Persistent Common Extention Hijack

[Guest]

Every time I scan my PC with Spybot S&E I find a common extention hijack
frimly rooted in:
HKEY_VLASSES_ROOT\regfile\shell\open\command\=regedit.exe"%1"

RegClean and Adaware can't get rid of it either. What does it do and how can
I get rid of this pest for good? Thanks.

 

[Wesley Vogel]

The problem is, if your typing is correct, there is no space between:
regedit.exe and "%1"

It should look like >>>
HKEY_CLASSES_ROOT\regfile\shell\open\command
Value Name: (Default)
Value Type: REG_SZ
Value Data: regedit.exe "%1"

Notice the space^^^

See >>
Err Msg: Cannot Import <File>. Error Opening the File.
http://support.microsoft.com/default.aspx?scid=kb;en-us;187316

[[Use Registry Editor to modify the way Regedit.exe examines the path. To do
so, use registry editor to modify the data value for the "(Default)" value
in the following registry key:
HKEY_CLASSES_ROOT\regfile\shell\open\command
Change the data value to:
regedit.exe "%1"
NOTE: Make sure to include the quotation marks. After you make this change,
quit Registry Editor and restart the computer. ]]