Help...need to fix father-in-law's cpu..2 questions
Page 1 of 1
Nittany




Posts: 192

PostPosted: Mon, 3rd Jan 2005 01:05    Post subject: Help...need to fix father-in-law's cpu..2 questions
1. I can't install a registered copy of win xp service pack 2. AFter the d/l...I get this error during install: c:/windows/system32/ftp.exe is open or another application using it (or something like that).

What can I do to install service pack 2? I don't know what he has on the cpu....but nothing is working. I even checked MS tech pages...and no help.

2. I can't get his home page to stay set. I change it under tools...and hit apply. The new home stays...but when I restart or close/re-open IE...its back to one of those about:blank home pages. How do I get this to stay? I ran the spybots/adware/spydoctor...and cleaned it up. I also deleted all cookies and temp internet files.

Please help.

Thanks

Nit
Back to top
Hitman02
Banned



Posts: 709
Location: USA
PostPosted: Mon, 3rd Jan 2005 04:34    Post subject:
Back to top
skidrow
Moderator



Posts: 8691

PostPosted: Mon, 3rd Jan 2005 08:33    Post subject:
ftp.exe? is ur maching hacked ur summat. Anyhow

try this.
ctrl+alt+del. search for ftp.exe in the processes list and terminate it.
try running sp2 again.

if that dont work, do the above again, and try to rename ftp.exe in ftp1.exe or summat. this prevents to run the application.
dont forget to rename it after installing sp2 Smile

hope it helped


Back to top
Nittany




Posts: 192

PostPosted: Mon, 3rd Jan 2005 12:56    Post subject:
there is no ftp.exe running in the applications. Do you mean rename the ftp.exe file in windows/system32 folder?

Will that help?

then after install sp2...rename it back to the orginal name?

is that what you suggest?
Back to top
skidrow
Moderator



Posts: 8691

PostPosted: Mon, 3rd Jan 2005 13:02    Post subject:
u can try that yes. but:

I get this error during install: c:/windows/system32/ftp.exe is open or another application using it (or something like that).

that gives me the feeling that ftp.exe is running


Back to top
uploader




Posts: 481

PostPosted: Mon, 3rd Jan 2005 16:58    Post subject:
Boot in safe mode, Rename or move c:/windows/system32/ftp.exe
Restart pc then try it
Back to top
whoKnows
VIP Member



Posts: 2972

PostPosted: Mon, 3rd Jan 2005 17:43    Post subject:
Nittany wrote:
there is no ftp.exe running in the applications. Do you mean rename the ftp.exe file in windows/system32 folder?

Will that help?

then after install sp2...rename it back to the orginal name?

is that what you suggest?


ftp.exe doesn't have to run as an application, like skidrow says look if ftp.exe is running as a process (not the application tab, the process tab Wink ) and just terminate it. But ftp.exe sounds to me like the computer has still some bots/spyware/backdoors running?

@hitman02: great post, fits nicely to all of your recent posts
Back to top
Nittany




Posts: 192

PostPosted: Mon, 3rd Jan 2005 22:09    Post subject:
I looked under both applications and processes...nothing listed as ftp.exe.

This is driving me nuts...I found the file under windows/system32...but it would not let me rename it.

Any other ideas?

Nit
Back to top
skidrow
Moderator



Posts: 8691

PostPosted: Mon, 3rd Jan 2005 22:16    Post subject:
and in safemode, what uploader said?


Back to top
Nittany




Posts: 192

PostPosted: Mon, 3rd Jan 2005 22:20    Post subject:
yep...ran it in safemode...no dice. Could not find anything process/app running or allowed to change the file name in system32 folder.
Back to top
whoKnows
VIP Member



Posts: 2972

PostPosted: Mon, 3rd Jan 2005 23:22    Post subject:
you can load the recovery console and see if you can rename or delete the file there. Look up in the knowledge base first if the recovery console does support the del or ren command. It is possible that windows is restoring this file after the reboot, i had this problem once. Search if there is a backup of this file in another windows folder, if so you have to delete this backup too. It shouldn't be a problem to delete this file since it's only the command ftp client wich comes with windows. Just save the file on a disk or memory card and copy it back later.
Back to top
Nittany




Posts: 192

PostPosted: Mon, 3rd Jan 2005 23:41    Post subject:
sorry for being an idiot...what's the recovery console and where is it located? I don't know alot about OS...just games and other stuff.

I appreciate the help!
Back to top
Double-=V=-




Posts: 308

PostPosted: Mon, 3rd Jan 2005 23:47    Post subject:
Get some process listing prog, like tlist.exe and tkill.exe
And just kill everything that looks suspicious. Look up the filenames in google to see if they are legal windows processes. Also look if the files are
in the correct folders, if you see svchost.exe etc. in some strange location, kill it and delete it.

Install a firewall and check every process that tries to access the internet.
Do a virusscan, download spybot search and destroy also.

Download hijackthis and post the log file here.
Back to top
[mrt]
[Admin] Code Monkey



Posts: 1338

PostPosted: Tue, 4th Jan 2005 00:44    Post subject:
Nittany wrote:
sorry for being an idiot...what's the recovery console and where is it located? I don't know alot about OS...just games and other stuff.

I appreciate the help!


When you boot windows xp from the CD-Rom, i think its the first dialog you see, it asks you if you want to install windows or "press R to enter the Recovery Console" or something like that. Its hard to miss. Once your in the Recovery Console, i think typing "?" or "help" lists out all commands available to you. To get more info about a command just do "? <command>" or "help <command>" (depends on which command worked).


teey
Back to top
Battle_707




Posts: 72

PostPosted: Fri, 7th Jan 2005 11:43    Post subject:
Well, I think both your problems are caused by the same thing, even though I'm not 100% sure what that problem is.

the ftp.exe file is indeed a windows file, but it's maintainly used by IE (maybe even only used by IE). Also the problem with the about:blank is related with the IE, so I think you either got spyware (most likely) or some kind of virus. It even could be a bug, but that chance is even smaller (2-3%). To make sure it isn't, just make sure you got the latest updates from Microsoft's website.

Now, I believe I once had this 'ftp.exe' problem too, even though that would have been on a Win98 platform (if it happend at all). I probably would have formatted the drive to fix the problem (was a newbie back then), but that doesn't assure you that the problem won't happen again.

So, basicly I think you got spyware. I don't think the wondows recovery system would fix that. Howeve, you could google ftp.exe in combination with spyware or something and see if you get any wise of that.
Back to top
Avenger_




Posts: 658
Location: Norway
PostPosted: Sat, 8th Jan 2005 14:40    Post subject:
The problem is definitely a spyware problem.

Try to download Spybot search & destroy:
http://www.download.com/3000-2144-10122137.html?part=104443&subj=dlpage&tag=button

Then run it the computer and it will remove the spyware that is probably locking the ftp.exe file.

The switching homepage is a very well known sign of spyware.
Back to top
abhaya




Posts: 7

PostPosted: Fri, 14th Jan 2005 11:02    Post subject:
I was just about to say, get Spybot S&D Smile.

The other thing I was going to mention (since it seems like nobody has?!) is that you can almost always delete from the command line, even if windows itself b!tches. You might want to try that before you do the S&D thing, but definitely do the S&D thing -- it's one of the best progs out there. In S&D one of the things you probably want to do is look at what gets kicked on at startup (actually this is one of my favourite features of S&D, though Norton Utilities also features something similar) and uncheck that bogus ftp process from the startup, if it's there... While it probably is a trojan, there's a possibility, however small, that something Win Update did conflicted with your machine.
Back to top
Page 1 of 1 All times are GMT + 1 Hour
NFOHump.com Forum Index - Operating Systems
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group