Solved File options keep appearing

W

wizkid

Guest
Hi,
For the past few days now I am getting "How do you want to open this file options appearing every few seconds. I have reported the computer in order to close down any programs that could be causing this but its still coming up. I was wondering if anyone on here knows how to solve it? I have checked for any infections using ESET and Malware Bytes.
 

Attachments

  • file options.png
    file options.png
    9.6 KB · Views: 121

My Computer

System One

Well, if done properly, clean boot is essentially the same as safe mode. Most likely, you haven't disabled everything you had to. Please show msconfig and task manager screenshots (you should know which tabs to show after reading the KB article).
 

My Computer

System One

  • OS
    Windows 8 Pro x64
    Computer type
    Laptop
    System Manufacturer/Model
    HP Pavilion dv7t (17.3'', i7-2630QM, HD 6770M 1Gb, 8Gb RAM, 2 SSD@120Gb + 1 HDD@750Gb)
Vadikan said:
Well, if done properly, clean boot is essentially the same as safe mode. Most likely, you haven't disabled everything you had to. Please show msconfig and task manager screenshots (you should know which tabs to show after reading the KB article).
Click to expand...

I have done this again and attached screen shots the message is still appearing.
 

Attachments

  • msconfig.png
    msconfig.png
    31 KB · Views: 156
  • task manager.png
    task manager.png
    39.5 KB · Views: 147

My Computer

System One

Wow, you have a lot of third party stuff :)

Anyway,
1. Download Process Monitor
2. Close IE if open
3. Fire up Process Monitor and start capturing.
4. Once the Open with dialog appears, choose to open with Internet Explorer.
5. When the file opens (or doesn't open with any error), stop capturing.
6. Zip up the log and upload to SkyDrive/Dropbox/Google Drive, if it's too large for attachment.
 
Last edited:

My Computer

System One

  • OS
    Windows 8 Pro x64
    Computer type
    Laptop
    System Manufacturer/Model
    HP Pavilion dv7t (17.3'', i7-2630QM, HD 6770M 1Gb, 8Gb RAM, 2 SSD@120Gb + 1 HDD@750Gb)
Hi,
Thanks for the response,

Please find attached link to the logfile

If you need any more logs just let me know,

Thanks
 
Last edited by a moderator:

My Computer

System One

Ok, let me share a few observations from the log.

1. Despite of disabling all third-party software/services, I still see Secunia (generates a lot of activity) and AIDA64 in the log. It's not clear how they got launched, but that's a different story.

2. My choice of IE introduced a lot of noise to the log. I wanted to go with Notepad, but suspected it was an image file given photo processing software in the Open With dialog. IE was more likely to open it. Did it? What did it open?

3. Shortly before OpenWith.exe kicks in, at 15:13:00,5660865, I see Logitech Picture Viewer starting from C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe and trying to access two files in your Pictures folder: untitled.jpg and file options.png. So my guess about some image viewing/processing software was probably correct.

Anyway, I imagine the nagging dialog is now gone, and you have IE associated with JPG or/and PNG, which you can check and change in Control Panel - Default programs.

Am I close? :)
 

My Computer

System One

  • OS
    Windows 8 Pro x64
    Computer type
    Laptop
    System Manufacturer/Model
    HP Pavilion dv7t (17.3'', i7-2630QM, HD 6770M 1Gb, 8Gb RAM, 2 SSD@120Gb + 1 HDD@750Gb)
Vadikan said:
Ok, let me share a few observations from the log.

1. Despite of disabling all third-party software/services, I still see Secunia (generates a lot of activity) and AIDA64 in the log. It's not clear how they got launched, but that's a different story.

2. My choice of IE introduced a lot of noise to the log. I wanted to go with Notepad, but suspected it was an image file given photo processing software in the Open With dialog. IE was more likely to open it. Did it? What did it open?

3. Shortly before OpenWith.exe kicks in, at 15:13:00,5660865, I see Logitech Picture Viewer starting from C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe and trying to access two files in your Pictures folder: untitled.jpg and file options.png. So my guess about some image viewing/processing software was probably correct.

Anyway, I imagine the nagging dialog is now gone, and you have IE associated with JPG or/and PNG, which you can check and change in Control Panel - Default programs.

Am I close? :)
Click to expand...


Hi,

Thanks again for the response,

I have just uninstalled the Logitech drivers and software to see if this was the cause of the issue but unfortunately the box is still appearing every few seconds. I have also removed Secunia and disabled AIDA64. I selected IE to open it and IE just opened up my homepage, nothing else loaded on the system.

I have attached a new log for you to check to see if there is anything else that could be causing this?
 
Last edited by a moderator:

My Computer

System One

All right, this time I remembered of the process tree view in procmon :)

procmon-tree.png

You've got a VBS script on your desktop that triggers Open With:
Code: 
\Desktop\HG612_Modem_Stats\Scripts\HG612_stats.VBS""
Looks like some kind of a modem stats collector.

Why is it residing on the Desktop and why is it trying to launch? I don't know. It's unlikely to be malicious, so there may be a scheduled task launching it at startup. That would explain why it doesn't start in safe mode, but not listed in msconfig/taskmgr.

Start Autoruns as Administrator and Ctrl+S the data file for me to take a look.
 

My Computer

System One

  • OS
    Windows 8 Pro x64
    Computer type
    Laptop
    System Manufacturer/Model
    HP Pavilion dv7t (17.3'', i7-2630QM, HD 6770M 1Gb, 8Gb RAM, 2 SSD@120Gb + 1 HDD@750Gb)
Vadikan said:
All right, this time I remembered of the process tree view in procmon :)

View attachment 22741

You've got a VBS script on your desktop that triggers Open With:
Code: 
\Desktop\HG612_Modem_Stats\Scripts\HG612_stats.VBS""
Looks like some kind of a modem stats collector.

Why is it residing on the Desktop and why is it trying to launch? I don't know. It's unlikely to be malicious, so there may be a scheduled task launching it at startup. That would explain why it doesn't start in safe mode, but not listed in msconfig/taskmgr.

Start Autoruns as Administrator and Ctrl+S the data file for me to take a look.
Click to expand...

Ah right okay, I installed this program last week as I wanted to capture line stats and graphs from the HG612 Modem for my connection. I have just deleted these folders from the disk top and removed that VBS script from starting up under task scheduler and the open with dialogue is not coming up anymore.

Thanks again for your help in tracking this issue down. I will rep now.
 

My Computer

System One

Ok, so my guess about task scheduler was on target, albeit the wound was self-inflicted :)

Glad you sorted it out. Please mark the thread as solved.
 

My Computer

System One

  • OS
    Windows 8 Pro x64
    Computer type
    Laptop
    System Manufacturer/Model
    HP Pavilion dv7t (17.3'', i7-2630QM, HD 6770M 1Gb, 8Gb RAM, 2 SSD@120Gb + 1 HDD@750Gb)
You must log in or register to reply here.
Back
Top