| Author | Topic |
|---|
Location:
Kellyville, Sydney
Registered:
June 2004
|
|
More Computer Help
|
Sat, 05 November 2005 04:01
|
 |
hey guys,
my mate had some spyware on his comp and since deleting it every program he tries to open opens through wordpad.
wtf indeed
even right clicking the desktop and clicking properties results in wordpad being opened. in every case it says in word pad "this program cannot be run in DOS mode". searching goole i found something that says this is what happens if you try to open a win32 program using a text editor.
what is even more strange is that if you try to open word for example, you get the problem, but if you try to open a .doc file, word opens fine.
so does anyone know why windows is doing this every time i try to open a program? and how can i stop it?
thanks
chris
|
|
|
I Supported Toymods
Location:
Sydney
Registered:
December 2002
|
|
Re: More Computer Help
|
Sat, 05 November 2005 04:41
|
|
Which of the following filetypes does it happen with:
.exe
.com
.bat
.lnk (shortcut)
The spyware probably stuffed with the registry entries under:
HKEY_CLASSES_ROOT
probably the exefile entry or individual .exe, .com etc. extention entries.
The reason they would be opening with notepad is because after you removed the spyware windows would have brought up a screen asking what you want to open the file with... he must have chosen wordpad.
Try copying and pasting the following into a text file and rename the text file to something.reg then double click it and merge it into the registry.
| Quote: |
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\exefile]
@="Application"
"EditFlags"=hex:38,07,00,00
"TileInfo"="prop:FileDescription;Co mpany;FileVersion"
"InfoTip"="prop:FileDescription;Com pany;FileVersion;Create;Size"
[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"
[HKEY_CLASSES_ROOT\exefile\shell]
[HKEY_CLASSES_ROOT\exefile\shell\open]
"EditFlags"=hex:00,00,00,00
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\exefile\shell\runas]
[HKEY_CLASSES_ROOT\exefile\shell\runas\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\exefile\shellex]
[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
@="{86C86720-42A0-1069-A2E8-08002B30309D}&quo t;
[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHa ndlers]
[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHa ndlers\PifProps]
@="{86F19A00-42A0-1069-A2E9-08002B30309D}&quo t;
[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHa ndlers\ShimLayer Property Page]
@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}&quo t;
[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHa ndlers\{B41DB860-8EE4-11D2-9906-E49FADC173CA}]
@=""
|
|
|
|
Location:
Kellyville, Sydney
Registered:
June 2004
|
|
Re: More Computer Help
|
Sat, 05 November 2005 05:29
|
|
its happening with .exe files
i tried runing that reg file and it said
"Are you sure " blah blah blah
clicked yes
then it said
Cannot import C:\stuff The Specified file is not a registry script. You can only import binary registry files from within the registry editor."
so i run regedit.
AND GOT THE ERROR!!!  
|
|
|
I Supported Toymods
Location:
Sydney
Registered:
December 2002
|
|
|
Location:
Kellyville, Sydney
Registered:
June 2004
|
|
Re: More Computer Help
|
Sat, 05 November 2005 10:38
|
|
thanks heaps for that. i email it to him and see how it goes.
chris
|
|
|
