Big trouble!

Hi malware fighters,

I deleted an executable because avast flagged it, I made the executable open with notepad.exe.
Now on my main account all executable open in notepad, how do I restore that they will open as the original eecutables again. Please inform, lucky I had a second normal user account there,

polonus

Check out this if you are on XP, http://www.dougknox.com/xp/file_assoc.htm and there is a whole host of tools to fix various file associations, you want the http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip one.

A very handy site ;D

Hi DavidR,

I did this, and it had a reverse effect.

I wait for a better suggestion, I now have 27 start up executables that start up as notepad.exe.
Trying to change it in HKEY_CURRENT_USER gives Cannot work on Application an error occured while writing the new value, thank you very much,

pol

SOLVED!
The whole thing did not work because I had to start regedit with execute as and then take away the tag (to not harm settings), then it worked. What I did went to HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Explorer\FileExt.exe
Name App
Type REG_SZ
Data notepad.exe changed in Data
Restarted OK,
Thank you very much, I had a powerdrill and bootcamp registry settings to-day.
The restrictions of SafeXP probably made DavidR’s solution did not do a thing. The Data settings were namely protected. I did this myself, but if malware can do this, the malcreant really can give a user the creeps,

polonus

You’re welcome, to a degree you have to hope your pro-active defences would stop malware doing it, as when you did it by mistake you assume had administrator privileges so it would allow the changing of a file association.

Polonus, glad that you’ve solved it…
I would have suggested the same as David :-[ :-[

Hi folks,

On demand tried to run RSIT, but it closed on error, something like this:
http://mvp.unixwiz.net/research/ccEvtMngr-strings.txt

polonus