Windows XP will not run some .exe files (Full description in post)

[boooooos]

History of problem

I was infected with msblaster. I patched my system from Microsoft's website, but could not run live update with Norton Anti-Virus because my subscription ran out. I purchased Norton System works 2003 (with NAV included) and had to delete my previous version of NAV in order to install it. I downloaded Rnav2003.exe to remove norton Anti-Virus manually (could'nt do it from add/remove programs due to a corrupt or missing file..somewhat common problem apparently..).

Now, with my old version of NAV now off my system I was on the internet for about 20 minutes with absolutely no auto-protect of any kind running (I know... /slaps forehead, "Doh!&quot.

After the 20 minutes I was unprotected, all of the icons on my desktop went to the generic icon (the icon that appears when the OS does not recognize the file extension). Before I knew it, every single icon (on the desktop, on start menu, etc...) was showing as generic. I was unable to run task manager, cmd.exe, nothing...

I rebooted and Windows (WinXP) froze at the logo page (not the black background stage where you see the Windows XP logo and a blue night-rider like bar going from left to right, but right after that where its suppose to say "loading your personal settings"...It has a blue background) I rebooted several times with the same result. Booted into safe mode, same result.

I finally booted with the WinXP cd and did an install over the old OS (not repair). I was able to get back to my desktop, install the new version of NAV, clear out msblaster, and get all virus definitions up to date.

However....some of my programs and files are still not recognized. And here is the WEIRD thing... One of the programs that Windows didn't recognize was my DSL connection. I noticd the folder had disappeared from my system along with some other folders..(I didn't think this particular virus deleted stuff), So I decided to put in the CD and re-install the program. The CD's auto-run began, and the installation wizard window came up...BUT, the window was grey! Nothing inside it (like a EULA, "next" button, etc...It did have the minimize, maximize, and close funtions, however) When i tried to close the window it gave me the usual "Are you sure you want to quit setup?"

This is one that makes you scratch your head, no doubt... Any ideas?

Possible problems as I see it..

1.) after I installed over my old OS and got some of my programs back, but before I was able to clear the virus out, the virus was still active and screwing things up. (maybe I could do yet another install to get back to normal)

2.) It seems everything AFTER I ran Rnav2003.exe is fine. Maybe the removal of the old NAV caused my registry to be hosed? (I'm not to well versed in the delicacies of the regestry)

3.) God hates me.

 

[bcastner]

Quote:
"I finally booted with the WinXP cd and did an install over the old OS (not repair). I was able to get back to my desktop, install the new version of NAV, clear out msblaster, and get all virus definitions up to date."

If I understand you correctly, you ignored the first R(epair) choice, but chose the second R(epair) choice and performed an in-place upgrade of XP over your existing installation.

What concerns me is that the virus symptoms you describe are not msblast symptoms, but something else, or both. A true clean install of XP would have been warranted, a repair upgrade re-installation an iffy proposition.

The description of your problem is here:

http://support.microsoft.com/default.aspx?scid=kb;en-us;329441

The following will let you make a new connection. The first thing you should do is enable the native ICF firewall. Then go to Windows Update and install Service Pack 1. Then go to Windows update and apply the RPC Vulnerability Hotfix. Then complete the remaining missing Hotfixes.

WORKAROUND
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

If you cannot reinstall SP1, verify that the Objectname string value is set to LocalSystem in the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan

After you do so, delete the following registry subkeys. These subkeys on a Windows XP-based computer that does not have SP1installed can cause the symptoms described earlier:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\25

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\26

To delete these keys, follow these steps.

Note This procedure includes steps to back up the registry keys before you modify them.
Click Start, and then click Run.
In the Open box, type regedit, and then click OK.
Locate and then click the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan

On the File menu, click Export.
In the File Name box, type exported rasman key, and then click Save.
In the RasMan key, locate and then click the ObjectName string value.

If this value is not set to LocalSystem, follow these steps:
On the Edit menu, click Modify.
In the Value data box, type LocalSystem, and then click OK.
Locate and then double-click the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\25

On the Edit menu, click Delete.
Click Yes to confirm that you want to delete the selected registry key.
Repeat steps 7 to 9 to delete the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\26

Quit registry editor, and then restart your computer.