System.BrokenFileAssociation

[Li'l Abner]

I can't get rid of this detection from SuperAntispyware.
http://mewnlite.com/HKCR.gif
Originally the machine had one of the fake security toold which cleaned up
nicely with MBAM and SAS. These left the file associations screwed up so I
ran the batch and reg file posted here a couple of weeks ago (in a link)
and those took care of that. Everything seems to be working fine except I
can't get rid of this one detection by SAS.
Is anyone familiar with this?


--
--- Everybody has a right to my opinion. ---

[~BD~]

On 29/03/2011 14:06, Li'l Abner wrote:
> I can't get rid of this detection from SuperAntispyware.
> http://mewnlite.com/HKCR.gif
> Originally the machine had one of the fake security toold which cleaned up
> nicely with MBAM and SAS. These left the file associations screwed up so I
> ran the batch and reg file posted here a couple of weeks ago (in a link)
> and those took care of that. Everything seems to be working fine except I
> can't get rid of this one detection by SAS.
> Is anyone familiar with this?
>
>

Did you see this? http://mewnlite.com/GiveADamn.gif

[John Mason Jr]

On 3/29/2011 9:06 AM, Li'l Abner wrote:
> I can't get rid of this detection from SuperAntispyware.
> http://mewnlite.com/HKCR.gif
> Originally the machine had one of the fake security toold which cleaned up
> nicely with MBAM and SAS. These left the file associations screwed up so I
> ran the batch and reg file posted here a couple of weeks ago (in a link)
> and those took care of that. Everything seems to be working fine except I
> can't get rid of this one detection by SAS.
> Is anyone familiar with this?
>
>

You might open a support ticket
http://www.superantispyware.com/support.html


John

[Li'l Abner]

John Mason Jr <notvalid@cox.net.invalid> wrote in
news:imsvj5$3p1$1@dont-email.me:

> On 3/29/2011 9:06 AM, Li'l Abner wrote:
>> I can't get rid of this detection from SuperAntispyware.
>> http://mewnlite.com/HKCR.gif
>> Originally the machine had one of the fake security toold which
>> cleaned up nicely with MBAM and SAS. These left the file associations
>> screwed up so I ran the batch and reg file posted here a couple of
>> weeks ago (in a link) and those took care of that. Everything seems
>> to be working fine except I can't get rid of this one detection by
>> SAS. Is anyone familiar with this?
>>
>>
>
> You might open a support ticket
> http://www.superantispyware.com/support.html
>
>
> John

Actually, I posted in their forum and got an answer in a short amount of
time. It required some inspecting of the registry where I found some extra
crap added to a key. I removed it and it fixed it.

--
--- Everybody has a right to my opinion. ---

[David H. Lipman]

From: "Li'l Abner" <blvstk@dogpatch.com>

| I can't get rid of this detection from SuperAntispyware.
| http://mewnlite.com/HKCR.gif
| Originally the machine had one of the fake security toold which cleaned up
| nicely with MBAM and SAS. These left the file associations screwed up so I
| ran the batch and reg file posted here a couple of weeks ago (in a link)
| and those took care of that. Everything seems to be working fine except I
| can't get rid of this one detection by SAS.
| Is anyone familiar with this?


It is indicating that the Registry Hive HKey Classes Root is flagging the .EXE
association.

My present PC (WinXP) has the following entries for that...

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[HKEY_CLASSES_ROOT\.exe\PersistentHandler]
@="{098f2470-bae0-11cd-b579-08002b30bfeb}"


-----------------------------------------

What does your PC indicate for this ?

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp

[Polk Salad]

In article <EuqdnX_2S9_WeAzQnZ2dnUVZ7s-dnZ2d@bt.com>, ~BD~@nomail.afraid.com
says...
>
>
>On 29/03/2011 14:06, Li'l Abner wrote:
>> I can't get rid of this detection from SuperAntispyware.
>> http://mewnlite.com/HKCR.gif
>> Originally the machine had one of the fake security toold which cleaned up
>> nicely with MBAM and SAS. These left the file associations screwed up so I
>> ran the batch and reg file posted here a couple of weeks ago (in a link)
>> and those took care of that. Everything seems to be working fine except I
>> can't get rid of this one detection by SAS.
>> Is anyone familiar with this?
>>
>>
>
>Did you see this? http://mewnlite.com/GiveADamn.gif

Looks safe to me. What's your gripe?
What's it take to make you go away?

[Li'l Abner]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
news:imtm6i02f8s@news1.newsguy.com:

> From: "Li'l Abner" <blvstk@dogpatch.com>
>
>| I can't get rid of this detection from SuperAntispyware.
>| http://mewnlite.com/HKCR.gif
>| Originally the machine had one of the fake security toold which
>| cleaned up nicely with MBAM and SAS. These left the file associations
>| screwed up so I ran the batch and reg file posted here a couple of
>| weeks ago (in a link) and those took care of that. Everything seems
>| to be working fine except I can't get rid of this one detection by
>| SAS. Is anyone familiar with this?
>
>
> It is indicating that the Registry Hive HKey Classes Root is flagging
> the .EXE association.
>
> My present PC (WinXP) has the following entries for that...
>
> Windows Registry Editor Version 5.00
>
> [HKEY_CLASSES_ROOT\.exe]
> @="exefile"
> "Content Type"="application/x-msdownload"
>
> [HKEY_CLASSES_ROOT\.exe\PersistentHandler]
> @="{098f2470-bae0-11cd-b579-08002b30bfeb}"
>
>
> -----------------------------------------
>
> What does your PC indicate for this ?

There was
[HKEY_CLASSES_ROOT\.exe\shell\open\command\(some user temp file "%1" %*]
(or something like that). I got rid of that whole mess until there was
nothing left but what you show above. The temp file referred to was long
gone so it wasn't doing any damage but it was still tripping SAS.

I got help from...
http://forums.superantispyware.com/i...p?/topic/4644-
systembrokenfileassociation/
( http://************/4h35q4y )

--
--- Everybody has a right to my opinion. ---