unable to open .exe files

go to trendmicro.com go to feetools and download the Rootkit buster, removed the rootkits.  After the reboot, use Malwarebytes to remove the other infected files.

Still having problem:
http://siri.geekstogo.com/

Another good rootkit removal tool is UnHackMe (http://www.greatis.com/unhackme/download.htm) download the fully functional stable version 5.0, install... uh, boot to safe mode and install the rootkit remover. Reboot as instructed and let it run the scan, select remove for the culprit. Ususally some .sys file. Another symptom might be, opening my computer and not being able to browse a hard drive.

The reason we suspect rootkit, is the inability of your antivirus program to locate the culprit (I am assuming you have some version other than 2009). I had a similar problem when I had 2008 installed. Symantec Antivirus 2009 or Symantec Internet Security 2009 has it all over the older versions. Lower overhead, faster scans and rootkit protection. <--shameless plug---> http://www.compresq.com/sysmantec.htm . But you have to remove the rootkit to be able to install anything. Rootkits usually download trojans and malware and install for you, no charge. Remove the rootkit, install your new software and run a full scan to clean up the mess.

Sorry Admin3k, but that file is unverified and not really to be trusted. Why throw a reghack into the mix, when obviously there is something seriously wrong in the registry. I do not trust a link that only lets me download with reading about what it fixes. Educated guess?

PriceD is right on it

Well this seems to have worked.  I had done it before I read the other suggestions, so maybe I got lucky.  It took me so long because I was waiting for the Symantec to update and run again and I also installed Adaware and ran that too.  The last update when I ran Symantec before was in June.  It still did not find anything even after the live update today.  I am grateful since the only other solutions I had found for people with similar problems were much more complicated, one even had to reinstall Windows!

I think I spoke too soon.  Although I can now use some software, there still seems to be other issues.  
1.  Audio commercials randomly start playing on the computer.  (seem to be the same commercials, so maybe they are just audio files that reside on the computer?  I did a search for audio files and didn't find anything unusual.  

2.  When I do a browser search using IE 6 (maybe I should upgrade?, the computer I'm currently on has v7.) If I click on a link from the list it gives me an ad instead of going to the page it should.  I can copy and paste the address and get where I want to.

3.  I downloaded lavasoft adaware and was able to run it.  I also downloaded spyware doctor and the malewarebytes.  I was able to install malewarebytes, but it won't run.  It won't install spyware doctor at all.  

So I have run the most updated symantec virus scan and it found nothing and I ran adaware and it found some things I had it delete, but I still have the above problems.

I also just downloaded and ran hijack this - here is the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:53:48 AM, on 8/22/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\wdnpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Novell\ZENworks\NALDESK.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Novell\ZENworks\nalntsrv.exe
C:\Program Files\Novell\ZENworks\RemoteManagement\RMAgent\WolSerNT.exe
C:\Program Files\Novell\ZENworks\RemoteManagement\RMAgent\ZenRem32.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Novell\ZENworks\wm.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Novell\ZENworks\WMRUNDLL.EXE
C:\Program Files\Internet Explorer\Iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://myyahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://collier.k12.fl.us
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://yahoo.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ZENRC Tray Icon] C:\WINDOWS\system32\zentray.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Application Explorer.lnk = C:\Program Files\Novell\ZENworks\NALDESK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Novell delivered applications - {C1994287-422F-47aa-8E5E-6323E210A125} - C:\Program Files\Novell\ZENworks\AxNalServer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://collier.k12.fl.us
O15 - Trusted Zone: *.video.ccps (HKLM)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
O18 - Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Client Update Service for Novell (cusrvc) - Novell, Inc. - C:\WINDOWS\system32\cusrvc.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Novell Application Launcher (NALNTSERVICE) - Novell, Inc. - C:\Program Files\Novell\ZENworks\nalntsrv.exe
O23 - Service: Novell ZfD Wake on LAN Status Agent (Prometheus Wake-On-LAN Status Agent) - Novell Inc. - C:\Program Files\Novell\ZENworks\RemoteManagement\RMAgent\WolSerNT.exe
O23 - Service: Novell ZfD Remote Management (Remote Management Agent) - Novell Inc. - C:\Program Files\Novell\ZENworks\RemoteManagement\RMAgent\ZenRem32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: RUMBA AS/400 Shared Folders (Wdworkstation) - NetManage Incorporated - C:\WINDOWS\system32\wdnpsvc.exe
O23 - Service: Workstation Manager (ZFDWM) - Novell, INC. - C:\Program Files\Novell\ZENworks\wm.exe


Thanks again for your help

One more fix for .exe that will work
change extension from .doc to .com

-upgrade to IE7 or IE8 , both offer much better security, you may also wish to upgrade to XP Service pack 3 from windows update website

- if there is still an infection that wont let you run Malwarebytes or other, you should try combofix

download & rename first before running 

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

you should be able to run MBAM or other tools afterwards, show us the log of Combofix if the problem persists.

one more thing:  when I went to restart the computer a file wouldn't shut down until I ended it:  aummsgwndname was the name on the file/application

how do you rename, if I don't see the extensions?  I found that when I try it must retain the original extension, because yesterday I tried to rename regedit which is how it shows up on my computer and it just created an additional regedit.com that also wouldn't start.  

 I assume that may be a setting on the computer?

pankusareen

the doc you sent is gibberish when I try to save or open it.  I am running office 07?

From what I read through google searching, aummsgwndname.exe is associated with Adobe Reader. Try uninstalling Adobe, run a free registry scanner like pctools - Registry Mechanic and clean the registry. Reboot and see if you get the error again. If not, download and install again Adobe Reader. If you are familiar enough with regedit (create a system restore point first) go to HKLM\Software\Microsoft\Windows\CurrentVersion\Run ...and delete the key on the right for the adobe updater (a line with adobe somewhere in the directory line). Close regedit and reboot. You can always restore your registry from a restore point.

PS. As this question has been closed and points assigned, I would open a new question for resolution

The file is ok u need to change the extension from .doc to .exe

To show the file name with full extension u need to enable it

To show file extensions in XP,
Go into My Computer or Windows Explorer -> Tools|Folder Options -> View tab -> remove the checkmark next to Hide extensions for known file types

change the extension from .doc to .com

or get the .exe from this from here
http://www.winhelponline.com/exefix_xp.com

Note:No need to rename just run it exefix_xp.com