Question about Microsoft Windows XP Professional With Servise Pack 2 (e8503040) for PC

1 Answer

Win32 hi, recently i had virus in my comp called win32.worm.autorun.MQ i restored my windows through restore after cleaning up when i click on my drive it gives me error saying "resycled\boot.com is not valid win32 application" when i right click the drive the frist option is autorun is use to be open ....the 2nd option is open..when i click open option i get error win32 is not valid application ..3rd option is search n 4th is explorer however i can acces my drive through explore option .. can anyone plss tell how can i restore this plssssss

Posted by on

  • hopkinzer jay May 11, 2010

    first thing you need to check if you are still noinfected with virus to check it

    1)Explore any drive
    2)goto Tool >Folder options > then View and Make sure show hidden files and folder is checked if its not selected select it click ok

    2) check if you can see hidden folder and files in system

    if your hidden folders and files are displayed we can move for the solution if not we need to first remove virus from your system



  • Anonymous Mar 16, 2014

    after I click all the menu in boots options, none of the option is working. all option after I click one by one , I get this error status Status:0xc0000001.

×

1 Answer

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    MVP:

    An expert that got 5 achievements.

    Governor:

    An expert whose answer got voted for 20 times.

    Scholar:

    An expert who has written 20 answers of more than 400 characters.

  • Expert
  • 34 Answers

Hello,
Hopefully this will get your system back up and running well.  First download from malwarebytes.org their free anti-malware program. Then follow the steps below.

  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. 
  • On the Scanner tab:
    • Make sure the "Perform Quick Scan" option is selected.
    • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
  • Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally(not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.

I hope that this helps you out, and that you are able to restore your system back to running condition.
Ken

Posted on Jan 06, 2009

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

1 Answer

My program file regsvr.exe delete.How restore this


Dear Amartya,

Here is a solution for your problem.




What the regsvr.exe virus does?
• This worm creates folders and a registry entry to enable its automatic execution at every system startup.
• This worm also creates a scheduled task to enable its automatic execution at a specified date and/or time.
• It also creates Autorun.inf file for its auto execution.
Solution to fix the problem:
1. If the task manager and registry editor is disabled then we need to enable them first. Read this post.
2. Delete the Autorun.inf file created by the virus. Read this post to know how to do that.
3. Now type msconfig in the Run dialog and click on startup tab.
4. Look for regsvr and uncheck any options, click OK.
5. Now traverse to control panel -> scheduled tasks, and delete the At1 task that might be listed there.
6. Type regedit in the Run dialog to open the registry editor.
7. Click on Edit -> Find and search for regsvr.exe
8. Just delete all the occurrences of regsvr.exe virus (do not confuse it with regsvr32.exe which is not a virus).
9. Navigate to entry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon and modify the entry Shell = "Explorer.exe regsvr.exe" to delete the regsvr.exe from it.


I think it helps.Let me know


Best regards
Chandrashekahr Bhat

Dec 25, 2010 | Microsoft Windows XP Professional

Tip

How to Recover Your Computer from Virus Attack {XP ,VISTA ,WINDOWS 7 ,Etc }


Software 1:DiskHeal
download
6863252.jpg

this software is used to Restore the
A:folder Option (Hidden files option restore)
B:C:, D:, E, F,_ _ Etc Drive not opening when double clicked from "MY Computer" Pendrive not opening etc.
C:Task man not openning (ie to recover Task Man is disabled by your ADMINISTRATOR error")
and more............
D:Restore Registry Editor

Software 2:Autorun virus removal (can remove autorun virus form your computer)
download
02281ae.jpg

A:restore Exe file error's
B:anti-virus not installing {some viruses block installation of Anti-virus software } provide solution for these problem
C:can repair Safe Mode Option{if you are unable to access Safe mode .some viruses block's the safe mode}
and more........

software 3:similar software (file size is 22MB)
download
e85e5c6.jpg

software 4:Antivicrypt
To recover files infected by .viCrypt” extension. virus
download

4:Install antivirs software
update and do full system scan
download
fd81552.jpeg

5:Go to Run type Cmd and Type SFC/SCANNOW and press enter key
if your windows files are missing this command will restore the missing
files from windows CD"
c6c79c8.jpg
make sure that you have the windows installation CD to try command


6:Install Registry cleaner
download
d2eb8f8.png

Registry cleaner software -delete invalid entry in the registry thus speed up your system

(please rate me)

on Jan 12, 2010 | Operating Systems

1 Answer

I have a Compaq 7550 desk top. I loaned the main part (not monitor) to someone and now I have a Symntac thing that won't go away no matter what I do. I was told to do a system restore, but it won't let me...


Boot up your PC, as its booting press the F8 key several times, you should then be given several boot options. Choose to start in safe mode.

This loads a windows shell from which you should be able to run a system restore.

Apr 30, 2010 | Operating Systems

2 Answers

Net-worm.win32.kido.ih virus free removal required


Have you tried AVG antivirus webpage? They have a free version of their software, 100% usable at :

http://download.cnet.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10320142.html?part=dl-10044820&subj=dl&tag=button&cdlPid=11014801

Per their website, there is the following info on your worm:
The first version of this virus which is recognized by AVG as Downadup (alternativelly I-Worm.Generic) has been detected at the end of November / begining of December, 2008. Currently there are over 300 unique versions of this virus. AVG detects and protects against all known variants of the worm.
Hope it takes care of it. If not let me know and I'll help you with fixing it so AVG does its job.

Oct 09, 2009 | Operating Systems

1 Answer

Problem with windows xp


Sometimes it happens in windows XP that you are not able to open drives on your hard disk. When you double click on the drives icons or right click on the drive>>explore in My computer ,the drive does not open.

This problem is generally caused by most of the viruses which infect windows XP system. They block or restrict your access to any of the drives.

But don’t worry this is not a big trouble it can be fixed easily.

Fix:

Normally when a virus infects a windows system which causes a drive opening problem, it automatically creates a file named autorun.inf in the root directory of each drive.

This autorun.inf file is a read only ,hidden and a system file and the folder option is also disabled by the virus. This is deliberately done by the virus in order to protect itself. autorun.inf initiates all the activities that the virus performs when you try to open any drive.



Very simple . virus create some bad registry if you want to solve this problem then delet this registry


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion­\Explorer\MountPoints2


delete all drive from here

May 11, 2009 | Microsoft Windows XP Professional

1 Answer

Removal of win32mode of hard drives


While researching this problem, it seems that the most likely cause is a virus called FUNNY UST SCANDAL.....it is mostly an annoyance, not too evil, they say.

Please back up your data!

Some people recommend using a noob killer program to kill the virus, but when searching online for one, I come up with very sketchy sites, use at your own risk!

Others have recommended the following site for answers:
http://www.edmartechguide.com/2007/11/funny-ust-scandal-aviexe-remover.html

Then there are these anti virus programs to try, one is free, other a trial, both good:
http://www.eset.com/download/free_trial_download_eav.php

http://www.avast.com/eng/download-avast-home.html

FINALLY.......I found a jumble of instructions to try to fix the problem, and they are as follows.
I have not had this problem myself, but it looks like a messy one, good luck!



Go to Start/Run and type :

reg.exe add "HKCRDriveshell" /ve /d "none" /f

then type:

regsvr32 shell32.dll

If this doesn't work - try this

Problem

when you open any drive letter from your pc it gives the following error

c: application can not run in Win32 mode
d: application can not run in Win32 mode

Solution

To correct and solve this error follow this procedure

Run Task Manager (Ctrl-Alt-Del or right click on Taskbar)

Stop wscript.exe process if available by highlighting the process name and clicking End Process.

Then terminate explorer.exe process.

In Task Manager, click on File -> New Task (Run…).

Type “cmd” (without quotes) into the Open text box and click OK.

Type the following command one by one followed by hitting Enter key

del c:autorun.* /f /q /a
del d:autorun.* /f /q /a
del e:autorun.* /f /q /a

c, d, e each represents drive letters on Windows system. If thereare more drives or partitions available, continue to command byaltering to other drive letter. Note that you must also clean theautorun files from USB flash drive or portable hard disk as theexternal drive may also be infected.

In Task Manager, click on File -> New Task (Run…).

Type “regedit” (without quotes) into the Open text box and click OK.

Navigate to the following registry key

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

Check if the value name and value data for the key is correct (thevalue data of userint.exe include the path which may be different thanC drive, which is also valid, note also the comma which is also needed)

“Userinit”=”C:WINDOWSsystem32userinit.exe,”

If the value is incorrent, modify it to the valid value data.

Dec 30, 2008 | Microsoft Windows XP Professional for PC

2 Answers

How do i get rid of a W32.SillyFDC virus


The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.
  1. Disable System Restore (Windows Me/XP).
  2. Update the virus definitions.
  3. Run a full system scan.
  4. Delete any values added to the registry.

For specific details on each of these steps, read the following instructions.

1. To disable System Restore (Windows Me/XP)
If you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.

Also, a virus scan may detect a threat in the System Restore folder even though you have removed the threat.

For instructions on how to turn off System Restore, read your Windows documentation, or one of the following articles:

Note: When you are completely finished with the removal procedure and are satisfied that the threat has been removed, reenable System Restore by following the instructions in the aforementioned documents.

For additional information, and an alternative to disabling Windows Me System Restore, see the Microsoft Knowledge Base article: Antivirus Tools Cannot Clean Infected Files in the _Restore Folder (Article ID: Q263455).

2. To update the virus definitions
Symantec Security Response fully tests all the virus definitions for quality assurance before they are posted to our servers. There are two ways to obtain the most recent virus definitions:
  • Running LiveUpdate, which is the easiest way to obtain virus definitions.

    If you use Norton AntiVirus 2006, Symantec AntiVirus Corporate Edition 10.0, or newer products, LiveUpdate definitions are updated daily. These products include newer technology.

    If you use Norton AntiVirus 2005, Symantec AntiVirus Corporate Edition 9.0, or earlier products, LiveUpdate definitions are updated weekly. The exception is major outbreaks, when definitions are updated more often.


  • Downloading the definitions using the Intelligent Updater: The Intelligent Updater virus definitions are posted daily. You should download the definitions from the Symantec Security Response Web site and manually install them.

The latest Intelligent Updater virus definitions can be obtained here: Intelligent Updater virus definitions. For detailed instructions read the document: How to update virus definition files using the Intelligent Updater.

3. To run a full system scan
  1. Start your Symantec antivirus program and make sure that it is configured to scan all the files.

    For Norton AntiVirus consumer products: Read the document: How to configure Norton AntiVirus to scan all files.

    For Symantec AntiVirus Enterprise products: Read the document: How to verify that a Symantec Corporate antivirus product is set to scan all files.


  2. Run a full system scan.
  3. If any files are detected, follow the instructions displayed by your antivirus program.
  4. Delete the autorun.inf file from writeable removable devices, if necessary.
Important: If you are unable to start your Symantec antivirus product or the product reports that it cannot delete a detected file, you may need to stop the risk from running in order to remove it. To do this, run the scan in Safe mode. For instructions, read the document, How to start the computer in Safe Mode. Once you have restarted in Safe mode, run the scan again.


After the files are deleted, restart the computer in Normal mode and proceed with the next section.

Warning messages may be displayed when the computer is restarted, since the threat may not be fully removed at this point. You can ignore these messages and click OK. These messages will not appear when the computer is restarted after the removal instructions have been fully completed. The messages displayed may be similar to the following:

Title: [FILE PATH]
Message body: Windows cannot find [FILE NAME]. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.

4. To delete the value from the registry
Important: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified subkeys only. For instructions refer to the document: How to make a backup of the Windows registry.
  1. Click Start > Run.
  2. Type regedit
  3. Click OK.

    Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Security Response has developed a tool to resolve this problem. Download and run this tool, and then continue with the removal.

  4. Navigate to the following registry subkeys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
    HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\"load"

  5. In the right pane, delete any values associated with the worm.


  6. Exit the Registry Editor.

Dec 18, 2008 | Microsoft Operating Systems

2 Answers

Funny UST Scandal


hi my friend got that last week to... ehat you need to do is download kaspersky. after running kaspersky. that will be gone. you can download kaspersky @ majorgeeks.com Here are some examples of autorun viruses which rely on the autorun function of Windows to infect PC’s and flash drives. Funny UST Scandal.avi.exe Autorun.vbs win32.autorun.k copy.exe imgkulot taga lipa are autorun.vbs recycler FS6519.dll.vbs strawberry from baguio W32/Perlovga (copy.exe | host.exe) VBS_RESULOWS.A Bha.dll.vbs w32automa worm (Autorun.vbs) Trojan.Win32.VB.atg | Win32/Dzan | Worm_vb.bnr (tel.xls.exe | mmc.exe) W32/RJump.worm (RavMonE) Worm.Win32.Delf.bf | W32.Fujacks (spoclsv.exe) W32.Fujacks.BH (****.vbs) WORM_AGENT.PGV (soundmix.exe) W32/Hakaglan.worm (RVHost.exe) Trojan.Win32.VB.ayo [AVP] (Macromedia_Setup.exe) Trojan.VBS.DeltreeY.b#1 (Destrukto!!! | destrukto.vbs) if you want to manually delete it... Solution is here: 1. Start Notepad [Start Menu-All Programs-Accessories-Notepad] or right-click any empty space in your desktop then select New-Text Document 2. Copy the following text. (note: Everything in between the square brackets should be in one line) REGEDIT4 [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionIniFileMappingAutorun.inf] @="@SYS:DoesNotExist" 3. Save the file with a name (anything) like DisableAutoRun.reg (The extension .reg is the important part) 4. Double Click your newly created registry file. Choose yes or continue to the warning that will appear. hope this helps

Jan 24, 2008 | Operating Systems

9 Answers

D:\ application can not run in Win32 mode


To correct and solve this error, follow this steps:

1. Run Task Manager (Ctrl-Alt-Del or right click on Taskbar)
2. Stop wscript.exe process if available by highlighting the process name and clicking End Process.
3. Then terminate explorer.exe process.
4. In Task Manager, click on File -> New Task (Run…).
5. Type “cmd” (without quotes) into the Open text box and click OK.
6. Type the following command one by one followed by hitting Enter key:

del c:\autorun.* /f /s /q /a
del d:\autorun.* /f /s /q /a
del e:\autorun.* /f /s /q /a

c, d, e each represents drive letters on Windows system. If there are more drives or partitions available, continue to command by altering to other drive letter. Note that you must also clean the autorun files from USB flash drive or portable hard disk as the external drive may also be infected.
7. In Task Manager, click on File -> New Task (Run…).
8. Type “regedit” (without quotes) into the Open text box and click OK.
9. Navigate to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
10. Check if the value name and value data for the key is correct (the value data of userint.exe include the path which may be different than C drive, which is also valid, note also the comma which is also needed):

“Userinit”=”C:\WINDOWS\system32\userinit.exe,”

If the value is incorrent, modify it to the valid value data.

Dec 15, 2007 | Microsoft Windows XP Professional for PC

1 Answer

Clicking on c and d drive opens it in a new window, producing multiple windows


that's a trojan worm...Win32/MyTob u can have the worm deleted by scanning your system using avast anti-virus.get a free copy from www.avast.com and dont forget to register...

Nov 03, 2007 | Microsoft Windows XP Professional for PC

Not finding what you are looking for?
Microsoft Windows XP Professional With Servise Pack 2 (e8503040) for PC Logo

94 people viewed this question

Ask a Question

Usually answered in minutes!

Top Microsoft Operating Systems Experts

Brian Sullivan
Brian Sullivan

Level 3 Expert

27725 Answers

Scott Fryer

Level 2 Expert

80 Answers

Carlos L. Burgos
Carlos L. Burgos

Level 2 Expert

508 Answers

Are you a Microsoft Operating System Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...