Hard Disk opens in new window

K

Ken199

I've got a problem with my Hard Disk because every time I double clicked it,
it opens in a new window. Right clicking reveals Open(wvcst) on the first
line and Explore(0) on the second line. I know this should be Open and
Explore but I also got (wvcst) and (0). Can anybody tell me what's that and
how to fix this? Any help would be appreciated. Thanks.
 
M

Mark L. Ferguson

Open Regedit.The HKEY_CLASSES_ROOT\Folder\shell , and
HKEY_CLASSES_ROOT\Directory\shell keys need the 'default' Value set to 'none'
(no quotes)
 
K

Ken199

Mark L. Ferguson said:
Open Regedit.The HKEY_CLASSES_ROOT\Folder\shell , and
HKEY_CLASSES_ROOT\Directory\shell keys need the 'default' Value set to 'none'
(no quotes)
--
Was this helpful? Then click the "Yes" button below. Voting helps the web
interface. http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPost

Mark L. Ferguson

Thanks for the help sir but it didn't work for me. What it does is
different. When I open My Computer, that folder become explored and still if
I open my hard drive it opens in a new window. I still have Open(wvcst) and
Explore(0).
 
M

Mark L. Ferguson

start/run, type:
control folders

The "Browse Folders" area probaby has a dot in the radio button for "open
each folder in a new window' instead of "open each folder in the same
window". If there already, change the setting to the other, restart explorer,
and change back. That should toggle the setting back to normal.
 
R

Ramesh, MS-MVP

Hi Ken199,

Your system might be infected by a Worm/Malware which writes to the MountPoints2 key or creates an Autorun.inf file in the drive's root. See:

http://www.google.com/search?hl=en&q=mountpoints2+worm

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


I've got a problem with my Hard Disk because every time I double clicked it,
it opens in a new window. Right clicking reveals Open(wvcst) on the first
line and Explore(0) on the second line. I know this should be Open and
Explore but I also got (wvcst) and (0). Can anybody tell me what's that and
how to fix this? Any help would be appreciated. Thanks.
 
K

Ken199

Mark L. Ferguson said:
start/run, type:
control folders

The "Browse Folders" area probaby has a dot in the radio button for "open
each folder in a new window' instead of "open each folder in the same
window". If there already, change the setting to the other, restart explorer,
and change back. That should toggle the setting back to normal.

--
Was this helpful? Then click the "Yes" button below. Voting helps the web
interface. http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPost

Mark L. Ferguson

Done this but it still has that bug.
Screenshot: http://img255.imageshack.us/img255/8968/29074031or3.jpg
 
K

Ken199

Ramesh said:
Hi Ken199,

Your system might be infected by a Worm/Malware which writes to the MountPoints2 key or creates an Autorun.inf file in the drive's root. See:

http://www.google.com/search?hl=en&q=mountpoints2+worm

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

I don't know if a worm/malware is affecting this.. Scanned using AVG Free
and Microsoft Defender but found nothing. I also have all windows security
updates.
Screenshot: http://img255.imageshack.us/img255/8968/29074031or3.jpg
 
R

Ramesh, MS-MVP

The image does not open. It says "hotlinking is disabled...."

Meanwhile, try:

"Open With" dialog appears when double clicking on a mapped network drive in My Computer:
http://www.winhelponline.com/articl...on-a-mapped-network-drive-in-My-Computer.html

If the problem returns after a reboot, then it's most likely a Malware/worm/Virus.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com




Ramesh said:
Hi Ken199,

Your system might be infected by a Worm/Malware which writes to the MountPoints2 key or creates an Autorun.inf file in the drive's root. See:

http://www.google.com/search?hl=en&q=mountpoints2+worm

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

I don't know if a worm/malware is affecting this.. Scanned using AVG Free
and Microsoft Defender but found nothing. I also have all windows security
updates.
Screenshot: http://img255.imageshack.us/img255/8968/29074031or3.jpg
 
K

Ken199

Ramesh said:
The image does not open. It says "hotlinking is disabled...."

Meanwhile, try:

"Open With" dialog appears when double clicking on a mapped network drive in My Computer:
http://www.winhelponline.com/articl...on-a-mapped-network-drive-in-My-Computer.html

If the problem returns after a reboot, then it's most likely a Malware/worm/Virus.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

Tried using your suggestion but it says "No changes were made to the system,
as no problems were detected". ^_^
 
R

Ramesh, MS-MVP

Is the entry "Open(wvcst)" appearing for all other drives, or only when you right-click on a *particular* drive-letter?

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com




Ramesh said:
The image does not open. It says "hotlinking is disabled...."

Meanwhile, try:

"Open With" dialog appears when double clicking on a mapped network drive in My Computer:
http://www.winhelponline.com/articl...on-a-mapped-network-drive-in-My-Computer.html

If the problem returns after a reboot, then it's most likely a Malware/worm/Virus.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

Tried using your suggestion but it says "No changes were made to the system,
as no problems were detected". ^_^
 
K

Ken199

Ramesh said:
Is the entry "Open(wvcst)" appearing for all other drives, or only when you right-click on a *particular* drive-letter?

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

For every drive letter, that entry appears everytime I right clicked them. I
got 1 Hard Drive with 2 partitions.
 
R

Ramesh, MS-MVP

Click Start, Run. Type:

reg export hkcr\drive "%userprofile%\desktop\drives.txt"

Press {ENTER}

Then open the file "drives.txt" (present in the Desktop.)
Copy the contents of the file and include it in your reply.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com




Ramesh said:
Is the entry "Open(wvcst)" appearing for all other drives, or only when you right-click on a *particular* drive-letter?

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

For every drive letter, that entry appears everytime I right clicked them. I
got 1 Hard Drive with 2 partitions.
 
K

Ken199

Ramesh said:
Click Start, Run. Type:

reg export hkcr\drive "%userprofile%\desktop\drives.txt"

Press {ENTER}

Then open the file "drives.txt" (present in the Desktop.)
Copy the contents of the file and include it in your reply.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

Here it is sir.

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\drive]
@="Drive"
"EditFlags"=dword:000001d2
"BrowserFlags"=dword:00000008

[HKEY_CLASSES_ROOT\drive\DefaultIcon
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,38,00,00,00

[HKEY_CLASSES_ROOT\drive\shell]
@=""

[HKEY_CLASSES_ROOT\drive\shell\find]
"SuppressionPolicy"=dword:00000080
@=""

[HKEY_CLASSES_ROOT\drive\shell\find\command
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\
65,00,00,00

[HKEY_CLASSES_ROOT\drive\shell\find\ddeexec]
@="[FindFolder(\"%l\", %I)]"
"NoActivateHandler"=""

[HKEY_CLASSES_ROOT\drive\shell\find\ddeexec\application]
@="Folders"

[HKEY_CLASSES_ROOT\drive\shell\find\ddeexec\topic]
@="AppProperties"

[HKEY_CLASSES_ROOT\drive\shellex]

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers]

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\AlcoholShellEx]
@="{32020A01-506E-484D-A2A8-BE3CF17601C3}"

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\Offline Files]
@="{750fdf0e-2a26-11d1-a3ea-080036587f03}"

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\Sharing]
@="{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\{59099400-57FF-11CE-BD94-0020AF85B590}]

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}]
@="Portable Devices Menu"

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\{fbeb8a05-beee-4442-804e-409d6c4515e9}]
@=""

[HKEY_CLASSES_ROOT\drive\shellex\DragDropHandlers]

[HKEY_CLASSES_ROOT\drive\shellex\DragDropHandlers\WinRAR]
@="{B41DB860-8EE4-11D2-9906-E49FADC173CA}"

[HKEY_CLASSES_ROOT\drive\shellex\FolderExtensions]

[HKEY_CLASSES_ROOT\drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}]
@=""
"DriveMask"=dword:00000020

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\Sharing]
@="{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{1F2E5C40-9550-11CE-99D2-00AA006E086C}]

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}]
@=""

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{7988B573-EC89-11cf-9C00-00AA00A14F56}]
@=""

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}]

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{fbeb8a05-beee-4442-804e-409d6c4515e9}]
@=""
 
R

Ramesh, MS-MVP

Click Start, Run and type:

reg add hkcr\drive\shell /ve /d none /f

Press {ENTER}

Alternately, to do this manually via registry:

HKEY_CLASSES_ROOT\Drive\shell
Set (default) to "none" (without ")

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com




Ramesh said:
Click Start, Run. Type:

reg export hkcr\drive "%userprofile%\desktop\drives.txt"

Press {ENTER}

Then open the file "drives.txt" (present in the Desktop.)
Copy the contents of the file and include it in your reply.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

Here it is sir.

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\drive]
@="Drive"
"EditFlags"=dword:000001d2
"BrowserFlags"=dword:00000008

[HKEY_CLASSES_ROOT\drive\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,38,00,00,00

[HKEY_CLASSES_ROOT\drive\shell]
@=""

[HKEY_CLASSES_ROOT\drive\shell\find]
"SuppressionPolicy"=dword:00000080
@=""

[HKEY_CLASSES_ROOT\drive\shell\find\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\
65,00,00,00

[HKEY_CLASSES_ROOT\drive\shell\find\ddeexec]
@="[FindFolder(\"%l\", %I)]"
"NoActivateHandler"=""

[HKEY_CLASSES_ROOT\drive\shell\find\ddeexec\application]
@="Folders"

[HKEY_CLASSES_ROOT\drive\shell\find\ddeexec\topic]
@="AppProperties"

[HKEY_CLASSES_ROOT\drive\shellex]

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers]

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\AlcoholShellEx]
@="{32020A01-506E-484D-A2A8-BE3CF17601C3}"

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\Offline Files]
@="{750fdf0e-2a26-11d1-a3ea-080036587f03}"

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\Sharing]
@="{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\{59099400-57FF-11CE-BD94-0020AF85B590}]

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}]
@="Portable Devices Menu"

[HKEY_CLASSES_ROOT\drive\shellex\ContextMenuHandlers\{fbeb8a05-beee-4442-804e-409d6c4515e9}]
@=""

[HKEY_CLASSES_ROOT\drive\shellex\DragDropHandlers]

[HKEY_CLASSES_ROOT\drive\shellex\DragDropHandlers\WinRAR]
@="{B41DB860-8EE4-11D2-9906-E49FADC173CA}"

[HKEY_CLASSES_ROOT\drive\shellex\FolderExtensions]

[HKEY_CLASSES_ROOT\drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}]
@=""
"DriveMask"=dword:00000020

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers]

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\Sharing]
@="{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{1F2E5C40-9550-11CE-99D2-00AA006E086C}]

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}]
@=""

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{7988B573-EC89-11cf-9C00-00AA00A14F56}]
@=""

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}]

[HKEY_CLASSES_ROOT\drive\shellex\PropertySheetHandlers\{fbeb8a05-beee-4442-804e-409d6c4515e9}]
@=""
 
K

Ken199

I have good news and bad news now.
The good news is that I finally found the bug after I scanned my PC using
Kaspersky. This is the report:

Detected
--------
Status Object
------ ------
deleted: virus Virus.VBS.AutoRun.b File: F:\WVCST.VBS
deleted: virus Virus.VBS.AutoRun.b File: C:\wvcst.vbs
deleted: virus Virus.VBS.AutoRun.b File: E:\wvcst.vbs
deleted: virus Virus.VBS.AutoRun.b File: C:\WINDOWS\SYSTEM32\WVCST.VBS
deleted: virus Virus.VBS.AutoRun.b File: E:\System Volume
Information\_restore{9FEDF596-7D68-4428-8D3C-2648499CB3D3}\RP41\A0006577.vbs
deleted: virus Virus.VBS.AutoRun.b File: C:\System Volume
Information\_restore{9FEDF596-7D68-4428-8D3C-2648499CB3D3}\RP41\A0006578.vbs::$DATA
deleted: virus Virus.VBS.AutoRun.b File: C:\System Volume
Information\_restore{9FEDF596-7D68-4428-8D3C-2648499CB3D3}\RP41\A0006576.vbs::$DATA

The bad news is after I deleted that bugger I have a new problem now. When I
double clicked my E: Drive it says "Can not find the script file
E:\wvcst.vbs". Same goes with my C: Drive.
I think i still need some help. Thanks.
 
R

Ramesh, MS-MVP

Kasperky seems to have deleted the AutoRun worm, which is correct. You may have to delete the hidden file named autorun.inf from the hard drive's root, as well. Note that if Windows XP SP2 is installed, presence of Autorun.inf won't affect the local (hard disk) drives.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


I have good news and bad news now.
The good news is that I finally found the bug after I scanned my PC using
Kaspersky. This is the report:

Detected
--------
Status Object
------ ------
deleted: virus Virus.VBS.AutoRun.b File: F:\WVCST.VBS
deleted: virus Virus.VBS.AutoRun.b File: C:\wvcst.vbs
deleted: virus Virus.VBS.AutoRun.b File: E:\wvcst.vbs
deleted: virus Virus.VBS.AutoRun.b File: C:\WINDOWS\SYSTEM32\WVCST.VBS
deleted: virus Virus.VBS.AutoRun.b File: E:\System Volume
Information\_restore{9FEDF596-7D68-4428-8D3C-2648499CB3D3}\RP41\A0006577.vbs
deleted: virus Virus.VBS.AutoRun.b File: C:\System Volume
Information\_restore{9FEDF596-7D68-4428-8D3C-2648499CB3D3}\RP41\A0006578.vbs::$DATA
deleted: virus Virus.VBS.AutoRun.b File: C:\System Volume
Information\_restore{9FEDF596-7D68-4428-8D3C-2648499CB3D3}\RP41\A0006576.vbs::$DATA

The bad news is after I deleted that bugger I have a new problem now. When I
double clicked my E: Drive it says "Can not find the script file
E:\wvcst.vbs". Same goes with my C: Drive.
I think i still need some help. Thanks.
 
K

Ken199

After I deleted that bugger I have a new problem now. When I double clicked
my E: Drive it says "Can not find the script file E:\wvcst.vbs". Same goes
with my C: Drive.

Sir, can you help me with this problem? This time it won't normally open
unless I open the drive in the address bar.
 
R

Ramesh, MS-MVP

You may have to delete the hidden file named autorun.inf from the hard drive's root, as well. Note that if Windows XP SP2 is installed, presence of Autorun.inf won't affect the local (hard disk) drives.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


After I deleted that bugger I have a new problem now. When I double clicked
my E: Drive it says "Can not find the script file E:\wvcst.vbs". Same goes
with my C: Drive.

Sir, can you help me with this problem? This time it won't normally open
unless I open the drive in the address bar.
 
K

Ken199

Ramesh said:
You may have to delete the hidden file named autorun.inf from the hard drive's root, as well. Note that if Windows XP SP2 is installed, presence of Autorun.inf won't affect the local (hard disk) drives.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

How to do this? I tried to use search function, checked search for hidden
files and folders but only 1 autorun.inf was found and that's on my nero
folder. Where can I find my hard drive root? Sorry I'm not good at doing
advanced stuffs.
 
R

Ramesh, MS-MVP

Click Start, and then click Control Panel
Double-click Folder Options
On the View tab, under Hidden files and folders, click Show hidden files and folders

Now browse C:\ and other drives using Windows Explorer. Look for and delete the file named "Autorun.inf" from the drive's root.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com




Ramesh said:
You may have to delete the hidden file named autorun.inf from the hard drive's root, as well. Note that if Windows XP SP2 is installed, presence of Autorun.inf won't affect the local (hard disk) drives.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com

How to do this? I tried to use search function, checked search for hidden
files and folders but only 1 autorun.inf was found and that's on my nero
folder. Where can I find my hard drive root? Sorry I'm not good at doing
advanced stuffs.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top