Virus problem, need advice.

[fallout]

Sub7 virus trojan was installed onto host system, conveniently editing the registry to require that all applications also run it's own program (presumably to reinstall the trojan had it been wiped clean). I intalled norton anti-virus and it removed this .exe that all other applications relied on to open. Now I cannot open anything with an .exe extension, it just asks me to locate the virused program.

What I need is a dummy .exe file that I can rename to the original virus program, tricking my registry into thinking it has the .exe it needs. That way i can open regedit and change the key that requires the virus.

Already tried going the File Types route and editing it from there, the edit and open options are greyed out.

Thanks for any help.

 

[Kento]

Download exefix08.com from the link into any folder then doubleclick on it and run it. It'll fix your problem of not being able to run some programs. It reverses the change that sub7 made to the registry.

http://home.earthlink.net/~rmbox/Reticulated/Only_IE.html

 

[Kento]

By the way, exefix08.com only works in 95, 98, and ME.

 

[fallout]

Thanks! It worked perfectly.

 

[Kento]

Well that was a quick reply. Anyway, you're welcome. I assume you removed the infected trojan file(s)? Did you look in system.ini as well? If not see if the shell=Explorer line was altered. Is there anything typed to the right of it?

 

[rockerfellerz]

I see the problem was fixed, but here's my 2 cents worth anyway. You could also rename regedit.exe to regedit.com this would allow it to run. then rename it back when you have fixed the registry....