Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

virus problem


  • Please log in to reply
11 replies to this topic

#1 BrettM

BrettM

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:11:06 AM

Posted 12 January 2012 - 01:36 AM

Hi

I seem to have had a virus - that got past Mawarebytes PRO and Antivira.

So far I've used rkill, exehelper, Malware Bytes, Superantispyware, and Antivira and they're telling me I've got no infections.

But I can't open any programs! (I can in safe mode.)

Thanks for you attention to this.

Brett

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:06 PM

Posted 12 January 2012 - 04:57 AM

What happens when you open it in normal mode? what is your operating system?

Thanks

#3 BrettM

BrettM
  • Topic Starter

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:11:06 AM

Posted 12 January 2012 - 05:19 AM

Hi

One of two things happen:

1. I get an "error" box with the message: Application not found.

Or,

2. I will get a box that will ask me what programme I want to open the programme with. When I close that box (clicking on the "x") I get a message saying, "The item you selected is unavailable. It might have been moved, renamed or removed. Do you want to remove it from the list?"

Thanks

Brett

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:06 PM

Posted 12 January 2012 - 11:11 AM

What is your operating system?

#5 BrettM

BrettM
  • Topic Starter

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:11:06 AM

Posted 12 January 2012 - 04:40 PM

I'm using XP.

Another symptom, by the way, no programmes show up on my task bar on the bottom right hand corner. Notably Malwarebytes and Antivira.

Brett

Edited by BrettM, 12 January 2012 - 04:41 PM.


#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:06 PM

Posted 12 January 2012 - 07:49 PM

Download

http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

Extract and launch the registry fix.

Now try to launch applications

Good luck

#7 BrettM

BrettM
  • Topic Starter

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:11:06 AM

Posted 12 January 2012 - 08:23 PM

Hi

Thanks for the suggestion.

I gave it a go (twice) but it didn't solve the problem.

Brett

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:06 PM

Posted 12 January 2012 - 11:51 PM

Right click on malwarebytes icon

Select- Run as

Uncheck protect my computer and data from unauthorized program

Click ok

See if you can run malwarebytes

Good luck

#9 BrettM

BrettM
  • Topic Starter

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:11:06 AM

Posted 13 January 2012 - 01:14 AM

Hi

Yes, I was able to do that. (I'm just running a virus scan now.)

However, I was able to run malwarebytes in safe mode and it was able to do scans. When I started this whole process it showed up a number of trojans/viruses. But, subsequent scans - along with Antisuperspyware and Antivira scan - were showing things as clean. (I just can't open programmes anymore!)

If anything comes up in the current scan I'll let you know. (But I don't think it will!)

Thanks.

Brett

#10 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:06 PM

Posted 13 January 2012 - 01:21 AM

The rogue has corrupted your EXE file associations.

Go to C:/Windows folder

Right click on REGEDIT-Select-Run as

Uncheck protect my computer and data from unauthorized program


Click ok

Now browse to following paths

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'


Do not edit anything.Does the values looks something like this?

#11 BrettM

BrettM
  • Topic Starter

  • Members
  • 64 posts
  • OFFLINE
  •  
  • Local time:11:06 AM

Posted 13 January 2012 - 04:48 AM

Guess what! The Malwarebytes scan worked!

It highlighted 4 viruses: Adware.MyWebSearch, Hijack.Exefile, Trogan.SpyEyes and Hijacked.exe.File. (The other scans were done in safe mode, I couldn't scan in Normal mode - until that little suggestion about unchecking "protect my computer")

I only did a quick scan, but I'm doing a full scan now - and things are looking clear so far.

Otherwise, things are working properly again. Thanks SO much.

Brett

Edited by BrettM, 13 January 2012 - 04:50 AM.


#12 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:08:06 PM

Posted 13 January 2012 - 09:35 AM

You're welcome :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users