3.3K Posts

November 27th, 2006 01:00

Greetings kskillma and Welcome to the forums,

The file cd20xrnt.sys is a windows system file that relates to your CD ROM drive...thus the reason for your failed reinstall attempt. I think we can forestall a reformat and reinstallation of windows though so long as you have a blank floppy handy. There may be another way we can restore the file. Let's try it.

Since you have access to another computer, please do the following:

In the working computer, navigate to C:\Windows\Driver Cache\i386\driver.cab
Right-click the driver.cab file and select "Search"
When the Search window opens, enter the file name cd20xrnt.sys into the "All or part of the file name:" box and click Search
Now, please insert the blank floppy and return to the "Search Results" window. When the search completed, the file cd20xrnt.sys will have been presented. Right-click on that file and select Extract. When the "Select a Destination" window opens, navigate to the floppy drive and select Extract.

Take the floppy to the non-working computer and insert it into the floppy drive. Now on the non-working computer right-click the task bar at the bottom of the screen and select "Task Manager". When Task Manager opens click-->File-->New Task(Run...). In the "Create New Task" box, type msconfig and click "OK". In the System Configuration Utility click Expand File. A pop up window should open that has three boxes. In the "File to restore" box type the following:
cd20xrnt.sys
In the "Restore from" box click the Browse From... button and navigate to the floppy drive. In the "Save file in" box type the following:
C:\Windows\Driver Cache\i386 then click "OK". At this point you should be able to apply and OK in msconfig and close the utility. Reboot the computer.

Next, run HijackThis again and check the following:
O2 - BHO: Anonymizer Core Browser Helper Object - {2F2FBF0D-254F-11D5-B1E5-0050DAD7AF62} - C:\Program Files\ANONYMIZER\CORE\Anonymizer.dll (file missing)
O3 - Toolbar: Anonymizer Toolbar - {C14DC52F-B4D9-11D5-B1E6-0050DAD7AF62} - C:\Program Files\ANONYMIZER\TOOLBAR\AnonymizerBar.dll (file missing)
O16 - DPF: ChatSpace Full Java Client 3.1.0.218 - http://site.chatspace.com:8088/Java/cfs31218.cab
O16 - DPF: ConferenceRoom Java Client - http://chat.privatefeeds.com:8000/java/cr.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemplates/securelogin-devel.cab


Close all windows now except for hijackthis and click Fix Checked.
Reboot the computer to properly record the changes made to the disk.

You should uninstall the Symantec product you have installed and install one of the free antivirus utilities. Please post back the results of your file restore effort and let us know if your CD ROM is working properly now before we continue with the antivirus software problem. Thanks!

16 Posts

November 28th, 2006 20:00

Thanks for responding.
I was unavailable to work on this for a few days.
I was able to extract the file for cd20xrnt.sys from my good laptop, but the non-functional PC would not let me run the 'new task' function (error message was "task manager has encountered a problem and needs to close" (more or less).  This is the same message I get from Explorer and almost everything else.  I got the same message when running in the 'Safe Mode' as well.  
 
Any point is doing the other steps without being able to fix the cd20 file?
 
 

10.4K Posts

November 30th, 2006 00:00

kskillma
 
I'm bamajim, 1972Vet is going to be unavailable for a while and asked me to step in.
 
I need to review a couple of things, to see if we can get you fixed. When did this problem start?
 
Did it start when Norton's updated?
 
And did the problem get worse after working with Symantec to get the issue resolved?
 
bamajim   Graduate of Malware Removal University

 

16 Posts

December 2nd, 2006 00:00

Thanks Bamajim,
I just wrote a long history to you and somehow lost it (timed out) when I submitted, so here is the short version:
 
Several weeks ago, my son-in-law who is pretty tech savy at least in hardware added main memory to the Dimension taking it from 256 to 1 mg.  Machine had been working OK, but slow loading pages and ran out of virtual memory working on picture editing for example. After the upgrade the machine worked great, however in what I'm not quite willing to call a 'cause and effect' a couple of days I noticed Norton Internet Security's Anti-virus software was not working.  It's FIX IT NOW feature could not fix it and advised me to remove and re-install the package.  Although I originally renewed the license and installed in July, I have the extended install option so I did that following the web instructions from Norton.  When i tried to install, I kept getting the message "Files corrupt, download a fresh copy and re-install"   After a couple of failures, I called the Norton techs. 

I won't go into the frustration of that, but the net of several calls was finally a package that loaded, installed, but couldn't update itself to become functional.  At about that time, I started losing other functionality on the system to the point that Internet Explorer, email and other applications failed.  Eventually I couldn't run System Restore, or even "start, run"  At that point the systemnac tech was no help.
 
Since then I tried 1972Vet's suggestions, got the file I needed but was unable to run it.  I did run HiJackTHis again and remove those files he mentioned, but now when I run the program I get a log but can't seem to copy paste to CD or portable drive to upload here. 
 
Thanks for any help you can provide.  I was able to copy most of the critical files (word, pictures,etc.) onto CD, so if we have to flush the harddrive I can survive.  I couldn't figure how how to save the mail messages in Outlook, but otherwise I'm probably OK with starting from scratch if we must
 
Thanks,

10.4K Posts

December 2nd, 2006 01:00

kskillma
 
A couple of questions before we proceed.
 
1. Are you able to boot the infected machine into Safe Modem?
 
2. Do you have the OS (operating system disk) that came with the PC?
 
3. Do you have the neccessary information for Nortons, if we need to unload it?
 
bamajim   Graduate of Malware Removal University
 

16 Posts

December 2nd, 2006 03:00

bajajim,
 
Answers:
1. Yes I think I can boot in safe mode.
2. Yes I have the REinstatallation CD for Windows XP Home edition
3. I have a "install Norton" icon on the PC, but if that is corrupt I can re-download if/when I have internet access again.
 
Thanks,
kskillma

10.4K Posts

December 3rd, 2006 12:00

kskillma

We are going to have to remove Norton for the time being. There program is so intrusive that it will be hard to fix your PC with it still there. You may reload it when we are done if you wish. Uninstall Norton and then run the Symantec Removal tool. If you are unable to get online with this PC, then download the tool on another one and transfer it to the inop PC.

1. Go here and download and run the symantec removal tool

Link

  http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039

2. Click Start->>Run->>type in scf /scannow ->> O.k. (There is a space between sfc and /)

This will check the Windows system file intergrity, If it finds a corrupt file you may be prompted to insert the OS C\D.

Once that is done, reply with the results
 
bamajim   Graduate of Malware Removal University

 



16 Posts

December 3rd, 2006 21:00

Bamajim,
Again, thanks for your help. 
 
I ran the Norton removal program and it claimed to have removed the program. 
 
I can't run the scan though since I am unable to "Start, Run..."  anything.  It says "Windows Explorer has encountered a problem and needs to close....etc. and in great irony, do I want to tell Microsoft about it with an error report.
 
Vet1972 had me try it through Task Manager and that didn't work either.
 
Any other ideas?
 
kskillma

10.4K Posts

December 3rd, 2006 23:00

kskillma
 
What happens in Safe Mode when you try to Click Start or any of the other options?
 
bamajim   Graduate of Malware Removal University

 

16 Posts

December 4th, 2006 00:00

bamajim,
In the safe mode, it seems to work about the same way,  I can click on Start, get the menu, but as soon as I click on "Run" it gives me that WIndows Explorer has encountered a problem message.  Same thing with System Restore from safe mode.  I can get to Control Panel, but when I go to Computer Management,  I can't run Microsoft Management Controls, for example.
 
kskillma

10.4K Posts

December 5th, 2006 01:00

kskillma

I've got a couple of other things I would like to do, Let's do them one at a time. I'm looking because I'm not sure if we have an infection causing the problem or a windows file corruption, like a damaged explorer file. So with your help we will see what we can determine.

Go HERE and Download System Repair Engine by smallfrogs
  • Save it to your Desktop
    Rt Click sreng2.zip->>Extract all->>Extract it to your desktop
    Open the sreng folder
    Double click SREng->>Click Run
    At the main Window, in the left Pane,Select Smart Scan
    At the next window make sure all of the boxes are checked and Select Scan
    When the scan is complete Select Save reports
    Save it to your desktop and Close the tool
    Double Click SREngLog.txt copy and paste that log as a reply to this thread
Do not run any other options with this tool unless instructed to do so.

bamajim   Graduate of Malware Removal University

 

 

16 Posts

December 5th, 2006 03:00

bamajim,
 
Confusion continues...
I was able to download the System Repair Engine to a CD, load it on the problem machine, extract it to the desktop and run the program.  It did a scan, showed the files, but then when I clicked "Save all reports" it gives me no option as to where to save the scan to.  I don't think I have the scan to port over to here.  At least it's not on the desktop where the program is.
 
Any idea what is going on?  Where should the file save to by default?
 
kskillma

16 Posts

December 5th, 2006 23:00

Bamajim,
I worked some more on this.  The problem with saving the SREng log seems to be when it should be asking me to "SAVE AS" it just quits.  I ran the same program on my other laptop and it had no problem, so it is something in my machine. 
 
Thanks again for your help
 
kskillma

10.4K Posts

December 6th, 2006 00:00

kskillma
 
What we have is a corruption of the exporer.exe system file or a RAM problem.

Since there is no malware showing in your original Hijackthis log, and our options are limited with the inability to access certain functions. I'm going to make 3 suggestions:

1. Rerun SRE2
  • In the Left Pane Select " System Repair"
    In the right pane under the File Association Tab
    Tick the box in the bottom that says " Select All"
    Then Select Repair
    Close SRE2
Reboot your PC, and see if some of the functions have returned, if so reply. If no Proceed to step 2

2. To run the Recovery Console from the Windows XP startup disks or the Windows XP CD-ROM, follow these steps: 1. Insert the Windows XP startup disk into the floppy disk drive, or insert the Windows XP CD-ROM into the CD-ROM drive, and then restart the computer.

Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted.
2. When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
3. If you have a dual-boot or multiple-boot computer, select the installation that you must access from the Recovery Console.
4. When you are prompted, type the Administrator password. If the administrator password is blank, just press ENTER.
5. At the command prompt, type the appropriate commands to diagnose and repair your Windows XP installation.

For a list of commands that are available in Recovery Console, type recovery console commands or help at the command prompt, and then press ENTER.

For information about a specific command, type help commandname at the command prompt, and then press ENTER.
6. To exit the Recovery Console and restart the computer, type exit at the command prompt, and then press ENTER.

If you succeed, then reply. If no then proceed to the next step

3. I would suggest that you remove the RAM upgrade card that was installed. If that resolves the problem then reply, if not repeat step 2 after the card removal
 
bamajim   Graduate of Malware Removal University
 

16 Posts

December 6th, 2006 02:00

bamajim,
Still no luck.  I ran SRE2 and the repair module.  No signs of improvement.
 
When I tried to use the Re-install disc, I couldn't get to any RESTORE function.  I couldn't get it to explore the CD to look for a Restore function. So I tried to just re-install Windows XP Home, but it stopped with a message "cmdide.sys is corrupt"  a variation on the "cd20xrnt.sys is Corrupt" that I got when I tried to install Windows XP Professional. 
 
I can't pull the RAM card since I discarded the original 256 RAM card. 
 
I'm about ready to 'format C:" and start over, but I'm not even sure I could do that!   
 
Too frustrated to try tonight anyway, especially since my laptop got an update message from Microsoft that installed IE7 which preceded to tie up the entire machine.  Fortunately, "Remove programs" worked to get me back to IE6.  Can't wait to see what happens next.  I seem to be in one of those negative cycles!
 
thanks for your help.
kskillma
No Events found!

Top