Use Compatability mode > Users do not have access to them.
Does anyone encountered this error before and know what to do with it?
Thanks in advance!

A:Failed attempt at installing MSI file - DIFxapp error

This MSI is under your control - correct?

Try this: Mark's Stuff: Fixing Error 1603 on MSI installs










Quote:

You will need Orca MSI Editor from the Platform SDK installation ( I used Windows 7 Platform SDK). For these particular errors, it a problem with the DIFXAPP drivers in the installation package. I got updated files DIFxApp.dll and DIFxAppA.dll from the Windows Driver Kit for Windows 7 and Windows Server 2008 (from MSDN Downloads).

Open the MSI file in Orca MSI Editor. Select the Binary table on the left. You should see the 2 dll's listed on the right.




Delete each of these rows: right-click on the row and select "Drop Row".
Right click in empty area on the right side and select "Add Row". Navigate to the location of the updated drivers from the Drivers Library (C:\WinDDK\7100.0.0\redist\DIFx\DIFxApp\WixLib\x86). Add both the DIFxApp.dll and DIFxAppA.dll files, making sure the row name is the same as the DLL file name.
Save the MSI file.
Install.

1 more replies
Answer Match 68.04%

i get this error"Anti-virus software failed unexpectedly while scanning this file.
, Please Help
 

A:Anti-virus software failed unexpectedly while scanning this file. PLease help

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please let me know if you had Norton software installed previously and it was removed.===Search and delete the AdWare, PUP (Potentially Unwanted Program) installed on your computer.Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number). Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse cl... Read more

4 more replies
Answer Match 68.04%

I've read your  preparation guide but my computer will not let me download DriverImage XML to back up files nor DDS or turn on firewall(it states due to an unidentified problem, Windows cannot display Windows firewall settings.)  
 
Every time I try to download something it reads: Anti-virus software failed unexpectedly while scanning this file..  Please help I don't know how to remove virus/malware.
 
 

A:Anti-virus software failed unexpectedly while scanning this file.

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===See if you can get a log running this tool.Download correct tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.===

23 more replies
Answer Match 68.04%

Hi There,
 
I am having an issue on my mothers PC (Vista SP2) everytime I tries to download a file i get the error message 

Anti-virus software failed unexpectedly while scanning this file.
 
I have tried both Chrome, Mozilla and IE but this does not change the outcome....I have read a similar thread which asked to download Farbar onto the PC to create a log but again can't download any file. I first noticed this when trying to upgrade from Vista....it is my intention to bring my laptop down and open the file on to that laptop copy to disc and open on bad PC from the following thread....however I would need someone to interpret the resulting log please......
 
http://www.bleepingcomputer.com/forums/t/507364/anti-virus-software-failed-unexpectedly-while-scanning-this-file/
 
If anyone can help please message me....thanks Kerry 

More replies
Answer Match 67.2%

Hello, im in desperate need of help here! So far everything ive tried has not worked. Upon browsing today i stumbled across a website that was deemed a possible "Attack site" by Firefox, shortly after i closed the page the following error message popped up repeatedly;Windows - delayed write failedFailed to save all the components for the file \\system32\000024b5. The file is corrupted or unreadable. This error may be caused by a PC hardware problem. This message pops up literally about 30-40 times every time i restart or attempt to close them, each error has different numbers/letters following \\system32\On top of this my desktop background has gone black, system check keeps popping up and cannot be closed only paused and most importantly almost everything within my username ie music/files/folders/desktop icons has disappeared!! which is a huge problem because a lot of it isnt backed up and theres work related things i cant afford to lose on there! My hard drive is telling me the same amount of space is being used as before so im hoping they havent ACTUALLY been deleted but when i try to view the main user folder it just says its empty?!...also programs/control panel/shortcuts to my documents have disappeared from the start menu.Two random messages saying "hardrive clusters are partially damaged. Segment load failure" and "RAM memory reliability is extremely low..." occasionally pop up from the ta... Read more

A:Critical error! Failed to save all the components for the file \\system32\....

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

13 more replies
Answer Match 67.2%

My OS is Vista Business 32bit, running on a HP Compaq 6715b Notebook. In the middle of September this year I suddenly noticed following event error: Event ID: 49 - Event Source: "volmgr". Followed by this message: "Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory". I have not found out what caused this error message, but from that date, I find this error message twice every time I boot my PC. I have no other error messages, and I have not noticed any problems with my PC, as far as I can see Vista and my PC work perfectly well together. I am informed that Microsoft has a hot-fix for this problem http://support.microsoft.com/kb/955635 dated July 25, 2008. However, in this document Microsoft recommends waiting for the next software update that will contain this fix, if I am not severely affected, because the hotfix could create unexpected effects. Nevertheless, I have received a lot of updates after September, and I have still this error message. Any gurus or other experts in this forum having ideas what to do? Should I just install the hotfix, or wait for more updates?

A:Error 49: Conf page file for crash dump failed

Please go to Start and type in "msinfo32.exe" (without the quotes) and press Enter.
Save the report as an .nfo file, zip it up, and upload/attach the .zip file with your next post.

That'll give us some information about your system so that we can get started on trying to fix it.

8 more replies
Answer Match 66.36%

i can hop on a computer and navigate my way around to ebay, email, random searches etc., however, when it comes to the behind the scenes "stuff" im clueless, sadly !

i have a few problems with my computer and here is the first one :

when i start up or restart my comp i get this message ( see image )

honestly i dont even know what this means but i'd like to fix whatever the problem is but not sure how to go about it, any help would be very much appreciated, thank you

A:error occured message : failed to save settings, config. file ???

Something to do with your HP Printer. Try uninstalling then reinstalling the drivers and software for it, either from the CD that came with the printer or by downloading it from the HP support web site.

HP Support, Drivers, Contact and Help Forums | HP? Support

1 more replies
Answer Match 66.36%

I turned on my computer, all my icons were gone and a message:
Failed to save settings. An error occurred loading a configuration file. It gave no suggestions how to repair this. Can anyone help? I am on a HP 2009m PC with windows vista. I tried many web sites for advice but I'm not very computer savy. Maggie R.

A:Failed to save settings. Error occurred loading a configuration file. Help!

Hi, you could try a system restore. If this fails or is not available try this. Desktop items are stored in a cache, this can become corrupted causing what you see. To fix right click on the taskbar and select Task manager. When Task Manager opens under the Applications tab click on "new Task" type:- explorer.exe press ok. Your desktop should repopulate. At this time reboot your computer. If all is well then the problem is fixed if not:-

Repeat the task manager (as above) and new explorer.exe then follow this:-

Go to Start all programs accessories and right click on command prompt select ?run as administrator?

At the prompt type:- taskkill /im explorer.exe /f press enter
(Your desktop will go blank)

Now type each line and press enter after each line.
Note the spaces.

CD %USERPROFILE%\AppData\Local

attrib -h IconCache.db

del IconCache.db

Shutdown /r

9 more replies
Answer Match 66.36%

Can someone please help me on this problem?

I have this message on this laptop once windows has loaded.

'Failed to save setting. An error occurred loading a configuration file: unable to open file'C:\users\.....etc...'

Apparently whilst web browsing something occured and on reboot this message appears and the profile doesn't load properly user documents and software not there etc..

Within the start menu the list of program folders are there but the folders are empty. Looking through the c drive and finding my way to the programs the stuff is there.

I created a new admin user to see what that does. The folders are still empty.

This is a windows 7 HP laptop. It also doesn't have a cd disc drive or a window disk apparently.

Many thanks in advance.

A:Failed to save setting. An error occurred loading a configuration file

"This is a windows 7 HP laptop. It also doesn't have a cd disc drive or a window disk apparently."

If it has no CD drive it is most likely a "netbook" & not a laptop.
Try "rolling back" the system to an earlier date using System Restore:
Click Start > Run...........
Type rstrui in the run box, then click 'OK'

2 more replies
Answer Match 66.36%

Hello all,

I have been having a problem with my PC for the last ...uhh... couple of years where it will randomly, without warning, reboot itself. I cannot correlate any rhyme or reason for when it occurs, and sometimes it happens several times per day, and sometimes just once. The message in the event viewer that occurs just as the system reboots itself is "The MCSTRM service failed to start due to the following error: The system cannot find the file specified." - I googled this and found that it was connected to Rhapsody, which I promptly uninstalled. This alleviated the problem COMPLETELY for about a week and a half, until two days ago when it began all over again. I had not installed or uninstalled anything when the change occurred. Here is my HijackThis log (I'm not sure if you need this but I saw other topics include this).
DDS (Ver_09-05-14.01) - NTFSx86
Run by Administrator at 15:41:15.11 on Wed 06/10/2009
Internet Explorer: 6.0.2800.1106 BrowserJavaVersion: 1.6.0_13
Microsoft Windows 2000 Professional 5.0.2195.4.1252.1.1033.18.383.80 [GMT -4:00]
============== Running Processes ===============

C:\WINNT\System32\WLTRYSVC.EXE
C:\WINNT\System32\bcmwltry.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\cisvc.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy&#... Read more

A:The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

26 more replies
Answer Match 66.36%

I have used System Restore regularly through the years without any issue until this week. I tried System Restore from a variety of restore points over the past three months. Each attempt ended with a restart and this message:


System Restore failed to extract the file (C:\Program Files\Windows
Defender\en-US\MpAsDesc.dll.mui from the restore point. The restore point was
damaged or deleted during the restore.


System File Checker found but did not fix .dll errors for Windows Defender:


MpEvMsg.dll.mui
MsMpRes.dll.mui
MpAsDesc.dll.mui
MpEvMsg.dll.mui

" of Security-Malware-Windows-Defender.Resources, Version = 6.1.7600.16385,
pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope
= 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName
neutral, PublicKey neutral in the store, file is missing
2014-07-07 01:57:34,
Info CSI 000003b6 [SR] Cannot repair member file
[l:30{15}]





There are 12 files under C/Program Files/Windows Defender, last modified in 2013 or earlier. Four of those same file names but with slightly different sizes are also under C/Program Files (x86)/Windows Defender. I tried to manually start Windows Defender in the services.msc menu without success and this error: <Failed to read description. Error code: 15100>


Would reinstalling a clean new copy of Windows Defender fix the .dll errors and also the System Restore errors? Is there another way to activate Windows ... Read more

A:System restore failed to extract file with Windows Defender .dll error

Hello and welcome RPM mate a clean install would fix it but you need to back up any data you need to keep.

But you could try this if it completely gone Windows Defender - Microsoft Windows

PS some system specs too please System Info - See Your System Specs

1 more replies
Answer Match 66.36%

A few people have asked similar questions, i have read most of them but I have different circumstanses so please bear with me and if anyone can help it would be greatly appreciated..
I backed up the system to my external HDD (F: ), I than went in to the recovery options (Lenova laptop) . I than tried to restore my system to its 'initail state'. About a second or two later it ....there was a flash error. I had no time to see what it was but it basically said it failed to restore the system.
I switched off the laptop, maybe I should of waited but Ive done this before a while back on a different laptop. Half way during the restore process it froze, than there was no progress in restoring the system as it remaided on 50%. So that is why I swichd it off from the power button. Now all I get is this Windows failed to start. A recent hardware or software change might be the cause.
Windows failed to start.
A recent hardware or software change might be the cause.
To fix the problem: File: \windows\system32\winload.exe status: 0xc000000f.

I tried going in to advancced options but I cant seem to get past the message- I even ran memory diagnostics. Than it just takes me back to the message about buying the CD!!!

I searched these forum threads and googled it for hours, and everyone has similar problems but they go there to here in different ways which is why Im asking now if anyone could please help.
I tried getting the image file on to a cd, but theres so many indi... Read more

A:IMAGE FILE NOT FOUND & 0xc000000f Windows failed to start error, help?

Seriously nobody knows anything here? I get its the same thing being asked but as I said, my situation is different. The laptop is a year or so less old... I received an array on a second or 2 in to restoring back to 'initial state'.
Some1 must know something!

9 more replies
Answer Match 66.36%

Hello.

I'm not sure what nasty I have. In normal mode, I get three critical error messages like below with different file numbers.

---------------
Critical Error!
Windows was unable to save all the components for the file \System32\496A8300. The file is corrupted or unreadable. The error may be caused by a PC hardware problem.
-------------

I have a black screen, can run nothing, cannot access files, cannot connect to the internet.

In safe mode, I can get the files to display and can access a CD and external hard drive, but still cannot access the internet.

I used a laptop to transfer DeFogger, DDS, and GMER. I ran Defogger, obtained DDS logs, but twice GMER caused a stop screen error: RQL_NOT_LESS_OR_EQUAL and dumped the memory - had to reboot.

Previously, I had run rkill, TDSS, and MBAM. Once, the TDSS log indicated it had stopped C:\WINDOWS\system32\grpcon.exe - I believe it was the third time I ran it. Otherwise I get zero files terminated. I cannot run MBAM. I get run-time error '53' mbamnet. I tried using randmbam.exe, but was still unsuccessful after 10 attempts.

I get locked up in safe mode and have to turn off the computer and restart the whole process. This morning, I missed the safe mode tap and when starting up in normal, Spybot popped up and stated it had terminated a file called win32.zbot.

Thank you for any help you can give me. I'm stumped on this one. I've been working with it for two days now and can&#... Read more

A:Critical Error! Failed to save components ..... file \System32\0006784

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 31. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the runn... Read more

20 more replies
Answer Match 66.36%

Hello everyone,

Firstly I would like to say that this seems like a swell enough forum as is and I am frankly out of ideas. About a year ago I had backed up a rather large series of files under one name for my roommate who was in the process of doing some "spring cleaning" on his computer. Fast forward to now and he is out of Hard-drive space damn near and has been unable to find the reserve file himself. Below is the directory under which I named and saved the around 200gb file of games and old-ROTC documents. Regardless the file needs to be found and even after un-hiding all files from the control panel, I have yet been able to locate it. It would seem to be simple enough, one would think that you could see the file name sitting above Program Files but it is not. Any one have any ideas, we would rather not have to reformat/ system restore if we can avoid it.

C:\common_ORIGINAL NEW FAGS
 

A:File path error/ Cannot find file directory/file itself

I used a software called TreeSize which shows the size of all folders on the disk. Thinking that the Windows OS is around 18gb, a 200gb files should really stick out with TreeSize.
https://www.jam-software.de/customers/downloadTrial.php
 

1 more replies
Answer Match 65.94%

Hello all!

This is my first post to this forum and, I must say, after perusing a few posts I'm excited to post my question. It looks like this is a great community.

I recently reformatted my computer due to intermittent crashes during resource intensive application sessions. The crashes have continued with decreased frequency (and make me suspect my PSU). However, my computer crashed during one of the first lengthy rounds of update installations after the reformat and I suspect that crash may have damaged a Windows Update installation. Since then I have always had an "updates available" prompt and the update fails each time it tries to run.

I think I have narrowed it down to a single update that is not correctly installing. I think this poster was encountering the same issue, but it seemed wise to follow the forum recommendation not not try solutions posted for others.

Per the forum guidelines here are the details of my problem:

1) Used SURT and got the attached SURT results.
2) Ran SFC and got the attached results.
3) Windows Update returns error code 80246007 for file KB2836502 (see attached).
4) The compressed CBS log folder was too larger to attach to the post. You can get it here.

Any and all help is much appreciated!!

Brock

Attachment 304027

Attachment 304028

Attachment 304029

Attachment 304030

A:Multiple failed Windows Update attempts, error 8024200D file KB2836502

Try installing the patch from the download here...
Download Update for Windows 7 for x64-based Systems (KB2836502) from Official Microsoft Download Centre

If it fails, please post the new CBS.log file, and also the C:\Windows\windowsupdate.log file

3 more replies
Answer Match 65.94%

My Epson 3-in-1 CX4800's scanner stopped working (copying and printing is fine). I have tried (with live phone help from Epson) several times to reinstall scanner drivers, but, even after downloading them, the message comes up: Windows failed to install drivers. Cannot find file specified. Epson had me find the file folder, click on the file (which obviously was there), try again, but same message. They finally said it is an OS issue, mine is vista home premium 32 bit. Can someone help me with this? Thanks a lot!

A:Epson CX4800 -- error: Windows failed to install drivers. Cannot find file specified

have you tried to uninstall the drivers and program, reboot the pc, than try to reinstall the dirvers and program?

5 more replies
Answer Match 65.1%

Can anyone tell me the root cause of this issue? please its urgent.

A:Bitlocker error - Resseting your protector failed for unknown reason.Please try the action again

Did you read this thread?
Check the answer by Karen Hu.
https://social.technet.microsoft.com/Forums/windows/en-US/24acee56-035a-4a6e-88c2-de73179942df/bitlocker-error-resseting-your-protector-failed-for-unknown-reasonplease-try-the-action-again?forum=w8itprosecurity

6 more replies
Answer Match 65.1%

I am running Windows XP. I was having multiple problems with my computer that I resolved, but now I have another problem. When I try to Enable the Protection Module for Malwarebytes I get an error message. [StartService] Failed to preform desired action. Error Code: 1068. I have tried to review other post about this error, but can't seem to figure out what I am doing or what anyone is explaining. Please help!

A:[StartService] Failed to preform desired action. Error Code: 1068

Did you try to reinstall malbytes?

22 more replies
Answer Match 64.26%

Hi I stupidly DL'd something that I believe got me infected. I got my anti-virus telling me that I had I-worm/bagle.AKA - and some other stuff (jpg's it would seem in my temp internet folders). once removed they started popping up again. i searched the net and found this site, bit managed to find Combofix before that, and I have a log. What should I do? i can't turn my security features on thru the Control panel...

HELP!!

A:I-worm/bagle.aka

Hi and welcome to BC.The tools needed to remove this are available under supervision here. Including the ComboFixPlease follow the instructions in this tutorial for posting a HijackThis Log. Preparation Guide For Use Before Posting A Hijackthis Log After you have created it,post the log here HijackThis Logs and Malware Removal and NOT in this topic,thanks.Click on New Topic and copy/paste the entire log into the reply. Give it a relevant title.Once you have posted the log DO NOT reply to it or change it until contacted or advised to do so by the HJT Team tech.Should you have any other questions about this ask those here.

2 more replies
Answer Match 64.26%

I have the worm bagle h. Now what do I do? I know what I 'should' have done--but too late! Wasn't keeping up with new information or updating like I should have. I checked Panda and they have a cleanup utility for previous bagle versions, but not this bagle h. Please help if you can. Hopefully I will learn the lesson...the email came from a trusted source, but if I had been reading about what is out there, I would have recognized it easily. Thanks for any help you can provide!!!!!
 

A:Help with worm bagle h.

After looking at the Panda site closer, I found a page that has information on Prevention and Cure of bagle h., even though a repair utility was not listed for this version on the Repair Utility page. I will go through what is recommended on this page and see if I can straighten out the mess. Thanks for always being here for all of us.
 

2 more replies
Answer Match 64.26%

A couple of weeks ago my anti-virus, AVG picked up a 'virus' and eliminated it. I have run two anti-virus scans since and nothing has turned up. However, I cannot get rid of the following window that pops up constantly:

I-Worm/Bagle.AB
is found in file
C:\System Volume Information\_restore{5808F9B6-96B5-4803-A039-47EB1E01CB7}\RP67\A0004128.exe
to remove this virus, please run AVG for windows

END OF MESSAGE

Can anyone help me remove this????
 

A:Worm/Bagle.AB

Turn off System Restore and reboot. That will remove the restore files. You can then turn System Restore back on.
How to turn off System Restore
 

1 more replies
Answer Match 64.26%

Symptoms:Internet explorer is very sluggish, although thankfully firefox seems to be ok for now.

Unable to open security type programs.

A Generic trojan and this Bagle.RP worm has shown up on Panda Scan. I cannot run a Norton Scan, nor can i run HiJackThis or SpyBot S&D.....I tried to run the dss.exe but it got as far as 'locating HijackThis' then stopped and disappeared from the screen. I ran a Panda Scan (results below) Any help cleaning this would be much appreciated.

Scots-Nat

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-05-20 0509
PROTECTIONS: 2
MALWARE: 51
SUSPECTS: 10
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
BullGuard Antivirus Yes No
Norton Security Online 2007 No Yes
;==============================================================================================... Read more

A:W32/Bagle.RP.worm

Quote:




Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.





Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:
1. If you don't know, stop and ask! Don't keep going on.
2. Please reply to this thread. Do not start a new topic.
3. Please continue to respond until I give you the "All Clear"
(Just because you can't see a problem doesn't mean it isn't there)

If you can do those three things, everything should go smoothly :D

----------------------------------------------------------------------------------------

Download Combofix from any of the links below. You must rename it before saving it. Save it to your desktop.

Link 1
Link 2





--------------------------------------------------------------------

Double click on Combo-Fix.exe & follow the prompts.When finished, it will produce a report for you.
Please post the C:\ComboFix.txt so we can continue cleaning the system.
Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

19 more replies
Answer Match 64.26%

hi guys,
i was stupid enough to double click on a exe file i downloaded via emule.
at start it disabled my antivirus and i couldn't run Ccleaner and other programs, the error message was
somthing like "the apllication is not a valide Win32 program". every time i tryied to scan the computer online i got a blue screen.
i reinstalled a antivirus and ran some anti-malware programs in safe mode, the blue screen stoped but the computer is still infected one of the startup items is "drvsyskit" which is associated with Bagle!!!
i do not know how to clean the worm.
thanks from advanced.


DDS (Ver_09-03-16.01) - NTFSx86
Run by udi at 16:47:11.10 on Mon 03/30/2009
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Ultimate 6.0.6001.1.1252.1.1033.18.3326.1811 [GMT 3:00]

AV: ESET Smart Security 3.0 *On-access scanning enabled* (Updated)
FW: ESET Personal firewall *enabled*

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGr... Read more

A:i think it's a bagle worm

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

13 more replies
Answer Match 64.26%

Hi, I've been infected by the w32.bagle.hx worm. My anti-virus and anti-spyware programs have been disabled by the worm (All the related .exe removed), and I am no longer able able to install any antivirus software.I did a scan via Panda online and was found to be infected with the above. I suspect it is due to the recent Windows Live Messenger virus. I was on the receiving end of one of such virus-infected message. I believe the virus file is hldrrr.exe which I have tried to remove unsuccessfully. I am unable to go into safe-mode as well.Please advise.Below is my HijackThis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:32:57 PM, on 8/12/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\savedump.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Juniper Networks\Common Files\dsNcService.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\... Read more

A:W32.bagle.hx Worm

Hi w2k_83,

If you still need help please post a fresh HijackThis log and I'll be happy to look at it for you.

Thanks for your patience.

1 more replies
Answer Match 64.26%

I ran AVG and healed this virus. Please check out my hijackthis scan and make sure all is well. Thanks
Logfile of HijackThis v1.98.2
Scan saved at 2:18:16 PM, on 10/10/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLDial.exe
C:\PROGRA~1\AMERIC~1.0B\aoltray.exe
C:\Program Files\America Online 9.0b\waol.exe
C:\Program Files\America Online 9.0b\shellmon.exe
C:\Program Files\Common Files\Aol\aoltpspd.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us6.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us6.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us6.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us6.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Pag... Read more

A:I-Worm/Bagle.AB

7 more replies
Answer Match 64.26%

hey all,
how do i use a photoshop 6 action file?? i have a file that when you play a section of it it creates a image with heaps of text in it and i want to edit the text but i dont know how? if anyone wants to see the action file just email me and i will email it back to you

thanks heaps
 

More replies
Answer Match 63.84%

Hi all, I have got a nasty case of something I suspect it might be the bagle.hx.worm but I am not too sure. Can anyone advise me to a way to clear this little problem.

I had AVG and Zonealarm installed but they have been deleted and you cannot reinstall them - something is running and deletes a folder or file while you are trying.

My log from


Incident Status Location

Virus:w32/bagle.hx.worm Disinfected Operating system
Adware:adware/ist.istbar Not disinfected Windows Registry
Spyware:Cookie/2o7 ... Read more

A:[SOLVED] bagle.hx.worm????

Me again.

I think I have fixed it. It was a nasty piece of work rootkit.

A bit of trial and error with every rootkit utility I could Download (on a PC at work as specific dls made mine BSOD), using them to root out and find various suspect processes. a bit of repairing of the registry to let me safe boot again and a lot of restarting.

PC seems stable now, AV and Zonealarm back in place internet access back up to speed and on all day with no BSOD yesterday - and nothing coming up on Panda (except some of the cookies).

Remains to be seen if I am completely clear. I need to do some file integrity checking to see if it has left any legacies and watch this thing like a hawk.

Lee

1 more replies
Answer Match 63.84%

Nae bother, pal.
Here's the new thread with the information:
Activescan report:


Quote:
Incident Status Location

Adware:Adware/SweetBar Not disinfected C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
Virus:w32/bagle.hx.worm Disinfected Operating system
Adware:adware/savenow Not disinfected c:\program files\VVSN
Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][1].txt
Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][1].txt
Spyware:Cookie/Yadro Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][2].txt
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][1].txt
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][1].txt
Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][1].txt
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][2].txt
Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][2].txt
Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][1].txt
Spyware:Cookie/Cassava Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][2].txt
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Alfonso\Cookies\[email protected][2].txt ... Read more

A:w32/bagle.hx.worm and other malware

"bump"

3 more replies
Answer Match 63.84%

Help!

I have run AVG anti-virus and also Solo Anti-Virus scans. The AVG keeps finding the I-Worm/Bagle.E in the following location:

c:\windows\system32\i1ru74n4.exeopen\ihvbgfjd.exe

But - it won't/can't remove or heal it. It keeps showing up on all virus scans. I don't think the Solo Anti-Virus program even found it. Attached is my Hijack This file. Please let me know what I need to clean up. Thanks!

Logfile of HijackThis v1.98.2
Scan saved at 6:14:45 PM, on 9/15/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Grisoft\AVG6\avgcc32.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\SRNMIC~1\SOLOSENT.EXE
C:\PROGRA~1\SRNMIC~1\SOLOCFG.EXE
C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Hewlet... Read more

A:I-Worm/Bagle.E not being removed

6 more replies
Answer Match 63.84%

Hello, well 2 days ago I turned on my other computer and it booted up and here comes the problem- Avast! was disabled which really scared me I looked up then there's some kind of windows error and here's the freaky part it disappears in like a minute then something pops up saying "windows needs to shut down" then "windows is now logging off" then it logs off like it would if I told it to! which was seriously freaky people are claiming it is the Bagle virus and in other forums everyone stops helping me and if you could please explain whatever virus I have does thanks =]

A:Bagle Worm/ Trojan?

Download and scan with SUPERAntiSpyware Free for Home UsersDouble-click SUPERAntiSpyware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)Under "Configuration and Preferences", click the Preferences button.Click the Scanning Control tab.Under Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen.

Now reboot into Safe Mode: How to enter safe mode(XP)
Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode

NOW Scan with SUPER
Open from the desktop icon or the program Files listBack on the main screen, under "Scan for Harmful Software" click ... Read more

3 more replies
Answer Match 63.84%

Update AVG 7.0 - AVI 262.6.2 and AVG 6.0 - 644
Added detection of new variants of I-Worm/Bagle.U.
- March 26, 2004 -

Program update
 

A:AVG Update 3/26/04 (I-Worm/Bagle.U. )

9 more replies
Answer Match 63.84%

Hi all!Damn Win32/Bagle.PA!I had all kind of errors: IE crashes, connection sharing failures and one time my nod32 just crashed and I couldn't make it work. I came to the Combofix tool.Ran it, and now things are working again - for time being. but I'm afraid that the other PC that I use on the same LAN maybe got infected too and will infect my first PC again.The reason that I don't just run the COMBO FIX on the other PC is because its my work PC (I'm an editor) and I don't want to run something that may harm that PC. The combo fix clearly mentions that it is possible that the machine will not boot properly again - and I cant take that chance - with the Work PC.By the way I think I found the damn file that got me infected.File X:\Dloaded\Wondershare_PPT_to_Flash_Studio_2.9.8_[Key].zip is infected with worm Win32/Bagle.PA. The file can be deleted. It is strongly recommended that you back up any crucial data before you proceed.I deleted it now... By the way can you recommend on a good registry cleaner, and system optimizer.Anyhow.. here is the LOG.TXTPlease tell me if I'm clean and what to do next - thanks guysComboFix 08-07-05.1 - Ariel 07/08/2008 4:21:19.2 - NTFSx86Microsoft Windows XP Professional 5.1.2600.2.1255.1.1033.18.791 [GMT 2:00]Running from: C:\Documents and Settings\Ariel\Desktop\ComboFix.exe * Created a new restore point * Resident AV is activeWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!.((((... Read more

A:Got The Bagle Worm - Used The Combo Fix Seems Ok But...

Sorry for the delay. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A Hijackthis LogPlease also post the problems you are having.

1 more replies
Answer Match 63.84%

stinger found the bagle worm on this pc (it's an HP running XP Home) and cleaned it. Ran Ewido, then Clean Up. Am having problems accessing anything on PC I can double click on the icon on the desktop but the application never opens.

Follows is my HJT log , thanks for any help you can provide, you all are the greatest!
Logfile of HijackThis v1.99.1
Scan saved at 1:01:53 AM, on 1/2/2001
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ISP50\bin\bartshel.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\winlog.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\winlog.exe
C:\Program Files\Microsoft Money\System\urlmap.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.earthlink.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Ex... Read more

A:Solved: bagle worm

16 more replies
Answer Match 63.84%

I was Infected with WIN32 BAGLE WORM that passed my AVAST virusscanner. When the PC got infected the virusscanner avast was disabled. I tried to run hijackthis.exe but got this error: hijackthis.exe is not a valid win32 application. This error i also got trying to restart the virusscanner. Also my Windows Zero configuration got disabled so I could not access internet anymore. I managed to restore my internet connection and reapaired a lot with HitmanPRO and Registry Easy. Also I installed and other virusscanner ( Windows Live Onecare) that found some traces of the bagleworm and repaired som problems.
Still i receive the error hijackthis.exe is not a valid win32 application when i try to start and my Firefox tells me everytime it is not the default browser.
So i think not all is repaired yet. According to some malware scanners the virus itself should be gone now.

This is my DDS log:
DDS (Ver_09-05-14.01) - NTFSx86
Run by Proline at 7:01:26,96 on 26.06.2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.1022.471 [GMT 2:00]

AV: COMODO Antivirus *On-access scanning disabled* (Updated) {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: COMODO Firewall *disabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C... Read more

A:Is the Bagle Worm repaired and gone or??

Hello and welcome to Bleeping Computer.My name is Syler, I will be helping you to solve your Malware issues. Whilst I am helping you, I wouldbe grateful if you would note the following: Please do not run other tools or scans unless I ask you to and follow all the steps I give you, in order.
Copy and paste all logs requested in you reply, Do not attach them unless asked too.
If you don't know or understand something, please don't hesitate to say or ask before you proceed with my instructions.
Please continue to work with me, until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clear.
If I do not hear back from you within 5 days of my last post, then this topic will be closed.ComboFix should not be run unless requested by a HJT Team member. It is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.First I would like to see a new log since alot could have changed since your origional post.Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the... Read more

6 more replies
Answer Match 63.84%

"This file does not have a program associated with it for performing this action. Create and association in the Set Associations control panel"

Hi everyone!
I have been having a problem with my computer for several days now. Opening all programs causes me to recieve this error message. I have to use right click + Run as Administrator to use any of my programs. I have done some forum surfing and tried several recommended techniques for correcting this problem but to no avail. I downloaded the exefix_vista reg file but the very same problem prevents me from merging it (I even tried fixing the reg extension but that failed aswell). I have run the sfc/scannow in command propmt but that came up empty. I would have fresh installed but I am away from home and do not have the means to reinstall vista. I apologize if this post seems in any way redundant but my forum searches have failed me. HELP! PLEASE!

A:This file does not have a program associated with it for performing this action....

Hello Jimonthy, and welcome to Vista Forums.

Have you already tried this?

http://www.winhelponline.com/article...plication.html

If yes, then you might see if you can do a System Restore at boot using a restore point dated before you had this problem.

Hope this helps,
Shawn

10 more replies
Answer Match 63.84%

I booted up my comp today and got this when I tryed to open any sort of program, I was lucky to even get firefox open.. over the past 2 days my computer has gotten INCREASINGLY slow, and now I cant open any programs. I cant do a system restore, and I cant run cmd cause my comp asks to find what program to use to run it. I noticed a toolbar called shop at home or something, and removed it but everything kinda started happening after that toolbar showed up. Thank you for your help!

A:This file does not have a program associated with it for performing this action...

Sounds like some kind of malware infestation. Read the instructions here and post for help in the virus/trojan/spyware forum.

5 more replies
Answer Match 63.84%

This file does not have a program associated with it for performing this action. Create an association in the Set Associations control panel. This is the window that pops up when I double click any .exe file. This all started with the Vista Anti-Virus 2011 adware or whatever it is. I attempted to manually delete the program following the intructions from this site ( Vista Anti-Virus 2011 Removal Guide). It did help me to be able to use the internet and stop the unwanted program from working. But now I can't open anything except the Internet and Outlook from the programs menu in the bottom left corner. This is frustrating. Short on funds and I was wondering if this is an easy fix? Thanks for your time.

A:This file does not have a program associated with it for performing this action.

Hi, run the attached .zip file and from the returned .reg file, right click and select "Merge"
Restart your computer.

Attachment 90505

2 more replies
Answer Match 63.84%

While looking through my Program Files I ran across the following: Uninstall_CDS.exe. A search via Google indicates that CDS.exe is a virus. A system search for CDS resulted in the above Uninstall file and wmccds.exe, the latter being some sort of Windows media connect file. A scan of the Uninstall CDS.exe file with Avast and Comodo resulted in a safe file. Both have missed malware/viruses in the past. Thus, I don't trust the results and am afraid to click on it for fear that may do harm. Any suggestions are appreciated.
Paul
 

A:Found UninstallCDS.exe file- ?action

Many files have the same names.
 

3 more replies
Answer Match 63.84%

Help! My computer (OS Windows 7) carried out a Windows Update overnight. On booting up this morning, when I try to open a file using is it "Windows Explorer"? (what I call file manager), I get a red cross dialogue box saying that "This File does not have a program associated with it for performing this action. Please instal a program, or if one is already installed, create an association in the Default Programs control panel."

This might as well be written in greek as far as I'm concerned. Everything else appears to work OK (Outlook and Internet Explorer), but I can't access my Word or Excel files other than by locating the recently used files in the Word or Excel applications themselves.

Can anyone tell me what I should do, short of uninstalling Microsoft Office 7 and reinstalling it? Or is Windows Explorer nothing to do with Office?

A:This file does not have a program associated with it for performing this action ...

right click on the file you want to open and select properties

there should be a butten that says "open with" change it to word

2 more replies
Answer Match 63.84%

when I try to open an avi file from my hard drive this message appears "This file does not have a program associated with it for performing this action. Create an association in the Set Associations control panel" I have also notice that I have lot the DivX icon with these files.
As I am googled this error message but nothing has helped, as I am not very computer savvy I am seeking HELP with is maybe not so uncommon problem.

A:This file does not have a program associated with it for performing this action

Welcome

Follow the suggestion in this tutorial using the AVI download, and I think that the problem will be solved.

Default File Type Associations - Restore

6 more replies
Answer Match 63.84%

I get this message when I try and open any of my MS Office 2010 programs (I have windows Vista):
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

This file does not have a program associated with it for performing this action. Create an association in the Set Associations control panel.

How can I fix this?

At first I thought this could be a virus or malware. I have posted in the "Virus and other malware removal" section but have not gotten a response.

Thanks.
 

A:This file does not have a program associated with it for performing action

10 more replies
Answer Match 63.84%

I receive this error everythime i try to open a program. How do i set these assocaitions so my computer will work properly. The reall message says....


This file does not have a program associated with it for performing this action. Create an assocaition in the Set Assocations control panel.


I get this message for every program. If i right click and select run as administrator i can get into the programs. I just dont know how to fix this problem.

A:The file does not have a program associated with it for performing this action

Hi Skscivicracing,

Welcome to the forum.

You just will just need to reassociate your .exe file extensions.

Go to this link below and click on the exe in the box and download and save the exefix_vista.zip file to your desktop. Just follow the rest of the Usage Instructions at the site. This should fix your problem for you.

http://www.winhelponline.com/articles/105/1/File-association-fixes-for-Windows-Vista.html

Shawn

3 more replies
Answer Match 63.84%

Hi all,
I recently cleaned my computer from the XP Anti-Virus 2011 virus, and I think i may have deleted something i should'nt have. Now i am unable to open any .exe and i was wondering if anyone knew how or if i can get this fixed.
Thanks in advance,
Cassius

A:File does not have a program associated with it for performing this action

Hello and welcome to the forum.

Please try this:
http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

7 more replies
Answer Match 63.84%

"This file does not have a program associated with it for performing this action. Create an association in the Folder Options control panel."


I tried downloading something off of the Windows website and this message popped up. I even tried the exefix_xp.com link I saw on another thread relating to this. I also went and tried to fix it manually like this....
If Registry Editor opened successfully, navigate to the following key:
HKEY_CLASSES_ROOT \ exefile \ shell \ open \ command.
Double-click the (Default) value in the right hand pane and delete the current value data, and then type:
"%1" %* exactly as shown including the quotes and asterisk.
Navigate to HKEY_CLASSES_ROOT\.exe
In the right-hand pane, set (default) to exefile
Exit the Registry Editor.

But everything was already set to those changes.
How can this be fixed? Please help!!

A:This file does not have a program associated with it for performing this action.

Hi and welcome to TSF can you give a link to the download,what was it for.
How to change or select which program starts when you double-click a file in Windows XP

4 more replies
Answer Match 63.84%

Using XP Home, loads of HDD space and RAM, I find that if I double-click on the icons for my CD-ROM drive or my DVD-ROM/CD-RW drive gives the following message:
This file does not have a program associated with it for performing this action. Create an association in the Foldeer Options Control panel.

If I navigate to there and look at File Types - Advanced, I see under Actions the word "Open" and if I then choose Edit, I see that it opens with C:\WINDOWS\explorer.exe "%1" Using Explorer as the application.
Any thoughts?
Alanf
 

A:This file does not have a program associated with it for performing this action

10 more replies
Answer Match 63.84%

Hi

The error message appear to all my video/picture related file. When i go to .srt, .mp4, .png, .mk files and double click it i can view the video/file with no problem. When i go to open with using right click i also can view the file.

But if i go to File menu at the toolbar or right click to context menu and click the item such as convert video/show how to open this file the message appear.

I already try to fix the registry through this www.winhelponline.com but nothing change instead i got an error message cmd.exe not properly close when i shutdown my computer.


Thanks
Azlina

A:this file does not have a program associated with it for performing this action

Hi and welcome to TSF did you try this Set or Change File Associations & Extensions in Windows 7 | 8

6 more replies
Answer Match 63.84%

This file does not have a program associated with it for performing this action. Create an association in Folder Options control panel.This what is is always saying to me when i try to open any partition it is always saying the same thing except the c:/ which is opening normally plz i need help with that .

Regards
-islador-

A:This file does not have a program associated with it for performing this action

Hi islador and welcome to TSF.
Please note that threads are user-specific and not topic-specific.

How are you trying to open the partition?

12 more replies
Answer Match 63.84%

I was using a file in OpenOffice Calc about an hour ago. (Many hours spent on it.)

I saved my work every 5 or 6 minutes. And now, I can't find it anywhere.

I got my PC from my Grandson. He broke it so it won't close all the way but it seems to work fine as long as I leave it on my desk. It was clean of files when I got it so it's easy to look everywhere. Not in the Recycle Bin. I have about 12 files in it and some are from 3 days ago so I know that I didn't empty it with the missing file in it.

How in the heck could it disappear? And is it lost forever?

Thank you

BB Kink

A:Freshly used file, missing in action

BB if you know the name of the file just type it in Start > search. It should pop up there.

8 more replies
Answer Match 63.84%

Hello everyone, I am new here. I ran Combofix and was wondering if any further action is required from me. My pc seems fine, however I did notice that the touch-scroll feature of my trackpad (using laptop) doesn't seem to work after running the program. Any ideas why this might be?
The log file is attached.
Thanks in advance

ComboFix 13-05-22.01 - Kirby 05/22/2013   6:53.2.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8028.5689 [GMT -4:00]
Running from: c:\users\Kirby\Downloads\ComboFix.exe
AV: Lavasoft Ad-Aware *Disabled/Updated* {E0D97DD4-42BA-B3F2-A5A7-22E9ACE81FC7}
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
FW: Lavasoft Ad-Aware *Disabled* {D8E2FCF1-08D5-B2AA-8EF8-8BDC523B58BC}
SP: Lavasoft Ad-Aware *Disabled/Updated* {5BB89C30-6480-BC7C-9F17-199BD76F557A}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Kirby\EVGA_PrecisionX_Setup_304.exe
c:\windows\SysWow64\frapsvid.dll
c:\windows\SysWow64\URTTemp
c:\windows\SysWow64\URTTemp\regtlib.exe
.
.
(((((((((((((((((((((((((   Files Created from 2013-04-22 to 2013-05-22  )))))))))))))))))))))))))))))))
.
.
2013-05-22 11:05 . 2013-05-22 11:05 -------- d-----w- c:\users\UpdatusUser... Read more

A:Combofix log file: any action required?

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/495423 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Answer Match 63.84%

I ran Disk Defragmenter on my computer while using mozilla firefox. I closed the browser and reopened it and got the following message:

"This file does not have a program associated with it for performing this action. Create an association in the Folder Options control panel."

I tried opening other programs such as Limewire and Internet Explorer, and got the same message. I went to the control panel and any icon I click gives me that same error, I can only go to the Folder Options in the "Tools" menu.

I also tried START>RUN>REGEDIT and get the same message. I'm not sure how this happened. I have tried going into safe mode, and I was able to log in as the "Owner" but when I tried logging in as the Administrator, it seemed to never load up. Even in safe mode I have the same problem. I believe the computer is using Service Pack 3.

I thought maybe trying System Restore might solve the problem, but I Can't even access that, I get the same message. I can't even go into Add/Remove programs.

I'm out of ideas, any help is welcome please.

A:This file does not have a program associated with it for performing this action.

Limewire is my #1 source of income to do the repair needed to clean-up the malware that it brings in. I'd look for malware first.

If your system files are corrupted, damaged and/or infected by malware, System Restore will not help you, in fact even a Repair Install may be ineffective. Your inability to boot to Safe Mode indicates serious system file corruption.


First thing, boot using a Windows XP disk to Recovery Console and run:

1) fixboot
2) fixmbr
3) chkdsk /r

Then, boot to Safe Mode by tapping the F8 key. If you can get to Safe Mode, use Start>Run>MSCONFIG and turn off everything except the microsoft services and reboot.

If you can get this far, get help on malware removal in the Securities Forum.

4 more replies
Answer Match 63.84%

Hello
I have a problem
I can't install and open any programs, I can't open my computers, my documents, control panel etc.
I olny can use my Firefox, I can open it from START,when I click on the right button and then browse the internet.
If I insert my windows XP home disk, nothing happensThis file does not have a program associated with it for perfoming this action.This is the main error
Please help me

A:This file does not have a program associated with it for perfoming this action

have you ran any hijackthis or any other virus software?
does the same thing happen when you go into safe mode?

3 more replies
Answer Match 63.84%

when i try to open any type of file that is .exe i get this message...

this file does not have a program associated with it for performing this action. create an association in the folder options control panel

I have read some other forums and some mention going to start, run then type regedit but every time i do that it asks me to windows cannot open the file and that to use the web service to find the appropriate program. How can i fix this problem?

A:this file does not have a program associated with it for performing this action

Hello corb1n5

Try the fix here

Method 1: Fixing the association settings automatically

.

3 more replies
Answer Match 63.84%

Is it possible to make a batch file in Windows 7 that would be able to do these 4 actions:

1. Change the Appearence theme, to a specified one.

2. Open up the Screen resolution window and leave it open.

3. Launch an application.

4. When application in step 3 is closed by user, then the resolution window closes, and the Appearence theme is changed back to original one.
 

A:Solved: Batch File action

16 more replies
Answer Match 63.84%

Hi

Friend of mine was playing steam game on my dekstop and then I realized that all .exe programs were associated with the steam.

What I did i uninstalled steam , and then when i double click on any .exe program a message pops up:



The icons are white and don't have their unique icons and whenever I want to open any file it says :

Code:
Choose a program you want to use to open this file
the icon look like in the link below :
http://www.animecrazy.net/forums/vil...open-file.html

Then the above message changed to the below :

Quote:




This file does not have a program associated with it for performing this action. Please install a program or, if one is already installed, create an association in the Default Programs control panel




I am using windows 7 with Norton 360 installed and I do not think it is infected with a trojan

I tried to google the only link that I found most related to my issue is the one below, but it was fix for XP not windows 7

http://www.techsupportforum.com/f10/...ct-211789.html

Any advice what I do to overcome this issue ?

Thanks

A:This file does not have a program associated with it for performing this action

Sounds like you got the virus that changes a registry key. The fix is here: http://www.winhelponline.com/downloa...&articleId=165

Scroll down just a bit for the download, run it and you should be all set from there.

3 more replies
Answer Match 63.84%

Hi, I am having the same problem that Kaktuz was having, but I cannot get the run > cmd to execute. My computer says that Windows cannot open the file and asks whether to use a web service or select a program from the list.
I recently updated my antivirus software and had it run all night, then this morning told my spybot to deny changes that had something to do with %1. I think this may be the root of my problem, but I am not sure how to undo the denial. Any suggestions?
I cannot open any file with a .exe extension, so I'm searching for help with a friend's computer.
Any suggestions would be great. Thanks!

I also want to apologize to rbalaji - I was not intending to hijack anything, just saying that what worked for the person on the initial thread did not work for me.

A:this file does not have a program associated with it for performing this action

I have the same problem that jaybulie has. There were a lot of viruses on this computer, and i did a virus scan and then a registry clean. Now I can't run any of the executables including the cmd. Please help.

8 more replies
Answer Match 63.84%

I recently resorted to manual removal of malware via the registry (the malware *is* gone, & is not the issue). However, .exe files no longer work, giving the error message "This file does not have a program associated with it for performing this action. Create an association in the Folder Options control panel."

This error is returned even with cmp (opened via Run, cmp.exe, or Command Prompt) and regedit (opened via Run).

The issue I believe was caused by failure to set the (Default) registry values to "%1" %* - instead simply deleting them.


Thus far I have been unable to locate any .com exefix files for Windows 7.

Links to an appropriate exefix file, or instructions for another fix would be greatly appreciated.

A:This file does not have a program associated with it for performing this action.

See:
http://www.techsupportforum.com/f217...ng-465425.html

1 more replies
Answer Match 63.84%

Hi there,
I'm having an error (The file does not have a program associated with it for performing this action. create an association in the set Associations controll panel) only when i try to play a DVD or a CD though, the autostart menu doesn't appear when i insert the disk and if I double click on the cd or dvd the error appears. I tried Merging the .exe file but didn't fix anything
Any ideas please?

A:The file does not have a program associated with it for performing this action

Hi ndrepebx, go to start menu > settings > control panel > autoplay.... and set your preferences.

to make a program open a file by default go here:
start menu > settings > control panel > default programs > "Set Default Programs" OR "Set a file type or protocol with a program" ....depending on which you need.

hope that helps

2 more replies
Answer Match 63.84%

I was installed Norton Antivirus 2008, and then all of the sudden, I kept getting this message, "This file does not have a program associated with it for performing this action." When I restarted, none of my executables were working. Whenever I try to run something, I get that error. If I try and go into Control Panel, it tells me "A short cut cannot be created here." If I go into My Computer, nothing shows up. I cant get into the regedit, msconfig, command prompt. I need help.

More replies
Answer Match 63.84%

Hello, all of the sudden I can't open any .exe files, meaning internet, itunes, ect. Each time I click on one, this is the message that pops up, "This file does not have a program associated with it for preforming this action. Create an association in the Set Associations control panel." Someone else on here has already posted the same problem, and an answer has been given, but the first thing it requires you to do is open up the command prompt, which I cannot do, because I still get the same pop up even for trying to run the cmd. If there is any way to fix this, I would be EXTREMELY grateful.

A:This file does not have a program associated with it for preforming this action. Cre

This is normally caused by a malware infection. Unfortunately it's hard to run any programs when you can't get anything to run.

If you have another PC you can use, download the zip file from the site below, unzip it and copy it to the Windows desktop of the machine with the exe problem. It would be best to do this in Windows safe mode.

File association fixes for Windows Vista

Once you have the file on the desktop, boot back into Windows and right click on the file. Select "Merge"

If this resolves the problem, create a post in the malware forum and follow the instructions at the top of the page:
NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

3 more replies
Answer Match 63.84%

My dvd drive recently disappeared. I managed to get that fixed. NOW everytime i try to play a dvd is says "this file does not have a program assocaited with preforming this action.create an association in the set association control panel". I tried that.. but the same thing happens.
 

A:this file does not have a program associated with preforming this action

16 more replies
Answer Match 63.84%

"This file does not have a program associated with it for performing this action. Create an association in the folder options in control panel." This is the error message i get when i try open shortcuts such as my computer, my documents, control panel. only system shortcuts not .exe shortcuts. This came about when i logged on one day and it said my registry had been changed, I've tried playing around in shortcut settings and folder options etc, there is nothing there that can work. if i go into the shortcuts properties and say open with windows explorer, it works but it won't allow me to always open with windows explorer. i am guessing there is a registry entry changed, does anyone know what key i might have to change to fix this? Cheers.

A:This file does not have a program associated with it for performing this action.

Try a system restore to a point just before the issue started.
From Start Menu/All Programs/Accessories/System Tools/System Restore.
Choose Restore my computer to an earlier time, pick a point closet to when you noticed the problem.
Follow the prompts, the computer will reboot, you will be told either it was successful or not.
If it is, see if function is restored.
Please post back and let us know whether it was or wasn't.

7 more replies
Answer Match 63.84%

hi all, recently i reinstalled new xp sp3 on my pc after installaion,, i had some video files wanted to play but cant the following message comes when i try to play the file please any help
This file does not have a program associated with it for performing this action. Create an association in the Folder Options control panel.

i have p4 D 3.ghz windows xp sp3

please help and also the pc runs slow the inter runs slow
thanks for reading,,

A:This file does not have a program associated with it for performing this action

Slowness issues aside, it is telling you that the file you are trying to play is not associated with a media player. In Windows Explorer, right click on the file, choose "Open With - Choose Program", and then select your media player or browse to the media player exe file.

You may also need to install video codecs to support that file type.

5 more replies
Answer Match 63.84%

Whenever I try to open a file with a different program to what it is set to it comes up with a new window saying 'This file does not have a program associated with it for performing this action. Create an association in the Set Associations control panel.'

For example, rather than opening an .flv file with VLC, ( I want it to open with Windows Media Player) I right click and go down to 'open With' - Choose default program...

and then the window comes up. It used to work fine but not anymore. Any ideas on how to fix it?

I'm using Vista Home Premium Dell Studio 15

More replies
Answer Match 63.84%

Posted this in XP Support and was sent here.

Quote:




I booted up my comp today and got this when I tryed to open any sort of program, I was lucky to even get firefox open.. over the past 2 days my computer has gotten INCREASINGLY slow, and now I cant open any programs. I cant do a system restore, and I cant run cmd cause my comp asks to find what program to use to run it. I noticed a toolbar called shop at home or something, and removed it but everything kinda started happening after that toolbar showed up. Thank you for your help!




I could not do the gmer as it was an exe file and I attached the dds file but that didnt really look right either. sorry I know its not alot to work with but any help is greatly appreciated!

A:This file does not have a program associated with it for performing this action..

Hello, saab900
Welcome to TSF

My name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)
Please give me some time to look over your computer's log(s).
Please take note of the following:In the meantime, please refrain from making any changes to your computer.
Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. :)
If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
Finally, please reply using the button in the lower left hand corner of your screen.
Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just put a post here so that I know you're still here. We get a lot of people who simply leave, and if there is no contact for that amount of time I will have to assume you have "vanished" .

Please go to start -> run -> C:\Windows.

Find the file "regedit.exe".

COPY that file as something like "regedit.scr" and see if you are able to run it.

Also, please try the same with CMD, which is located in C:\Windows\System32\C... Read more

10 more replies
Answer Match 63.84%

This is kind of driving me a bit bonkers now, as I am trying to organize the files on my system, and am consistently butting heads against this problem. It always seems to be the last file I highlight. In other words.. I have two directories open on the screen, and am simply looking to drag files/folders from one directory to another. To do this, you almost always have to highlight the folder you want to move, and doing this seems to put a lock on that folder. If I highlight more folders, it seems to be ok, except for the last one I highlight will always fail to copy.

Any way to prevent windows from locking files in this way?

A:Action cannot be completed because the Folder or File is..

Are you sure or is it a specific file?

Can't delete file. says that it is open in another program. Solved - Windows 7 Help Forums

12 more replies
Answer Match 63.84%

. . . Create an asscociation in the set associations control panel.


I keep getting this message when i try and play the music i converted from you tube that is saved in my music file (windows)

I have ran malware bites in safe mode, scanned my computer for a virus using AVG and ran cc cleaner but no threats have been found.

When you give me instructions can you please leave out the jardon, i dont understand it. Please also be clear and detailed. Im useless. Talk to me like a baby if you like!! ha thankyou xxxxxxxxxxxxxxxxxxx

A:This file does not have a programme associated with it for performing this action

Hello welcome to TSF! What is the music file extension? Examples would be .mp3 .wma? What did you use to convert the youtube video to a audio format? (Format means audio format like mp3). Finally what media player are you using to try to play the audio files?

Also try going to the file right click on it then select "Properties" go to "Change" a list of compatible programs will be appear. Try selecting Windows Media Player. Then click on "OK"

6 more replies
Answer Match 63.84%

This is a bit odd problem to me.

Whenever I try to change any file's default program through right-click>open with>change default program, I get this:

"This file does not have a program associated with it for performing this action. Please install a program or, if one is already installed, create an association in the Default Programs control panel."

But... I can open my PC management. I can change the default program via right-click>properties>Change, and I can open explorer.exe. I can double-click it to open it with the default program.

The reason I want this to be fixed is to get a bit faster way to open my pictures in my image editing program WITHOUT making the file type default.

How to fix this?

A:This file does not have a program associated with it for performing this action

You need to make something default in order to open it Change which programs Windows uses by default

19 more replies
Answer Match 63.84%

I am suddenly unable to open any of my Libraries or main file folders in Windows 7. When I double click on ANY Windows folder on any Drive (C:, D:, E:), I get the above message ("This file does not have a program associated with it for performing this action", etc.). I ran a full Norton Internet Security virus scan and it came up totally clean. I can access individual files and run programs once i have single clicked on the folder, but double clicking the folders themselves brings up the error message. PLEASE HELP!

A:This file does not have a program associated with it for performing this action, etc.

UPDATE: I ran Uniblue Registry Booster and it seems to have fixed the problem. I'm not sure what caused it or how it was fixed, but for now at least I can access my Windows folders.

1 more replies
Answer Match 63.84%

(Create an association in the Set Association control Panel)

Hey, I recently had Vista Guardian on my computer and manually deleted the files for it in regedit.However, i think i might have deleted something else as well, because now i cant open any programs on my laptop. My computer says that this file needs an associated program for it to work. I've read a couple of threads stating to go into RUN then type Command.exe but it still wont let me do this. I then tried Command.com and it worked, but when i type regedit.exe regedit.cm it still comes up with that popup.

i think i know what to do because i read a guys post who was having simliar problems

If Registry Editor opened successfully, navigate to the following key:
HKEY_CLASSES_ROOT \ exefile \ shell \ open \ command.
Double-click the (Default) value in the right hand pane and delete the current value data, and then type:
"%1" %* exactly as shown including the quotes and asterisk.
Navigate to HKEY_CLASSES_ROOT\.exe
In the right-hand pane, set (default) to exefile
Exit the Registry Editor.

But i can't get into my regedit, any ideas?

(i Also cant do system restore as i have no restore points)

A:This File does not have a program associated with it for performing this action.

Quote:





Originally Posted by WilsonDean


(Create an association in the Set Association control Panel)

Hey, I recently had Vista Guardian on my computer and manually deleted the files for it in regedit.However, i think i might have deleted something else as well, because now i cant open any programs on my laptop. My computer says that this file needs an associated program for it to work. I've read a couple of threads stating to go into RUN then type Command.exe but it still wont let me do this. I then tried Command.com and it worked, but when i type regedit.exe regedit.cm it still comes up with that popup.

i think i know what to do because i read a guys post who was having simliar problems

If Registry Editor opened successfully, navigate to the following key:
HKEY_CLASSES_ROOT \ exefile \ shell \ open \ command.
Double-click the (Default) value in the right hand pane and delete the current value data, and then type:
"%1" %* exactly as shown including the quotes and asterisk.
Navigate to HKEY_CLASSES_ROOT\.exe
In the right-hand pane, set (default) to exefile
Exit the Registry Editor.

But i can't get into my regedit, any ideas?

(i Also cant do system restore as i have no restore points)






Its a re-install for you then - no restore points, no reg backups and youre re-installing. Never mess with the registry unless you know what youre doing,
even if you do know, it is prudent to create eit... Read more

3 more replies
Answer Match 63.84%

When I try to delete a few videos on my desktop it will not allow me by saying that they are use by another program. The other program has been uninstalled a little while back so I am not sure how to fix. I've checked several places and it's not on my computer any longer. How do I get this stuff deleted

A:The action can't be completed bec the folder/file is in use by another

Can you delete them after a reboot?

Can you delete them after a reboot into safe mode?

2 more replies
Answer Match 63%

DDS (Ver_09-06-26.01) - NTFSx86 Run by William at 18:34:19.70 on 16/07/2009Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14Microsoft Windows XP Professional 5.1.2600.3.1252.353.1033.18.3326.2618 [GMT 1:00]AV: COMODO Antivirus *On-access scanning enabled* (Updated) {043803A5-4F86-4ef7-AFC5-F6E02A79969B}FW: COMODO Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}============== Running Processes ===============D:\WINDOWS\system32\Ati2evxx.exeD:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeD:\Program Files\Comodo\COMODO Internet Security\cmdagent.exeD:\WINDOWS\system32\svchost.exe -k netsvcsD:\Program Files\Windows Defender\MsMpEng.exeD:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeD:\WINDOWS\system32\Ati2evxx.exeD:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exeD:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exesvchost.exeD:\WINDOWS\system32\spoolsv.exeD:\Program Files\Creative\Shared Files\CTAudSvc.exesvchost.exeD:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeD:\Program Files\Bonjour\mDNSResponder.exeD:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exeD:\Documents and Settings\All Users\Applica... Read more

A:Infected with Worm:Win32/Bagle.gen!C

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

9 more replies