Open With

  • Thread starter Thread starter John
  • Start date Start date
J

John

Guest
I have a user that had a virus that was removed. Whenever he tries to open

an .exe file, like Acrobat Reader, he gets an Open With window. I'm not

sure how to repair this. Any ideas?



Thanks,



John
 
save the text below as a reg file and import into registry:



Windows Registry Editor Version 5.00



[-HKEY_CLASSES_ROOT\.exe]

[-HKEY_CLASSES_ROOT\exefile]





[HKEY_CLASSES_ROOT\.exe]

@="exefile"

"Content Type"="application/x-msdownload"



[HKEY_CLASSES_ROOT\.exe\PersistentHandler]

@="{098f2470-bae0-11cd-b579-08002b30bfeb}"



[HKEY_CLASSES_ROOT\exefile]

@="Application"

"EditFlags"=hex:38,07,00,00

"TileInfo"="prop:FileDescription;Company;FileVersion"

"InfoTip"="prop:FileDescription;Company;FileVersion;Create;Size"



[HKEY_CLASSES_ROOT\exefile\DefaultIcon]

@="%1"



[HKEY_CLASSES_ROOT\exefile\shell]



[HKEY_CLASSES_ROOT\exefile\shell\open]

"EditFlags"=hex:00,00,00,00



[HKEY_CLASSES_ROOT\exefile\shell\open\command]

@="\"%1\" %*"



[HKEY_CLASSES_ROOT\exefile\shell\runas]



[HKEY_CLASSES_ROOT\exefile\shell\runas\command]

@="\"%1\" %*"



[HKEY_CLASSES_ROOT\exefile\shellex]



[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]

@="{86C86720-42A0-1069-A2E8-08002B30309D}"



[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers]



[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]

@="{86F19A00-42A0-1069-A2E9-08002B30309D}"



[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\ShimLayer Property

Page]

@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"









"John" wrote in message

news:eyWD6Qb0KHA.2196@TK2MSFTNGP05.phx.gbl...

>I have a user that had a virus that was removed. Whenever he tries to open

>an .exe file, like Acrobat Reader, he gets an Open With window. I'm not

>sure how to repair this. Any ideas?

>

> Thanks,

>

> John

>
 
You (or your user) have much more work to do!



NB: If you had no anti-virus application installed or the subscription had

expired *when the machine first got infected* and/or your subscription has

since expired and/or the machine's not been kept fully-patched at Windows

Update, don't waste your time with any of the below: Format & reinstall

Windows. A Repair Install will NOT help!



Microsoft PCSafety provides home users (only) with no-charge support in

dealing with malware infections such as viruses, spyware (including unwanted

software), and adware.

https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1



Also available via the Consumer Security Support home page:

https://consumersecuritysupport.microsoft.com/



Otherwise...



1. See if you can download/run the MSRT manually:

http://www.microsoft.com/security/malwareremove/default.mspx



NB: Run the FULL scan, not the QUICK scan! You may need to download the

MSRT on a non-infected machine, then transfer MRT.EXE to the infected

machine and rename it to SCAN.EXE before running it.



2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)

in Safe Mode with Networking, if need be:

http://onecare.live.com/site/en-us/center/howsafe.htm



2b. Vista or Win7=> Run this scan instead:

http://onecare.live.com/site/en-us/center/whatsnew.htm



3. Now run a thorough check for hijackware, including posting requested logs

in an appropriate forum, not here. DO NOT SKIP THIS STEP!!



Checking for/Help with Hijackware:

• http://mvps.org/winhelp2002/unwanted.htm

• http://inetexplorer.mvps.org/tshoot.html

• http://www.mvps.org/sramesh2k/Malware_Defence.htm

• http://www.elephantboycomputers.com/page2.html#Removing_Malware



**Chances are you will need to seek expert assistance in

http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,

http://www.spywarewarrior.com/viewforum.php?f=5,

http://www.dslreports.com/forum/cleanup,

http://www.bluetack.co.uk/forums/index.php,

http://aumha.net/viewforum.php?f=30 or other appropriate forums.**



If these procedures look too complex - and there is no shame in admitting

this isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.



John wrote:

> I have a user that had a virus that was removed. Whenever he tries to

> open

> an .exe file, like Acrobat Reader, he gets an Open With window. I'm not

> sure how to repair this. Any ideas?
 
His "rundll.exe" may be corrupted.



--





"Don't pick a fight with an old man.

If he is too old to fight, he'll just kill you."





"John" wrote in message

news:eyWD6Qb0KHA.2196@TK2MSFTNGP05.phx.gbl...

> I have a user that had a virus that was removed. Whenever he tries to

> open an .exe file, like Acrobat Reader, he gets an Open With window. I'm

> not sure how to repair this. Any ideas?

>

> Thanks,

>

> John

>
 
Michael wrote:

> His "rundll.exe" may be corrupted.

>

>

> "John" wrote in message

> news:eyWD6Qb0KHA.2196@TK2MSFTNGP05.phx.gbl...

>> I have a user that had a virus that was removed. Whenever he tries to

>> open an .exe file, like Acrobat Reader, he gets an Open With window. I'm

>> not sure how to repair this. Any ideas?

>>

>> Thanks,

>>

>> John
 
Back
Top