I'm using Windows XP service pack 2 version 2002. I went to a website and it downloaded stuff onto my laptop and ever since then I've had problems. I removed the files that were downloaded onto it and tried to do a system restore since that wasn't working and got a failure to restore each time even in safe mode. I kept getting an internet explorer error that wouldn't go away so I changed my settings to not show errors so now that one doesn't come up but others do. I keep getting drwtsn32.exe application errors that keep coming up till it restarts. Corrupt file errors, check disc at startup is not wanting to work, computer has been making some unusual noises, and cd burning is only working once in a while. I downloaded a temporary registry key repair and fixed over 800 and it didn't do anything. I have no disc to do a system reinstallation. I tried going back to a good system configuration with no luck. I used add/remove programs to remove the files and I'm sure they were the ones that were downloaded from that site. I don't know if there is a system backup on the laptop or not. I read that some people tried disabling and enabling their system restore to get it to work, but I haven't tried that since I didn't want the chance of not being able to use the restore point when the computer was working good. Is there anyway to restore the computer at all or at least fix the drwtsn application so it's not coming up?

One of the corrupt files I have is creuntfs.exe. Also was wanting to know how you get the chkdsk to fix problems without having to restart? I have to go through start and run to get to it. I had to restart and my chkdsk is froze and also says The \pagefile.sys entry contains a nonvalid link. Not sure what that means.

Welcome to PCHF reverie.


Sounds like you are having quite a few problems there, to be honest I'm not too sure if we will be able to sort this out without a Windows XP CD but we will give it a try.

What sort of stuff did you download so at least we know what we are dealing with?

Can you boot into windows normally?

I can't find any information on this file !, when do you receive the error message relating to this file?

You can try to force the Chkdsk to run, simply go to Start --- run and type CMD then press enter. In the dos windows type the following ?CHKDSK /f /x
Normally the drive is locked so you can try to run it in safemode.

Could you run the following:

Go to START - RUN and type MSCONFIG and press enter. Click on the startup tab and expand the column that has command above it. Basically we want to be able to see the startup item and command

Take a print screen of it and post it onto the forum for us.
If you aren't familiar with printscreen simply make sure the window you want to take a "photo" of is open and you can see it, then push the PrtScrn button, which may be combined with something else, on my keyboard its doubled up with SysRq.
Then you need to paste into a program, it can be Word, or any image program. Save that to your desktop, and Attach it or Image Host in into your post.

Once you have done that could you follow the following instructions for running Ewido scan.

Doing the following will help you to identify and possibly solve problems being caused by Spyware, Adware and Virus'. It will also help our team to more quickly help you should you need our assistance. Please follow the instructions in order and thouroughly.

Show hidden files and folders:

For XP:

1.On the Tools menu in Windows Explorer, click Folder Options.
2.Click the View tab.
3.Under Hidden files and folders, click Show hidden files and folders.
4.If you see a warning message, click Yes.
5.Click Apply.
6.Click OK.

For 98/2000/ME:

1.double-click the My Computer icon
2.Click on the View menu, click Folder Options
3.Advanced Settings box, under the "Hidden files" folder, click Show all files.
4.If you see a warning message, click Yes.
5.Click Apply.
6.Click OK.





System restore disable instructions removed , since in this case she has restore points that are not infected (hopefully)

Joe5.





Clean up unnecessary files and folders

Download CCleaner
Install and launch CCleaner, click on check for updates. Under Cleaner Settings, make sure that everything is checked, including Advanced. Answer yes to all warnings. Click Analyze, when it is finished, click Run Cleaner, then OK. Allow the program to finish and exit application.

Run this program first

Download ewido Security Suite


Install ewido security suite

• When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu."
• Launch ewido, there should be a big "E" icon on your desktop, double-click it.
• The program will prompt you to update click the "OK" button
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Click on Start

The update will start and a progress bar will show the updates being installed.? After the updates are installed, exit ewido.

Once the updates are installed do the following:

• If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.
• Reboot into Safe Mode, you can do this by restarting your computer, then continually tapping F8 until a menu appears. Use your up arrow key to highlight Safe Mode, then hit. enterThen, run ewido.
• Close all open windows/programs/folders.? Have nothing else open while ewido performs its scan!
• Click on scanner
• Click on Settings
• Under "How to scan" all boxes should be selected
• Under "Possibly unwanted software" all boxes should be selected
• Under "What to scan" select scan every file
• Click OK
• Click on Complete system scan
• Let the program scan the machine
• If ewido finds anything, it will pop up a notification.? NOTE We have been finding some cases of false positives with the new version of ewido, so we need to step through the fixes one-by-one.? If ewido finds something that you KNOW is legitimate (for example, parts of AVG Antivirus, AOL, pcAnywhere and the game "Risk" have been flagged.? In particular, watch for alerts that have the word "Heuristic" in them - if you recognize the file name as "friendly," these may actually be false positives) select "none" as the action.? DO NOT check "Perform action with all infections."? If you are unsure of an entry, select "none" for the time being.

Once the scan has completed, there will be a button located on the bottom of the screen named Save report.

• Click Save report
• Save the report to your desktop
• Exit ewido

After you have done the above instructions , can you post the Ewido log and also a hijackthis log? See for a link below in my sig.

Here are the pictures of my startup. Still working on the other stuff. I also get some corrupt file called chkon(3).exe usually in the Prefutch folder.

Attached Images

	sc1.JPG (74.6 KB, 10 views)
	sc2.JPG (71.1 KB, 8 views)

Attached Files

	sc1.JPG_thumb (4.5 KB, 2 views)
	sc2.JPG_thumb (4.3 KB, 1 views)

Is the Windows explorer the same as the internet explorer? I don't see a folders option.

Attached Images

sc3.JPG (69.2 KB, 6 views)

Attached Files

sc3.JPG_thumb (4.3 KB, 0 views)