vista problem - not opening any EXE files

[Big Black Stilo]

Our laptop runs vista and is split into two log ons, on for me one for the mrs.

on the mrs log on she managed to get a virus on it, the one where it creates a fake windows security centre, saying your riddled with all kinds.

anyways, i had come accross this bugger before, so used AVG to get rid of it and double checked with malware bytes, and there is now no sign of the little blighter, however it appears to have knackered the mrs' log on and it wont open any .exe files. you click the icon, may it be a short cut, start menu or in its root folder, and it brings up the box to select a program for opening the file.

i can still force these .exes to run by right clicking them and selecting run as adminstrator.

my first thought was something was a miss with the registry on her log on, so logged on her profile and followed some tips off of microsofts support site that had results for other people.. but not for me

anyone any other ideas?

short of taking her files off her log on and binning it off and creating a new one, im stumped. (i'd prefer not to do this option)

 

[fingers99]

A few thoughts

1. This won't be any use to you, but, "never network a computer running Windows"
2. Could the virus still be in memory?
3. Is your AVG bang up to date?

If 2 and 3 are satisfied, you should be able to modify the permissions so the missus can run the exes.

 

[Big Black Stilo]

AVG is up to date and the virus is not in memory.

i should add that when i have fixed this virus on other peoples computers i have used system restore to correct issues, but this time the virus seems to have got shut of the restore points

 

[jip0]

i had something similar if not the same a little while back. try running ccleaner to clear any traces of files the virus have left beind and also repair registry errors

in my case the virus made an entry so whenever you open an exe file it actually opens the virus

 

[Big Black Stilo]

nasty!

its not re-opening the virus! i think it would have done if i hadnt of got rid of it! it seems to have picked up some more nastyness since i last encountered it.

even the windows security centre screens were convincing!

 

[dave]

did you run a boot time scan after you got rid of virus?

 

[jip0]

nasty!

its not re-opening the virus! i think it would have done if i hadnt of got rid of it! it seems to have picked up some more nastyness since i last encountered it.

even the windows security centre screens were convincing!

yeah its coz its looking for the virus file which is now non exsistant thats your problem.

the security center screens are very convincing especially for people with less experiance with the internet

 

[Big Black Stilo]

did you run a boot time scan after you got rid of virus?

nope!

 

[dave]

its probably still there then, is it the one where screen goes black apart from 1 box in the middle that takes you to a site selling vista?

 

[Big Black Stilo]

its probably still there then, is it the one where screen goes black apart from 1 box in the middle that takes you to a site selling vista?

na, its the one that creates a fake windows security centre telling you your computer is riddled with allsorts, it doesnt let you on the internet, start programs, run antivirus software and in my instance, delete all your system restore points!

its quite easy to get shut of it, its just repairing the damage its left is doing my nut in

 

[jenks69]

1. This won't be any use to you, but, "never network a computer running Windows"

Why not?

As for the matter in hand, I'd also recommend ccleaner. For exe's that don't run have you tried this... (I know your on Vista but same principle (I hope)).

http://filext.com/faq/broken_exe_association.php

Good luck!

In the past when I've dealt with the security centre fakes it's added lots of entries to the services and host files - are those ok?

EDIT: Forgot to suggest Microsoft Security Essentials for AV it's free and works exceptionally well, I put it on the GF's laptop as I was getting fed up of the same virus type destroying it every few days. since putting MSE on we've had over a year of virus free browsing :slayer:

 

[jip0]

because fingers is a linux guy and therfore windows is the spawn of satan

 

[Big Black Stilo]

i think i have this all sorted now... have reset some registry keys and i have .exe opening back. im not aware of anything else thats changed.

anyone got anything i should be looking out for?

 

[Big Black Stilo]

Why not?

As for the matter in hand, I'd also recommend ccleaner. For exe's that don't run have you tried this... (I know your on Vista but same principle (I hope)).

http://filext.com/faq/broken_exe_association.php

Good luck!

In the past when I've dealt with the security centre fakes it's added lots of entries to the services and host files - are those ok?

EDIT: Forgot to suggest Microsoft Security Essentials for AV it's free and works exceptionally well, I put it on the GF's laptop as I was getting fed up of the same virus type destroying it every few days. since putting MSE on we've had over a year of virus free browsing :slayer:

Jenks, what should i be looking for on the services and host files?

 

[jip0]

i think i have this all sorted now... have reset some registry keys and i have .exe opening back. im not aware of anything else thats changed.

anyone got anything i should be looking out for?

it stops updates and downloads

also worth seeing if you can create a restore point. and then restore to it, just make sure it wont un do your hard work :spin:

 

[fingers99]

because fingers is a linux guy and therfore windows is the spawn of satan

No, OSX is the spawn of Satan (or, at least, the BSD daemon!). Linux just doesn't have any of these silly malware/virus/fragmentation issues.

 

[Big Black Stilo]

it stops updates and downloads

also worth seeing if you can create a restore point. and then restore to it, just make sure it wont un do your hard work :spin:

restore points working fine, can download on the profile that was knackered, updates, well they're turned off anyway (due to recent microsoft updates buggering Dell laptops)

i thinks all is well

 

[jenks69]

Jenks, what should i be looking for on the services and host files?

open the following file in notepad:

c:\windows\system32\drivers\etc\hosts

I would expect it to have lots of lines starting with a # and then nothing else after, if you see anything else copy and paste them into here. They are machine wide files so if your profile isn't doing funny things you should be ok - but it's worth a check.

 

[Big Black Stilo]

cheers Jenks, i'll be going back to it tomorrow evening, i've given up playing with that machine now... currently trying to sort out the netbook the mrs has buggered up!!!!

she shouldnt be allowed near computers!

 

[Focus Owner]

got a solution don't use vista