Solved

Virsus made it files don't know what to open with

Posted on 2011-03-15
3
294 Views
Last Modified: 2012-05-11
I got the evil XP Home Security virus on my PC.  After a day and a half of trying to remove it, I think I finally did.  I may have disabled a process or two that I shouldn't have in the process, but I don't think so.  I did run a virus scan and removed a bunch of threats.  

The virus seems to be dead now, but now every time I click any file or app, it asks me to "choose to the program you want to use to open the file".  This is very problematic because I can't even seem to get to my remote desktop now, or even run msconfig from the Run prompt.  

Any idea where the problem may be here?  Also, is there another way to run msconfig?  I don't know what program to choose to run it.  Thanks
0
Comment
Question by:JT_SIRO
3 Comments
 
LVL 23

Accepted Solution

by:
edbedb earned 250 total points
ID: 35142884
Download this registry patch and merge it.
http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip
0
 
LVL 22

Expert Comment

by:optoma
ID: 35143204
Did you run Malwarebytes to remove the rogue? If not run Mbam quick scan and post the log
http://www.malwarebytes.org/mbam-download.php

Also, if you are still having an issue with opening exe's , another method to reset is using ExeHelper(Although Edbedb's should work!)
http://raktor.net/exeHelper/exeHelper.com
0
 
LVL 8

Expert Comment

by:Sean Scissors
ID: 35143794
@JT SIRO What the above two guys said will both work. The XP Home Security virus replaces your reg key at "HKEY_CLASSES_ROOT \ exefile \ shell \ open \ command" with the location of the XP Home Security Virus .exe. Essentially every time, when the virus was active, you would click a .exe it would run the virus itself saying that file is infected or whatever it's behavior was. Now that everything is removed the last final thing is to fix your reg key and you should be good to go.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

YESTERDAY YESTERDAY.BAT is inspired by a previous article I wrote entitled: TOMORROW.BAT (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/MS_DOS/A_4196-Advanced-Batch-File-Programming-TOMORROW-BAT.html). The crux of this batch f…
Being a system administrator some time we require to do things remotely, one of them is installing software. Here I am going to tell you how to install software through wmic (Windows management instrument console). I am not at all saying that this i…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now