locked
xp antispyware 2012 virus repair RRS feed

  • Question

  • I created a new user account with admin priviledges to install the tool to remove the virus, which it did.  However, when I go into the origianl account I am only able to access a few items such as internet explorer and files in my documents.  Any other program file I try to access has a quick flash of the notebook screen and that is it.  I cannot open the cmd line either.  Is there anything I can do to correct this? Also, I was able to send all docs to the CD burner but I am not able to burn a CD, it will not let me do a sysem backup.  HELP!
    Tuesday, June 28, 2011 10:04 PM

Answers

  • Here is the source for a .REG file that will restore the .EXE associations for windows. copy and paste the below into a note pad and save as FixEXE.REG

    After you save the file double click on it. Should be good after that.

     

    COPY BELOW LINE

    --------------------------------------------------------------------------

     

    Windows Registry Editor Version 5.00

    [HKEY_CLASSES_ROOT\.exe]
    @="exefile"
    "Content Type"="application/x-msdownload"

    [HKEY_CLASSES_ROOT\.exe\PersistentHandler]
    @="{098f2470-bae0-11cd-b579-08002b30bfeb}"

    [HKEY_CLASSES_ROOT\exefile]
    @="Application"
    "EditFlags"=hex:38,07,00,00
    "TileInfo"="prop:FileDescription;Company;FileVersion"
    "InfoTip"="prop:FileDescription;Company;FileVersion;Create;Size"

    [HKEY_CLASSES_ROOT\exefile\DefaultIcon]
    @="%1"

    [HKEY_CLASSES_ROOT\exefile\shell]

    [HKEY_CLASSES_ROOT\exefile\shell\open]
    "EditFlags"=hex:00,00,00,00

    [HKEY_CLASSES_ROOT\exefile\shell\open\command]
    @="\"%1\" %*"

    [HKEY_CLASSES_ROOT\exefile\shell\runas]

    [HKEY_CLASSES_ROOT\exefile\shell\runas\command]
    @="\"%1\" %*"

    [HKEY_CLASSES_ROOT\exefile\shellex]

    [HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
    @="{86C86720-42A0-1069-A2E8-08002B30309D}"

    [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers]

    [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PEAnalyser]
    @="{09A63660-16F9-11d0-B1DF-004F56001CA7}"

    [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]
    @="{86F19A00-42A0-1069-A2E9-08002B30309D}"

    [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page]
    @="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"


    Wednesday, June 29, 2011 11:35 AM

All replies

  • Here is the source for a .REG file that will restore the .EXE associations for windows. copy and paste the below into a note pad and save as FixEXE.REG

    After you save the file double click on it. Should be good after that.

     

    COPY BELOW LINE

    --------------------------------------------------------------------------

     

    Windows Registry Editor Version 5.00

    [HKEY_CLASSES_ROOT\.exe]
    @="exefile"
    "Content Type"="application/x-msdownload"

    [HKEY_CLASSES_ROOT\.exe\PersistentHandler]
    @="{098f2470-bae0-11cd-b579-08002b30bfeb}"

    [HKEY_CLASSES_ROOT\exefile]
    @="Application"
    "EditFlags"=hex:38,07,00,00
    "TileInfo"="prop:FileDescription;Company;FileVersion"
    "InfoTip"="prop:FileDescription;Company;FileVersion;Create;Size"

    [HKEY_CLASSES_ROOT\exefile\DefaultIcon]
    @="%1"

    [HKEY_CLASSES_ROOT\exefile\shell]

    [HKEY_CLASSES_ROOT\exefile\shell\open]
    "EditFlags"=hex:00,00,00,00

    [HKEY_CLASSES_ROOT\exefile\shell\open\command]
    @="\"%1\" %*"

    [HKEY_CLASSES_ROOT\exefile\shell\runas]

    [HKEY_CLASSES_ROOT\exefile\shell\runas\command]
    @="\"%1\" %*"

    [HKEY_CLASSES_ROOT\exefile\shellex]

    [HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
    @="{86C86720-42A0-1069-A2E8-08002B30309D}"

    [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers]

    [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PEAnalyser]
    @="{09A63660-16F9-11d0-B1DF-004F56001CA7}"

    [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]
    @="{86F19A00-42A0-1069-A2E9-08002B30309D}"

    [HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page]
    @="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"


    Wednesday, June 29, 2011 11:35 AM
  • Monday, July 11, 2011 1:32 AM
  • Hi,

     

    Please go through the below link to get the solution for the malware.It worked for me -

    http://am-techzone.blogspot.com/2011/07/xp-antispyware-2012.html

    Friday, July 15, 2011 8:30 AM
  • Here is my free solution to this problem.

    I have developed the video showing how to remove this virus for free manually. It is quite simple to follow.

    http://virusremovalvideos.blogspot.com/2011/08/multi-rogue-virus-family-how-to-remove.html

    Friday, August 19, 2011 1:05 PM
  • @WJDavis5

    I saw a similar solution to this elsewhere and tried it. It seems to have removed the virus, but now the Windows Security Center keeps saying that my Automatic Updates have been disabled, and I cannot enable it through the security center window. However, I have gone to Automatic Updates in the Control Panel, and it is already set to Automatic. Is this a byproduct of using this method to remove the virus? Do you know of a way to fix this?

    Tuesday, January 10, 2012 12:46 AM
  • You need to clean you infected account. Use Malwarebytes to delete this serious virus for free. Here is the trick how you can run the remover in spite of the blockage on the part of XP Antispyware 2012 virus -  http://www.deletevirus.net/xp-antispyware-2012-virus/

    You need to run it as Administrator (with Admin's rights)

    Thursday, January 19, 2012 2:23 PM