1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Annoying pop ups

Discussion in 'Malware and Virus Removal Archive' started by jamon08, 2007/09/08.

  1. 2007/09/27
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    Hi Geri

    When I paste it just accepts, but waits 4 next command, if I hit enter it waits for next command. I must be doing something wrong.
    I am not in the kids account because I can't get an internet connection to do a copy and paste on that account, but when I tried to do for you 2days ago I was in the kids account, I typed it in exactly but it was doing the same thing.

    Kids account is "1 "


    How do I do this ?

    Cheers
    Jae
     
    Last edited: 2007/09/27
  2. 2007/09/27
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi Jae,

    You can create this bat file from your account, but you must be logged onto the kids account when it is run so that it gathers the information from that account.

    Highlight and copy the contents of the quote box below to a blank notepad. Save it to My Computer>Local Disk C: as;

    Filename: check.bat
    Save as type: All Files (*.*)

    Logon to the kids account, open My Computer>Local Disk C: and double click check.bat to run it. It will run quickly and close, and it will create a text file named shellfolders.txt in C:\
    Logon to your account and open C:\shellfolders.txt then copy the contents and post them here.
     

  3. to hide this advert.

  4. 2007/09/28
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    Hi Dave

    Good skills !!!


    ! REG.EXE VERSION 3.0

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
    Local AppData REG_SZ C:\Documents and Settings\1\Local Settings\Application Data

    ! REG.EXE VERSION 3.0

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
    Local AppData REG_EXPAND_SZ %userprofile%\Local Settings\Application Data

    Cheers, Jae
     
  5. 2007/09/28
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi Jae,

    Well, that profile is missing a lot of necessary information on those two registry keys. I've created a reg fix for you. Make sure you run the reg fixes ONLY on the kid's account! Download regs.zip and save it to Local Disk C:\
    Make sure the kids account has Administrative rights at this time.

    Now logon to the kids account.
    • Open Local Disk C:, right click on regs.zip and select Cut, then close Local Disk C:
    • Right click the desktop and select Paste
    • Now right click regs.zip and extract the files. It contains two registry files; ShellFolders.reg and UserShellFolders.reg
    • Double click each reg file and click Yes to merge the information to the registry. You should get a succeeded message.
    • Log off the kids account, then back on.
    • Run the check.bat file again and post the contents of the shellfolders.txt again.

    Can you change the desktop on that account now? Can you get an internet connection from that account?

    ** Note to anyone else thinking to use those reg files ........ only the UserShellFolders.reg can be run on anyone's machine. Running the ShellFolders.reg file on any machine or account other than the kids account on Jae's computer will have severe, detrimental negative effects on the user profile. In other words, DON'T use the ShellFolders.reg on your machine! **
     
  6. 2007/09/28
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    Hi Dave,

    I got an Error message that said " Cannot Import C: etc etc, Not all data successfully written to registry, some keys open by system or other process "

    I was on the kids account, as administrator and I made sure not other windows where open.

    Cheers
    Jae
     
  7. 2007/09/28
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Were you able to extract the reg files so that they were on the desktop?
     
  8. 2007/09/29
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    Yup,
    It was all going cool till that step.
     
  9. 2007/09/29
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    I meant it was algood till I went to "merge information to registry "

    Am I doing something wrong ?

    Cheers, Jae
     
  10. 2007/09/29
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Which of the two reg files errored? You did try them both?

    Run the check.bat again from that account so we can see if anything changed.
     
  11. 2007/09/29
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    Hi Dave,

    Yes, I tried both, both had the same error.


    ! REG.EXE VERSION 3.0

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
    Local AppData REG_SZ C:\Documents and Settings\1\Local Settings\Application Data

    ! REG.EXE VERSION 3.0

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
    Local AppData REG_EXPAND_SZ %userprofile%\Local Settings\Application Data


    Cheers

    Jae
     
  12. 2007/09/29
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hmmm ..... would you mind sending me a zipped copy of the file ntuser.dat from C:\Documents and Settings\1 ?

    While logged on to your account, browse to C:\Documents and Settings\1 and right click the ntuser.dat file, then select Send To>Compressed (zipped) Folder. It will create a zipped file named ntuser.zip in the same location. Attach that zip to an email to me. Put RE: smitRem in the subject line of the email. I'll make the required adjustments and send it back with instructions.
     
  13. 2007/09/29
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi Jae,

    Just received your email. The attached file is not the correct one. Please read my instructions above again then send me the ntuser.zip file.

    Thanks!
     
  14. 2007/09/29
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Thanks Jae. That was the correct file, but it was empty. Please delete the ntuser.zip file (do NOT delete the ntuser.dat file!!)

    Highlight and copy the bolded command below.

    regedit.exe /e C:\ntus.txt "HKEY_CLASSES_ROOT\.dat "

    Click Start>Run then paste the command and hit enter. Open My Computer>Local Disk C: and post the contents of ntus.txt here please.
     
  15. 2007/09/29
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    Hi Dave,

    Windows Registry Editor Version 5.00

    [HKEY_CLASSES_ROOT\.dat]
    "NoOpen "=" "
    @= "DAT_auto_file "

    Are we winning ?

    Cheers Jae
     
  16. 2007/09/29
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Need to do another.

    Click Start>Run and type cmd then hit Enter to open a command window. Highlight and copy the bolded command below, the right click>Paste it in the command window and hit Enter.

    reg query "HKEY_CLASSES_ROOT\dat_auto_file" /s>>c:\dat.txt

    Post the contents of C:\dat.txt

    We will! ;)
     
  17. 2007/09/29
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    Hi Dave,

    ! REG.EXE VERSION 3.0

    HKEY_CLASSES_ROOT\dat_auto_file
    <NO NAME> REG_SZ

    HKEY_CLASSES_ROOT\dat_auto_file\shell
    <NO NAME> REG_SZ open

    HKEY_CLASSES_ROOT\dat_auto_file\shell\open
    <NO NAME> REG_SZ &Open

    HKEY_CLASSES_ROOT\dat_auto_file\shell\open\command
    <NO NAME> REG_SZ C:\Program Files\Windows Media Player\wmplayer.exe /Open "%L "

    HKEY_CLASSES_ROOT\dat_auto_file\shell\play
    <NO NAME> REG_SZ &Play

    HKEY_CLASSES_ROOT\dat_auto_file\shell\play\command
    <NO NAME> REG_SZ C:\Program Files\Windows Media Player\wmplayer.exe /Play "%L "

    ! REG.EXE VERSION 3.0

    HKEY_CLASSES_ROOT\dat_auto_file
    <NO NAME> REG_SZ

    HKEY_CLASSES_ROOT\dat_auto_file\shell
    <NO NAME> REG_SZ open

    HKEY_CLASSES_ROOT\dat_auto_file\shell\open
    <NO NAME> REG_SZ &Open

    HKEY_CLASSES_ROOT\dat_auto_file\shell\open\command
    <NO NAME> REG_SZ C:\Program Files\Windows Media Player\wmplayer.exe /Open "%L "

    HKEY_CLASSES_ROOT\dat_auto_file\shell\play
    <NO NAME> REG_SZ &Play

    HKEY_CLASSES_ROOT\dat_auto_file\shell\play\command
    <NO NAME> REG_SZ C:\Program Files\Windows Media Player\wmplayer.exe /Play "%L "

    Cheers Jae
     
  18. 2007/09/29
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Are you comfortable editing the registry, or should I create a reg file to fix that key? It's a pretty simple fix manually, and I can give you straightforward instructions.
     
  19. 2007/09/29
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    yup, lets do it ..
     
  20. 2007/09/29
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Click Start>Run and type regedit then hit enter.
    Click the + signs to navigate to the following location.

    HKEY_CLASSES_ROOT\dat_auto_file\shell

    Click the + signs for the shell key and all subkeys of the shell key (play and open)

    Now click the play key once to select it, then right click and select delete.



    Click the shell\open key to select it. In the right pane you will see the following Value, Type and Data.

    (Default) REG_SZ &Open

    Double click the (Default) Value, then remove the &Open data, leaving it blank. Click OK.



    Click the shell\open\command key. Double click the (Default) Value then type or copy and paste the following Data, replacing the current media player data.

    C:\Windows\system32\notepad.exe %1



    Now, click the shell key to select it, then right click and select New>Key
    Name it edit

    Click the shell\edit key to select it, then right click and select New>Key
    Name it command



    Click the shell\edit key to select it. Double click the (Default) Value in the right pane and type &Edit then click OK.


    Click the shell\edit\command key to select it. Double click the (Default) Value in the right pane and type or copy and paste the following command then click OK.

    C:\Windows\notepad.exe %1



    Close the registry editor.


    Delete the file C:\dat.txt


    Open a command window and paste the following command then hit enter.

    reg query "HKEY_CLASSES_ROOT\dat_auto_file" /s>>c:\dat.txt

    Post the contents of C:\dat.txt
     
  21. 2007/09/30
    jamon08

    jamon08 Inactive Thread Starter

    Joined:
    2007/09/08
    Messages:
    85
    Likes Received:
    0
    Hi Dave,

    Sorry, had to feed da kids


    ! REG.EXE VERSION 3.0

    HKEY_CLASSES_ROOT\dat_auto_file
    <NO NAME> REG_SZ

    HKEY_CLASSES_ROOT\dat_auto_file\shell
    <NO NAME> REG_SZ open

    HKEY_CLASSES_ROOT\dat_auto_file\shell\edit
    <NO NAME> REG_SZ &edit

    HKEY_CLASSES_ROOT\dat_auto_file\shell\edit\command
    <NO NAME> REG_SZ C:\Windows\notepad.exe %1

    HKEY_CLASSES_ROOT\dat_auto_file\shell\open
    <NO NAME> REG_SZ

    HKEY_CLASSES_ROOT\dat_auto_file\shell\open\command
    <NO NAME> REG_SZ C:\Windows\system32\notepad.exe %1

    Cheers

    Jae
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.