Dumb me let my AVG expire and I know this has been asked, but I just got rid of a virus that installed "ucb.exe" and redirected all .exe files to that (and launched some script file). I got rid of the virus, but now any exe file pops up the window asking me what program to use to open it. I tried the assoc .exe=exefile (and it DID take becaue when I type assoc it lists .exe=exefile) and other fixes but no luck. Plus, here is the kicker, the other account on this computer IS FINE!!!! So this corruption is linked to my account only. Any thoughts??

Visit this thread, there you can download a file that will restore all of your default file associations. =) Default File Type AssociationsIf you want something you've never had, you need to do something you've never done.

Already tried that and it does NOT work. One person said to log in is safe mode using the infected account, but in safe mode you still can NOT launch regedit. So, somewhere in the registry there is "stuff" that is hosing up the exe associations. I even tried the assoc .exe=exefile and that does not help either. Bob PS- May the person who developed this rot in hell

oh, and one more thisng. I had 8 restore points and this damn viruss did something to corrupt every one of them

This is definitely the point at which I would do a re-install...If you want something you've never had, you need to do something you've never done.

not ready to toss in the towel yet as to be honest, if i have to reinstall, i am buying a mac

plus, i doubt i am the only one with this issue and it would be unprofessional for MS to have so many people re-install just because THEY cannot provide a registry fix

See what running this tool gets you... From the command prompt, run this command: sfc /scannow this will check the integrity of your system files.(you can also MD5 each file one at a time) I am guessing you have a virus still on your computer... chances are that it has either: a.) embedded itself into another executable b.) attached itself to a service that runs under the svchost file You can open msconfig under the startup tab, sometimes when youre lucky the virus is rather easy to identify.... you will see the registry key which starts up the virus right from msconfig! Other times, its harder.... some places you can look in that case: prefetch files Task Scheduler(execution of files triggered by an event) Services (attached to svchost.exe) If you want something you've never had, you need to do something you've never done.

oh and just so you know, I have personal experience getting virus's on macs too... so don't think you're safe...If you want something you've never had, you need to do something you've never done.

I've cleared the prefetch a few times. Scoured the task scheduler and msconfig and didn't see anything. I am running an AVG scan on the good account.

Fixed, and here is what I did: #1. Got the AVG rescue CD and rebooted to it and let it clear out a number of viruses. #2. Went into safe mode and cleared out the weird exe file from the user data local folder (it is hidden just so you know). Mine was called UBC.exe, but you can find it as the exe that launches that script profiler (that can be seen in the task scheduler). Note: I got in the task scheduler by starting a command prompt as an administrator and typing taskmgr. #3. From that safe mode, i took the test below (what was in a file called fix_w7.reg) and typed REG IMPORT fix_w7.reg All works now!!!! Windows Registry Editor Version 5.00 ;File association fix for [.EXE] - Windows 7 ;http://www.winhelponline.com/blog [HKEY_CLASSES_ROOT\.EXE] @="exefile" "Content Type"="application/x-msdownload" [HKEY_CLASSES_ROOT\.EXE\PersistentHandler] @="{098f2470-bae0-11cd-b579-08002b30bfeb}" [HKEY_CLASSES_ROOT\exefile] @="Application" "EditFlags"=hex:38,07,00,00 "FriendlyTypeName"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,\ 00,6f,00,6f,00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,\ 32,00,5c,00,73,00,68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,\ 00,2c,00,2d,00,31,00,30,00,31,00,35,00,36,00,00,00 [HKEY_CLASSES_ROOT\exefile\DefaultIcon] @="%1" [HKEY_CLASSES_ROOT\exefile\shell\open] "EditFlags"=hex:00,00,00,00 [HKEY_CLASSES_ROOT\exefile\shell\open\command] @="\"%1\" %*" "IsolatedCommand"="\"%1\" %*" [HKEY_CLASSES_ROOT\exefile\shell\runas] "HasLUAShield"="" [HKEY_CLASSES_ROOT\exefile\shell\runas\command] @="\"%1\" %*" "IsolatedCommand"="\"%1\" %*" [HKEY_CLASSES_ROOT\exefile\shell\runasuser] @="@shell32.dll,-50944" "Extended"="" "SuppressionPolicyEx"="{F211AA05-D4DF-4370-A2A0-9F19C09756A7}" [HKEY_CLASSES_ROOT\exefile\shell\runasuser\command] "DelegateExecute"="{ea72d00e-4960-42fa-ba92-7792a7944c1d}" [HKEY_CLASSES_ROOT\exefile\shellex\ContextMenuHandlers] @="Compatibility" [HKEY_CLASSES_ROOT\exefile\shellex\ContextMenuHandlers\Compatibility] @="{1d27f844-3a1f-4410-85ac-14651078412d}" [HKEY_CLASSES_ROOT\exefile\shellex\DropHandler] @="{86C86720-42A0-1069-A2E8-08002B30309D}" [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EXE\UserChoice] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.EXE\OpenWithProgids] "exefile"=hex(0):

congrats... and btw taskmgr opens task manager, not task scheduler If you want something you've never had, you need to do something you've never done.

I had an even dumber experience. I accidentally fucked it up myself. I associated the exe file with a program. I couldn't even open notepad to write a new registry fix, or even open command prompt, cause it was associated with another program and it would open that program instead. Lucky me I found this website with reg file fixes that you can download, double click to add it to the registry. here's the link. http://www.winhelponline.com/blog/file-asso-fixes-for-windows-7/