The file does not have a program associated with it

[Bob]

Hello,

I have a remote business user who has Windows XP Home Edition. They use the
system from home.

They started getting pop-ups that the computer was infected. They brought
the computer in the office, I see the computer had a threat called Antivirus
XP.

They have Symantec AV I ran a fill scan in safe mode with system restore
off, it found 1 threat partially removed it. I reboot the machine back up in
regular mode, no more pop-ups, but no matter what I click on --- software,
anything in control panel I get the same message -----

The file does not have a program associated with it for performing this
action. Create an association in the folder options control panel.

Does anyone know how to get the system back on track ?

Thanks,
Bob

 

[Jose]

Hello,

I have a remote business user who has Windows XP Home Edition. They use the
system from home.

They started getting pop-ups that the computer was infected. They brought
the computer in the office, I see the computer had a threat called Antivirus
XP.

They have Symantec AV I ran a fill scan in safe mode with system restore
off, it found 1 threat partially removed it. I reboot the machine back upin
regular mode, no more pop-ups, but no matter what I click on --- software,
anything in control panel I get the same message -----

The file does not have a program associated with it for performing this
action. Create an association in the folder options control panel.

Does anyone know how to get the system back on track ?

Thanks,
Bob

You need to do a couple things after that annoyingware:

Perform some scans for malicious software, then fix any remaining
issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

If those won't launch, repair your file associations first:

Go to this WWW site by Doug Knox:

http://www.dougknox.com/

On the left, click the Win XP Fixes, File Association Fixes and read
the directions at the top of the page.

Download the EXE File Association Fix and apply it, then reboot.

I would not rely on just Norton to clean up after that affliction (or
any affliction for that matter).

 

[PA Bear [MS MVP]]

You (or the computer owner) has much more work to do (especially if WinXP
SP3 isn't installed)!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

 

[glee]

Hello,

I have a remote business user who has Windows XP Home Edition. They
use the
system from home.

They started getting pop-ups that the computer was infected. They
brought
the computer in the office, I see the computer had a threat called
Antivirus
XP.

They have Symantec AV I ran a fill scan in safe mode with system
restore
off, it found 1 threat partially removed it. I reboot the machine back
up in
regular mode, no more pop-ups, but no matter what I click on ---
software,
anything in control panel I get the same message -----

The file does not have a program associated with it for performing
this
action. Create an association in the folder options control panel.

Does anyone know how to get the system back on track ?

Hi Bob,
If you are comfortable going into the Registry with the Registry Editor
(regedit.exe), open it and navigate in the left pane to this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E979-E325-11CE-BFC1-08002BE10318}

Does that key exist or is it missing?

If it exists, highlight the {4D36E979-E325-11CE-BFC1-08002BE10318} key
in the left pane, and look in the right pane.

There should be 6 entries in the right pane, all of them REG_SZ types.

The 6 values, and their data, should be:

(Default) Printers
Class Printer
EnumPropPages32 Printui.dll,PrinterPropPageProvider
Icon -4
Installer32 Ntprint.dll,ClassInstall32
NoDisplayClass 1

Please post back and let me know if that is what you find.

 

[glee]

Please ignore my previous reply...it is supposed to be for another
thread with a printer issue!