pauls681
asked on
Cant copy and paste
HELPP
I cannot copy, cut or paste anything from my computer. Doesnt matter if its on the local or network.
I was at win2k sp3 and tried going to sp4 but there is still no chasnge.
There are no errors. When I drag or cut the file and go to paste it nothing happens.
I can do everything but the file never gets copied.
any suggestions?????????????
I cannot copy, cut or paste anything from my computer. Doesnt matter if its on the local or network.
I was at win2k sp3 and tried going to sp4 but there is still no chasnge.
There are no errors. When I drag or cut the file and go to paste it nothing happens.
I can do everything but the file never gets copied.
any suggestions?????????????
When was the last time cut and paste worked? Have you installed any software since then?
ASKER
Last week as far as I know it was working but I dont remeber the last time i copied a file.
I installed a free trial of macromedia director, that is all and I already uninstalled that.
I can copy a file at the command prompt.
I installed a free trial of macromedia director, that is all and I already uninstalled that.
I can copy a file at the command prompt.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I guess it's the latest worm
Special removal istructions http://www.sophos.com/support/news/#blaster
Fixes Available here
http://support.microsoft.com/?kbid=823980
http://www3.ca.com/virusinfo/virus.aspx?ID=36265
Special removal istructions http://www.sophos.com/support/news/#blaster
Fixes Available here
http://support.microsoft.com/?kbid=823980
http://www3.ca.com/virusinfo/virus.aspx?ID=36265
LoL seems that we both posted at the same time, HandOfFate ;-)
Hehe, it seems so.
I SURE THAT YOU INFECTED WITH BLASTER WORM
QUICKLY GO TO
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
QUICKLY GO TO
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Ok, I have run the removal tool from symantc for the Blast worm and it doesnt detect anything.
I have run a full virus scan clean
I have checked the reg and nothing is there
I have installed the ms patch for this worm and have sp4 for win2000
I still cannot copy and paste.
What is up with this? I guess im looking at reinstalling w2k.
I have run a full virus scan clean
I have checked the reg and nothing is there
I have installed the ms patch for this worm and have sp4 for win2000
I still cannot copy and paste.
What is up with this? I guess im looking at reinstalling w2k.
is the virus closing windows before the scan is completed?
do you have a firewall? if so it may be the case that you never actually received the msblast.exe file like me because of the firewall? If you do not have i firewall i recommend you get one. The number of attacks I am receiving is absolutely huge, due to the number of worm infections.
can you see msblast.exe in the windows task manager? The update from MS solved the problem for me.
HandOfFate.
do you have a firewall? if so it may be the case that you never actually received the msblast.exe file like me because of the firewall? If you do not have i firewall i recommend you get one. The number of attacks I am receiving is absolutely huge, due to the number of worm infections.
can you see msblast.exe in the windows task manager? The update from MS solved the problem for me.
HandOfFate.
Can you copy or paste in any application? For example does cut and paste work in Notepad (Start, Run, Notepad)
I've seen issues where cut and paste don't work in IE and Word, but will work in other applications. If it works in Notepad then tell us what application it doesn't work in. If it doesn't work in notepad...
I've seen issues where cut and paste don't work in IE and Word, but will work in other applications. If it works in Notepad then tell us what application it doesn't work in. If it doesn't work in notepad...
ASKER
I do have a firewall and port 135 is blocked.
There is no msblast.exe anywhere.
Last week I tried updateing a computer to the mspatch and after the patch installed
the pc kept rebooting. I then had to do a full recovery to get that system up and running again.
I am guessing the patch was infected when I downloaded it.
we have 20 computers here and all came up clean.
There is no msblast.exe anywhere.
Last week I tried updateing a computer to the mspatch and after the patch installed
the pc kept rebooting. I then had to do a full recovery to get that system up and running again.
I am guessing the patch was infected when I downloaded it.
we have 20 computers here and all came up clean.
ASKER
When I say copy and paste Im talking about files, not within apps.
ie: when I try to copy a file in "My Computer" it doesn't work.
ie: when I try to copy a file in "My Computer" it doesn't work.
perhaps the destination folder is read-only?
if the PC kept rebooting, was it a 1 minute dialog complaining about remote procedure calls causing an error in svchost.exe and the system is closing now from NT AUTHORITY\SYSTEM?
If so this is not part of NT, this is the virus file still running somewhere.
Maybe the patch was infected. Do your computers still restart? can you find the registry keys?
Check here:- system information (start, program files, accessories, system tools).
goto software environment|startup progs. This will give you a list of everything that starts for your user when windows does.
anything unexpected here?
Also, anything running unexpected in task manager?
If so this is not part of NT, this is the virus file still running somewhere.
Maybe the patch was infected. Do your computers still restart? can you find the registry keys?
Check here:- system information (start, program files, accessories, system tools).
goto software environment|startup progs. This will give you a list of everything that starts for your user when windows does.
anything unexpected here?
Also, anything running unexpected in task manager?
ASKER
Nope
ASKER
I have checked everything and there is no evidence of the Blaster worm on this system.
The other computer is back up is working fine now also with no evidence of the worm.
Mine is the only one that will not copy files in windows.
The other computer is back up is working fine now also with no evidence of the worm.
Mine is the only one that will not copy files in windows.
is it only files or everything (aka copying in IE, Notepad or something else)?
As dragonslayer mentioned, do you have sufficient rights to the destination folder (aka it is not read-only and your user group/individual may write to this folder)?
To check the above, right-click on the file and goto properties. Click the security tab and check your rights to the folder. Sorry if you already knew that, or if you are using FAT32 or an admin.
As dragonslayer mentioned, do you have sufficient rights to the destination folder (aka it is not read-only and your user group/individual may write to this folder)?
To check the above, right-click on the file and goto properties. Click the security tab and check your rights to the folder. Sorry if you already knew that, or if you are using FAT32 or an admin.
ASKER
It is only files and file system rights is not an issue.
Im at a loss there.
I can only recommend trying to restart the explorer.exe process.
Fire up the task manager and end the "explorer.exe" process from the processes tab. Then click file|new task and type explorer.exe again to restart the process. Try at your own risk.
NOTE: this will probably close most open windows and will definitely remove the windows taskbar whilst explorer is down. The taskbar will re-appear when explorer restarts.
Or you could restart your system.
Otherwise, you should be able to copy files using the xcopy utility from the command line (or maybe even copy).
I can't offer any other suggestions.
hope this helps
HandOfFate
I can only recommend trying to restart the explorer.exe process.
Fire up the task manager and end the "explorer.exe" process from the processes tab. Then click file|new task and type explorer.exe again to restart the process. Try at your own risk.
NOTE: this will probably close most open windows and will definitely remove the windows taskbar whilst explorer is down. The taskbar will re-appear when explorer restarts.
Or you could restart your system.
Otherwise, you should be able to copy files using the xcopy utility from the command line (or maybe even copy).
I can't offer any other suggestions.
hope this helps
HandOfFate
ASKER
I have tried restarting with no luck many times.
Thanks for everyones help but it looks like ill be doing a system recovery on this one.
Ill wait untill the am to see if anyone else has a suggestion that works.
I'm not holdin my breath.
I'll probably end up spliting up these points between handoffate and tekkiegeek
Thanks for everyones help but it looks like ill be doing a system recovery on this one.
Ill wait untill the am to see if anyone else has a suggestion that works.
I'm not holdin my breath.
I'll probably end up spliting up these points between handoffate and tekkiegeek
Have you tried
Start > Run sfc /scannow
Start > Run sfc /scannow
ASKER
I did but it asked me for the win2000 cd I put it in and it said it was the incorrect ver. and wouldnt take it.
I tried cleaning the cd and made sure it was the win2000 Cd i used to install win2000 and it would not work.
I tried cleaning the cd and made sure it was the win2000 Cd i used to install win2000 and it would not work.
The wrong CD. Hmmm was it the same on that was used to intalled the OS? It looks like you do have a virus but hon the msblaster worm.
Try these online virus scanners
Online Scanners
Norton Web Services
Go to this page and click on Scan for Viruses
http://security.symantec.com/ssc/vc_about.asp?j=1&langid=us&venid=sym&plfid=22&pkj=REODSKVYRMHCGVRVRMN
It needs to download a few file so as to activate the scan so you may see a message like this.
"The Scan for Viruses uses an ActiveX program to scan your computer. The download is approximately 1.5MB and can take about 10 minutes over a 28.8 modem.
The scan can take more than 20 minutes depending on the speed of your computer and the number of files that you have. Please do not browse away from this page unless you intend to abort the scan.
Downloading Scan for Viruses controls. Please wait...
During the download, you might see one or more messages asking if it is OK to download and run these programs. Click Yes when these messages appear.
Note: Scan for Viruses does not scan compressed files"
======================
Trend Micro HouseCall
www.housecall.antivirus.com
"Trend Micro's free online virus scanner
In order to better serve our customers, we ask HouseCall users to register before scanning their computer. By registering, you will receive virus alerts from our team of Virus Doctors. You will be able to unsubscribe when you receive your first email. You can also scan without registering"
http://housecall.antivirus.com/housecall/start_corp.asp
======================
PC Pitstop Virus Scan
Our free Web-based virus scan uses Panda Software's award-winning technology and virus list. We're checking against the "wildlist," the roughly 200 viruses that are most prevalent in the world in a given month
http://www.pcpitstop.com/antivirus/default.asp
Try these online virus scanners
Online Scanners
Norton Web Services
Go to this page and click on Scan for Viruses
http://security.symantec.com/ssc/vc_about.asp?j=1&langid=us&venid=sym&plfid=22&pkj=REODSKVYRMHCGVRVRMN
It needs to download a few file so as to activate the scan so you may see a message like this.
"The Scan for Viruses uses an ActiveX program to scan your computer. The download is approximately 1.5MB and can take about 10 minutes over a 28.8 modem.
The scan can take more than 20 minutes depending on the speed of your computer and the number of files that you have. Please do not browse away from this page unless you intend to abort the scan.
Downloading Scan for Viruses controls. Please wait...
During the download, you might see one or more messages asking if it is OK to download and run these programs. Click Yes when these messages appear.
Note: Scan for Viruses does not scan compressed files"
======================
Trend Micro HouseCall
www.housecall.antivirus.com
"Trend Micro's free online virus scanner
In order to better serve our customers, we ask HouseCall users to register before scanning their computer. By registering, you will receive virus alerts from our team of Virus Doctors. You will be able to unsubscribe when you receive your first email. You can also scan without registering"
http://housecall.antivirus.com/housecall/start_corp.asp
======================
PC Pitstop Virus Scan
Our free Web-based virus scan uses Panda Software's award-winning technology and virus list. We're checking against the "wildlist," the roughly 200 viruses that are most prevalent in the world in a given month
http://www.pcpitstop.com/antivirus/default.asp
Also it could be simply some spy/adware that is at the heart of the problem
Check for adware and sypware
spybot here
http://spybot.safer-networking.de/
Download
http://spybot.safer-networking.de/index.php?lang=en&page=download
AdAware
http://www.lavasoftusa.com/
Spycop:
http://www.spycop.com/
BHODemon and Hijack This and Browser Hijack Blaster
http://www.spywareinfo.com/downloads.php?cat=sp#det
BHODemon | Think of BHODemon as a guardian for your Internet browser: it protects you from unknown Browser Helper Objects (BHOs), by letting you enable/disable them individually. This program is my choice for BHO detection and is highly recommended.
Browser Hijack Blaster | Running silently in the background, Browser Hijack Blaster only springs into action when an attempt is made. It watches and protects the following items: IE Homepage, IE Default Page, IE Search Page, BHOs. Whenver one of the above items is changed, or a BHO is added, you are immediately provided with information on the item, along with the option to keep the change, or revert to your previous settings.
Hijack This | Written by a member of our support forums and based on our Hijacked! article, this program scans the locations in your computer system that may be modified by browser hijackers and fixes any problems found. An easy-to-understand tutorial is available at TomCoyote.org.
General and overall information about Spy/Adware
http://www.cexx.org/adware.htm
Check for adware and sypware
spybot here
http://spybot.safer-networking.de/
Download
http://spybot.safer-networking.de/index.php?lang=en&page=download
AdAware
http://www.lavasoftusa.com/
Spycop:
http://www.spycop.com/
BHODemon and Hijack This and Browser Hijack Blaster
http://www.spywareinfo.com/downloads.php?cat=sp#det
BHODemon | Think of BHODemon as a guardian for your Internet browser: it protects you from unknown Browser Helper Objects (BHOs), by letting you enable/disable them individually. This program is my choice for BHO detection and is highly recommended.
Browser Hijack Blaster | Running silently in the background, Browser Hijack Blaster only springs into action when an attempt is made. It watches and protects the following items: IE Homepage, IE Default Page, IE Search Page, BHOs. Whenver one of the above items is changed, or a BHO is added, you are immediately provided with information on the item, along with the option to keep the change, or revert to your previous settings.
Hijack This | Written by a member of our support forums and based on our Hijacked! article, this program scans the locations in your computer system that may be modified by browser hijackers and fixes any problems found. An easy-to-understand tutorial is available at TomCoyote.org.
General and overall information about Spy/Adware
http://www.cexx.org/adware.htm
ASKER
I have done a full scan of my system twice and nothing comes up.
I may try the spywhere tomorrow morn
I may try the spywhere tomorrow morn
you can't insert your original CD because you have updated your service pack... instead extract files from your SP4... win2ksp4 -x and when asked to insert your Win2k CD, just point it to the folder where your extracted service pack files are at.
ASKER
That dosen't work because you cant specify a path for the files. It only asks for the cd ant it should work with th CD.
Unless theres a switch that lets you do that and from what Ive seen there is not.
have you run SFC this way?
I even tried burning the extracted files to a CD and that doesn't work either.
Unless theres a switch that lets you do that and from what Ive seen there is not.
have you run SFC this way?
I even tried burning the extracted files to a CD and that doesn't work either.
ASKER
Stytem recovery mad everything better.
good to hear that, paul :)