Can't run some .exe files

Discussion in 'Software' started by Karagich, Jan 9, 2010.

  1. Karagich

    Karagich Private E-2

    Iv'e seen this in many threads. I can't find one to follow though solution. A office computer running XP, and Mc Afee was infected with virus or spyware under the guise of windows spyware protection suite from a popup. I noticed a great deal of redirection of web sites happening. I began the anti virus protocol per Major geeks Instructions. Spybot found the problem software but couldn't "fix" it. Updated Malwarebytes didn't see the two problems Spybot found. Ran CCleaner. I set the files and extensions to view. Made sure the startup was set to normal. Deleted McAfee, Deleted Java, Downloaded Avast. During the set-up of Avast the computer needed to be restarted. I set a boot scan with Avast and restarted the computer.
    The computer restarted and went through the Avast scan. When windows came up MOST of the usual icons on the desktop were changed to generic whitesheet icons that would not execute. My Computer, My Network Places. Recycle, and Internet Explorer icons remained unchanged.
    Until the reboot all programs run as usual. The only problems were with Browser redirecting.
    I can't run any programs except IE. The computer will start in Safe Mode, IE won't connect. Nothing starts from Start/Run, no msconfig, command, regedit. Nothing downloaded to the desktop executes.
     
  2. sach2

    sach2 Major Geek Extraordinaire

    What is the message when you double-click an exe file?
     
  3. Karagich

    Karagich Private E-2

    Windows cannot open this file:

    File: "xxxxxxxx"
    To open this file windows needs to know what program created it. Windows can go online to look it up automatically, or you can manually select from a list of programs on your computer.
    What do you want to do?
    Then there are a couple click buttons for Use the web service, or select program from a list.
     
  4. sach2

    sach2 Major Geek Extraordinaire

    I'd try the fix #12 over at KellysKorner. It is a reputable site. In your browser right-click #12 and choose Save Link As... It will save a file named xp_exe_fix.reg.txt. Rename the file removing the .txt at the end so xp_exe_fix.reg

    Right click the file and choose Merge. Accept the warning message and say OK. It should reset the file associations back to defaults for exe files.
     
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I would first try to have Avast put back what it removed. Or do a system restore to a point before this happened.
     
  6. Karagich

    Karagich Private E-2

    Avast won't load "windows cannot open AshAvast.exe" same message. As for system restore "windows cannot open rstrui.exe" same message.
    KellysKorner #12 I right clicked, chose save target as, saved to the desktop. The downloaded file name is exefix.reg as opposed to xp_exe_fix.reg.txt I right clicked chose merge, at the security message chose run. I got the "Open With" dialog box. I didn't see anything listed to open .reg files.
     
  7. Karagich

    Karagich Private E-2

    Ctrl/Alt/Del brings up Task Manager. I noticed AshServ.exe, AshMaiSv.exe, and AshWebSv.exe are running. So some parts of Avast are running. Cant uninstall Avast through "Remove Programs" Rundll32.exe brings up the "cannot open" message
     
  8. sach2

    sach2 Major Geek Extraordinaire

    In taskmanager, if you choose new task does rstrui.exe run?
     
  9. satrow

    satrow Major Geek Extraordinaire

  10. Karagich

    Karagich Private E-2

    Avast uninstaller is a .exe downloaded to the desktop which results in the "Windows cannot open" message. rstrui.exe does not run from task manager, nor do command switches, regedit or msconfig.
    Do you think an online scan would have any effect? I noticed Avast has an online scan. I remember using Panda in the past.
    I am at home now and won't get another shot at the work PC until Monday.
     
  11. brandypeppy

    brandypeppy MajorGeek

    I've worked on a few quirky computers that have been help with this"

    http://majorgeeks.com/Dial-a-fix_d4899.html

    By no means a cure-all, but I've at times been very pleased with the results, plus it makes you look like a genius, something I am a whole bunch of IQ points short of.
     
  12. satrow

    satrow Major Geek Extraordinaire

    I think exeHelper.com may enable you to run *.exe files again, there's a link to it from TimW's first post in this thread.

    You really should go through the steps listed in the Malware Removal Guide, read and follow it carefully ...
     
  13. Karagich

    Karagich Private E-2

    Downloaded dial-a-fix to C drive can't open dial-a-fix.exe, or secedit.exe. "Windows Cannot Open This File" message.
    I went to TimW's post downloaded AVPFind.bat, and exehelper to the desktop. Got the "Windows Cannot Open" message for both AVPFind.bat and exehelper.com.
    I was in the process of going through the Malware Removal Procedures as described. The steps I completed are in my first post.
     
  14. Karagich

    Karagich Private E-2

    I saw the superantispyware.com online scan in TimW's post. I gave it a shot. I clicked to start the download. Security Warning came up, I chose "RUN". The Windows File Association web page popped up. File Type: Unknown, Description: Windows does not recognize this file type
     
  15. sach2

    sach2 Major Geek Extraordinaire

  16. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Hello, Karagich

    If sach2's link doesn't work for you -- there is a procedure to help you involving using a combination of MGTools.zip/Win32kDiag/Junction/Inherit.exe. <--- However - I will stress that that procedure SHOULD be worked out under supervision, by starting a thread in the Malware Removal Forum.

    dr.m
     
  17. Karagich

    Karagich Private E-2

    Sach2 you're the geek! The instructions on first half of the site worked. There were no EXE extension listed. I created a new one and all is well.
    Now, I can go back to the original problem. When I go to Google I get redirected to Google Netherland. I don't speak Dutch, yet.
    Spybot found "Microsoft Windows Redirected Hosts" and "Fraud Windows Protection Suite" Spybot can't fix them and malwarebytes doesnt find them. I guess I'm going back to the malware guys.
    Thanks to TimW, satrow, brandypeppy, dr.moriarty. If we make enough attempts that don't work, we get closer to the one that will.
    Sach2 Thanks again
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds