search
Innovative Web Design and Application Development
PawPrint.net

PawPrint.net News

July 28th, 2010
July 28th, 2010

Virus Prevents all .exe Execution

Eradicating another nasty virus

Another computer infested with some nasties found its way to my desk. Cleaning the Trojans from this one was easy, getting windows working again after proved to be slightly more difficult...

As before, for the benefit of others that might be facing a similar issue here are the steps taken to solve the issue. The system was a Windows 7 Home Premium 64bit based laptop. The virus itself was a common variety of fake virus checker and it was easily removed by rebooting in safe mode, clearing all the temp folders and running  malwarebytes and super antispyware scans. The problem was that after cleaning the system nothing would execute. All ability to run any .exe file would fail.

The solution was to edit the registry and restore the .exe file associations manually.

Under HKEY_CLASSES_ROOT then exe ensure the Value Data to is exefile in this case it had been set to something else.

Then also under HKEY_CLASSES_ROOT in the folder of exefile and Change the Value Data to "%1" %* finally under that exefile folder, then shell, then open, finally command folder, Change the Value Data to "%1" %*

After a few restarts everything was back to normal with the ability to run in all the missing windows updates and finally install the anti-virus software (another .exe that needed to run)

Share this:
No Comments
i
You must login or register to post comments Login/Signup
RSS feed Feed Description
Subscribe to the complete PawPrint.net News RSS news feedAll News RSS feed Complete RSS feed
Subscribe to the PawPrint.net News RSS news feed for this category onlyTechnobloggle RSS feed for: Technobloggle
A Rich Site Summary (RSS) feed is an xml data file that provides a summary of the information contained here. It is not designed to be viewed in your browser, but instead by rss reader software. If you do not know what this means - you can safely ignore it, as it is provided for advanced users with rss reader software only.
Copyright © 1992-2017 PawPrint.net
XDe Modular CMS: PawPrint.net