anytime i try to run a program i get open wit

May 14, 2011 at 23:40:24
Specs: Windows Vista
any time i try and open anything i get window requesting me to select program to open it with and will not open

See More: anytime i try to run a program i get open wit

Report •

May 15, 2011 at 16:17:41
Lets see if we can get you going again…

Open Notepad: Start > All Programs > Accessories > Notepad
Please copy and paste ALL of the following code below to Notepad, including the Windows Registry Editor Version 5.00 portion, and make sure there is no space above the Windows Registry Editor Version 5.00 when pasted in Notepad.

Windows Registry Editor Version 5.00

@="\"%1\" %*"

Then, in Notepad go to File > Save as
In the drop box select Save as File: and then, All Files
In the File Name box type: fix.reg
This creates a fix.reg file on the Desktop

Go to the Desktop
Right click the fix.reg file, and select: Merge
Accept the notification to merge into the Registry.

Next, download aswMBR:
Save to the Desktop.

If the file does not download, copy the following to the address bar of your browser. Do not include the quotes or the brackets!

Double click the aswMBR.exe icon to run it
Click the Scan button to start the scan
On completion of the scan, click the save log button
Save the log to the Desktop.

Please post the aswMBR log in your reply.

Report •

May 15, 2011 at 16:33:31
aswMBR version Copyright(c) 2011 AVAST Software
Run date: 2011-05-15 16:28:53
16:28:53.182 OS Version: Windows x64 6.0.6002 Service Pack 2
16:28:53.182 Number of processors: 3 586 0x203
16:28:53.182 ComputerName: WHITEHORNES-PC UserName:
16:28:55.771 Initialize success
16:28:59.110 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000054
16:28:59.110 Disk 0 Vendor: WDC_WD64 01.0 Size: 610480MB BusType: 6
16:29:01.138 Disk 0 MBR read successfully
16:29:01.138 Disk 0 MBR scan
16:29:01.138 Disk 0 unknown MBR code
16:29:01.153 Service scanning
16:29:03.369 Disk 0 trace - called modules:
16:29:03.400 ntoskrnl.exe CLASSPNP.SYS disk.sys PCTCore64.sys acpi.sys storport.sys hal.dll nvstor64.sys
16:29:03.415 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004870790]
16:29:03.415 3 CLASSPNP.SYS[fffffa60009ccc33] -> nt!IofCallDriver -> [0xfffffa800486bcf0]
16:29:03.431 5 PCTCore64.sys[fffffa6000ad85fc] -> nt!IofCallDriver -> [0xfffffa800464ad30]
16:29:03.431 7 acpi.sys[fffffa6000860fde] -> nt!IofCallDriver -> \Device\00000054[0xfffffa8003ae7060]
16:29:03.447 Scan finished successfully
16:29:39.015 Disk 0 MBR has been saved successfully to "C:\Users\The Whitehornes\Desktop\MBR.dat"
16:29:39.015 The log file has been saved successfully to "C:\Users\The Whitehornes\Desktop\aswMBR.txt"

Report •

May 15, 2011 at 16:34:12
I could not open notepad from star menu had to redo older one

Report •

Related Solutions

May 15, 2011 at 17:31:09
Download iExplore.exe or eXplorer.exe, which are renamed copies of rKill:

Save the file to the Desktop, and double-click on it. (For Windows 7, select: Run as Administrator)
Ignore any messages, and allow the file to run until the command window closes.

Without a reboot, download Malwarebytes’ Anti-Malware (black button with green and white icon) Save to the Desktop:

Double-click mbam-setup.exe and follow the prompts to install the program. (For Vista or Windows 7, select: Run as Administrator)

Run Malwarfebytes’ AntiMalware and update the program.
Once updated, select Perform Full Scan and click the scan button.

When the scan finishes, click OK in the message box, and you will see the results of the scan.

Click the Remove Selected button to get rid of the malware.

When Malwarebytes finishes, you may be prompted to reboot. If so, reboot.

Please post the Malwarebytes log in your reply so we can see where we are at, and plan any additional removal strategy, if necessary.

Report •

May 15, 2011 at 17:57:53
My AVG stopped theDownload iExplore.exe or eXplorer.exe, which are renamed copies of rKill:
as a backdoor

Report •

May 15, 2011 at 18:20:12
You need to temporarily disable AVG. It is notorious for interfering with the tools needed to get rid of malware.

Open the AVG 2011 Control Center, by right-clicking on the AVG icon on task bar.
•Click on Open AVG User Interface.

•On the Menu Bar, click on Tools, then click Advanced Settings.

•In the screen which opens, scroll down to Temporarily disable AVG protection.

•Click on it to highlight and in the right hand pane, check the box for Temporarily disable AVG protection.

•Click Apply.

•In the next screen which opens, select 15 minutes from the drop down menu, then click the Disable real time protection button and click OK.

•To re-enable, just check Enable on the main GUI interface. You may also need to click Fix (enable becomes Fix if all components do not start).

Try the previous instructions after AVG is disabled.

Report •

May 15, 2011 at 19:28:32
alwarebytes' Anti-Malware

Database version: 6586

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19048

15/05/2011 7:25:26 PM
mbam-log-2011-05-15 (19-25-26).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 369223
Time elapsed: 1 hour(s), 20 minute(s), 53 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\the whitehornes\AppData\Local\Temp\ldr5531.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

Report •

May 15, 2011 at 19:55:24
Are you still getting the 'Open with" prompt when you try to open a program?

Report •

May 15, 2011 at 20:57:16
I think it has gone. I was able to get help from another group and I was able to roleback to earlier time and that mostly fixed the problem with your help

Is there anything else I should look out for?

Report •

May 15, 2011 at 21:22:47
Just use the computer for a few days, and see how it goes.

Report •

Ask Question