Backdoor and Error

Discussion in 'Windows Desktop Systems' started by WiredBrain, Feb 23, 2003.

  1. WiredBrain

    WiredBrain Guest

    I run into a serious problem. When I tried to open programs, I received the error message:

    Windows cannot find '[The path to the program]'. Make sure you type the name correctly, and then try again. To search for a file, click the Start button, and then click Search.

    The problems are all the files still exist and a few programs can still be open including Internet Explorer. When I turned on my PC, McAfee detected a backdoor in c:\windows\winampw.exe. Please help.
     
  2. Enyo

    Enyo Moderator

    Messages:
    1,338
    Hi, this is a very common problem.

    Most trojans and worms will change the handler for exe files so they execute whenever you run a application, windows is reporting it cant find the trojan not the application you want to run. With me? Nevermind if not heres the fix:

    Navigate to and select the following key:

    HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command

    CAUTION: The HKEY_LOCAL_MACHINE\Software\Classes key contains many subkey entries that refer to other file extensions. One of these file extensions is .exe. Changing this extension can prevent any files ending with an .exe extension from running. Make sure that you browse all the way along this path until you reach the \command subkey.

    Modify the HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command subkey that is shown in the following figure:

    [​IMG]

    NOTE: Registry Editor will automatically enclose the value in quotation marks. When you click OK, the (Default) value should look exactly like this:
    ""%1" %*"

    Make sure that you completely delete all value data in the command key before you type the correct data. If you leave a space at the beginning of the entry, any attempt to run program files will result in the error message, "Windows cannot find .exe." If this happens to you, start over at the beginning of this document, and make sure that you completely remove the current value data.

    4. Restart the computer.
     
  3. WiredBrain

    WiredBrain Guest

    I couldn't run regedit (Registry Editor). I got the same error message.
     
  4. toxicity

    toxicity Guest

    how about reformatting? solves viruses instantly.
     
  5. WiredBrain

    WiredBrain Guest

    If possible, I want to get rid this problem without formatting 'coz I've important files and just formatted my PC 2 weeks ago. Maybe someone can do the fix in .reg format so that I can patch the registry.
     
  6. Enyo

    Enyo Moderator

    Messages:
    1,338
    Try the attached reg patch :) You do not need to format to fix this its a simple issue.
     
  7. WiredBrain

    WiredBrain Guest

    Thank you for the fix. It work flawlessly and had restored my PC.
     
  8. Enyo

    Enyo Moderator

    Messages:
    1,338
    Not a problem :happy: