Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot run any executables directly, some programs run if I use 'Open With''


  • This topic is locked This topic is locked
14 replies to this topic

#1 gleo634

gleo634

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 22 December 2015 - 02:49 PM

Hi there,

 

I posted this in the "Windows Crashes, BSOD, and Hangs Help and Support" but have had suggested to me to post in "http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/", which they have suggested I post here.

 

I have a strange problem with Windows 7, I cannot run any executable. When I try to I receive a "These files can't be opened" (http://imgur.com/ZEnHAaG), your internet security settings prevented one or more files from being opened.

 

Some guides to solving this say to access the security settings internet zone but it is completely blank so that didn't help, I have also tried creating a new admin account but that gave me the same error when trying to open files. 

 

Weirdly enough though I am able to open some programs (not all) by using the "Open with" command to run it. E.g to get firefox to run I need to open a txt file and open it with firefox. Other programs I've had to run it by cmd prompt, but this would only work if I shift click and open a location in the command window. Any direct double clicking on the executables results in the above error.

 

Running from the command prompt has only worked for some programs.

 

I followed the guide here (http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/) before posting but because of the above error I could not run FRST. Surprisingly I was able to get the cobian backup installed using my cmd prompt trick.

 

Please help, I'm not sure what else I can do to fix it. My backups have been having problems so I can't restore back to a previous time before this happened.

 

Thanks in advance for any help.

 

P.S I have tried to run a windows repair, but I get the same error about permissions.I also ran kapersky online scan and I also have Malwarebytes premium, neither revealed anything.

 

 



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 39,222 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:02 AM

Posted 23 December 2015 - 02:37 PM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===


Please Download Tweaking.com - Windows Repair from Here
[list]
  • Install and then run the program
  • Execute the instructions on Step 1 Important
  • Click Next on Step 2 Optional, do the Pre Scan skip Step 3 and 4 Optional for now.
  • On Step 5 Backup System Restore Do a Registry backup. When you have completed this click Next
  • Click on Repairs
  • Click Repairs - Open Repairs in the bottom right corner
  • Click the Unselect All button then select just the item(s) listed below

  • 01 - Repair Registry Permissions
    02 - Reset File Permissions (2)
    .. 02.01 File Permissions C:\
    .. 02.02 File Permissions D:\
    03 - Reset Service permissions
    04 - Register System Files
    07 - Repair Internet Explorer
    10 - Remove Policies Set By Infections
    11 - Repair Start Menu Icons Removed by Infections
    12 - Repair Icons
    14 - Removed Temp Files
    23 - Repair File Associations (12)
    .. 23.01 - Repair bat Associations
    .. 23.02 - Repair cmd Associations
    .. 23.03 - Repair com Associations
    .. 23.04 - Repair Directory Associations
    .. 23.05 - Repair Drive Associations
    .. 23.06 - Repair exe Associations
    .. 23.07 - Repair Folder Associations
    .. 23.08 - Repair inf Associations
    .. 23.09 - Repair lnk (Shortcut) Associations
    .. 23.10 - Repair msc Associations
    .. 23.11 - Repair reg Associations
    .. 23.12 - Repair scr Associations
    26 - Restore Important Windows Services
    27 - Set Windows Service to Default Startup
    
  • Click the Start button and let the process run to completion. Copy any error messages into Notepad, Save it on your Desktop. ( Reboot if asked to do so)
  • Please copy and paste the Contents of this file on your next reply.



  • Restart the computer normally.

    ===


    Download the version of this tool for your operating system.
    Farbar Recovery Scan Tool (64 bit)
    Farbar Recovery Scan Tool (32 bit)
    and save it to a folder on your computer's Desktop.
    Double-click to run it. When the tool opens click Yes to disclaimer.
    Press Scan button.
    It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
    The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

    How to attach a file to your reply:
    In the Reply section in the bottom of the topic Click the "more reply Options" button.
    attachlogs.png

    Attach the file.
    Select the "Choose a File" navigate to the location of the File.
    Click the file you wish to Attach.

    Click the Add reply button.
    ===


    How is the computer running now?
    Wait for further instructions.





#3 gleo634

gleo634
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 23 December 2015 - 05:43 PM

Hi nasdaq,

 

I tried to run and install tweaking using the cmd prompt but I received the same error "These files cannot be opened" your internet security settings prevented one or more files from being opened.

 

:(



#4 nasdaq

nasdaq

  • Malware Response Team
  • 39,222 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:02 AM

Posted 24 December 2015 - 09:45 AM

Right click on the .exe file for the AdwCleaner and the Farbar program and select Run as an Administrator.
Can you get the programs to run?

If that fails then follow the instructions on this video.




Keep me posted.

#5 gleo634

gleo634
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 27 December 2015 - 04:11 AM

Hi Nasdaq,

 

Merry Christmas. Sorry I haven't replied sooner. I have been away without internet I am back and have tried the youtube solution unfortunately, this does not work. The security settings in Internet zone are blank.

 

see image below:

 

http://imgur.com/9bYPAjW



#6 nasdaq

nasdaq

  • Malware Response Team
  • 39,222 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:02 AM

Posted 27 December 2015 - 10:33 AM

Can you start the computer in Safe Mode and run the Farbar tool?

If not download and run this tool.


Lets check further.

You will need to temporarily disable your AV program so it does not interfere.
Info on how to disable your security applications How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides.

Download Zeok tool from here

When the download appears, save to the Desktop.
On the Desktop, right-click the Zoek.exe file and select: Run as Administrator
(Give it a few seconds to appear.)

Click the Options in bold the following options are available to you.
Select only the check boxes for the options in bold.

Running Processes
Installed Programs
Startup Information
FireFox look
Chrome Look
Auto Clean


Do a Quick Scan
HijackThis log
Uninstall list
Shortcut Fix
Do a Deep Scan
Installer List
IE Default
Silent Runner
System Restore Info
Symlink Check
Reset Chrome
System Specs
Recently created
Empty Temp
Auto Clean



Now...
Close any open Browsers.
Click the Run script button, and wait. It takes a few minutes to run all the script.

When the tool finishes, the zoek-results.log is opened in Notepad.
The log is also found on the systemdrive, normally C:\
If a reboot is needed, the log is opened after the reboot.
Do
Please attach the zoek-results.log in your reply. It's probably too long to post.

How to:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.

Click the Add reply button.

Make sure you Enable your AV Program.

p.s.
Disabling the AV program may also help in running the Farbar tool.

#7 gleo634

gleo634
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 27 December 2015 - 05:10 PM

hi nasdaq,

 

I tried to run farbar in safe mode and did not succeed. I then tried to run zeok.exe in safe mode and that also came up with the same error message. However I was able to run it via command prompt (though not as admin) and it generated some logs which I have attached here. Hope this helps.

Attached Files



#8 nasdaq

nasdaq

  • Malware Response Team
  • 39,222 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:02 AM

Posted 28 December 2015 - 08:20 AM



Reset Internet Explorer security zone settings to their default level, follow these >steps:
Start Internet Explorer. Click Tools, and then click Internet options. Click the Security > tab. Click Reset all zones to default level, and then click OK.

If that fails to solve the issue follow the instructions on this page.

Reset Internet Explorer settings (use Internet Exlorer to view the page.)
http://windows.microsoft.com/en-US/windows7/Reset-Internet-Explorer-settings

Make sure also that you read the Notes in the bottom of the page.

If all fails run this tool in normal mode if you can.


Please Download and run the ComboFix tool.

How to use ComboFix
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Follow the instructions on the page.

Post the content of the C:\ComboFix.txt file for my review.

p.s.
When all is well you can remove the tool by following the Uninstall instructions on the same page.

====

#9 gleo634

gleo634
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 28 December 2015 - 02:37 PM

Hi Nasdaq,

 

I actually uninstalled Internet Explorer a while ago, could that be the problem? I tried to reinstall but get the same error from double clicking and trying to install it with the cmd prompt.

 

I tried combofix but get the same security permission issue.



#10 nasdaq

nasdaq

  • Malware Response Team
  • 39,222 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:02 AM

Posted 29 December 2015 - 08:17 AM

Normally when you uninstall IE it will create a restore point and restore IE to a previous version.

Do you see the restore point that was created?

If you do please restore your computer to that date.

This page may help you.

http://windows.microsoft.com/en-ca/windows7/restore-system-files-and-settings

#11 gleo634

gleo634
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 29 December 2015 - 03:02 PM

Hi Nasdaq,

 

I get the same error.

 

I tried going to Control Panel > Recovery and I get this error instead (see image attached).

 

I tried to do a windows repair from booting a usb with windows but it said the system restore is a different version to the windows I'm repairing?

 

In September I had to do a windows repair and since then I have not been able to make a backup of the system.

 

Currently my windows is installed on a ssd and everything else is on secondary hard drives, including my documents (I changed it to point to a secondary). If I do a windows reinstall, will I lose my data from my secondary hard drive or will it remain instact since it will just be the data on the ssd that gets overridden?

Attached Files


Edited by gleo634, 29 December 2015 - 03:03 PM.


#12 nasdaq

nasdaq

  • Malware Response Team
  • 39,222 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:02 AM

Posted 30 December 2015 - 09:43 AM

Currently my windows is installed on a ssd and everything else is on secondary hard drives, including my documents

If the secondary hard drive is an external to your PC and holds the programs and all your important documents I see so problems.

If you have any doubt then asked in the Windows 7 forum.
An expert will be able to help your better than I can.

http://www.bleepingcomputer.com/forums/f/167/windows-7/

#13 gleo634

gleo634
  • Topic Starter

  • Members
  • 128 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 31 December 2015 - 07:19 PM

Hi Nasdaq,

 

Just letting you know that I went ahead with a full windows reinstall. Since all my programs were not installed on the SSD that contained windows this was rather painless (Although I did go through a frustrating period where I couldn't work out why windows would not reinstall on my ssd, it turned out that I needed to unplug all my secondary hard drives before it would install).

 

I am now up to date with windows updates and have stayed clear away from internet explorer and will leave it alone rather than uninstall it.

 

Thanks for your time.



#14 nasdaq

nasdaq

  • Malware Response Team
  • 39,222 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:02 AM

Posted 01 January 2016 - 08:41 AM

If all is well.

To learn more about how to protect yourself while on the internet read this little guide best security practices keep safe.
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/
===

#15 nasdaq

nasdaq

  • Malware Response Team
  • 39,222 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:02 AM

Posted 07 January 2016 - 08:20 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users