Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

XP Will not run all .EXE applcations 1

Status
Not open for further replies.

k4ghg

Technical User
Dec 25, 2001
191
US
I removed a virus from my system and now certain application (.exe) files will not run. I get a dialog box that says "Windows cannot open this file: FILEname.exe To open file Windows needs to know what create it..." This does not happen will all .exe files on some. Any help would be appreciated. Ronnie
 
Did you try rebooting after running that .com file?


See if any of these registry entries got changed by your virus.

Places that viruses and Trojans hide on start up



I see lots of recommendations here for programs like -

Malwarebytes' Anti-Malware

HijackThis Tutorial and download






323526 - HOW TO: Use the ASSOC Command to Display and Modify File Name Extension Associations in Windows 2000

184082 - How to Use the Assoc Command to Change File Associations




Easy File Associations for Windows XP
 
A star to smah. The regedit instructions under link he provided worked to fix a "run as" popup every time I tried to run an application. Reg key was corrupted by the av.exe virus I recently murdered.
 
Just saw that yesterday myselft (AV.exe and screwed up executables). I've use that EXE fix before also - works great!!!
 
Thanks, Its interesting a few exes will work while others will not. Windows related regedit and restore for example don't work. But, if I run regedit via a shell program that I have it works. Restore does not, also, programs that extract other programs and than run a setup do not work either. I have tried the fixes with out too much luck. Again I appreciate the suggestions and any other advice will also be appreciated. its been very frustrating to say the least. Thanks ROnnie
 
I always run these two together in this order:

RemPolicy.bat - stops things like task manager disabled, etc. that malware may have done. Pluses indicate beginning end of script or reg file.


++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++@ECHO OFF
ECHO Working ..........

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddRemovePrograms /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddRemovePrograms /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoRemovePage /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoRemovePage /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddPage /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddPage /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoWindowsSetupPage /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoWindowsSetupPage /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromCDorFloppy /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromCDorFloppy /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromInternet /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromInternet /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromNetwork /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddFromNetwork /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoServices /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoServices /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoSupportInfo /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoSupportInfo /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer /v NoControlPanel /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\system /v DisableRegistryTools /t REG_DWORD /d 0 /f >NUL

REG add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\system /v DisableTaskMgr /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoWindowsUpdate /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\system /v DisableRegistryTools /t REG_DWORD /d 0 /f >NUL

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\system /v DisableTaskMgr /t REG_DWORD /d 0 /f >NUL

REG Delete "HKCU\Software\Policies\Microsoft\internet explorer\control panel" /f >NUL

REG Delete "HKCU\Software\Policies\Microsoft\internet explorer\restrictions" /f >NUL

Exit
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


Resets executable behavior ExeFix.reg

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[HKEY_CLASSES_ROOT\.exe\PersistentHandler]
@="{098f2470-bae0-11cd-b579-08002b30bfeb}"

[HKEY_CLASSES_ROOT\exefile]
@="Application"
"EditFlags"=hex:38,07,00,00
"TileInfo"="prop:FileDescription;Company;FileVersion"
"InfoTip"="prop:FileDescription;Company;FileVersion;Create;Size"

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"

[HKEY_CLASSES_ROOT\exefile\shell]

[HKEY_CLASSES_ROOT\exefile\shell\open]
"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\runas]

[HKEY_CLASSES_ROOT\exefile\shell\runas\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shellex]

[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
@="{86C86720-42A0-1069-A2E8-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PEAnalyser]
@="{09A63660-16F9-11d0-B1DF-004F56001CA7}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]
@="{86F19A00-42A0-1069-A2E9-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page]
@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"

[HKEY_CLASSES_ROOT\regfile]
@="Registration Entries"
"EditFlags"=dword:00100000
"BrowserFlags"=dword:00000008

[HKEY_CLASSES_ROOT\regfile\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,72,00,65,00,67,00,65,00,64,00,69,00,74,00,2e,00,65,00,78,00,65,00,\
2c,00,31,00,00,00

[HKEY_CLASSES_ROOT\regfile\shell]
@="open"

[HKEY_CLASSES_ROOT\regfile\shell\edit]

[HKEY_CLASSES_ROOT\regfile\shell\edit\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,4e,00,4f,00,\
54,00,45,00,50,00,41,00,44,00,2e,00,45,00,58,00,45,00,20,00,25,00,31,00,00,\
00

[HKEY_CLASSES_ROOT\regfile\shell\open]
@="Mer&ge"

[HKEY_CLASSES_ROOT\regfile\shell\open\command]
@="regedit.exe \"%1\""

[HKEY_CLASSES_ROOT\regfile\shell\print]

[HKEY_CLASSES_ROOT\regfile\shell\print\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,4e,00,4f,00,\
54,00,45,00,50,00,41,00,44,00,2e,00,45,00,58,00,45,00,20,00,2f,00,70,00,20,\
00,25,00,31,00,00,00

[HKEY_CLASSES_ROOT\.lnk]
@="lnkfile"

[HKEY_CLASSES_ROOT\.lnk\ShellEx]

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{000214EE-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{000214F9-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{00021500-0000-0000-C000-000000000046}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\.lnk\ShellNew]
"Command"="rundll32.exe appwiz.cpl,NewLinkHere %1"

[HKEY_CLASSES_ROOT\lnkfile]
@="Shortcut"
"EditFlags"=dword:00000001
"IsShortcut"=""
"NeverShowExt"=""

[HKEY_CLASSES_ROOT\lnkfile\CLSID]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\lnkfile\shellex]

[HKEY_CLASSES_ROOT\lnkfile\shellex\ContextMenuHandlers]

[HKEY_CLASSES_ROOT\lnkfile\shellex\ContextMenuHandlers\Offline Files]
@="{750fdf0e-2a26-11d1-a3ea-080036587f03}"

[HKEY_CLASSES_ROOT\lnkfile\shellex\ContextMenuHandlers\{00021401-0000-0000-C000-000000000046}]

[HKEY_CLASSES_ROOT\lnkfile\shellex\DropHandler]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\lnkfile\shellex\IconHandler]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\lnkfile\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\lnkfile\shellex\PropertySheetHandlers\ShimLayer Property Page]
@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}]
@="Shortcut"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\InProcServer32]
@="shell32.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\PersistentAddinsRegistered]

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\PersistentAddinsRegistered\{89BCB740-6119-101A-BCB7-00DD010655AF}]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\PersistentHandler]
@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\ProgID]
@="lnkfile"

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\shellex]

[HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\shellex\MayChangeDefaultMenu]

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 
Sometimes lists of application.exe get placed in this Key as a way of preventing certain .exe from running, or causing them to start the malware .exe instead. Windows itself will place mainly .dlls and one or two ,exe in there, so you should check with a non-virused XP for comparison before assuming your Key has been altered. A good clue to trouble is when you see anti virus, or other security tools listed in there.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

Using Image File Execution options as an Attack Vector on Windows
 
Thanks for all the suggestions, but noting seems to work. I still canot run all the programs. My icomn links are O.K. I can't run Windows Regedit from the run command but can run it from a third party shell. I have some compressed installation programs that will not run. Each time that I try executing the program I still get the same dialog box 'Windows cannot open this file. To open this file windows needs to know what program create it." This is even true for the Windows programs. Thanks again... Ronnie
 
With all the registry changes that i make I don't think the problem is the registry, but a program or DLL that runs Window's exe files.

I just check the C drive and noticed that when I look at the file type associated with the folder there is no exe file. Also, noted an icon with the drive that is for one of my programs. Could these items be relaed to my problem?

Thanks... Ronnie
 
If nothing else works you could try repairing windows by running it over itself. You will lose all your windows updates but your files will be untouched.

How to Perform an In-Place Upgrade (Reinstallation) of Windows XP (Q315341)

As any repair install may carry across settings from the Registry that are corrupt then a format and clean install may be the only alternative left to you.
 
Thanks - I was poking around on the Internet and notice a registry setting that I do not have: HKEY_CLASSES_ROOT\Directory\ - Any idea what this does? Thanks again this has been very frustrating... Ronnie
 
It seems to be related to the opening of Folders and Context Menu items. I don't think it is responsible for opening .exe, but I am not sure. As I have one, you should have one too, is the best I can say about the matter.

This first link should return it, but what else is missing?

HELP - Deleted registry key for opening file folders

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top