Hello,

My folks have an HP a630n Pavilion Desktop PC Runing SP2 Home Ed XP, with
512 Mb Ram, and a 160GB harddrive. The System has all updates/patches from
Hp and Windows Update.

For the past few months, they've been calling to complain to me that some of
their desktop shortcuts are intermittently failing to work.

If they double click a shortcut for a program or utility they wish to use,
it fails to load from the desktop. I've inspected the properties for each
of the shortcuts involved, and the Target information lines are correct - in
that each one points to a valid, installed application.

In the past week alone - I've had to fix their desktop shortcuts twice. As
this is getting old, I'm looking for a permanent fix.

So far I've ...

1. Scanned the PC for malware using AdAwareSE, and for the presence of
viruses using Kaspersky Labs Online Scanner.

Result: Their system comes back clean of malware, and is infection free of
trojans and/or viri.

2. Tried a workaround - by dumping their temp cache, and then running
CCleaner and rebooting to remedy the problem.

Result: It seems taking this approach works, but it is only a temporary
solution.

3. Suspected file corruption, or other disk errors so I ran Chkdsk /r /f
from a CMD prompt.

Result: Test runs on next boot, and drive checks out normally.

4. Uncovered Errors in Event Viewer for Explorer.exe - that seem to be
related to using the shortcuts. To test this was the case, I attempted to
use the shortcuts, which failed to load, rebooted and then checked the Event
Viewer. New Errors related to Explorer were listed. So I ran SFC /Scannow
from a CMD box figuring this would find and remedy the problem with
explorer.

Result: None apparent. The situation persists.

Any other ideas?

"C J." <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello,
>
> My folks have an HP a630n Pavilion Desktop PC Runing SP2 Home Ed XP, with
> 512 Mb Ram, and a 160GB harddrive. The System has all updates/patches from
> Hp and Windows Update.
>
> For the past few months, they've been calling to complain to me that some
> of their desktop shortcuts are intermittently failing to work.
>
> If they double click a shortcut for a program or utility they wish to use,
> it fails to load from the desktop. I've inspected the properties for each
> of the shortcuts involved, and the Target information lines are correct -
> in that each one points to a valid, installed application.
>
> In the past week alone - I've had to fix their desktop shortcuts twice.
> As this is getting old, I'm looking for a permanent fix.
>
> So far I've ...
>
> 1. Scanned the PC for malware using AdAwareSE, and for the presence of
> viruses using Kaspersky Labs Online Scanner.
>
> Result: Their system comes back clean of malware, and is infection free of
> trojans and/or viri.
>
> 2. Tried a workaround - by dumping their temp cache, and then running
> CCleaner and rebooting to remedy the problem.
>
> Result: It seems taking this approach works, but it is only a temporary
> solution.
>
> 3. Suspected file corruption, or other disk errors so I ran Chkdsk /r /f
> from a CMD prompt.
>
> Result: Test runs on next boot, and drive checks out normally.
>
> 4. Uncovered Errors in Event Viewer for Explorer.exe - that seem to be
> related to using the shortcuts. To test this was the case, I attempted
> to use the shortcuts, which failed to load, rebooted and then checked the
> Event Viewer. New Errors related to Explorer were listed. So I ran SFC
> /Scannow from a CMD box figuring this would find and remedy the problem
> with explorer.
>
> Result: None apparent. The situation persists.
>
> Any other ideas?
>

I know that you have used two anti-malware programs, but that often is not
enough.
Do a thorough check for malware following all of the steps at one of these
sites:
Help with malware
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/...moving_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing Messenger Plus, whose ads for
malware don't identify the malware as such and try to convince you that you
owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com

Thanks so much for the links Frank. I'll double check their system again
tomorrow - if not this coming week, and see what else it could be that I'm
overlooking here. (At least I don't have these problems with my own
computer equipment.)

The folks have Spywareblaster installed as well as Spybot Search and
Destroy. Updated and ran Spybot S&D this morning. Their machine scanned
"clean" except for the usual Red marked 'cookies' malarkey. I noted their
pre-installed trial of Norton Security Suite has expired, so I'll set them
up with a trial of NOD32 or Kaspersky. (Hates Norton Anything.)

One other thing I noted too as well, is the area where the PC is situated -
is not well ventilated and the PC seems to be running hot. Wonders whether
or not that has anything to do with this?

Either way, I'll report back results.

"Frank Saunders, MS-MVP OE/WM" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "C J." <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hello,
>>
>> My folks have an HP a630n Pavilion Desktop PC Runing SP2 Home Ed XP, with
>> 512 Mb Ram, and a 160GB harddrive. The System has all updates/patches
>> from Hp and Windows Update.
>>
>> For the past few months, they've been calling to complain to me that some
>> of their desktop shortcuts are intermittently failing to work.
>>
>> If they double click a shortcut for a program or utility they wish to
>> use, it fails to load from the desktop. I've inspected the properties
>> for each of the shortcuts involved, and the Target information lines are
>> correct - in that each one points to a valid, installed application.
>>
>> In the past week alone - I've had to fix their desktop shortcuts twice.
>> As this is getting old, I'm looking for a permanent fix.
>>
>> So far I've ...
>>
>> 1. Scanned the PC for malware using AdAwareSE, and for the presence of
>> viruses using Kaspersky Labs Online Scanner.
>>
>> Result: Their system comes back clean of malware, and is infection free
>> of trojans and/or viri.
>>
>> 2. Tried a workaround - by dumping their temp cache, and then running
>> CCleaner and rebooting to remedy the problem.
>>
>> Result: It seems taking this approach works, but it is only a temporary
>> solution.
>>
>> 3. Suspected file corruption, or other disk errors so I ran Chkdsk /r /f
>> from a CMD prompt.
>>
>> Result: Test runs on next boot, and drive checks out normally.
>>
>> 4. Uncovered Errors in Event Viewer for Explorer.exe - that seem to be
>> related to using the shortcuts. To test this was the case, I attempted
>> to use the shortcuts, which failed to load, rebooted and then checked the
>> Event Viewer. New Errors related to Explorer were listed. So I ran SFC
>> /Scannow from a CMD box figuring this would find and remedy the problem
>> with explorer.
>>
>> Result: None apparent. The situation persists.
>>
>> Any other ideas?
>>
>
> I know that you have used two anti-malware programs, but that often is not
> enough.
> Do a thorough check for malware following all of the steps at one of these
> sites:
> Help with malware
> All MS-MVP Sites.
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://www.elephantboycomputers.com/...moving_Malware
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/darnit.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>
> Unexplained computer behavior may be caused by deceptive software.
> http://support.microsoft.com/kb/827315
>
> So How Did I Get Infected Anyway?
> For quite a few people it's by installing Messenger Plus, whose ads for
> malware don't identify the malware as such and try to convince you that
> you owe it to the author. See also:
> http://www.wilderssecurity.com/showthread.php?t=27971
> Don't ever do a "default" install of anything. Always choose Custom and
> see what else is being carried along. Don't install any extras you're not
> sure of.
>
> --
> Frank Saunders, MS-MVP OE/WM
> http://www.fjsmjs.com
>
>
>

"C J." <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Thanks so much for the links Frank. I'll double check their system again
> tomorrow - if not this coming week, and see what else it could be that I'm
> overlooking here. (At least I don't have these problems with my own
> computer equipment.)
>
> The folks have Spywareblaster installed as well as Spybot Search and
> Destroy. Updated and ran Spybot S&D this morning. Their machine scanned
> "clean" except for the usual Red marked 'cookies' malarkey. I noted their
> pre-installed trial of Norton Security Suite has expired, so I'll set them
> up with a trial of NOD32 or Kaspersky. (Hates Norton Anything.)
>
> One other thing I noted too as well, is the area where the PC is
> situated - is not well ventilated and the PC seems to be running hot.
> Wonders whether or not that has anything to do with this?
>
> Either way, I'll report back results.


I can see running hot causing a sudden computer shut-down but I don't see
how that would affect shortcuts.

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com

"Frank Saunders, MS-MVP OE/WM" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "C J." <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
>> Thanks so much for the links Frank. I'll double check their system again
>> tomorrow - if not this coming week, and see what else it could be that
>> I'm overlooking here. (At least I don't have these problems with my own
>> computer equipment.)
>>
>> The folks have Spywareblaster installed as well as Spybot Search and
>> Destroy. Updated and ran Spybot S&D this morning. Their machine scanned
>> "clean" except for the usual Red marked 'cookies' malarkey. I noted
>> their pre-installed trial of Norton Security Suite has expired, so I'll
>> set them up with a trial of NOD32 or Kaspersky. (Hates Norton
>> Anything.)
>>
>> One other thing I noted too as well, is the area where the PC is
>> situated - is not well ventilated and the PC seems to be running hot.
>> Wonders whether or not that has anything to do with this?
>>
>> Either way, I'll report back results.
>
>
> I can see running hot causing a sudden computer shut-down but I don't see
> how that would affect shortcuts.
>
> --
> Frank Saunders, MS-MVP OE/WM
> http://www.fjsmjs.com
>
>
>
Okay... I decided to run Trend Micro Sysclean, AdAware and Spybot in Safe
mode. The system tested clean. Before posting here yesterday, I posted
at the IT Forums at HP for the same problem.

One of the Guru's over there suggested running the "Set program access and
defaults" utility and that if it failed to resolve the problem, to have a
look at what version of iKernel.dll is on the system, and if necessary - to
update it.

Turns up, there happens to be three copies of this DLL file on their PC.
The earliest version is in a Turbo Tax program directory, and in the
installshield directory there are two others in numbered subdirectories.
Versions are 6.1 (C:\turbo tax), and 7.00 and 11.00 (C:\Program files
\common files\installshield\...\intel32)

I only have one copy present on my own PC, so now I'm wondering - could
there be a conflict?

"C J." <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...

> Okay... I decided to run Trend Micro Sysclean, AdAware and Spybot in Safe
> mode. The system tested clean. Before posting here yesterday, I posted
> at the IT Forums at HP for the same problem.
>
> One of the Guru's over there suggested running the "Set program access and
> defaults" utility and that if it failed to resolve the problem, to have a
> look at what version of iKernel.dll is on the system, and if necessary -
> to update it.
>
> Turns up, there happens to be three copies of this DLL file on their PC.
> The earliest version is in a Turbo Tax program directory, and in the
> installshield directory there are two others in numbered subdirectories.
> Versions are 6.1 (C:\turbo tax), and 7.00 and 11.00 (C:\Program files
> \common files\installshield\...\intel32)
>
> I only have one copy present on my own PC, so now I'm wondering - could
> there be a conflict?
>

What version of Windows?
I have lots of copies if iKernel.dll and don't have a problem. As for the
rest, I'm out of ideas.

But I think you should still see http://aumha.org/a/quickfix.htm

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com

XP Home SP-2... again thanks... I'm out of ideas too. I'll give the link
provided a look see.

"Frank Saunders, MS-MVP OE/WM" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "C J." <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>
>> Okay... I decided to run Trend Micro Sysclean, AdAware and Spybot in
>> Safe mode. The system tested clean. Before posting here yesterday, I
>> posted at the IT Forums at HP for the same problem.
>>
>> One of the Guru's over there suggested running the "Set program access
>> and defaults" utility and that if it failed to resolve the problem, to
>> have a look at what version of iKernel.dll is on the system, and if
>> necessary - to update it.
>>
>> Turns up, there happens to be three copies of this DLL file on their PC.
>> The earliest version is in a Turbo Tax program directory, and in the
>> installshield directory there are two others in numbered subdirectories.
>> Versions are 6.1 (C:\turbo tax), and 7.00 and 11.00 (C:\Program files
>> \common files\installshield\...\intel32)
>>
>> I only have one copy present on my own PC, so now I'm wondering - could
>> there be a conflict?
>>
>
> What version of Windows?
> I have lots of copies if iKernel.dll and don't have a problem. As for the
> rest, I'm out of ideas.
>
> But I think you should still see http://aumha.org/a/quickfix.htm
>
> --
> Frank Saunders, MS-MVP OE/WM
> http://www.fjsmjs.com
>
>
>