I can't use .exe programs due to a virus. How do I fix it?

Question

I recently found myself with one of those fantastic things called a virus. It's the one with the "Win 7 2012" spyware thing that locks down your browser and any programs. Luckily, it's localized to one account which is NOT an administrator. Using A few programs, I was able to get the pop-ups to go away, but now when I try to use any programs in the infected account, the window pops up asking what program I"d like to open them with. For example, Clicking on Firefox brings up a "Choose the program you want to use to open this file:" then has a list. Other programs, like Microsoft Word only come up with an "Application not found" error. What can I do to fix this issue, short of deleting the whole account and starting over?

Answer 1

For windows xp OS click on the link..then click on .exe programming and download to desktop...then open then run....all fixed.



http://www.dougknox.com/xp/file_assoc.htm



For windows 7 and vista click on this article from Microsoft and click the guy with the wrench in his hand...download to desktop...close browser...open download to desktop then run......



http://support.microsoft.com/kb/950505

Answer 2

Win 7 Security 2012 description and removal instructions:



http://deletemalware.blogspot.com/2011/06/remove-vista-antispyware-2012-win-7.html



http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2012

Answer 3

Use this little executable, what happened was the virus changed all the .exe files to load the virus itself...



In this guide you will find the tool, scrool down to the automated removal instructions:



http://www.bleepingcomputer.com/virus-removal/remove-win-7-antispyware-2012

Answer 4

Removal Instruction for Win 7 Internet Security 2012 / Win 7 Home Security 2012. / Win 7 2012



http://123seminarsonly.com/Tips/007/Win-7-Internet-Security-2012.html



Kill the following Processes from the Task Manager



[random.exe] (ex: hcy.exe, xjw.exe, jie.exe)



Delete the following Infected files:



C:\users\\appdata\local\[random].exe



Delete the following Registry entries:



HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\1311663257







Delete all entries except [ “%1” %* ] in the below locations :







HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” =



HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\""



HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\""



HKEY_USERS\S-1-5-21-393598541-1170550020-13146906-1001\SOFTWARE\Classes\.exe\shell\open\command\""







Delete all entries of the infected file only.



HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe"'

Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Mozilla Firefox\firefox.exe"'





HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'

Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'





HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe"'

Delete only : '"%LocalAppData%\kdn.exe" -a Keep "C:\Program Files\Internet Explorer\iexplore.exe"'



- Delete Temp / Prefetch



- Reset the IE web settings



- Run the disk cleanup



- Disable the System Restore, Reboot the PC



- Enable the System Restore and make sure system is stable with no popup and symptoms of infection.





http://www.easy2resolve.com/software-issues/remove-vista-security-2011-2012

Answer 5

To Remove Virus/Malware/Trojan,Fake Anti-Virus, Worm Pop pop up Advertising,

Rougue, Spyware and

Adware



in you Computer First Use Manual Steps to Turn Off on System Restore

Steps to turn off System Restore



1. Click Start, right-click My Computer, and then click Properties.

2. In the System Properties dialog box, click the System Restore tab.

3. Click to select the Turn off System Restore check box. Or, click to select the Turn off System Restore on all drives check box.

4. Click OK.

5. When you receive the following message, click Yes to confirm that you want to turn off System Restore.



Then After Restart you Computer Safe Mode with Networking How To Restart? To get into the Windows Safe Mode with Networking computer is booting press and hold your "F8 Key" which should bring up the "Windows Advanced Options Menu" as shown below. Use your arrow keys to move to Safe Mode with Networking and press your Enter key. Then Download

the following file to your Desktop and Scan



rkill http://www.bleepingcomputer.com/forums/topic308364.html



Download Update and Scan by Using Malwarebytes' Anti-Malware Press This Link http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentBody;mostPopTwoColWrap&cdlPid=10997763



Download and Scan By using Remove Fake Antivirus description

This application is used to remove fake Antiviruses from your computers press here http://www.softpedia.com/get/Antivirus/Remove-Fake-Antivirus.shtml



Download and Scan by Use Super Anti-spyware Press here http://www.superantispyware.com/



Download and Use ATF Cleaner is my own personal Temp file removal tool.

Features:

Cleaning of all user temp folders, administrator only can use this feature.

Cleaning of the Java cache, which seems to be harbouring more and more malware.

Cleaning for the Opera browser, including Operas cache, cookies, history, download history, saved passwords and visited links http://download.cnet.com/ATF-Cleaner/3000-18512_4-89432.html



After Finish Remove Virus/Malware/Trojan Fake Anti-Virus Worm and

Rougue, Spyware and

Adware



Restart You Computer To Be Normal Then After Turn On System Restore.Steps to turn on System Restore



1. Click Start, right-click My Computer, and then click Properties.

2. In the System Properties dialog box, click the System Restore tab.

3. Click to clear the Turn off System Restore check box. Or, click the Turn off System Restore on all drives check box.

4. Click OK.



After a few moments, the System Properties dialog box closes.

Restart you Computer to be Normal.



To make Sure you don't have Any Virus,Malware,Spyware, in you Computer Scan again Download and Scan By Using Norman Malware Cleaner Press here http://majorgeeks.com/downloadget.php?id=5450&file=1&evp=6980e63d4e482f0670e991265b3250e7



Please give me a feedback and Rate Me

Answer 6

have you tried a system restore? i would also try posting on a site like bleepingcomputer, where they walk you through the process of removing the virus. try typing in the name of your virus and you will bring up others with the problem, too, or a link to it on bleepingcomputer/related sites. they will tell you what free virus detection/removal software and tell you how to remove it. good luck!

Answer 7

Have you downloaded avg free and taken advantage of their 30 day full trial package?