Don't know what hit me!

[Guest]

I found I could not start programs by clicking on desktop icons, or using the
start>programs menu. I rebooted, then noticed that the icons on the desktop
had changed to a generic (most) type. These had an extension of INK. When
clicked on, a message came up telling me that windows could not open it, and
I could go online to find out about the extension ink. Renaming it brought
up the menu asking which application would I like to open it. Many things
like help & support also no longer worked..... Basically, I cannot open
files, some folders, or, use system restore. Is this possibly the result of
a virus????? How in the hell do I began to clean it up???? Anyone have any
thoughts?????

 

[Bill James]

First of all. the extension is not ink, but LNK as in LiNK (link = shortcut). If this has just happened recently, a System Restore is probably the easiest fix. To run System Restore without being able to click the link, click on Start, Run, enter cmd click OK. From the new window (command console), type the following line and press Enter:

C:\Windows\system32\restore\rstrui.exe

That should start the SR process for you, as long as your Windows directory is the default for XP, if not you will need to adjust the path. It might run with just using rstrui.exe if your path values are not also messed up.

--

Bill James
Microsoft MVP - Shell/User

Windows VBScript Utilities » www.billsway.com/vbspage/
Windows Tweaks & Tips » www.billsway.com/notes_public/

 

[Guest]

First of all. the extension is not ink, but LNK as in LiNK (link = shortcut). If this has just happened recently, a System Restore is probably the easiest fix. To run System Restore without being able to click the link, click on Start, Run, enter cmd click OK. From the new window (command console), type the following line and press Enter:

C:\Windows\system32\restore\rstrui.exe

That should start the SR process for you, as long as your Windows directory is the default for XP, if not you will need to adjust the path. It might run with just using rstrui.exe if your path values are not also messed up.

--

Bill James
Microsoft MVP - Shell/User

Windows VBScript Utilities » www.billsway.com/vbspage/
Windows Tweaks & Tips » www.billsway.com/notes_public/

Thanks Bill, but that didn't work. When I typed cmd and ok, the window came
up about widows could not open it, and would I like to go on line to find out
more info. I then went to the source, but the icon representing rstrui.exe
was the same strange (different) icon as on the desktop. Clicking it got no
response.... Appreciate your suggestions though, I will keep that in mind
for future applications.

Jerry

 

[Bill James]

Sounds like your OS has some serious problems. The very technical description is "hosed up". You can try that same rstrui command directly from the Run box to see if it will even run that way. Your next option is to open Windows Explorer (use the Windows key plus E since you can't use the icons). Drill down to C:\Windows\System32\Restore folder, find the rstrui.exe file in the right side pane and double click it. If you can not even run the .exe file, I recommend a Repair Install from the Windows XP Setup CD, http://www.michaelstevenstech.com/XPrepairinstall.htm

--

Bill James
Microsoft MVP - Shell/User

Windows VBScript Utilities » www.billsway.com/vbspage/
Windows Tweaks & Tips » www.billsway.com/notes_public/

 

[Guest]

Sounds like your OS has some serious problems. The very technical description is "hosed up". You can try that same rstrui command directly from the Run box to see if it will even run that way. Your next option is to open Windows Explorer (use the Windows key plus E since you can't use the icons). Drill down to C:\Windows\System32\Restore folder, find the rstrui.exe file in the right side pane and double click it. If you can not even run the .exe file, I recommend a Repair Install from the Windows XP Setup CD, http://www.michaelstevenstech.com/XPrepairinstall.htm

--

Bill James
Microsoft MVP - Shell/User

Windows VBScript Utilities » www.billsway.com/vbspage/
Windows Tweaks & Tips » www.billsway.com/notes_public/

Well Bill, that didn't work either, and the sad part is, I also lost access
to the two DVD drives. They no longer show up under My Computer, and using
the Right Click to get to the Device Manager doesn't work either. Maybe time
for the dreaded Fdisk!!!! Argggghhhhhhh!!!!!

 

[Kelly]

Hi,

This generally stems from running a spyware cleaner, etc. As for the lnk
extension, this is party to to a non-MS Tweaker and/or the show super hidden
file extensions on line 127 (right hand side).

Either way, start with:

EXE and LNK Fix for Windows XP - Line 12
http://www.kellys-korner-xp.com/xp_tweaks.htm

To use the Regedit: Save the REG File to your hard disk. Double click it
and answer yes to the import prompt. REG files can be viewed in Notepad by
right clicking on the file and selecting Edit.

Good luck and keep us all posted.

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

 

[Guest]

Thanks Kelly, but unfortunately, regedit is one of the programs I am unable
to run.
Bill also suggested that the INK extension was LNK, and after closer
inspection, this is true. I did run ad-aware prior to this problem. I
thought the program was the best thing since sliced bread. I even paid for
an upgraded version!!!!!

 

[Malke]

Thanks Kelly, but unfortunately, regedit is one of the programs I am
unable to run.
Bill also suggested that the INK extension was LNK, and after closer
inspection, this is true. I did run ad-aware prior to this problem.
I
thought the program was the best thing since sliced bread. I even
paid for an upgraded version!!!!!

This most definitely can be the result of a virus. You haven't mentioned
what antivirus you have installed. Is it a current version (not earlier
than 2003)? Are its virus definitions up-to-date?

What sometimes happens with a virus is that it will take over the .exe
extensions so that any time you try and run an executable you really
run the virus. There are two registry keys that will show if this is
happening:

HKEY_CLASSES_ROOT\exefile\shell\open\command\

HKEY_LOCAL_MACHINE\Software\Classes\Exefile\Shell\Open\Command

The value that appears before the proper string will be the name of the
malware. The proper string value is "%1" %* (with quotation marks).
However, if you are unable to run Regedit at all, you won't be able to
do fix this without something like ERD Commander by Winternals (they
allow you to download an emergency copy) or Bart's PE. Obviously, these
tools need to be downloaded and the bootable cd's created on a working
machine.

These are expert tools and if you are not an expert, you would be better
off to take the computer to someone who is - a professional computer
repair shop, not a BestBuy or CompUSA type of store.

Malke