Openme.exe Virus (WXP)

[donman58]

Hi, I am in need of some help. I let a family memeber use my PC, and now it has a virus called Openme.exe I have searched quite a few message boards, with about the same info. They have said to do a run command, then either msconfig or sysedit and type in whatever was appropiate. My problem is that nothing will 'run'.

I have tried the control panel (add/remove), run command, and even installing Ad Aware. But everything I try, I get a warning message that states...

"Windows cannot find '_______'. Make sure you typed in the name correctly, and then try again. To search for a file, click the Start button, and then click Search"

I am running XP and the only thing that seems to work is my internet connection. My system programs, mail, and even games will not open, they all display that error/warning message above?! Any additional info will be greatly appreciated! Thanks.

Donman58

[TonyKlein]

Go to Start/run, and type Regedit.

You'll see an Windows-Explorer type interface.

Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\current version\Winlogon.

Click on it once, in order to highlight it, and to display its contents in the right pane.

You'll see a 'default' value Shell=Explorer.exe Openme.exe

Rightclick it, and choose 'rename'.

Edit it so it reads Shell=Explorer.exe exclusively, close Regedit, and reboot.

Good luck, Tony

[CYANiDEtk]

This is the exact same problem I've been having. If you go to the Internet Explorer section and open the Java Virtual Machine thread, or go to the Windows section and look at "Program.exe," you'll find loads of answers. I've been having the same problem. Luckily I didn't get a virus/worm because of Norton, but the file itself was still on my computer. After I deleted it every time I rebooted it said the same error message you mentioned. Simply do what Tony suggested and you'll be fine.

-CYANiDEtk

[Mosaic1]

Here's a link to a fix for openme.exe Win XP
It is a script to rewrite the key and remove openme.exe Download and execute the script.
http://www.dougknox.com/xp/xp_fixes.html (http://www.dougknox.com/xp/scripts_desc/xp_openme_fix.htm>http://www.dougknox.com/xp/scripts_desc/xp_openme_fix.htm</a>

)