Sign in to follow this  
ct1

Ad watch has disabled my windows programs

Recommended Posts

My computer had crashed last night.

This morning ad-watch popped up with all kinds of warnings asking to block certain applications & or registery information.

I blocked everything that popped up. Now my computer does not recognize default window programs besides the others that I normally run. I can't run "system restore" because the computer does not recognize it. Can't open Ad-Aware either! I can still open the now infamous ad-witch. How can I reverse what ad-watch did or get "system restore" to work?

 

Ad-Aware SE Professional 1.0.6.0

Windows xp pro

Dual pentium iii

1 gig ram

 

Claud :)

Share this post


Link to post
Share on other sites
Ad watch has disabled my windows programs

Hi, ct1. Sorry, but as I see it, Ad-Watch didn't disable your Windows programs. You did when you blocked the changes after recovery from a system crash.

 

Can you get to System Restore via safe mode by doing the following:

  1. Restart your computer
  2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
  3. Instead of Windows loading as normal, a menu should appear
  4. Select the first option, to run Windows in Safe Mode.

Share this post


Link to post
Share on other sites

Thanks for responding Buddy!

 

I tried that soon after the screw up & safe mode behaves the same.

I only blocked when I was warned by ad-watch, because on my own, I'd never disable any window function.

I believed that ad-watch knew better than to give us naive users the options on how to disable our operating system.

Any more advice would be greatly appreciated.

 

Yours,

 

CT

 

Hi, ct1. Sorry, but as I see it, Ad-Watch didn't disable your Windows programs. You did when you blocked the changes after recovery from a system crash.

 

Can you get to System Restore via safe mode by doing the following:

  1. Restart your computer
  2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
  3. Instead of Windows loading as normal, a menu should appear
  4. Select the first option, to run Windows in Safe Mode.

Share this post


Link to post
Share on other sites

I'm sorry, ct1, Ad-Watch doesn't have any way of knowing if the changes are intended, good or necessary changes or changes that a malicious program is attempting to make. That decision has to be made by the computer user. Your PC was recovering from a crash so those changes needed to be allowed.

 

Hopefully someone will come along who can walk you through using the Recovery Console, as I believe that may need to be your next step.

Share this post


Link to post
Share on other sites

This is a fairly common problem where the culprit is that after a System Restore, Adwatch drives you crazy asking you to approve all the registry changes. Unfortunately, it doesn't do it all in one boot. It keeps nagging you with more entries across multiple boots until it finally gets through the entire list.

 

While I know when to tell Adwatch to permit something, my sons do not. That's why one of my systems has been clobbered twice (last December and this June), and another was clobbered this week.

 

Basically what happens is that the file associations Windows requires to operate are being blocked. There is a minimal set of file associations you need for Windows to run at all, for example LNK, EXE, DLL. It's too bad that windows allows the essential ones to be overriden, but it does. Adwatch needs to be enhanced to be smart enough to recognize those associations and not try to block when they are being set to the proper defaults.

 

Be aware that re-installing Windows XP will NOT fix this problem. You end up with an even worse mess!

 

Someone was kind enough to post a list on the Internet which I have successfully used all 3 times to restore my system. I will append it to the end of this posting. Here is the recovery procedure.

 

1. Take the list below and put it in a BAT file on the failed system's C-drive.

2. Boot your system in Safe Mode Command Prompt Only.

3. Run the BAT file.

4. Reboot your system in regular Safe Mode.

5. It should ask you whether to continue with the Safe Mode boot, or run System Restore. Choose the System Restore option and select a point earlier than the latest point. If you have already run System Restore, you must go earlier than your previous attempt.

6. Once System Restore completes and reboots your system in normal mode, click "Accept" for ALL warnings from Adwatch about modifying a registry setting.

7. Once all the warnings are finished, reboot your system and again click "Accept" for ALL warnings from Adwatch.

8. Repeat step 7 (yes you must reboot each time) until Adwatch stops warning you any more.

9. Open a Command Prompt box.

10. Create a new directory to save your current associations: MKDir FileAssoc

11. Change to that directory: CD FileAssoc

12. Save all your current file associations to a file with: assoc > CurrentAssoc.bat

13. Edit that file with any editor and change every line (which all current start with a period ".") to start with "assoc.". Save the file.

14. If you ever have this problem again, you can use that BAT file to at least get you back to that point (from Safe Mode Command Prompt) before once again going back to step 4.

 

Anyone who wants to make it a little easier on themselves in case you get hit with this down the road, run steps 9-13 to save your current associations.

 

Here is the list I obtained from the Internet. It will generate some error messages, but don't worry about it. It will get you to the point where System Restore will work in Safe Mode.

 

assoc.323=h323file

assoc.386=vxdfile

assoc.aca=Agent.Character.2

assoc.acf=Agent.Character.2

assoc.acs=Agent.Character2.2

assoc.acw=acwfile

assoc.ai=

assoc.aif=AIFFFile

assoc.aifc=AIFFFile

assoc.aiff=AIFFFile

assoc.ani=anifile

assoc.aps=

assoc.asa=aspfile

assoc.ascx=

assoc.asf=ASFFile

assoc.asm=

assoc.asmx=

assoc.asp=aspfile

assoc.aspx=

assoc.asx=ASXFile

assoc.au=AUFile

assoc.AudioCD=AudioCD

assoc.avi=avifile

assoc.bat=batfile

assoc.bfc=Briefcase

assoc.bin=

assoc.bkf=msbackupfile

assoc.blg=PerfFile

assoc.bmp=Paint.Picture

assoc.bsc=

assoc.c=

assoc.cab=CLSID\{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}

assoc.cat=CATFile

assoc.cda=CDAFile

assoc.cdf=ChannelFile

assoc.cdx=aspfile

assoc.cer=CERFile

assoc.cgm=

assoc.chk=chkfile

assoc.chm=chm.file

assoc.clp=clpfile

assoc.cmd=cmdfile

assoc.cnf=ConferenceLink

assoc.com=comfile

assoc.cpl=cplfile

assoc.cpp=

assoc.crl=CRLFile

assoc.crt=CERFile

assoc.css=CSSfile

assoc.csv=

assoc.CTT=MessengerContactList

assoc.cur=curfile

assoc.cxx=

assoc.dat=

assoc.db=dbfile

assoc.dbg=

assoc.dct=

assoc.def=

assoc.der=CERFile

assoc.DeskLink=CLSID\{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}

assoc.dib=Paint.Picture

assoc.dic=

assoc.diz=

assoc.dll=dllfile

assoc.dl_=

assoc.doc=WordPad.Document.1

assoc.dos=

assoc.dot=

assoc.drv=drvfile

assoc.dsn=MSDASQL

assoc.dun=dunfile

assoc.DVD=DVD

assoc.emf=emffile

assoc.eml=Microsoft Internet Mail Message

assoc.eps=

assoc.exe=exefile

assoc.exp=

assoc.ex_=

assoc.eyb=

assoc.fif=

assoc.fnd=fndfile

assoc.fnt=

assoc.Folder=Folder

assoc.fon=fonfile

assoc.ghi=

assoc.gif=giffile

assoc.grp=MSProgramGroup

assoc.gz=

assoc.h=

assoc.hhc=

assoc.hlp=hlpfile

assoc.hpp=

assoc.hqx=

assoc.ht=htfile

assoc.hta=htafile

assoc.htc=

assoc.htm=htmlfile

assoc.html=htmlfile

assoc.htt=HTTfile

assoc.htw=

assoc.htx=

assoc.hxx=

assoc.icc=icmfile

assoc.icm=icmfile

assoc.ico=icofile

assoc.idb=

assoc.idl=

assoc.idq=

assoc.iii=iiifile

assoc.ilk=

assoc.imc=

assoc.inc=

assoc.inf=inffile

assoc.ini=inifile

assoc.ins=x-internet-signup

assoc.inv=

assoc.inx=

assoc.in_=

assoc.isp=x-internet-signup

assoc.its=ITS File

assoc.IVF=IVFFile

assoc.java=

assoc.jbf=

assoc.jfif=pjpegfile

assoc.job=JobObject

assoc.jod=Microsoft.Jet.OLEDB.4.0

assoc.jpe=jpegfile

assoc.jpeg=jpegfile

assoc.jpg=jpegfile

assoc.JS=JSFile

assoc.JSE=JSEFile

assoc.latex=

assoc.lib=

assoc.lnk=lnkfile

assoc.local=

assoc.log=txtfile

assoc.lwv=LWVFile

assoc.m14=

assoc.m1v=mpegfile

assoc.m3u=m3ufile

assoc.man=

assoc.manifest=

assoc.MAPIMail=CLSID\{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}

assoc.mdb=

assoc.mht=mhtmlfile

assoc.mhtml=mhtmlfile

assoc.mid=midfile

assoc.midi=midfile

assoc.mmf=

assoc.mmm=MPlayer

assoc.mov=

assoc.movie=

assoc.mp2=mpegfile

assoc.mp2v=mpegfile

assoc.mp3=mp3file

assoc.mpa=mpegfile

assoc.mpe=mpegfile

assoc.mpeg=mpegfile

assoc.mpg=mpegfile

assoc.mpv2=mpegfile

assoc.msc=MSCFile

assoc.msg=

assoc.msi=Msi.Package

assoc.msp=Msi.Patch

assoc.MsRcIncident=MsRcIncident

assoc.msstyles=msstylesfile

assoc.MSWMM=Windows.Movie.Maker

assoc.mv=

assoc.mydocs=CLSID\{ECF03A32-103D-11d2-854D-006008059367}

assoc.ncb=

assoc.nfo=MSInfo.Document

assoc.nls=

assoc.NMW=T126_Whiteboard

assoc.nsc=

assoc.nvr=

assoc.nws=Microsoft Internet News Message

assoc.obj=

assoc.ocx=ocxfile

assoc.oc_=

assoc.odc=

assoc.otf=otffile

assoc.p10=P10File

assoc.p12=PFXFile

assoc.p7b=SPCFile

assoc.p7c=certificate_wab_auto_file

assoc.p7m=P7MFile

assoc.p7r=SPCFile

assoc.p7s=P7SFile

assoc.pbk=pbkfile

assoc.pch=

assoc.pdb=

assoc.pds=

assoc.pfm=pfmfile

assoc.pfx=PFXFile

assoc.php3=

assoc.pic=

assoc.pif=piffile

assoc.pko=PKOFile

assoc.pl=

assoc.plg=

assoc.pma=PerfFile

assoc.pmc=PerfFile

assoc.pml=PerfFile

assoc.pmr=PerfFile

assoc.pmw=PerfFile

assoc.pnf=pnffile

assoc.png=pngfile

assoc.pot=

assoc.pps=

assoc.ppt=

assoc.prf=prffile

assoc.ps=

assoc.psd=

assoc.psw=PSWFile

assoc.qds=SavedDsQuery

assoc.rat=ratfile

assoc.rc=

assoc.RDP=RDP.File

assoc.reg=regfile

assoc.res=

assoc.rle=

assoc.rmi=midfile

assoc.rnk=rnkfile

assoc.rpc=

assoc.rsp=

assoc.rtf=rtffile

assoc.sam=

assoc.sbr=

assoc.sc2=

assoc.scf=SHCmdFile

assoc.scp=txtfile

assoc.scr=scrfile

assoc.sct=scriptletfile

assoc.sdb=appfixfile

assoc.sed=

assoc.shb=DocShortcut

assoc.shs=ShellScrap

assoc.shtml=

assoc.shw=

assoc.sit=

assoc.snd=AUFile

assoc.spc=SPCFile

assoc.spl=ShockwaveFlash.ShockwaveFlash

assoc.sql=

assoc.sr_=

assoc.sst=CertificateStoreFile

assoc.stl=STLFile

assoc.stm=

assoc.swf=ShockwaveFlash.ShockwaveFlash

assoc.sym=

assoc.sys=sysfile

assoc.sy_=

assoc.tar=

assoc.text=

assoc.tgz=

assoc.theme=themefile

assoc.tif=TIFImage.Document

assoc.tiff=TIFImage.Document

assoc.tlb=

assoc.tsp=

assoc.tsv=

assoc.ttc=ttcfile

assoc.ttf=ttffile

assoc.txt=txtfile

assoc.UDL=MSDASC

assoc.uls=ulsfile

assoc.URL=InternetShortcut

assoc.VBE=VBEFile

assoc.vbs=VBSFile

assoc.vbx=

assoc.vcf=vcard_wab_auto_file

assoc.vxd=vxdfile

assoc.wab=wab_auto_file

assoc.wav=soundrec

assoc.wax=WAXFile

assoc.wb2=

assoc.webpnp=webpnpFile

assoc.WHT=Whiteboard

assoc.wk4=

assoc.wll=

assoc.wlt=

assoc.wm=ASFFile

assoc.wma=WMAFile

assoc.wmd=WMDFile

assoc.wmf=wmffile

assoc.wmp=WMPFile

assoc.wms=WMSFile

assoc.wmv=WMVFile

assoc.wmx=ASXFile

assoc.wmz=WMZFile

assoc.wpd=

assoc.wpg=

assoc.wri=wrifile

assoc.wsc=scriptletfile

assoc.WSF=WSFFile

assoc.WSH=WSHFile

assoc.wsz=

assoc.wtx=txtfile

assoc.wvx=WVXFile

assoc.x=

assoc.xbm=

assoc.xix=

assoc.xlb=

assoc.xlc=

assoc.xls=

assoc.xlt=

assoc.xml=xmlfile

assoc.xsl=xslfile

assoc.z=

assoc.z96=

assoc.zap=zapfile

assoc.ZFSendToTarget=CLSID\{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}

assoc.zip=CompressedFolder

Share this post


Link to post
Share on other sites

Thanks, RodD.

 

Fortunately, I'm the only one using my PC. However, just to be safe, I downloaded a few of the primary file association fixes from Doug Knox.

 

For XP:

Windows® XP File Association Fixes (lines 7 and 15)

http://www.dougknox.com/xp/file_assoc.htm

 

For W9.x systems:

Link Association (Shortcut) Repair. W95 without IE4 update. W95 with IE4 and W98.

http://home.satx.rr.com/badour/html/reg_files.html

 

FixLink.reg

http://www.webtree.ca/newlife/reg_fixes.htm

Share this post


Link to post
Share on other sites
Sign in to follow this