Solved

windows xp - everything asking what to open with, example regedit.exe choose program to open with

Posted on 2011-03-21
9
890 Views
Last Modified: 2012-06-27
i have a windows xp system that had a pop up virus.
do not know which one. it did hijack the system -  saying purchase anti-virus.
other than that, nothing would work in windows.

had my friend run malwarebytes. restarted computer.

now when you click on system restore for example, it says choose the program you
want to open this file with box.

anyone know what this is and how to fix other than a complete rewipe.

thanks

0
Comment
Question by:webdott
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
9 Comments
 
LVL 23

Expert Comment

by:Kamaraj Subramanian
ID: 35182492
0
 
LVL 23

Expert Comment

by:Kamaraj Subramanian
ID: 35182513
Open a cmd prompt (click RUN and type cmd, then hit Enter) and type - regsvr32 /i shell32.dll
0
 
LVL 23

Expert Comment

by:Kamaraj Subramanian
ID: 35182515
If you experience this problem only when opening drives, it should be quite a simle process:
- Go to Tools followed by Folder Options
- Click on the File Types tab
- Find the association your having problems with, in this case "Drive", click on Advanced followed by Set Default.
0
Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

 

Author Comment

by:webdott
ID: 35182536
this is all .exe files

example,
right click on my computer for properties = open box appears
try to open ccleaner.exe = open box appears


a note,

this does not happen in Safe Mode, only when running Windows normally.

thanks
0
 
LVL 43

Expert Comment

by:Amit
ID: 35183659
You are infected with a trojan. Download below tool Free for 30 days.

http://www.simplysup.com/tremover/download.html
0
 
LVL 30

Accepted Solution

by:
ded9 earned 500 total points
ID: 35184039
Run combofix from safe mode with networking

http://download.bleepingcomputer.com/protected/a64e0ec365f5688144b516a0223cabcd/4d81ab9c/ComboFix.exe

and then boot the computer in normal mode your issue will be resolved.



Ded9
0
 
LVL 4

Expert Comment

by:JohnDecker
ID: 35185437
http://www.kellys-korner-xp.com/xp_tweaks.htm

Number 324 (right hand side)

But run Combo fix as instructed above, also
0
 

Author Closing Comment

by:webdott
ID: 35185980
Thanks.

Combofix downloaded the proper files I was missing and
repaired the registry.

I already had combofix and forgot to use it after malwarebytes.

Thanks Again!
0
 

Author Comment

by:webdott
ID: 35185989
Thanks.

Combofix downloaded the proper files I was missing and
repaired the registry.

I already had combofix and forgot to use it after malwarebytes.

Thanks Again!

here is the combofix program.  you may need to update if this is used in the future.
it will prompt you to update if it is needed.
 ComboFix.exe
0

Featured Post

Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

It’s the first day of March, the weather is starting to warm up and the excitement of the upcoming St. Patrick’s Day holiday can be felt throughout the world.
Smart phones, smart watches, Bluetooth-connected devices—the IoT is all around us. In this article, we take a look at the security implications of our highly connected world.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question