Virus or spyware prevented opening of exe

Emachines / T3120
May 1, 2009 at 11:09:18
Specs: Windows XP
Hi there.

Not sure what cat to put this under...sorry.

Apparently came down with win32/Huer. Ran AVG, and what a mess. Now most of my programs have changed to exe. files that I can't open. Message I get states: "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." Tried to go in and run as Admin. but wasn't given the option. When I go to the accounts page, it shows me as owner/administrator.

This is odd, but may show how smart this virus (?) is: When I first began to navigate through book marks, it would only allow me to access my financial sites. I'm not even able to access 99.9% of anti spyware programs, and get "error loading page" message. One that I successfully downloaded, turned to a exe file, witch I can't access to run.

Not allowed into any important applications, such as restore or windows programs etc... I want to download HijackThis for a comprehensive check, but can't. I'm hoping to get help with the virus on another site, but for now, need help changing the exe's to .com's.

I'm not computer savvy at all, so please, if you have any ideas that wont put this dang thing at more risk~ Please be very explanatory with what steps to take, and be gentle, LOL...

Thanks so much for your help, and I will be happy to answer any questions you may have.

Margot ;)


See More: Virus or spyware prevented opening of exe

Report •


#1
May 1, 2009 at 11:14:44
Trying booting into safe mode & running a full virus/spyware scan.

Report •

#2
May 1, 2009 at 11:19:13
Booting in "safe" mode? Sorry...not sure how. Can't run any spy or virus apps. If I reboot in the safe mode, will that allow me to do the scans?

Report •

#3
May 1, 2009 at 11:34:50
Margot, Go to the link below and scroll down to line 12 (left column) and click on "EXE (lnk and regfile) Fix for Windows XP" to download a reg file fix. Save the REG File to your hard disk. Double click it and answer yes to the import prompt.

http://www.kellys-korner-xp.com/xp_...

If you can't run the file do the following:

Press CTRL-ALT-DEL and open Task Manager. Once there, click File, then hold down the CTRL key and click New Task (Run). This will open a Command Prompt window. Enter REGEDIT.EXE and press Enter. Once regedit is open click File>Import and locate that reg file fix, hilite it and click Open.

Note: If you can't access the Internet with the problem computer use another computer to download the reg file fix onto a CD or floppy and transfer the file to the problem computer.

Tufenuf


Report •

Related Solutions

#4
May 1, 2009 at 13:56:41
Thank you so much. I'm going to give that a try Tufenuf. I'll post to let you know how it worked.

Report •

#5
May 1, 2009 at 14:21:16
Okay, It doesn't give me the option to download it. It came up with the actual script or coding. I did check a few of the other links there and they did show the save file box. Seems this virus is really protecting its self...or could be my paranoia, lol.

Unfortunately, I don't have access to any other computers.


Report •

#6
May 1, 2009 at 17:14:03
Margot, Go back to that link and use Internet Explorer and right click on "EXE (lnk and regfile) Fix for Windows XP" then choose "Save target as" and save it to somwhere you can easily find it (desktop, My Documents) then follow the instructions I posted in my previous reply.

Tufenuf


Report •

#7
May 1, 2009 at 18:09:44
Thanks so much for your reply!

I followed your instructions, by going through task manager, and got this response:

C:\Documents and Settings\Owner>REGEDIT.EXE
Access is denied.


Report •

#8
May 1, 2009 at 19:11:19
Margot, Go to the link below, click on "Security" (left side), click on "Disable/Enable Registry Editing Tools" (right column) then download the "regtools.vbs" file. You again may have to right click it then choose "Save target as" and save it to somwhere you can find it. Instructions are on the page on how to run that file. If this works then try again doing what I posted in Responses 6 and 3.

http://www.dougknox.com/index.html

Tufenuf


Report •

#9
May 1, 2009 at 19:52:40
Thank you so much again!

Okay, I have the file downloaded, and yes, I did have to "save target as."

Before I do something stupid, do I perform the restart for regtools.vbs before or after I reattempt responses #3 and #6?


Report •

#10
May 1, 2009 at 19:59:56
":Before I do something stupid, do I perform the restart for regtools.vbs before or after I reattempt responses #3 and #6?"

Margot, you would do the restart before you re-attempt responses #3 and #6.

Tufenuf



Report •

#11
May 1, 2009 at 20:02:39
Awesome, thanks for getting back so quick! I'll let you know the results ;)

Report •

#12
May 1, 2009 at 20:58:17
Hey there ;)

I clicked to open the regtool right after my last reply. Still have the hour glass, and it has not opened...no message of any kind. Is this normal, or am I being impatient?

Thanks Tufenuf


Report •

#13
May 1, 2009 at 21:09:22
"I clicked to open the regtool right after my last reply. Still have the hour glass, and it has not opened...no message of any kind. Is this normal, or am I being impatient?"

No, that's not normal and I'm assuming you mean the regtools.vbs file.

Try the following and post back the results:

Click Start
Ckick Run
Type in: regedit
Click OK

Let me know if the registry editor opens and any exact error messages that appear if it doesn't open.

Tufenuf


Report •

#14
May 1, 2009 at 21:18:29
Thank you! I'll brb ;)

Report •

#15
May 1, 2009 at 21:23:41
Thank you so much for sticking with me! You're great ;)

Okay, same message as always:

"Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."


Report •

#16
May 1, 2009 at 21:29:59
Margot, Whatever virus your computer picked up really messed up the various file associations and we need to somehow get into the registry editor. I'm about to leave for the night but let me see if I can come up with something tomorrow. Normally what we tried would have solved the problem.

Tufenuf


Report •

#17
May 1, 2009 at 21:36:35
Thank you Tufenuf, you have a great night! I will be back to see if you have any ideas. You've been wonderful ;)

Report •

#18
May 3, 2009 at 08:06:00
Margot, I wish I had a solution but that Win32/Heur virus that your computer picked up appears to be one bad dude. You can go thru the links/threads at the search link below where you may find something to help you. I recommend that you post this problem on the "Security and Virus" forum and maybe one of the xperts in that field can help you. I'm no expert on viruses or malware and I wish we could have solved this but I'm out of any more ideas.

http://www.google.com/search?hl=en&...

Tufenuf


Report •

#19
May 3, 2009 at 09:02:40
Thank you so much Tufenuf; you really do rock! You stuck through this with me, and were very helpful. We may not have been able to fix my immediate issue, but through no fault of yours, nor lack of serious effort and thought on your part. ;) You taught me a few things too...I'm very grateful!

I will get help with this bleeping virus, and would love the opportunity to share the results with you.

Have a wonderful day!

Margot ;)


Report •

#20
May 3, 2009 at 10:53:20
Margot, if you can go online ith your computer, go....
HERE and run it. It may just get you to a sensible level. Excellent program.
Jack...

Report •


Ask Question