can't open any programs

[Moogly]

hi, I am using Win 7 system and microsoft Essential for AV. sadly I got a virus e mail ( which i didn't know) from UPS, and after that I tried to use microsoft security essential to remove them. it said remove successfully.

(1) however, I still can't open any program. when I try to open, it always pop up the " open with" window. but I am able to use right mouse click and " run as adminstrator" - is that .exe running file I am missing? where can I download it?

(2) under the action center, notification and Icons - I still can see this virus name there - av.exe... but I can delete or do anything of it.. what shall I do with it?

many thanks

 

[FZ21Z]

Hi.

This gets recommend a lot here - www.malwarebytes.org, so give that a try to remove it.

 

[electrotune1200]

Try running a scan with Malwarebytes

Malwarebytes.org

Clear all your system restore points and run a scan in safe mode.

 

[Moogly]

thanks. I just did a scan by malwarebytes - and it says I have 3 infections in my reg keys... I click on clean / remove after the scan. what to do next?

Regards,

 

[electrotune1200]

Have you deleted all your System Restore points?

After the initial scan, run another full system scan to make sure all the traces were removed.

 

[alphanumeric]

To get rid of the left over icon in the action center open regedit and go to:
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\
Microsoft\Windows\CurrentVersion\TrayNotify\
Then delete IconStreams and PastIconsStream in right frame:
Now open Task manager & kill explorer.exe (desktop will disappear). Then do File > new task & type explorer.exe.

You may notice a lot of icons will disappear, don't panic, they will come back the next time you use that particular program. The problem is they never go away even if you un-install the program and the only way to clean them out is to do what I posted above.

 

[Moogly]

To get rid of the left over icon in the action center open regedit and go to:
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\
Microsoft\Windows\CurrentVersion\TrayNotify\
Then delete IconStreams and PastIconsStream in right frame:
Now open Task manager & kill explorer.exe (desktop will disappear). Then do File > new task & type explorer.exe.

You may notice a lot of icons will disappear, don't panic, they will come back the next time you use that particular program. The problem is they never go away even if you un-install the program and the only way to clean them out is to do what I posted above.

it says " file not found" or when I tried to type " regedit" in find - it says " C:\windows\regedit.exe not found"

 

[mitchell65]

Where did you type "regedit"?

 

[Moogly]

Where did you type "regedit"?

in start menu " search programs and files"
i also went into to C:\windows
but couldn't find current user folder

 

[alphanumeric]

Where did you type "regedit"?

Oops sorry > start > run

 

[alphanumeric]

Typing regedit in the search box also lists it under programs for me. Some malware will delete and or rename the file to prevent you from running regedit and trying to remove them.

 

[Moogly]

Where did you type "regedit"?

Oops sorry > start > run

No chance!!

It says " windows can't find HKEY_CURRENT_USER\Software\Classes\Local Settings"

 

[Moogly]

I think anything to do with .exe it has been disabled.. but some of it, if I use right mouse click, with open as adminstrator, it works... but some exe file are lost... like I can't find my world.exe now...

 

[mitchell65]

in start menu " search programs and files"

That should have opened the link to the regedit.exe. If you can't get to your registry then that is a real problem. It is a must to clear this virus!
I think you are getting close to a format and re-install Windows 7 but before that how about considering this route. There is a tool to remove this virus. I haven't needed to use it but it comes well recommended. Perhaps the other more learned members would care to comment on its use. I offer this as if you get to the point where a format is the only course left then it might be worth trying this first. The link to the download and full explanation is here:
AV.exe Virus Removal | Virus Removal Guru
Hope this is of some use!
BTW what anti virus program are you using. Is it the freebie from Microsoft?

 

[electrotune1200]

I agree with Mitchell that this is getting pretty close to a clean install.

Maybe you can try a repair install with your windows disc. I'm not sure if it will straighten up all of your .exe associations though.

 

[Moogly]

Thanks Mitchell... I will try to use this AV.exe now... because this is the virus I am having in my computer... I am using Microsoft security Enssential - yes, freebie from MS

 

[mitchell65]

This article doesn't actually say that MSE is not quite as good as some of the market leaders but it does make interesting reading. I'm afraid I'm a long time member of the old school where "There is no such thing as a free lunch" and "If something looks too good to be true it probably is!"
Microsoft Security Essentials Probably Not for You - Reviews by PC Magazine

 

[Moogly]

Thank you all!! expecially Mitchell!!! I did it!! everything is back to normal now - I can click and open every program and also if I type in regedit, it can be opened!! Yeah!! however, the scan is still going, so I hope by the end of it , it will able to remove the icon in my notisfication tray... it is still there ( av.exe) but it's faded...

big hugs!!

 

[Moogly]

I use the MSE for a while, and very happy with it. but this time the virus came thru an email attachment. It's from UPS and says I have a package wasn't able to deliver. asked to click into the invoice attached and I did send package thru them in Dec. so I wasn't aware, the attachement came in Zip file, when I opened it, it was a word file and I could not open it. at this time, I realized it was virus, but too late!

Is it zip file can go under the rader of anti-virus?

 

[alphanumeric]

Where did you type "regedit"?

Oops sorry > start > run

No chance!!

It says " windows can't find HKEY_CURRENT_USER\Software\Classes\Local Settings"

You don't type HKEY_CURRENT_USER in the search box just regedit or regedit.exe.
Regedit if it exists will be in the windows folder. There is also a Regedt32.exe in the system32 folder you could try. Regedt32 without the i is the correct spelling.


Oops, looks like you posted while I was still typing my post.