Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

xp home security 2012 aftermath


  • Please log in to reply
8 replies to this topic

#1 geekcrazy

geekcrazy

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:02 PM

Posted 13 January 2012 - 11:51 AM

I followed this guide:
http://www.bleepingcomputer.com/virus-removal/remove-xp-home-security-2012

and removed the viruses successfully but I still cannot run executables.

I've tried all the exe tweaks I know to get it working but having no luck. Any ideas anyone? Thanks

WinXP Pro 32bit
DOMAIN environment

BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:02 PM

Posted 13 January 2012 - 11:56 AM

Not sure what exe tweaks did you try

If you're unable to execute any applications in normal mode,

right click on malwarebytes icon on the desktop(you should have installed mbam)

Select- Run as

Uncheck protect my computer and data from unauthorized program

Click ok

See if you can run malwarebytes,that should take care of your EXE hijack issue.

Good luck

#3 geekcrazy

geekcrazy
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:02 PM

Posted 13 January 2012 - 12:18 PM

The exe tweaks a tried are various registry modifications provided online such as this one:
http://www.dougknox.com/xp/fileassoc/xp_eml_file_assoc.zip

There's only 2 that I know of...



Oh... wow, yeah that sure as hell worked!!!!
I'll run a scan with malwarebytes and see if it cleans up the registry for the exe problem then report back. Thanks!!!!!!!


P.S: There's a problem though. I cannot update malwarebytes. I am currently on a network that requires a proxy server, which I have properly configured as so in malwarebytes but still is not connecting. I'll keep tinkering...

--- Got it.... I had to remove the fake DNS settings from the IP settings

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:02 PM

Posted 13 January 2012 - 12:39 PM

:thumbup2:

#5 geekcrazy

geekcrazy
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:02 PM

Posted 13 January 2012 - 03:16 PM

SO, I got malwarebytes to run/remove and it asked to reboot then I obliged. When I logged back in mbamgui.exe tried to run and finish the removal but of course the stupid file association exe window issue prevented mbam from opening. So I clicked cancel and got back to the desktop. I installed CCleaner and did a registry cleanup and after that now the "open exe with..." window doesn't come up.... the window that says "protect programs bla bla...." come up and by unchecking that, I can run anything.

I am running malwarebytes again but cannot update as the DNS settings keep reversing everytime I change it to default.... Posted Image

#6 geekcrazy

geekcrazy
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:02 PM

Posted 13 January 2012 - 05:21 PM

Ok, I'm stuck. I keep getting the "run as" window that pops up everytime I try to run something. Anyone know how to eliminate this and just launch the executable? Thanks.

#7 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:02 PM

Posted 13 January 2012 - 06:41 PM

Boot into safemode with networking and run a full scan with malwarebytes

#8 geekcrazy

geekcrazy
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:02 PM

Posted 16 January 2012 - 11:16 AM

I was off for the weekend from work, sorry about that. I should be getting that laptop physically in front of me in the upcoming days to do more troubleshooting. Will post back. Thank you.

#9 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:03:02 PM

Posted 16 January 2012 - 11:35 AM

:thumbup2:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users