Jump to content

winpatrol alerts changes to file association


Recommended Posts

I am new to Malwarebytes and just installed it after a strange slowdown upon playing a free Mah Jong solitaire game at freegames.ws.

I ran the software and it detected and quarantined two items. They appear in the Quarantine tab as follows:

a green bug, then vendor is Broken.OpenCommand category is registry data, item is:

HKEY_CLASSES_ROOT\regfile\shell\open\command\(default|NOTEPAD.EXE %1|regedit "%1"

the second item is:

HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default|NOTEPAD.EXE %1|"%1"/S

So they are in quarantine. Shortly after running Malwarebytes, WinPatrol alerted me and continues to constantly alert me of the following via two consecutive pop up windows

Scotty the windows watchdog detected a change to one of your file type associations .REG

The program currently associated with this file type is:

Notepad

Microsoft Corporation

Notepad.exe%1

A change was made to use the following program for this file type

Registry Editor

Microsoft Corporation

regedit.exe %1, %*

The secind alert is:

Scotty the windows watchdog detected a change to one of your file type associations .SCR

The program currently associated with this file type is:

Notepad

Microsoft Corporation

Notepad.exe%1

A change was made to use the following program for this file type

Name

company name

%1 /S

Can someone please take pity on an old lady who doesn't know much? How do I fix this? Thank you!

Link to post
Share on other sites

Greetings and welcome to Malwarebytes :(

WinPatrol is simply alerting you about the changes made to those two items by Malwarebytes' Anti-Malware when it reset those file associations back to their defaults (regedit instead of notepad and executing .scr files, which are screensavers instead of opening them with notepad). You should have WinPatrol allow the changes.

That being said, it is very unlikely that either of those two items was the cause of your system running slower than normal, so if that behavior continues or you have any other ongoing symptoms that cause you to suspect that you might be infected then please do the following:

We don't work on Malware removal in the general forums.

Please read and follow the directions here, skipping any steps you are unable to complete. Then create a NEW topic here.

One of the expert helpers there will give you one on one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless its been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help.

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

Thank you :(

Link to post
Share on other sites

Thank you for enlightening me. Unfortunately, WinPatrol stopped asking, so I think my file associations might be messed up. If you have any idea where I might learn how to fix those, I'd appreciate some direction.

It looks like Malwarebytes did its job, as I have run it several times and those infections are gone. Later ran an antivirus scan and it came up clean, too.

Thanks again,

blue

no more free game sites for me!

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.