Can you reboot in "safe mode with networking
and connect to the Internet? If so, try downloading from that mode.If you cannot use the Internet or download any required programs
to the infected machine, try downloading them from another computer (family member, friend, library, etc) with an Internet connection. Save to a USB (flash, pen, thumb, jump) drive or CD/DVD, transfer to the infected machine, then install and run the program(s).
I recommend using a "write protected
" USB drive with a locking switch on the side or on the back. This write enabled/write block feature can be used to protect anything on the USB drive from being altered or deleted by the malware. If you cannot find a write protected flash drive, then use a SD card with a SD-to-USB adapter
Some malware infections will alter file associations and registry keys corresponding to them so programs will not work properly. In order to get them working again this modification needs to be repaired. This is a small tool that restores the default exe association.
Please download ExeFix.scr
by Farbar for Windows XP
and save it to a USB flash drive or to the root of the system drive (usually C:).
- Important! Boot your computer into the user account that is having trouble running exe files.
- Double-click on ExeFix.scr to run it.
- The tool notifies you within a fraction of a second to reboot the computer, please do so.
: If the tool did not run try changing the file extension
Also note that in order for the fix to work, you need to be booted to the user account that is having trouble running exe files.
These are other tools that will repair file associations altered by malware:CAUTION:
Some of these steps involve making changes in the Windows registry
. Always Create a New Restore Point
and back up your registry before making any changes
users can refer to these instructions
. If you're not familiar with working in the registry, then you should NOT attempt to make any changes on your own. Improper changes to the registry could adversely affect your computer and render it inoperable
is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.
Note: ERUNT and NTREGOPT will only work correctly in Windows 7
if you turn off User Account Control (UAC)
in Windows Control Panel