how EXE files are handled

I need to know how exe files are opened in windows,i mean all files other
than exe files are opened with an exe files but how exe files are opened and
by which dll or system files.I ask this question because a virus ran into my
computer and whenever i tried to open a system exe file Open With dialogue
appeared and showed me the available programs for opening this exe file.

Go below and click on EXE file Association Fix.http://www.dougknox.

Go below and click on EXE file Association Fix.

http://www.dougknox.com/xp/file_assoc.htm

This is a multi-part message in MIME format.------=_NextPart_000_0044_01CA6657.

This is a multi-part message in MIME format.

------=_NextPart_000_0044_01CA6657.1615B630
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=response
Content-Transfer-Encoding: 7bit

EXE (executable or program) files are not opened by any other program or dll, but are
sent directly to the CPU to be executed or "run".

In the registry, non-executable files such as .doc or .txt files are associated with
a program via a replaceable parameter in the registry after a command-line to open
that program.

This replaceable parameter is represented by "%1" in the registry after the
command-line to open the program that, in turn, opens the .doc (or other
non-executable) file.

So, in the registry under the command entry for .txt files, for instance, you would  get
the following line :

C:\WINDOWS\system32\notepad.exe %1

...where the "%1" replaceable parameter would be "replaced", by Windows, with the
path to the .txt file to be opened.

With .EXE files, which do not need any other file to open [execute] them, all you get
in the registry to associate with them is the replaceable parameter itself - "%1" -
meaning to just execute itself and NOT be preceded by a program name such as
notepad.exe in the above example.

As I can see you are using OE to access this newsgroup, I will attach a simple
registry file that contains the correct association for .EXE files (i.e :  just

Just double click on this file and answer [ok] to import it.

==

Cheers,    Tim Meddick,    Peckham, London.    :-)





------=_NextPart_000_0044_01CA6657.1615B630
Content-Type: application/octet-stream;
name="exefile.reg"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="exefile.reg"

//5XAGkAbgBkAG8AdwBzACAAUgBlAGcAaQBzAHQAcgB5ACAARQBkAGkAdABvAHIAIABWAGUAcgBz
AGkAbwBuACAANQAuADAAMAANAAoADQAKAFsASABLAEUAWQBfAEMATABBAFMAUwBFAFMAXwBSAE8A
TwBUAFwALgBlAHgAZQBdAA0ACgBAAD0AIgBlAHgAZQBmAGkAbABlACIADQAKACIAQwBvAG4AdABl
AG4AdAAgAFQAeQBwAGUAIgA9ACIAYQBwAHAAbABpAGMAYQB0AGkAbwBuAC8AeAAtAG0AcwBkAG8A
dwBuAGwAbwBhAGQAIgANAAoADQAKAFsASABLAEUAWQBfAEMATABBAFMAUwBFAFMAXwBSAE8ATwBU
AFwALgBlAHgAZQBcAFAAZQByAHMAaQBzAHQAZQBuAHQASABhAG4AZABsAGUAcgBdAA0ACgBAAD0A
IgB7ADAAOQA4AGYAMgA0ADcAMAAtAGIAYQBlADAALQAxADEAYwBkAC0AYgA1ADcAOQAtADAAOAAw
ADAAMgBiADMAMABiAGYAZQBiAH0AIgANAAoADQAKAFsASABLAEUAWQBfAEMATABBAFMAUwBFAFMA
XwBSAE8ATwBUAFwAZQB4AGUAZgBpAGwAZQBdAA0ACgBAAD0AIgBBAHAAcABsAGkAYwBhAHQAaQBv
AG4AIgANAAoAIgBFAGQAaQB0AEYAbABhAGcAcwAiAD0AaABlAHgAOgAzADgALAAwADcALAAwADAA
LAAwADAADQAKAA0ACgBbAEgASwBFAFkAXwBDAEwAQQBTAFMARQBTAF8AUgBPAE8AVABcAGUAeABl
AGYAaQBsAGUAXABEAGUAZgBhAHUAbAB0AEkAYwBvAG4AXQANAAoAQAA9ACIAJQAxACIADQAKAA0A
CgBbAEgASwBFAFkAXwBDAEwAQQBTAFMARQBTAF8AUgBPAE8AVABcAGUAeABlAGYAaQBsAGUAXABz
AGgAZQBsAGwAXQANAAoAQAA9ACIAIgANAAoADQAKAFsASABLAEUAWQBfAEMATABBAFMAUwBFAFMA
XwBSAE8ATwBUAFwAZQB4AGUAZgBpAGwAZQBcAHMAaABlAGwAbABcAG8AcABlAG4AXQANAAoAQAA9
ACIAIgANAAoADQAKAFsASABLAEUAWQBfAEMATABBAFMAUwBFAFMAXwBSAE8ATwBUAFwAZQB4AGUA
ZgBpAGwAZQBcAHMAaABlAGwAbABcAG8AcABlAG4AXABjAG8AbQBtAGEAbgBkAF0ADQAKAEAAPQAi
AFwAIgAlADEAXAAiACAAJQAqACIADQAKAA0ACgBbAEgASwBFAFkAXwBDAEwAQQBTAFMARQBTAF8A
UgBPAE8AVABcAGUAeABlAGYAaQBsAGUAXABzAGgAZQBsAGwAXAByAHUAbgBhAHMAXQANAAoADQAK
AFsASABLAEUAWQBfAEMATABBAFMAUwBFAFMAXwBSAE8ATwBUAFwAZQB4AGUAZgBpAGwAZQBcAHMA
aABlAGwAbABcAHIAdQBuAGEAcwBcAGMAbwBtAG0AYQBuAGQAXQANAAoAQAA9ACIAXAAiACUAMQBc
ACIAIAAlACoAIgANAAoADQAKAFsASABLAEUAWQBfAEMATABBAFMAUwBFAFMAXwBSAE8ATwBUAFwA
ZQB4AGUAZgBpAGwAZQBcAHMAaABlAGwAbABlAHgAXQANAAoADQAKAFsASABLAEUAWQBfAEMATABB
AFMAUwBFAFMAXwBSAE8ATwBUAFwAZQB4AGUAZgBpAGwAZQBcAHMAaABlAGwAbABlAHgAXABEAHIA
bwBwAEgAYQBuAGQAbABlAHIAXQANAAoAQAA9ACIAewA4ADYAQwA4ADYANwAyADAALQA0ADIAQQAw
AC0AMQAwADYAOQAtAEEAMgBFADgALQAwADgAMAAwADIAQgAzADAAMwAwADkARAB9ACIADQAKAA0A
CgBbAEgASwBFAFkAXwBDAEwAQQBTAFMARQBTAF8AUgBPAE8AVABcAGUAeABlAGYAaQBsAGUAXABz
AGgAZQBsAGwAZQB4AFwAUAByAG8AcABlAHIAdAB5AFMAaABlAGUAdABIAGEAbgBkAGwAZQByAHMA
XQANAAoADQAKAFsASABLAEUAWQBfAEMATABBAFMAUwBFAFMAXwBSAE8ATwBUAFwAZQB4AGUAZgBp
AGwAZQBcAHMAaABlAGwAbABlAHgAXABQAHIAbwBwAGUAcgB0AHkAUwBoAGUAZQB0AEgAYQBuAGQA
bABlAHIAcwBcAFAAaQBmAFAAcgBvAHAAcwBdAA0ACgBAAD0AIgB7ADgANgBGADEAOQBBADAAMAAt
ADQAMgBBADAALQAxADAANgA5AC0AQQAyAEUAOQAtADAAOAAwADAAMgBCADMAMAAzADAAOQBEAH0A
IgANAAoADQAKAA0ACgA=

------=_NextPart_000_0044_01CA6657.1615B630--