hard drive opening in new window problem

  1. #1
    Bradley_Wint is offline Newbie

    hard drive opening in new window problem

    hi folks, when go into my computer and double click my Back Up Hard disk it keeps opening in a new window when i really want it to open in the same window. all the other drives [e.g. C drive, cd rom drive] open in the same window except that.

    in my picture u can see a (0) next to the open command.

    can anyone tell me whats wrong.

    thanks
    Attached Images


  2. #2
    Dan Penny is offline Techie7 Staff
    Is this drive a standard, internal drive? (IDE, SATA, etc)

    Does Device Manager show any problems with the drive?

    What are the Properties of this drive?

  3. #3
    Bradley_Wint is offline Newbie
    Stardard Internal Drive [ATA]
    Working Properly
    Its a local disk formatted NTFS

    IS there a way to set the second 'Open' [pic above] as the default so when i double click, it opens in the same window cause when i right click and choose the open without the 0, it opens in the same window.

  4. #4
    Dan Penny is offline Techie7 Staff
    A registry edit can remove the Open(0) element fron the context menu. You'd have to search the registry for it, and see if anything else is "connected" to the key/value before any changes. Of course the key/value should be exported and saved in case.

    Don't do anything (in the registry) which you don't fully understand.

    Post back with anything you find, and further questions as needed.

  5. #5
    Bradley_Wint is offline Newbie
    ok now i feel like a dummy. i dont do a lot of reg editing so can u guide me to exactly which part of the registry stores the hard disk information so i could change the the options? thanks

  6. #6
    Dan Penny is offline Techie7 Staff
    Sorry for the delay.

    There are no dummies on this site. ;>)

    One of the other Moderators (jephree - XP Guru Extraordinaire) supplied me with this suggestion for your posting:

    Go to Start/Run and type in:

    regsvr32 /i shell32

    Click OK.

    Restart your computer.
    Give it a try and post the results.

    I've re-read your post(s) and realized there are two elements. I became transfixed on the Open(0) problem.

    To open the drive in the same window, click on (Menu Bar) Tools, Folder Options. On the General tab under Browse folders, select "Open each folder in the same window".

    Now, for the Open(0) issue. Click on Start, Run, type in regedit. Ensure that My Computer (at the top of the left hand pane is highlighted. Then click on (Menu Bar) Edit and Find.... Type in Open(0) and place a check mark in the box for "Match whole string only". Then click Find Next.

    When it finds a Key (left pane) or string or word value (right pane) it will be highlighted. Leave it as such and click on (Menu Bar) File, Export... and in the window that opens, give the first one the name of key1. (It will save as a registry value by default (key1.reg). Save it somewhere convenient (Desktop?). Once it's saved, press F3 and the registry editor will start searching for the next key or value with Open(0) in it.

    Continue with the registry search (F3, File, Export...), and with each key/value it finds, save it as the next consecutive key name. (ie; key2(.reg), key3, key4, etc.

    When it tells you it has finished searching the registry, close the registry editor and either;

    1). zip these keyx.reg files into a .zip file and attach it to your next post (see below*),

    2). right click each one and choose Edit, then copy/paste them into your next post indicating each key. ie; (example - my search for "Penn")

    key1
    [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\8.0\Annots\cAnnots\cAnnot]
    "tauthor"="Penn"

    key2
    [HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    "Version"="6,0,2900,2180"
    "Locale"="EN"
    "Username"="Penn"

    key3
    [HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Wo rd\Options]
    "PROGRAMDIR"="C:\\Program Files\\Microsoft Office\\Office\\"
    "FirstRun"=dword:00000000
    "ReplyMessageComment"="Penn"

    [HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Wo rd\Options\OutlookEditor]
    @=""

    key4 etc,
    xxxxxxxxxxxxxxxxxxxxx
    zzzzzzzzzzzzzzzzzzzzzzzzzzzz

    key5 etc,
    xxxxxxxxxxxxxxxxxxxxxxxxx
    zzzzzzzzzzzzzzzzzzzzzzzzzzzzz


    Post these and we'll go from there before any changes are attempted.

    * When posting, click on Advanced, and just below the posting box you'll see "Additional Options", and within that, "Attach Files". Click on "Manage Attachments" and follow the prompts. Browse to the file and choose UPLOAD to attach the .zip file.
    Last edited by Dan Penny; 18-06-2007 at 05:40 PM.

  7. #7
    Bradley_Wint is offline Newbie
    Ok here is the Registry Tree of the areas that are affected [file attached]. I realised that all the problematic registry keys are linked to a ctfmon.exe file in the Recycle Bin. I did a Virus scan with my symantec anti virus and it doesnt pick up an form of viruses or trojans. I dont have Office installed at the moment either. I was reading that the ctfmon file is a trojan horse but I have been unsuccessful in figuring out how to deactivate the changes being made in the registy. Maybe you could offer some assistance? CHeers.
    Attached Files
    Last edited by Bradley_Wint; 20-06-2007 at 02:29 AM.

  8. #8
    Bradley_Wint is offline Newbie
    Ok SO i got the cftmon.exe file completely removed but this is wat happens nnow [see attachment]. What I think is since the exe is missing, the Open(0) command is missing its base file and cannot execute properly. I can still access the drive but I have to right click and choose the regular Open command. What I want to know now is how to remove that Open(0) command from the registry and what could be causing its generation?
    Attached Images

  9. #9
    Dan Penny is offline Techie7 Staff
    Create a new system Restore Point.
    (Start, All Programs, Accessories, System Tools, System Restore)

    Open regedit.
    Delete the following keys:

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\MountPoints2\{2e33f78b-1eb5-11dc-8fef-a3d0e462e858}\Shell\Open(0)]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\MountPoints2\{9bb91ab9-1e8d-11dc-90c6-806d6172696f}\Shell\Open(0)]


    Delete the (right hand pane) values from the listed keys (leave the keys intact):

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\MountPoints2\{2e33f78b-1eb5-11dc-8fef-a3d0e462e858}\Shell]
    "Open(0)"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\MountPoints2\{9bb91ab9-1e8d-11dc-90c6-806d6172696f}\Shell]
    "Open(0)"


    Exit regedit and restart the machine.

  10. #10
    Bradley_Wint is offline Newbie
    well i have found the problem. with the ctfmon.exe virus, an autorun.inf file was placed on every on my pc with the instructions to make an Open(0) command to access each drive and the Open(0) command would load the cftmon.exe file which was infected. When I had deleted the trojan via the anti virus the command was still there and when I had deleted the registry entry and restarted it came back again because that autorun file was making new entries everytime the system started. This morning it not hit me that I should check the deep system files and found an autorun on each drive. I deleted it plus cleared all other dangerous stuff and its successfully gone. Thanks Dan for all the help, I would have never figured this out if you hadnt given me info on accessing my registry information. I think this topic in the end should fall under the Viruses forum or something.

    I have to thank my school for passing this virus to me through my flash drive.


Closed Thread
Page 1 of 2 1 2 LastLast