Help Please. A friend can no longer use system restore.

[truedelphi]

Last edited Thu Jul 26, 2012, 02:36 AM - Edit history (1)

I tried to help her, and got no where. Apparently early today she used CCleaner today, and then she also decided to help herself to a "free" word processor, one called something like Abriword, which installed a whole lot of stupid stuff related to yahoo on her computer. This then bogged down how her machine operated, so she then uninstalled this program.

Now none of the normal icons on her desktop will show. The icons are there, but they no longer have the normal icon facing. For instance Wordpad docs no longer have wordpad icon, but instead that icon with a group of little items inside. And if you click one of them, the wordpad properties report "unknown file"

She tries to go to "Accessories" and she then goes to "System Restore" area. But when she tries to operate System Restore, she is told that it is "an Ink file" and that the Windows doesn't know how to operate it.

Is there any work around here? Or is it possible that she did not really uninstall that abriword thing-ee?

On edit: "No longer possible to use system restore" I really need a work around in order to help.

Apparently this for-shit "free" word processor Abriword is now the dominant program on her system, and many of the system "set up files" will not come into play, and the system will not let files operate the way they normally would.

For instance, if you click a wordpad text file, named "recipes," it will tell you that the system doesn't know what to do with "recipes'.

Then you can choose to select how to open it from a list. And so the list comes up and you choose "wordpad" as the program to use. But abriword opens the programmed file that has the programming for wordpad, rather than the wordpad file "recipes" you are trying to open.

[Make7]

1. Not sure if System Restore will solve that...

... but if you want to try then you might be able to go to the folder the .exe file is in and click it to start the program. Or alternatively from the Run... option in the start menu (or the Windows key plus R for Run...). You might need to use the full file path in the Run... dialog box. The file path may be different depending on which OS version it is, look for it in these folders:

[div style="margin-left:2em; font-family:monospace;"]C:\Windows\System32\rstrui.exe

C:\Windows\System32\Restore\rstrui.exe

[truedelphi]

2. I'll try that, but I have the feeling I'll be locked out

First thanks for the help.

I have the feeling what will happen is that the info box will come up saying "This is an unknown file. To run this file, you will need to chose the type of file that will open it from a list."

OR --

I am also thinking that the ability to "run" any file, including
rstrui.exe, from windows explorer won't happen either.

I'll figure out if it works.

[grok]

4. I'd try it anyway

The first symptom you mentioned means the file associations are all wrong. a function of the registry.which is a mess now obviously. a restore should fix that.

Not sure why the links are all wrong now. might also be a problem with the registry. I suspect your PATH variable was changed.

You should still have access to executables directly.

note that all these issues could be fixed by hand but it would take hundreds of tweaks in which one is likely to make a mistake

To play it safe i would run the restore under safe mode.. you get there by repeatedly hitting the F8 key while the system is booting. you would be running in administrator mode which *might* still have the proper file associations and links.


restore to the to some point before she started having problems. maybe a little further back to be safe. personal data files should still be intact.

Bottom line is the registry file is corrupt to an extent we can't begin to fathom. it needs to be restored. failing that. u need a livecd to copy everything you want to save off to an external/flash drive and reinstall everything.

the suspects are CCcleaner which by nature modifies extensively the registry. usually it does a great job. the other is is the ABIword/extras uninstall. The Uninstall is *supposed* restore settings to what they were previously before the program(s) in question was uninstalled.. maybe it just didn't do that.

[truedelphi]

9. My executable files will not work. They will come up,

But only as an open file with the programming that created the file exposed. (For instance, if Wordpad file "recipes" is opened, first by clicking the file "recipes", and then by choosing "wordpad" form the list of programs to use, the recipes file never comes up, only the file that has the actual programming for the Wordpad file. Which to me of course is gibberish. And wouldn't help a programmer anyway, except to tell them that there is something major "wrong."

(I have tried repeatedly to deal with the restore executable file, also the rrundll32.exe file I only get the programming and no execution.
Here's a main question of mine - if safe mode is to be used - will it damage or lose any of the files with content that are on the computer?

A lot of computer people care mostly about restoring the computer. This computer cost my friend all of $ 45, plus about $ 125 to have the local computer repair people install stuff on it for her. Like me this friend is a writer - and she cannot afford to lose her CONTENT. Which represents a lot of her life.

[Make7]

11. It sounds like every file is opening up as a text document in some program.

Can you open up Task Manager? (Ctrl-Alt-Delete and possibly clicking on some buttons depending on how the computer is setup. BTW it might actually be helpful to know what the operating system is.)

In Task Manager you should be able to see what programs are running after clicking on something - when you open an .exe file, what program does it say is running? I'd try to get System Restore happening first but perhaps if you uninstall that program, you will be prompted as to what program should be used to open a file.

(BTW - if you right click on a text file, is there on option to Open With? If so, does it list other word processing applications? Can you open a text file in one of those applications? If so, try using the Choose Program option to reset the application used to open that file extension type - although I would still try to get System Restore to work before messing around too much with that.)

Under the File menu in Task Manager try the New Task (Run...) option - it might let you start an .exe file. Try just starting a command prompt with one of the following:

[div style="margin-left:2em; font-family:monospace;"]cmd.exe

C:\Windows\System32\cmd.exe

%systemroot%\system32\cmd.exe
If that does bring up a command prompt window, you might be able to start System Restore from there. Or if that doesn't work you can try rebooting in Safe Mode With Command Prompt as discussed here (for XP):

If your computer won't boot Windows normally and won't boot into the Safe Mode GUI, you can still access System Restore. Start by booting the system using the Safe Mode With Command Prompt option. After you log on, type the following command line at the command prompt:

[div style="margin-left:2em; font-family:monospace;"]%systemroot%\system32\restore\rstrui.exe

Press [Enter], and System Restore will run as it normally does. You can follow the steps in the wizard to perform a restore operation.[font style="font-size:0.8462em;"]

http://www.techrepublic.com/article/10-things-you-should-know-about-windows-xps-system-restore-tool/6048545[/font]
Safe Mode won't alter any user files and System Restore should not alter any user files - definitely not if they are in the My Documents folder - most probably not elsewhere except possibly the Desktop.

As far as retrieving content, you could try just copying files to a USB stick - it seems like Windows Explorer is letting you navigate, so it might also let you copy files. You can also pull the hard drive out and put it in another computer or get a USB to hard drive adaptor to allow you to transfer the files to another computer.

In fact, to be safe you may want to figure out how to backup the content and do so before trying to get the computer running again.

[truedelphi]

13. Task Manager, being an executable file, will not be executed but will

have the box come up with "Windows" alert box with "Windows" as the header and the following type of message:

Windows does not know what type of file this rundll32.exe file is. It does not know which program to use to open it. Cancel this or choose the program to open this file. (then a person can choose from a list inside the computer, or from off the web.)

(I am paraphrasing the above. Except I am not paraphrasing the fact that no matter what executable file I choose, the Windows message to me is that Windows does not know what to do with this "rundll32.exe" file. That rundll32.exe file is what gets referred to, regardless if I am trying to use System restore or anything else.)

[grok]

12. saving data first should be your priority

for that you need an external drive. or usb flash drive.

writer's files are very small. a 4gb flash drive should suffice to store them all. shouldnt cost more than 8-10 bucks.

in fact, do that BEFORE you do anything else that we advise you to. if you can.

if she bought her machine for 45 bucks, thats nothing. spend the 10 bucks.

the point of safe mode is for the system to run with the bare minimum of options. no sound,video drivers to make it worke nice,beautiful(and large)fast and spiffy. but it WILL be safe and unlikely to crash. but your data will be INTACT.

things are a mess. if the machine is that cheap, that means you don't have rsystem restore CD/DVDS right?

Im guessing you are running Xp, 1-2 gb ram and a 40 gb hd.

[truedelphi]

14. Everything you are saying is correct. And your "guess" about

The system is spot on as well.

[grok]

19. I wonder if previous runs of cccleaner backed up your registry.

Last edited Fri Jul 27, 2012, 12:12 AM - Edit history (2)

which appears to be where your problem is...

check this out..

..http://www.piriform.com/ccleaner/faq/using/how-do-i-restore-registry-backups

not sure if the file format is compatible with a run of regedit or just internal to cccleaner.

worth checking out.

UPDATE:
Yes, they are compatible
if there are several backups of your registry in MyDocuments folder One of them *should* fix your registry issues.

http://www.piriform.com/docs/ccleaner/troubleshooting/problems-after-you-have-run-ccleaner

[hobbit709]

3. Abiword is actually a decent word processor.

Unfortunately a lot of free stuff comes with unwanted extras. Which is why you have to carefully read each page during the install process to opt out of anything you don't want.
My guess is that the install associated a bunch of file types to itself even though they actually have no reason to. Nero does that with .dat files
Have you tried booting in Safe Mode and going to a restore point from there?

[truedelphi]

8. I think I need a refresher course on

How to boot up in safe mode. Hope it is simple. If it is simple - and you can explain it clearly, I'd be much obliged.

I wasn't around when she loaded up the abiword program, but she said there were a lot of menu options putting a lot of stuff on the computer.

I have learned the hard way to either back out of downloading such a "freebie" or else to carefully detail every step I take, but she didn't know to do that.

[Occulus]

22. Easy.

Reboot. Before the windows logo appears, but after the POST screen (or boot logo) disappears, press F8. Mash it several times if you're not sure when to press it. You should be asked how you want to boot. Choose safe mode.

[lastlib]

5. I think it's possible you have a corrupted registry.....

I had a similar problem about a year ago, when after removing a Trojan, my system wouldn't run any .exe files. I can't recall all the specifics now, but after long investigation, I found a registry entry that basically substituted a file with no extension for any .exe file I tried to run. I had to remove that registry entry, then adjust a couple others, and that took care of it. Sorry I can't recall the specifics better, but it involved a lot of machine gibberish. But this might be an angle for you to pursue. In the registry (Start, Run, regedit), look for an entry in HKEY_CLASSES_ROOT for .exe, and see if there are any entries/values there that look unusual. Not sure I can really tell you where to go from there, it may be kind of "by the Braille method"....

Hope this helps!

[truedelphi]

7. I don't think it is possible to use "Run" any more

I think you are actually explaining what is happening - except I can't even get the "Run" function to work!

[lastlib]

16. If you can get to safe mode and bring up a command prompt...

try running 'Reg' from the command line. It will allow editing the registry in safe mode without running a windows .exe file

[truedelphi]

20. The last I have heard is that safemode won't work

And I can't deal with it again until Monday. My head is swimming from info overload. I haven't learned this much abt computers in 48 hrs since some twenty years ago when I took a class in Machine Language.

Oh, and one more round of appreciation thanks for the help.

I'll be back on Monday with some questions, I think. (I am assuming my brain will put itself back together after a little rest. Not sure her computer will do that. And that's how I used to solve all my electronic problems - stereo wouldn't work; I'd wrap it in plastic wrap and take it out to my storage unit for a year. Then it would work perfectly.)

[gvstn]

6. If you can get sysem restore

to work in safe mode or by using the command line in the first post that is probably easiest. If the original error was that system restore is a lnk file then using command prompt to run rstrui.exe should work.

If no luck you probably want to figure out which associations are broken.

You can go to Control Panel and then Folder Options. Under the View tab untick the box for "Hide Extensions for Known Filetypes" and hit Apply. This will cause the full file names to show including the three letter extension that tells which type of file it is (ie. .txt .exe .lnk) which will help you narrow down which associations aren't working.

Then depending on the operating system you want to run a .reg file to fix the associated file types. Now, we know .lnk files are broken so you can definitely run that one. Anything else you may want to ask although all three sites are reputable and these .reg files just set things back to Microsoft defaults. The Win7 link explains the process very well but you must use the .reg file for your specific OS. Basically you just download the file and right-click it and select Merge. Say OK to the warning and that is it.

XP: http://www.dougknox.com/xp/file_assoc.htm

Vista: http://www.winhelponline.com/articles/105/1/File-association-fixes-for-Windows-Vista.html

Win7: http://www.sevenforums.com/tutorials/19449-default-file-type-associations-restore.html

[truedelphi]

10. Hey, this is the first bit of advice that I

have been able to use. The machine actually let me go to ControlPanel/FolderOptions. And I was able to then click and untick the box that hides file extensions.

Now again, if I download files to help the situation, the files will not work. Honest.

Otherwise I could have run the virus scan last night, or other help files available on the web. I don't think there is even a possibility of being able to install software and have the program come up in anything but it's programming language. (Explained this in more detail in responses above.))

[gvstn]

15. So if you download this .reg file and put it on her desktop

http://filext.com/WinXP_EXE_Fix.reg

If you rightclick it do you get the option to MERGE? If so go ahead and merge. If you don't get that option I believe there is a workaround to fix the .reg association so that you could then Merge and fix the exe association. I haven't used it in quite a while so I would have to find it. I didn't find the .reg fix I thought existed. Other than seeing if TaskManager will run Regedit.exe as a new task (I doubt it will).

Starting in safemode is usually hitting F8 repeatedly during your BIOS or manufacturer's splash screen immediately after powering on.

[truedelphi]

17. Is this .reg file suitable for windows XP ?

That is the version of Windows she uses.

[gvstn]

18. Yes it is.

It is just the default registry entry for exe files from a new installation of XP that the website provides.

This is the original site for reference. The code is fine. http://filext.com/faq/broken_exe_association.php

The basic idea here would be to run the exe association fix and then try to run either of the two commands in post #1 to attempt to start system restore and hope there is a restore point from before the word processor install.

[CK_John]

21. Possible solution, download SuperAntiSpyware to a flash and try to

run. If you succeed in getting started, at the bottom look for a repair tab. You can fix safe mode and system restore and many others.

Also run the program and remove virsus etc.

Link
http://www.superantispyware.com/portablescannerhome.html