Solved Registry Help

[taypen]

Hi I am running Vista and am trying to auto tune my system through command mode. I keep getting the message 'haspdos.sysProgram too big', This is related to a security issue but I have deleted all reference to the original program from the computer and registry but this message still happens - can anyone advise if I need to write code to the registry to eliminate this problem.
Hope someone can help Thanks.

 

[tom982]

Hello taypen and welcome to the forums

It's never a good idea to be getting help from two forums simultaneously, things get confusing and things that we suggest may conflict what other suggest. Here is the other thread, if anyone else is reading this:

HASPDOS.SYS - problem - Tech Support Forum

What did you change when this error started appearing? And why did you change it?

Tom

 

[taypen]

Sorry I didn't realise I wasn't supposed to do that. Apologies.
I removed a program called EPrime which had been loaded with a Hardlock key - the program was developed by Aladdin.
At least this is what I thought caused the problem - I also cleared old Norton and Symantec files at the same time.

 

[tom982]

No worries, I just wanted to let you know for future reference I doubt it will be an issue here, but when the fixes get more complicated, it might cause problems.

First of all, I would like to see where this is launching from. To do so, I would like you to download and run SilentRunners.vbs:

Silent Runners - Adware? Disinfect, don't reformat!

It will open a log upon completion, please attach this to your next post. If it doesn't open, it can be found on your Desktop.

Then I want to see what CKScanner thinks of your problem

CKScanner

Download CKScanner from here

Important : Save it to your desktop.

• Doubleclick CKScanner.exe and click Search For Files.
• After a very short time, when the cursor hourglass disappears, click Save List To File.
• A message box will verify that the file is saved.
• Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

Last of all, let's see where this file is referenced to in your registry:

System Look

Please download SystemLook from one of the links below and save it to your Desktop.

Download Mirror #1
Download Mirror #2​

• Double-click SystemLook.exe to run it.
• Copy the content of the following codebox into the main textfield:
  

  :regfind
  HASPDOS.sys
  :filefind
  HASPDOS.sys

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Tom

 

[taypen]

I can't launch the first as problems with VBScript - still working on it!
CK Scanner Log
CKScanner 2.1 - Additional Security Risks - These are not necessarily bad
scanner sequence 3.MN.11.JELBCB
----- EOF -----

SystemLook Log
SystemLook 30.07.11 by jpshortstuff
Log created at 23:09 on 02/12/2012 by penny
Administrator - Elevation successful

========== regfind ==========

Searching for "HASPDOS.sys"
No data found.

========== filefind ==========

Searching for "HASPDOS.sys"
No files found.

-= EOF =-

This is what I get when I try to auto tune vista I type in first line:
c:\Windows\system32>netsh interface tcp set global autotuning=disabled
It returns this:
c:\WINDOWS\SYSTEM32\HASPDOS.SYSProgram too big to fit in memory

 

[tom982]

Hi taypen,

Hmm, no luck there. What I don't understand is how SystemLook can't find the file, yet Windows knows it's too big to load. Anything I can help with regarding your VBS issue?

Let's have another look at that file:

Command Prompt

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   dir C:\Windows\system32\H* > %SYSTEMDRIVE%\tom982.txt
   
   
4. This will create a text file called tom982.txt in the root folder of your main drive (e.g. C:\tom982.txt). Please copy and paste the contents of this into your next post.

Tom

 

[taypen]

Hi Tom
This is the result:
Volume in drive C is OS
Volume Serial Number is B2B1-75AF

1. Directory of C:\Windows\system32
2. 11/04/2009 06:32 177,128 hal.dll
   11/04/2009 06:32 140,776 halacpi.dll
   11/04/2009 06:32 177,128 halmacpi.dll
   11/04/2009 06:28 41,472 hbaapi.dll
   06/11/2009 12:57 8,704 hccoin.dll
   16/01/2009 08:15 94,208 hccutils.dll
   06/11/2009 12:57 15,872 hcrstco.dll
   02/11/2006 09:44 183,296 hdwwiz.cpl
   11/04/2009 06:27 80,384 hdwwiz.exe
   08/06/2010 02:05 <DIR> he-IL
   02/11/2006 09:45 8,704 help.exe
   21/01/2008 02:23 67,072 HelpPaneProxy.dll
   21/01/2008 02:24 523,776 hhctrl.ocx
   02/11/2006 09:46 43,008 hhsetup.dll
   02/11/2006 09:46 22,016 hid.dll
   02/11/2006 09:44 31,744 hidphone.tsp
   11/04/2009 06:28 26,112 hidserv.dll
   02/11/2006 07:09 4,768 HIMEM.SYS
   16/01/2009 09:10 173,592 hkcmd.exe
   21/01/2008 02:24 83,968 hlink.dll
   28/11/2007 10:34 41,296 hlp95en.dll
   21/01/2008 02:24 289,792 hnetcfg.dll
   21/01/2008 02:24 14,848 hnetmon.dll
   14/08/2009 13:49 8,704 HOSTNAME.EXE
   02/11/2006 09:46 53,248 hotplug.dll
   21/01/2008 02:25 21,504 HotStartUserAgent.dll
   06/09/2010 17:27 <DIR> hr-HR
   25/08/2012 10:11 385,024 html.iec
   20/02/2010 23:05 30,720 httpapi.dll
   02/11/2006 09:46 33,792 htui.dll
   06/09/2010 17:27 <DIR> hu-HU
   28 File(s) 2,782,656 bytes
   3 Dir(s) 179,901,407,232 bytes free
3. I don't understand the VSB issue will work on it tomorrow - something must be disconnected.
4. What I find worrying is that despite the message on CMD is I cannot find the file

 

[tom982]

Very odd indeed. SilentRunners will show where this is launching from and we can work from there

Tom

 

[taypen]

I have attempted to run Silent Runner but get message can't find script engine VB Script - done Cmnd and run
regsvr32 vbscript.dll
this seems to register OK but I continue to get the same message. Any ideas?
Just run sfc/scannow and seem to have a lot of corrupted and un-repairable files - how do I begin to repair these?
Thank you for your help

 

[tom982]

Hi taypen,

Could you attach your CBS log please?

C:\Windows\Logs\CBS\CBS.log

This will tell me which files are corrupt

Tom

 

[taypen]

I couldn't access CBS log but have sent text results from sfc.

 

[tom982]

Although the sfcdetails.txt file helps identify what files are corrupt, it lacks the information on the replacement file paths - which is found in the CBS log.

Command Prompt

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Click on the Start
   
   button and in the search box, type Command Prompt
2. When you see Command Prompt on the list, right-click on it and select Run as administrator
3. When command prompt opens, copy and paste the following commands into it, press enter after each
   
   copy %windir%\Logs\CBS\CBS.log %userprofile%\Desktop\CBS.txt
   
   
4. This will create a text file called CBS.txt on your Desktop, please attach this to your next post

Tom

 

[taypen]

Finally! I've copied the CBS log file -attached

 

[tom982]

Hi taypen,

Wow, that's a lot of corruptions! Due to the severity of your corruption, I think the best plan of action is to do a repair install:

http://www.vistax64.com/tutorials/88236-repair-install-vista.html

The large number of files that require attention makes it impractical to perform a manual fix (it'd take weeks), not to mention that the backup file of the corrupt file is also corrupt in about 50% of those files.

Sorry I couldn't be of more help!

Tom

 

[taypen]

Thanks for your help Tom - it was much appreciated.