Programs cannot run without being ran as admin

Question

Hello.

Ever since yesterday afternoon I have been working to get a virus off of my computer. Apparently this virus had something to do with Java. Well I believe I have gotten most of the viruses off, however I cannot run any program without first running the program as administrator.

Example:

http://i45.tinypic.com/21joxli.png

I can't even open a new tab in internet explorer without this open with popping up. Any pointers?

Answer 1

Hi,

Do a very thorough check for malware and the next message shows how to fix the .exe issue.

No one program can be relied upon to detect and remove all malware. Added that often easy to

detect malware is often accompanied by a much harder to detect and remove payload. So its better

to be overly thorough now than to pay the high price later. Check with these to an extreme overkill

point and then run the cleanup only when you are very sure the system is clean.

These can be done in Safe Mode - repeatedly tap F8 as you boot however you should also run them

in regular Windows when you can.

Download malwarebytes and scan with it, run MRT, and add Prevx to be sure it is gone. (If Rootkits

run UnHackMe)

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN

Malwarebytes - free

http://www.malwarebytes.org/

Run the Microsoft Malicious Removal Tool

Start - type in Search box -> MRT  find at top of list - Right Click on it - RUN AS ADMIN.

You should be getting this tool and its updates via Windows Updates - if needed you can download

it here.

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN

(Then run MRT as above.)

Microsoft Malicious Removal Tool - 32 bit

http://www.microsoft.com/downloads/details.aspx?FamilyID=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Microsoft Malicious Removal Tool - 64 bit

http://www.microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en

also install Prevx to be sure it is all gone.

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN

Prevx - Home - Free - small, fast, exceptional CLOUD protection, works with other security programs.

This is a scanner only, VERY EFFECTIVE, if it finds something come back here or use Google to see

how to remove. 

http://www.prevx.com/   <-- information

http://info.prevx.com/downloadcsi.asp  <-- download

PCmag - Prevx - Editor's Choice

http://www.pcmag.com/article2/0,2817,2346862,00.asp

Try the trial version of Hitman Pro :

Hitman Pro is a second opinion scanner, designed to rescue your computer from malware (viruses,

trojans, rootkits, etc.) that have infected your computer despite all the security measures you have

taken (such as anti virus software, firewalls, etc.).

http://www.surfright.nl/en/hitmanpro

---

If needed here are some online free scanners to help

http://www.eset.com/onlinescan/

http://onecare.live.com/site/en-us/default.htm

http://www.kaspersky.com/virusscanner

Other Free online scans

http://www.google.com/search?hl=en&source=hp&q=antivirus+free+online+scan&aq=f&oq=&aqi=g1

---

Also do these to cleanup general corruption and repair/replace damaged/missing system files.

Run DiskCleanup - Start - All Programs - Accessories - System Tools - Disk Cleanup

Start - type this in Search Box ->  COMMAND   find at top and RIGHT CLICK  -  RUN AS ADMIN

Enter this at the prompt - sfc /scannow

How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program

generates in Windows Vista cbs.log

http://support.microsoft.com/kb/928228

Run checkdisk - schedule it to run at next start and then Apply OK your way out then restart.

How to Run Check Disk at Startup in Vista

http://www.vistax64.com/tutorials/67612-check-disk-chkdsk.html

---

If any Rootkits are found use this thread and other suggestions. (Run UnHackMe)

http://social.answers.microsoft.com/Forums/en-US/InternetExplorer/thread/a8f665f0-c793-441a-a5b9-54b7e1e7a5a4/

Hope this helps.

---

Rob - Bicycle - Mark Twain said it right.

Answer 2

Hi,

Glad it helped although I would still check with the others as easy to detect malware is all

too often accompanied by a much tougher to detect payload.

---

Rob - Bicycle - Mark Twain said it right.

Answer 3

That Malwarebytes program did the job excellently. I had already removed most of the viruses and for some odd reason they were through .class files. However there were still some trojans lurking around on my computer and Malwarebytes got rid of them.

Thanks for everything!

Answer 4

Hi,

Use above message to do an intense and thorough check for malware.

1. Make a Restore Point so you can revert back if needed though not likely required.

How to Create a System Restore Point in Vista

http://www.vistax64.com/tutorials/76332-system-restore-point-create.html

How to Do a System Restore in Vista

http://www.vistax64.com/tutorials/76905-system-restore-how.html

2 . Copy BETWEEN these lines and paste into Notepad - Save as exefileFix.reg  -  then Right

Click on it and MERGE - REBOOT

DO NOT COPY LINES

---

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT.EXE]

@="exefile"

"Content Type"="application/x-msdownload"

[HKEY_CLASSES_ROOT.EXE\PersistentHandler]

@="{098f2470-bae0-11cd-b579-08002b30bfeb}"

[HKEY_CLASSES_ROOT\exefile]

@="Application"

"EditFlags"=hex:38,07,00,00

"FriendlyTypeName"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,\

  00,6f,00,6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,\

  32,00,5c,00,73,00,68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,\

  00,2c,00,2d,00,31,00,30,00,31,00,35,00,36,00,00,00

[HKEY_CLASSES_ROOT\exefile\DefaultIcon]

@="%1"

[HKEY_CLASSES_ROOT\exefile\shell]

[HKEY_CLASSES_ROOT\exefile\shell\open]

"EditFlags"=hex:00,00,00,00

[HKEY_CLASSES_ROOT\exefile\shell\open\command]

@=""%1" %*"

"IsolatedCommand"=""%1" %*"

[HKEY_CLASSES_ROOT\exefile\shell\runas]

[HKEY_CLASSES_ROOT\exefile\shell\runas\command]

@=""%1" %*"

"IsolatedCommand"=""%1" %*"

[HKEY_CLASSES_ROOT\exefile\shellex]

[HKEY_CLASSES_ROOT\exefile\shellex\DropHandler]

@="{86C86720-42A0-1069-A2E8-08002B30309D}"

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts.exe\UserChoice]

---

DO NOT COPY LINES

If needed :

Check the EXE file fix here

http://www.winhelponline.com/articles/105/1/File-association-fixes-for-Windows-Vista.html

Also check this one if it applies

http://www.winhelponline.com/articles/165/1/Restore-the-exe-file-association-in-Windows-Vista-after-incorrectly-associating-it-with-another-application.html

How to Set Default Associations For a Program in Vista

http://www.vistax64.com/tutorials/83196-default-programs-program-default-associations.html

Hope this helps.

---

Rob - Bicycle - Mark Twain said it right.