Resolved Win 2000 drag and drop issue

Actually I do have something called EditPad, but that can't have affected the outcome .... or ?

Line 233 did NOT look like that.... the number were much more.... numerous
More like...[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
ShellState "=hex:24,00,00,00,13,a8,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\
01,00,00,00,0d,00,00,00,00,00,00,00,02,00,00,00
Did I got line number wrong?
..and yes I named the file "something else" and not *
Thanks!

 

In post #7 I said, "Line 233 on the right: "Enable Drag and Drop ". I looks exactly like it does above because I copied it from there.

Try again using Notepad (you have it) and copy everything between the *****'s and make sure Word Wrap isn't checked (Edit, on the Toolbar, Word Wrap — uncheck it) and try it again.

 

Can't I simply write it in to the registry directly?
And how ...
Do I make an Advanc ed "folder" ? Cause I only have a Advanced no blanc between?
Make new key name it Start_EnableDragDrop
and set REG_DWORD value to 000000001
and the same thin in that other lockation?
Have I undrestood it correctly?

 

Of course You did.... and I wasn't paying attention. idiot, refer to my self!
and I get "throewn out" after every new comment... thats way the wrong order

 

I did manage to fallow instructions this time and the result was successful - As it should have been if I'd been paying more attention..... how ever, it did not affect the explorer.
Do I need to restart?

 

SKN66, why go through all that brain damage when the above will automatically do it for you?

And, yes you can do it manually, but, if even one integer is off it'll be useless.

You don't have to create any folders or anything except just copy the stuff above between the *****'s and paste it into Notepad and save it to your Desktop.

As I said, make sure Word Wrap isn't checked because on this Forum the first line is truncated and moved to line 2 of the post (as well as line 3 is truncated to line 4)(the "ed]" is the end of the first line and the "er]" belongs at the end of line 3).

 

Always.

p.s. You replied while I was responding so I didn't see the above post.

 

No problem, I'll be leaving then for a while and many thanks for Your patience and the lesson about how to use these "mysteious" Keys
It's 2 am here and I'll be back tomorrow to let You know if it worked..
Tanks again..!!!

 

Good morning, sleepy head!

You must be in the UK\Spain or Japan (although if you're in Japan then it's already tomorrow and you're late for work).

Anyway, is the D & D doing it's thing?

 

Sorry for butting in...

SKN I'd strongly advise following Pete's advice before messing around with your registry (or anything else for that matter).

Once your PC is declared clean you can always post back here if the issue still remains.

 

Hi wildfire!
Thanks for the warning, but ....
If it crashes it crashes, my options start become limited anyway!
and meanwhile it's like splinter in the ass, I assure You I'm not sitting comfortably while the problem is there

 

Hi jpChris!
No in Sweden actually and it was really late, so maybe my own CPU was a bit "overheated"
This is a long list, and I like to understand what I'm doing when I'm doing it that's why the so called
"brain damage "....

When following Your instructions (correctly this time) the extra
"folder" >Explo er< was created so the rest did NOT fall in under the
already existing "folder "..... should it be that way?
I rewrote it in the "ordinary" "folder ".... it hasn't crashed jet, but seems that there wasn't any
effect to it either so.... I'm still fumbling in the dark.
The same with the first key... there is an >_< between Start and Enable..... none of the other
names contain that character.... should I try to change that also?

And if You find it interesting enough.... some other maybe related questions.

HKEY_CLASSES_ROOT\exefile\shellex\DropHandler
(Default) REG_SZ {86C86720-42A0-1069-A2E8-08002B30309D}
?? What's this? Has it something to do with my little "devil "

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
Browse For Folder Height REG_DWORD 0x000000ab (171)
Can this be a "default" window height when opening it 1:st time after reboot/start ?
(they open very small and narrow 1:st time)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4657278A-411B-11d2-839A-00C04FD918D0}\ (Default) REG_SZ Shell Drag and Drop helper
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4657278A-411B-11d2-839A-00C04FD918D0}\InProcServer32
Something about Shell32.dll ?

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers
empty?

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers
also empty?

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\DragDropHandlers
and yes, empty also?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\com\ms\object\dragdrop
couple lines, but nothing I understand anything about

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\Objects\SeekSlider
- probably no relation to this problem, but....

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\8.0\New User Settings\PowerPoint\Options
DragAndDrop REG_DWORD 0x000000(1) - means no?

There is a lot of drag and drop under Internet settings, but they are not relevant here, right?

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LMouFlt2\Parameters\CordlessOptical2\0000
DragLock REG_SZ 0000 - no probably not relevant.....?

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LMouFlt2\Parameters\OpticalMouse1\0000
and a bunch of more about mice....

HKEY_USERS\S-1-5-21-1801674531-926492609-725345543-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
This, however may be relevant...??

HKEY_USERS\S-1-5-21-1801674531-926492609-725345543-1000\Software\Microsoft\Windows\ShellNoRoam\MUICache

HKEY_USERS\S-1-5-21-1801674531-926492609-725345543-1000\Software\NVIDIA Corporation\Global\nView\Tweak
?
NVIDIA options can be disabled.... no change, so they're back on!

That was a lot of "possibilities ".... if You have the patience and time!

Any useful Literature to recommend on the subject - registry?
...So I don't have ask ALL the stupid questions

The 2xExplorer that provides me with the ability to move files at all will not accept any movements made
with the right click option.... it was a very long time back I used that prog. so I don’t remember if that was
supposed to do so, but there is maybe some clue there about the problem....?

 

You're not looking at the big picture

If malware caused this issue, what's to stop it from doing so again even if you find another solution (you may already have done). You'll end up going round in circles.

Get the malware guys to check your system, these bugs are getting very sneaky nowadays.

 

Thanks Pete, should've checked first (just came online)

 

Whooa! You mean if I start fom a clean slate, that the "bug" still on the HDD somewhere?
Or Do You mean that I may be stupid again and click something best left alone?

 

I mean the malware analysts are specifically trained for that purpose and they are the best ones equipped to deal with your issue at the moment.

 

I Could kiss You guys! It was that simple, a (F and so an) malware!
I would Not have figured that out on my own!
But now I know (and You also) that this bug manifest in this way and can help others!
One million thanks to everybody who took time to read it and advise me!

Obviously there is still some things to take care of, but I can now transfer files again without much trouble

Here is the log.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5906

Windows 5.0.2195 Service Pack 4
Internet Explorer 6.0.2800.1106

2011-02-28 20:53:02
mbam-log-2011-02-28 (20-52-41).txt

Scan type: Quick scan
Objects scanned: 131540
Time elapsed: 1 minute(s), 51 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\NtWqIVLZEWZU (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (PUM.Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (PUM.Hijack.Help) -> Bad: (1) Good: (0) -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
c:\WINNT\Tasks\{22116563-108c-42c0-a7ce-60161b75e508}.job (Trojan.Downloader) -> No action taken.
c:\WINNT\Tasks\{62c40aa6-4406-467a-a5a5-dfdf1b559b7a}.job (Trojan.FakeAlert) -> No action taken.
c:\WINNT\Tasks\{bbaeaeaf-1275-40e2-bd6c-bc8f88bd114a}.job (Trojan.Downloader) -> No action taken.

 

Post the rest of your logs in the malware forum (DO NOT post them here) in you're other thread and follow the analysts instructions.

It's not "that simple ".

 

I will... How do I/You label this as Solved! Because the D&D issue is indeed solved.... even if some nasty surprises remains as You suggest.....? But I'm glad none the less!
Thanks again!