Return to Answer

I know you don't want a registry hack, but I had to reverse a virus that did something similar, just about bashed my head till I figured it out.

Go to the HKCR\exefile\shell\open\command key and change the (default) and IsolatedCommand keys to notepad.exe

Then everytime they go to execute a program they will get a copy of notepad instead.

To fix, you can still run the programsas long as you do it as another user (unless you change those keys as well. :) )

I know you don't want a registry hack, but I had to reverse a virus that did something similar, just about bashed my head till I figured it out.

Go to the HKCR\exefile\shell\open\command key and change the (default) and IsolatedCommand keys to notepad.exe

Then every time they go to execute a program they will get a copy of notepad instead.

To fix, you can still run the programs as long as you do it as another user (unless you change those keys as well.)

I know you don't want a registry hack, but I had to reverse a virus that did something similar, just about bashed my head till I figured it out.

Go to the HKCR\exefile\shell\open\command key and change the (default) and IsolatedCommand keys to notepad.exe

Then every time they go to execute a program they will get a copy of notepad instead.

To fix, you can still run the programs as long as you do it as another user (unless you change those keys as well.)

I know you don't want a registry hack, but I had to reverse a virus that did something similar, just about bashed my head till I figured it out.

Go to the HKCR\exefile\shell\open\command key and change the (default) and IsolatedCommand keys to notepad.exe

Then everytime they go to execute a program they will get a copy of notepad instead.

To fix, you can still run the programsas long as you do it as another user (unless you change those keys as well. :) )

I know you don't want a registry hack, but I had to reverse a virus that did something similar, just about bashed my head till I figured it out.

Go to the HKCR\exefile\shell\open\command key and change the (default) and Isolated Command keys to notepad.exe

Then every time they go to execute a program they will get a copy of notepad instead.

To fix, you can still run the programs as long as you do it as another user (unless you change those keys as well.)

I know you don't want a registry hack, but I had to reverse a virus that did something similar, just about bashed my head till I figured it out.

Go to the HKCR\exefile\shell\open\command key and change the (default) and IsolatedCommand keys to notepad.exe

Then every time they go to execute a program they will get a copy of notepad instead.

To fix, you can still run the programs as long as you do it as another user (unless you change those keys as well.)