all applications open wordpad

A

altvic

New Member
Hi
I've done something to the xp comp when deleting a file. Now all desktop applications open up wordpad. When I reboot a load of wordpad files appear rather than the applications themselves open on startup. Wordpad opens when I double clic on any of the shortcuts I have made.
I can't get to system restore to see if that solves the issue.

Anyone got ideas?
 
hmm very weird!
right click on one of your shortcuts and click properties
then read out what the "target" says?
 
sounds like one of 2 things
a) Malware has changed the exe associations (read and follow the stickes in the security section)
b) Somehow the exe associations have borken ion there own
copy the following into a text file, and save "anything", close the test file, then rename the file as Exe_restore.reg
then double click on the file and press yes to enter into the reg
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[HKEY_CLASSES_ROOT\.exe\PersistentHandler]
@="{098f2470-bae0-11cd-b579-08002b30bfeb}"

[HKEY_CLASSES_ROOT\exefile]
@="Application"
"EditFlags"=hex:38,07,00,00
"TileInfo"="prop:FileDescription;Company;FileVersion"
"InfoTip"="prop:FileDescription;Company;FileVersion;Create;Size"

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]
@="%1"

[HKEY_CLASSES_ROOT\exefile\shell]

[HKEY_CLASSES_ROOT\exefile\shell\open]
"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\runas]

[HKEY_CLASSES_ROOT\exefile\shell\runas\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shellex]

[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]
@="{86C86720-42A0-1069-A2E8-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PEAnalyser]
@="{09A63660-16F9-11d0-B1DF-004F56001CA7}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\PifProps]
@="{86F19A00-42A0-1069-A2E9-08002B30309D}"

[HKEY_CLASSES_ROOT\exefile\shellex\PropertySheetHandlers\ShimLayer Property Page]
@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"
Click to expand...
 
Bit confused, sorry. I copied the text into notepad and changed the name - double clicked, and the file opens up.
What now? I must be doing something wrong.

ps I don't think I have virus or anything as I'm well protected - but not at present as I can't open zone alarm!
 
Thanks
I've ticked the boxes as advised.
I'll wait for you.
ps I tried to get Zone Alarm up running but got the following error:
Probably need root certificate
 
open the task manager by pressing Control-Alt-Delete once only. Then, press and hold the Control key while you click on the File menu and then the New Task (Run) item. Release the Control key. A Command Prompt window should have opened. At the prompt type the full name REGEDIT.EXE and see if that starts the registry editor.
From regedit select file ->import and then select the file we saved earlier

after that... reboot and see if it works
 
You must log in or register to reply here.
Back
Top