System files missing (ctfmon.exe etc.) because of worm Win32.VB.nk: sfc /scannow, System Restore, In-place upgrade (repair installation) or fresh installation after wiping HDD?

(I have posted below questions on another forum, yet with very little respons)
Windows XP Pro SP2 American version, with MUI-Pack for Windows and for MS Office 2003.

---Question 1---My Language bar (ctfmon.exe) has disappeared because of the worm Win32.VB.nk. I suspect that this worm deleted some system files, and also their string values in the Registry.

I have now deleted this worm, but can still not use any other keyboard than the English one because Language bar is missing.
This is an urgent problem for me as I study Chinese, and need to write assignments with Chinese characters.

Besides that the Language bar is missing, also I can't run these two commands from Start/Run...:

msconfig.exe
gpedit.msc (Group Policy Editor)

My laptop (HP Compaq nx7300) is very sluggish and slow now, both when using the internet and also when I run any application.

However, I have cleaned all viruses now (including the worms) with Rising Antivirus, so my laptop should really be clean.

This is what I've tried so far, without any positive result:

1. www.dougknox.com/xp/utils/xp_emerutils.htm (copies of regedit, msconfig, Task manager from a friend who owns a Windows XP Pro English version, which is the same windows version that I have).

2. Start/Run sfc.exe (I inserted my Windows XP Pro original CD-ROM, and the disc device was very busy all the time so I assume that the missing system files were being copied from my original CD-ROM to c:\windows\system32).

3. Control Panel: regional and language options/Languages/Text services and input languages: details/Preferences
(Language bar is grey scaled and it's not possible to choose that option).

4. http://techreviewzone.wordpress.com/...dvisor-review/ Belarc Advisor
(I have 65 missing Microsoft security updates/hotfixes according to Belarc Advisor. I have not yet installed these because I don't know how to do. Is this of any relevance for missing system files and missing registry values?

5. I have copied ctfmon.ex to c:\Windows\System32 from my original CD-ROM for Windows XP Pro English version
Thereafter, when I double-click on this file, I get the message that "File type unknown" (NB! .ex and not .exe)
In c:\Windows\System32 there is also another ctfmon-named file (CTF loader).

What is the main problem? Is there no string value in the Registry for msconfig.exe, gpedit.msc och ctfmon.exe?

Is there any way to recover string values for a selection of system files from System32? Because I own an OEM-license, I don't think it's possible to just recover all string values for all system files as the logon probably wouldn't work then (I have only one user account).

To recover the string value for ctfmon.exe, is the solution on this web page?:
http://social.technet.microsoft.com/...3-9f9cb08fefc9

If you look furthest down on the page, what diman82 has written, then there's a string value for ctfmon.exe to add to HKLM startup.

But I don't know how to add this string value directly into the Registry, and where? I only know how to navigate in the Registry, and to open it of course(Start/Run regedit) Should I choose "Edit/New key"? Exactly how to I thereafter write the string value directly into the Registry? And in which sub-key in the Registry?

Other alternatives are to buy software for getting to terms with the Registry, for example one of these two:

http://www.easydesksoftware.com/moresoft.htm (Registry Drill)
http://www.errordoctor.com/index.php?hop=cherryoak (Error Doctor)

Is there any way to get a complete overview of all the system files in Windows XP Pro SP2, and also what string values they have and in which keys they are located? Could I get such an overview with a software like Registry Drill?



---Answer 1---'2. Start/Run sfc.exe (I inserted my Windows XP Pro original CD-ROM, and the disc device was very busy all the time so I assume that the missing system files were being copied from my original CD-ROM to c:\windows\system32).'

You need to enter sfc /scannow , not just sfc.exe .

---Question 2---Yes, I did that, I entered sfc /scannow and after that it took a long time.

I just found something about doing a Windows XP Repair install:

http://www.michaelstevenstech.com/XP...nstall.htm#top

It leaves the applications and settings intact, only replaces system files that have been altered by adware and malware. Could this be something worth trying?

---Answer 2---Yes, it would be.

edit: before you start 'fixing' things, copy off anything you value

---Question 3---Several times now that my HP Compaq is so sluggish, I've gotten this message (labeled "Application SES002NS"):

"The Win 16 Subsystem has insufficient resources to continue running. Click on OK, close your applications, and restart your machine"

I'm about to make a slipstreamed CD for XP SP2, using Autostreamer, before I do a Windows XP Repair install. Is this just a way to integrate original windows system files with SP2 and with updates? How is it different from Ghost?

I have a Ghost, but the problem is that this worm Win32.VB.nk is on it! And I only have this Ghost. So I really need to do a XP Repair install to recover all system files. If I do a XP Repair install, will the Registry also be repaired?

I inserted my original Operating System CD Microsoft Windows XP Professional Service Pack 2. However, I was not given the option to do a Repair install, only these alternatives were displayed:

Install Windows XP
Learn more about the setup process
Install optional Windows components
Perform additional tasks
Check system compatibility

Does this mean that I can't use Windows Repair Install at all? Why?

Can I instead do an in-place upgrade?

http://support.microsoft.com/default...b;en-us;315341

According to what is written here, it's the same as a repair installation. But is it exactly the same? And it seems to be aimed at intermediate to advanced users.

In my system32-folder, these files are also missing:

undo_guimode.txt
WPA.BAK

Which alternative is best between System Restore and In-place upgrade (repair installation)?

Before I do an In-place upgrade (repair installation), do I need to make a slipstreamed CD for XP SP2? Is there anything else I should do before doing In-place upgrade?

NB! I want to keep all my installed software intact after the In-place upgrade, and also all my settings intact!

What's the difference between sfc /scannow, System Restore, and In-place upgrade (repair installation)? Which of these repairs both system files and also registry values?

In addition to my doing an In-place upgrade (repair installation), would I also need to do a parallell installation and install the patch from this website?:

http://www.vttoth.com/wow32.htm

This, according to this website, would solve the problem with "The Win 16 Subsystem has insufficient resources to continue running".

---Answer 3---Hello and welcome to the forum,

The reason you were not able to see repair option, because you were viewing the
xp disc from the desktop.

You need to boot from the xp disc instead:

If pc is unable to boot from the cd, then you will need to enter bios and set cd drive
to boot up first on the list (varies on different pc`s where in the bios you will find the bootup list).

1. Now when your pc starts after the post screen, press enter to boot from disc.
2. It will load drivers
3. after it gets to the first screen, choose setup xp
4. The next screen it will come to, should have a repair option choose this one.

What I recommend here is to do a fresh install of xp, since you had some virus problems.

1. You can use a harddrive utility to wipe harddrive first before installing xp which I
strongly recommend:

Found here:
http://www.tacktech.com/display.cfm?ttid=287

If the harddrive you have is a toshiba or another one that doesnt have a utility for
wiping the harddrive, then theres

1. killdisc
http://www.killdisk.com/downloadfree.htm

2. dban
http://www.dban.org/download

Of course please use a different pc to download these item`s you will need to effectively
do a fresh install of xp.

After wiping harddrive perform a harddrive test on harddrive so you will need to download
a utility from tachtek for your harddrive.

If harddrive passes test, you are now ready with confidence to install xp.

Note: always test the harddrive before doing any installation of an operating system.

Its true this will take sometime to do, but not near the time if harddrive is bad, Ive seen
and read about peoples problems with installation problems and they have spent days
trying to figure out the problem, only sometimes to find out that it was the harddrive
all along.  
     
---Question 4---I'm not quite following you now... First, you write that "4. The next screen it will come to, should have a repair option choose this one." Then, you write "What I recommend here is to do a fresh install of xp".

Is a fresh install the same as do a new installation, not a repair installation? If so, what about first to try an In-place upgrade (repair installation) and see if it works?

I have very much installed software on the harddisk, it would take so long time do install them again. A lot of the software is in Chinese language, so I would need guidance from my Chinese friends to install them again. Really want to avoid a new installation if possible!

Should I still do a check of my harddisk, even if I do a repair installation? My harddisk is this:

SEAGATE MOMENTUS 5400.4 250GB SATA 2.5IN 12MS 5400RPM 8 (ST9250827AS)

There are several options from http://www.tacktech.com/display.cfm?ttid=287
for Seagate, which should I choose?

On the above link, are there two different utilities I should download and run?: One for checking the harddisk, one for wiping it? And should I first wipe it, then do a check?

Should I finally do a check again with the F8 when I restart?

For wiping, can I use the free software that you posted links to? Or should I use a software like this?: http://www.whitecanyon.com/drive-wipe-wipe-harddisk.php

Why must I use another PC to download the files for wiping the harddisk, I can't understand that either.

Many questions :) It's the first time I'm doing this, have used Ghost to recover earlier and it has worked perfect. But now, my only Ghost is infected with this virus so I hope it's possible to do a repair installation. Greatly appreciate if you could explain some more about this