Anyone experience ".LNK" exe errors on Windows?

[YELLAHEEP]

Just fired up the computer and AdAware popped up a bunch of warning windows about exe files asking for permission. I blocked all of them and after the last window closed, the screen went black, showed a window in the center of the screen that was simply titled "ae", then Windows opened. Everything seemed ok except all the desktop shortcut icons were a Windows icon and clicking them brought up a window that said "you're trying to use a drag and drop feature" and some other info. It said the shortcut was a ".lnk" file which isn't what they used to be. It asks you if you want to search the web for the proper program to open the file, but when I do that, it says it does not recognize the file and no program exists.

When I did a Google search of .lnk files, I found a link to FILExt's website describing certain Windows error repairs. Specifically, .lnk files not working.

From what I read, it explains that some form of anti-malware program improperly changed the registry. Basically breaking the shortcut link.

Theres a lengthy entry on how to enter the registry editor to change values and such..... but this freaks me out.

I also found links to websites that offer downloads that supposedly fix these .lnk errors.

It appears that all of my files, programs, etc. are in tact and working properly, but I can't run any of the programs that used to have a short cut associated with them.

Anyone dealt with this? Any advice to get things back to normal?

[anodyne33]

Just fired up the computer and AdAware popped up a bunch of warning windows about exe files asking for permission. I blocked all of them and after the last window closed, the screen went black, showed a window in the center of the screen that was simply titled "ae", then Windows opened.

So Adaware popped up before windows started?



Theres a lengthy entry on how to enter the registry editor to change values and such..... but this freaks me out.



Don't worry about it. I felt the same way before the first time I had to dig into the registry on one of the work comouters, not there are times I just dig in there to see if I can diagnose something myself. Just export each key before you change anything in it and if you muck it up, you can still go back.




It appears that all of my files, programs, etc. are in tact and working properly, but I can't run any of the programs that used to have a short cut associated with them.

So the programs themselves are not running, or they can't be launched by the shortcuts?



Anyone dealt with this? Any advice to get things back to normal?

Do you have antivirus software? If not look into eTrust by Computer Associates. I've seen it stop stuff that Norton and MaCaffee have missed. The downside is that you may have to create exceptions in it for some applications because it's pretty thorough, but well worth the piece of mind to me.

You can buy registry cleaning / repair software online (like registry washer for instance) for about $20 (but the free version also will scan and fix some of your issues), but I've only used them to scan and then gone in and located and deleted the keys manually.

Also, you may have inadvertently cancelled an exe that windows actually needs even though it's not likely. If this happens again can you write down all the processs that AdAware is flagging as malicious and post it here. It's a pain in the ass, but it will help the diagnosis.
-s

[YELLAHEEP]

So Adaware popped up before windows started?

Well, I'd shut down the computer after using it a couple days ago when Windows showed an update available window and asked if I wanted to restart now or later. I clicked later, then when I was done with what I was doing, I shut the computer down. Earlier, when I started the computer, it booted as it normally does, showed our wallpaper, but none of the short cuts were showing. Then AdAware popped up, and then about 30 warning windows popped up. I didn't recognize the files as having anything to do with Windows (win wasn't in any of the file names) so I figured they were supposed to be blocked. After the last blocked warning, the screen went black, and one single window popped up. All it had was "ae" in the text and an "ok" button. I clicked the ok button and Windows opened again, showed the wallpaper and the shortcuts started appearing - but not with their usual icons, just the windows icon. Clicking the shortcuts resulted in a window saying it didn't recognize the file extension and asked if I wanted it to use the web to locate a program to open them. So far, we haven't been able to run any programs.

I'm able to get on line by clicking a short cut, telling Windows to use the web, then pulling up NAXJA in my favorites. I can't click on IE to open independantly.


So the programs themselves are not running, or they can't be launched by the shortcuts?

After digging deeper, all of the programs are showing on our hard drive, but there doesn't appear to be any .exe extensions for them - they can't be opened at all.


Do you have antivirus software?

Yes, but again, we can't open and run it.


You can buy registry cleaning / repair software online (like registry washer for instance) for about $20 (but the free version also will scan and fix some of your issues)

We tried a registry cleaner from "ErrorKiller.com" that was linked in the FILExt website. But when it downloads, it shows up on our desktop - but won't open.


Also, you may have inadvertently cancelled an exe that windows actually needs even though it's not likely.

Sure sounds more like this is what happened. So far, we can't even get the registry editor to show the last backup we did. When we do the "Start" then "Run" and type "regedit", it shows it's a regedit.exe file, but again.... won't open or run.

FILExt suggests that we might try using a text editor to manually change the extensions as prescribed or to download a program "WinXP_EXE_Fix.reg file".



Any recommendations?

[RichP]

What is the OS ? what version of windows ? This can be a long drawn out process. First thing I would do is backup your data files to dvd or cd, if you need to reinstall the dvd/cd burning software then back it up.
If that does not work then I would do a reinstall, delete and recreate the partition and go from there, thats the long drawn out option, figure about 4 hours with updates and such, advantage is you will have a very clean system. I'm also a firm believer that windows needs to be reinstalled at least once a year on general principles :D
Put the win2k or xp cd in and boot then get to a command prompt, run setup /r and let it go.
I almost always run AVG and Spybot Search and Destroy, just installed AVG in a new win2003/exchange 2003 server on friday, hopefully with the IMF that should cover the exchange server.

[YELLAHEEP]

Windows XP is what we're using.

Here's what I have so far:

I can now get into the System Registry and it looks like I can now change things (I had to enable my permissions from the Edit tab).

FILExt shows that the fix for .lnk file errors is to enter the Registry Editor and change the files as prescribed by downloading this link WinXP_EXE_Fix.reg:

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[HKEY_CLASSES_ROOT\.exe\PersistentHandler]
@="{098f2470-bae0-11cd-b579-08002b30bfeb}"

[HKEY_CLASSES_ROOT\exefile]
@="Application"
"EditFlags"=hex:38,07,00,00
"TileInfo"="prop:FileDescription;Company;FileVersion"
"InfoTip"="prop:FileDescription;Company;FileVersion;Create;Si ze"

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"

[HKEY_CLASSES_ROOT\exefile\shell]

[HKEY_CLASSES_ROOT\exefile\shell\open]
"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\runas]

[HKEY_CLASSES_ROOT\exefile\shell\runas\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shellex]

[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
@="{86C86720-42A0-1069-A2E8-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHan dlers]

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHan dlers\PEAnalyser]
@="{09A63660-16F9-11d0-B1DF-004F56001CA7}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHan dlers\PifProps]
@="{86F19A00-42A0-1069-A2E9-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHan dlers\ShimLayer Property Page]
@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"

What I haven't been able to get to work is to simply plug this downloaded information directly into my System Registry from a disk and running it.

What I CAN seem to do is open each HKEY_CLASSES_ROOT file. I can edit these files, but what's unclear is if I need to add the "@=" where my file currently says "default". That appears to be the difference between the above download fix and what my HKEY files show. For example:

Here's what's in my System Registry now:

[HKEY_CLASSES_ROOT\.exe]
(Default) "exefile"
"Content Type"="application/x-msdownload"

Here's what FILExt says it should be:

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

So, again - do I enter the @= in place of the (Default) to correct the problem?

[XJFire]

Look on AdAware, there should be a restore feature to set everything back to normal. What happened is you blocked all of your programs from running.

[YELLAHEEP]

Look on AdAware, there should be a restore feature to set everything back to normal. What happened is you blocked all of your programs from running.


That's the problem, I can't open ANY programs - all programs have had ".exe" replaced with ".lnk"

I can't even open AdAware or my virus protection.

We were able to attempt a restore using Windows, dating back as far as the 13th, but no luck.

I've fired up my wife's work laptop and taken our PC off the internet connection to avoid further virus issues.

We were able to get into the Registry Editor using the Command Prompt window entering "regedit"

At this point, I'm not certain that the download I pasted above is even going to help. Something got into all the programs and is keeping any ".exe" from working. Everytime we try to open a program, we get the gray window that says:

Windows cannot open this file:
File: (any file we try ends with) .lnk
To open this file, Windows needs to know what program created it..... etc.
Then it asks if we want the Web to find the appropriate program or select the program from the list.

This really sucks.