Inactive [InActive] Possible malware?

Highlight and copy the contents of the code box below.

Code:

@echo off
echo Searching ... please wait
dir %Systemdrive%\inetcpl.cpl /a h /s >check.txt
start notepad check.txt
exit
cls

Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own and a log will open. Post the contents of that log..

 

Log file

Volume in drive C is System Master
Volume Serial Number is 2C11-5164

Directory of C:\WINDOWS\$NtServicePackUninstall$

08/04/2004 07:00 AM 358,400 inetcpl.cpl
1 File(s) 358,400 bytes

Directory of C:\WINDOWS\ie7

04/13/2008 07:12 PM 360,960 inetcpl.cpl
1 File(s) 360,960 bytes

Directory of C:\WINDOWS\ServicePackFiles\i386

04/13/2008 07:12 PM 360,960 inetcpl.cpl
1 File(s) 360,960 bytes

Directory of C:\WINDOWS\system32

08/26/2008 02:24 AM 1,831,424 inetcpl.cpl
1 File(s) 1,831,424 bytes

Directory of C:\WINDOWS\system32\dllcache

08/26/2008 02:24 AM 1,831,424 inetcpl.cpl
1 File(s) 1,831,424 bytes

 

Please rename the copy in C:\WINDOWS\system32\dllcache to inetcpl.cpl.old
Grab a copy of the one in C:\WINDOWS\ServicePackFiles\i386 and put it in the C:\WINDOWS\system32\dllcache folder.
Now delete the one in C:\WINDOWS\system32 then hit F5 to refresh and see if it gets regenerated.
If all good, restart and see if things are working normally again.

 

Fixed but new problems

I can now open everything in the control panel except "help and support ". When I try to open it I get an error saying "cannot find helpctr.exe ". Also my mouse keeps uninstalling and installing itself. At the present moment I have been using my tab key to navigate. Thanks for all the time and help so far!

 

The inetcpl.cpl thing was due to an MS update. Still researching to try and determine the effects of using the old file.

Let see what the registry shows for the location of helpcenter. Highlight and copy the contents of the code box below.

Code:

reg query  "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HELPCTR.EXE ">log.txt
start notepad log.txt
exit
cls

Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own and a log will open. Post that log here please.


Not sure just yet what to recommend for the mouse ... odd behavior indeed.

 

Blank log

The log was blank. I did it twice and got the same result. Also as of tonight the mouse seem to be tame. I may need a ghost hunter here soon!

 

Please try again. Just noticed the registry path has a space, which requires it to be wrapped in quotes. I've already edited the above post.

 

Still blank

I tried 3 more times, still blank

 

Highlight and copy the contents of the code box below.

Code:

@echo off
reg add  "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HELPCTR.EXE" /ve /t REG_SZ /d C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe /f
exit
cls

Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own.

See if Help Center opens now.

 

It says;

"Help And Support Error

Windows cannot open Help and support because a system service is not running.

To fix this problem, start the service named 'Help and Support'. "

I tried searching for the file "helpctr.exe" but came up empty.

 

Click Start>Run and type (or copy and paste) the following command then hit enter.

sc start helpsvc

See if Help Center opens now.

 

Same

I still get the same error message. Is there a way to reload the help program off my XP disc?

 

Lets have another look.

Highlight and copy the contents of the code box below.

Code:

@echo off
reg query HKLM\SYSTEM\CurrentControlSet\Services\helpsvc>log.txt
start notepad log.txt
exit
cls

Click Start>Run and type cmd then hit enter to open a command window. Right click in the command window and select paste. The command window will close on it's own and open a log. Post the contents of that log.

 

Log file

Got something now!

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\helpsvc
Type REG_DWORD 0x20
Start REG_DWORD 0x2
ErrorControl REG_DWORD 0x1
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\helpsvc\Enum

 

There's a lot missing from that key. I think it's best to re-install Help and Support.

 

access denied

when I try to create the slip stream, I get an error #70 saying that permission is denied I cannot accomplish this task;

Re-installing the Windows Help and Support module is relatively straightforward. However, you do need a retail copy of the Windows XP CD. If your PC was supplied with recovery disks then you will not be able to use this option. Also, since the introduction of Windows XP Service Pack 2 (SP2), as soon as you click on Install XP will ask for the SP2 CD to locate the file 'dataspec.xml'. This file cannot actually be found on the stand alone SP2 CD so you cannot proceed any further. A way round the problem is to slipstream (See Question 83 How Do I Create A Slipstream CD Of Windows XP And Service Pack 2 (SP2)). You effectively create a 'new' Windows XP CD that incorporates service pack 2. If you then insert this CD into your CD-Rom Windows should locate the 'dataspec.xml' file it requires and Help And Support should install as normal.

1/ Log on to your computer as Administrator

2/ Click Start button

3/ In the Start menu click Run

4/ In the Run dialogue box type %systemroot%\inf and click OK

5/ In the list of files that appear look for the PCHEALTH.inf file

6/ Right Click on this file and, from the drop down menu, select Install

7/ The Windows Help and Support Feature should now reinstall

 

Try it this way using the cd you have.

http://windowsxp.mvps.org/rebuildhelp.htm

 

Autostreamer

I got the autostreamer to work after some fancy folder work. It's telling me that it may take up 30 min to create iso file. I'm going to let it run and continue tomorrow. Thanks for all your time and help

 

Good deal! You're welcome Stevo

 

Resolved

Dave, the help center works like a charm. As the say, you da man! I do have a question though, The ISO cd image that I made with Autostreamer, can that cd be used as an install disk if I ever have to reinstall? It has SP3 on it so I would'nt have to update after I install, right?