Solve : "Open With" window/can't run programs.?

1.	Solve : "Open With" window/can't run programs.?
Answer» I removed a virus from my PC but, now I get that "Open With" window, and can't run programs. like Firefox etc.At least not without selecting the program I want to open it with each and every time. I'm running Windows XP Home Edition. I have tired going to http://www.dougknox.com/xp/file_assoc.htm already and I did the below steps but,no luck. [Look to the "EXE File Association Fix", and download the .zip file to your computer desktop.. Once there, unzip the file, then DOUBLE click on the "xp_exe_fix.reg" file that is inside, choose "OK/Yes, when it asks "Are you sure?".. Restart the computer.. It should now run those problem programs and Control Panel icons.] With that solution you are looking at it writes new keys to the registry so you need to be in regedit. Then go file, import, and select the reg file you won't to add. When you have done this don't forget to remove your system restore points and then re enable system restore. This stops the fake antivirus reinstalling if a system restore is done later. Quote from: Lisa_maree on May 30, 2011, 08:08:03 PM With that solution you are looking at it writes new keys to the registry so you need to be in regedit. Then go file, import, and select the reg file you won't to add. When you have done this don't forget to remove your system restore points and then re enable system restore. This stops the fake antivirus reinstalling if a system restore is done later. Not sure what you are saying...Download and run exeHelper. Please download exeHelper from Raktor to your desktop. Double-click on exeHelper.com to run the fix. A black window should pop up, press any key to close once the fix is completed. A log file NAMED log.txt will be created in the directory where you ran exeHelper.com Attach the log.txt file to your next message. Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file). Quote from: Broni on May 30, 2011, 08:40:52 PM Download and run exeHelper. Please download exeHelper from Raktor to your desktop. Double-click on exeHelper.com to run the fix. A black window should pop up, press any key to close once the fix is completed. A log file named log.txt will be created in the directory where you ran exeHelper.com Attach the log.txt file to your next message. Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file). This is what I found: exeHelper by Raktor Build 20100414 Run at 22:00:39 on 05/30/11 Now searching... Checking for numerical processes... Checking for sysguard processes... Checking for bad processes... Checking for bad files... Checking for bad registry entries... Resetting filetype association for .exe Resetting filetype association for .com Resetting userinit and shell values... Resetting policies... --Finished-- Still same problem?Quote from: Broni on May 30, 2011, 09:03:18 PM Still same problem? Fixed But,when I did restart I got that darn yellow shield but,this time it said: "Some updates could not be installed" Security Update for Microsoft XML Core Services 6.0 Service Pack 2 (KB954459) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB946648) Even after I tired to do it twice...Is this also a easy fix Broni?Quote from: Broni on May 30, 2011, 09:03:18 PM Still same problem? I have 3 login/usernames for my PC. the other two still get the same error...I am now trying he exeHelper from Raktor for those two.Quote from: Kyle on May 30, 2011, 09:19:03 PM I have 3 login/usernames for my PC. the other two still get the same error...I am now trying he exeHelper from Raktor for those two. Odd it worked for two but,not the last one. And the log.txt is the same as the last one I attached. This is the info I have one the username that is still getting the 'open with' error: . DDS (Ver_11-05-19.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20 Run by linlee at 22:51:30 on 2011-05-30 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.3317.2801 [GMT -5:00] . AV: COMODO Antivirus Enabled/Updated {043803A5-4F86-4ef7-AFC5-F6E02A79969B} FW: COMODO Firewall Enabled . ============== Running Processes =============== . C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\Explorer.EXE C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\linlee\Local Settings\Temporary Internet Files\Content.IE5\N89DE9ZM\dds[1].scr C:\WINDOWS\system32\WSCRIPT.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.ask.com?o=15119&l=dis uInternet Connection Wizard,ShellNext = "c:\program files\outlook express\msimn.exe" mSearchAssistant = hxxp://www.google.com/ie uURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\GenericAskToolbar.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background uRun: [Steam] "c:\program files\steam\Steam.exe" -silent uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [SWG] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" mRun: [UIUCU] c:\docume~1\kelly\locals~1\temp\UIUCU.EXE -CLEAN_UP -S mRun: [COMODO Internet Security] "c:\program files\comodo\comodo internet security\cfp.exe" -h mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [RTHDCPL] RTHDCPL.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\NETWORK Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} - hxxp://lads.myspace.com/upload/MySpaceUploader2.cab DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab AppInit_DLLs: c:\windows\system32\guard32.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll LSA: Notification Packages = scecli scecli scecli scecli . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\linlee\application data\mozilla\firefox\profiles\9y4pgs4v.default\ FF - prefs.js: browser.SEARCH.selectedEngine - Search FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ FF - prefs.js: keyword.URL - hxxp://www.gobrs.com/search/?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&rls=oBsN0b1w&q= FF - component: c:\documents and settings\linlee\application data\mozilla\firefox\profiles\9y4pgs4v.default\extensions\[emailprotected]\components\PlaySushiFF.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll . ---- FIREFOX POLICIES ---- . FF - user.js: browser.search.selectedEngine - Search FF - user.js: keyword.URL - hxxp://www.gobrs.com/search/?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&rls=oBsN0b1w&q= . ============= SERVICES / DRIVERS =============== . R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [2010-2-13 134344] R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2010-2-13 25160] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] R2 cmdAgent;COMODO Internet Security Helper Service;c:\program files\comodo\comodo internet security\cmdagent.exe [2010-2-13 723632] S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2011-5-30 1691480] S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232] S3 N100;Compaq Ethernet or Fast Ethernet NIC Driver;c:\windows\system32\drivers\n100325.sys [2010-2-12 128000] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2011-05-31 02:21:111022976----a-w-c:\windows\system32\dllcache\browseui.dll 2011-05-31 02:21:10474112----a-w-c:\windows\system32\dllcache\shlwapi.dll 2011-05-31 02:21:101497088----a-w-c:\windows\system32\dllcache\shdocvw.dll 2011-05-30 09:07:39--------d-----w-c:\windows\ie8updates 2011-05-30 09:05:11--------dc-h--w-c:\windows\ie8 2011-05-30 08:48:21--------d-----w-c:\program files\MSXML 6.0 2011-05-23 06:01:3438224----a-w-c:\windows\system32\drivers\mbamswissarmy.sys 2011-05-23 06:01:34--------d-----w-c:\documents and settings\all users\application data\Malwarebytes 2011-05-23 06:01:3120952----a-w-c:\windows\system32\drivers\mbam.sys 2011-05-23 06:01:31--------d-----w-c:\program files\Malwarebytes' Anti-Malware 2011-05-23 05:54:26--------d-----w-c:\program files\Spybot - Search & Destroy 2011-05-23 05:54:26--------d-----w-c:\documents and settings\all users\application data\Spybot - Search & Destroy 2011-05-09 00:39:43781272----a-w-c:\program files\mozilla firefox\mozsqlite3.dll 2011-05-09 00:39:431874904----a-w-c:\program files\mozilla firefox\mozjs.dll 2011-05-09 00:39:4289048----a-w-c:\program files\mozilla firefox\libEGL.dll 2011-05-09 00:39:42465880----a-w-c:\program files\mozilla firefox\libGLESv2.dll 2011-05-09 00:39:4215832----a-w-c:\program files\mozilla firefox\mozalloc.dll 2011-05-09 00:39:411892184----a-w-c:\program files\mozilla firefox\d3dx9_42.dll 2011-05-09 00:39:41142296----a-w-c:\program files\mozilla firefox\components\browsercomps.dll 2011-05-09 00:39:401974616----a-w-c:\program files\mozilla firefox\D3DCompiler_42.dll . ==================== Find3M ==================== . 2011-04-06 20:33:506388328----a-w-c:\windows\system32\drivers\RtkHDAud.sys 2011-03-24 21:03:3856936----a-w-c:\windows\system32\RtkCoInstXP.dll 2011-03-21 22:13:3420053096----a-w-c:\windows\RTHDCPL.EXE . ============= FINISH: 22:53:44.35 =============== Try to download those updates manually and install them one by one. As for that 3rd profile, it may be corrupted. You may want to create new profile. You may also try to create new topic in malware removal forum. Possibly, you're not totally clean.

Answer»

I removed a virus from my PC but, now I get that "Open With" window, and can't run programs. like Firefox etc.At least not without selecting the program I want to open it with each and every time.
I'm running Windows XP Home Edition.

I have tired going to http://www.dougknox.com/xp/file_assoc.htm already and I did the below steps but,no luck.

[Look to the "EXE File Association Fix", and download the .zip file to your computer desktop.. Once there, unzip the file, then DOUBLE click on the "xp_exe_fix.reg" file that is inside, choose "OK/Yes, when it asks "Are you sure?".. Restart the computer.. It should now run those problem programs and Control Panel icons.]

With that solution you are looking at it writes new keys to the registry so you need to be in regedit. Then go file, import, and select the reg file you won't to add. When you have done this don't forget to remove your system restore points and then re enable system restore. This stops the fake antivirus reinstalling if a system restore is done later.
Quote from: Lisa_maree on May 30, 2011, 08:08:03 PM

With that solution you are looking at it writes new keys to the registry so you need to be in regedit. Then go file, import, and select the reg file you won't to add. When you have done this don't forget to remove your system restore points and then re enable system restore. This stops the fake antivirus reinstalling if a system restore is done later.

Not sure what you are saying...Download and run exeHelper.

Please download exeHelper from Raktor to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
A log file NAMED log.txt will be created in the directory where you ran exeHelper.com
Attach the log.txt file to your next message.

Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).
Quote from: Broni on May 30, 2011, 08:40:52 PM

Download and run exeHelper.

Please download exeHelper from Raktor to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
A log file named log.txt will be created in the directory where you ran exeHelper.com
Attach the log.txt file to your next message.
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

This is what I found:
exeHelper by Raktor
Build 20100414
Run at 22:00:39 on 05/30/11
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--
Still same problem?Quote from: Broni on May 30, 2011, 09:03:18 PM

Still same problem?

Fixed
But,when I did restart I got that darn yellow shield but,this time it said:
"Some updates could not be installed"
Security Update for Microsoft XML Core Services 6.0 Service Pack 2 (KB954459)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB946648)

Even after I tired to do it twice...Is this also a easy fix Broni?Quote from: Broni on May 30, 2011, 09:03:18 PM

Still same problem?

I have 3 login/usernames for my PC.
the other two still get the same error...I am now trying he exeHelper from Raktor for those two.Quote from: Kyle on May 30, 2011, 09:19:03 PM

I have 3 login/usernames for my PC.
the other two still get the same error...I am now trying he exeHelper from Raktor for those two.

Odd it worked for two but,not the last one.
And the log.txt is the same as the last one I attached. This is the info I have one the username that is still getting the 'open with' error:
.
DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Run by linlee at 22:51:30 on 2011-05-30
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.3317.2801 [GMT -5:00]
.
AV: COMODO Antivirus *Enabled/Updated* {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: COMODO Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\linlee\Local Settings\Temporary Internet Files\Content.IE5\N89DE9ZM\dds[1].scr
C:\WINDOWS\system32\WSCRIPT.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.ask.com?o=15119&l=dis
uInternet Connection Wizard,ShellNext = "c:\program files\outlook express\msimn.exe"
mSearchAssistant = hxxp://www.google.com/ie
uURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [Steam] "c:\program files\steam\Steam.exe" -silent
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SWG] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [UIUCU] c:\docume~1\kelly\locals~1\temp\UIUCU.EXE -CLEAN_UP -S
mRun: [COMODO Internet Security] "c:\program files\comodo\comodo internet security\cfp.exe" -h
mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [RTHDCPL] RTHDCPL.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\NETWORK Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} - hxxp://lads.myspace.com/upload/MySpaceUploader2.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
AppInit_DLLs: c:\windows\system32\guard32.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Notification Packages = scecli scecli scecli scecli
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\linlee\application data\mozilla\firefox\profiles\9y4pgs4v.default\
FF - prefs.js: browser.SEARCH.selectedEngine - Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://www.gobrs.com/search/?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&rls=oBsN0b1w&q=
FF - component: c:\documents and settings\linlee\application data\mozilla\firefox\profiles\9y4pgs4v.default\extensions\[emailprotected]\components\PlaySushiFF.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
.
---- FIREFOX POLICIES ----
.
FF - user.js: browser.search.selectedEngine - Search
FF - user.js: keyword.URL - hxxp://www.gobrs.com/search/?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&rls=oBsN0b1w&q=
.
============= SERVICES / DRIVERS ===============
.
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [2010-2-13 134344]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2010-2-13 25160]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 cmdAgent;COMODO Internet Security Helper Service;c:\program files\comodo\comodo internet security\cmdagent.exe [2010-2-13 723632]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2011-5-30 1691480]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 N100;Compaq Ethernet or Fast Ethernet NIC Driver;c:\windows\system32\drivers\n100325.sys [2010-2-12 128000]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2011-05-31 02:21:111022976----a-w-c:\windows\system32\dllcache\browseui.dll
2011-05-31 02:21:10474112----a-w-c:\windows\system32\dllcache\shlwapi.dll
2011-05-31 02:21:101497088----a-w-c:\windows\system32\dllcache\shdocvw.dll
2011-05-30 09:07:39--------d-----w-c:\windows\ie8updates
2011-05-30 09:05:11--------dc-h--w-c:\windows\ie8
2011-05-30 08:48:21--------d-----w-c:\program files\MSXML 6.0
2011-05-23 06:01:3438224----a-w-c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-23 06:01:34--------d-----w-c:\documents and settings\all users\application data\Malwarebytes
2011-05-23 06:01:3120952----a-w-c:\windows\system32\drivers\mbam.sys
2011-05-23 06:01:31--------d-----w-c:\program files\Malwarebytes' Anti-Malware
2011-05-23 05:54:26--------d-----w-c:\program files\Spybot - Search & Destroy
2011-05-23 05:54:26--------d-----w-c:\documents and settings\all users\application data\Spybot - Search & Destroy
2011-05-09 00:39:43781272----a-w-c:\program files\mozilla firefox\mozsqlite3.dll
2011-05-09 00:39:431874904----a-w-c:\program files\mozilla firefox\mozjs.dll
2011-05-09 00:39:4289048----a-w-c:\program files\mozilla firefox\libEGL.dll
2011-05-09 00:39:42465880----a-w-c:\program files\mozilla firefox\libGLESv2.dll
2011-05-09 00:39:4215832----a-w-c:\program files\mozilla firefox\mozalloc.dll
2011-05-09 00:39:411892184----a-w-c:\program files\mozilla firefox\d3dx9_42.dll
2011-05-09 00:39:41142296----a-w-c:\program files\mozilla firefox\components\browsercomps.dll
2011-05-09 00:39:401974616----a-w-c:\program files\mozilla firefox\D3DCompiler_42.dll
.
==================== Find3M ====================
.
2011-04-06 20:33:506388328----a-w-c:\windows\system32\drivers\RtkHDAud.sys
2011-03-24 21:03:3856936----a-w-c:\windows\system32\RtkCoInstXP.dll
2011-03-21 22:13:3420053096----a-w-c:\windows\RTHDCPL.EXE
.
============= FINISH: 22:53:44.35 ===============
Try to download those updates manually and install them one by one.

As for that 3rd profile, it may be corrupted.
You may want to create new profile.

You may also try to create new topic in malware removal forum.
Possibly, you're not totally clean.

Solve : "Open With" window/can't run programs.?

Discussion

No Comment Found

Related InterviewSolutions

Reply to Comment