Why I can't open mapped drives in Windows explorer?

This is working in Windows 2003 AD Domain. This is xp workstation, after the user logon to the domain, he opens windows explorer > my computer, he can see a list of mapped drives. If he double-click the mapped drive on the left pane, he would see all the contents appear on the right pane. But, if he double-click the mapped drive on the right pane, he can't open some of the mapped drives, indeed, an "Open with..." dialog box appears - with the choices on open with adobe reader, notepad, Internet explorer, etc.

If I run net use in command prompt, some mapped drives are found disconnected, why?
BalackAsked:
Who is Participating?
 
johnb6767Commented:

Kill it.....

Actually forgot that the mountpoints can be used for that......
0
 
abhijeet11160Commented:
hi,

does that comp updated anitivirus..??

i suspect the aotorun.inf files is being utilised by some virus,
try downloading autorun remover and run on the system.

Also mark whether if u right click and explore the drives opens it.?

run MRT.exe also...??

try renaming the windows login profile after finishing the above scans..

Cheerz

abhijeet
0
 
SteveIT ManagerCommented:
have you tried re-creating the user's profile on the machine and logging on via that?
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
BalackAuthor Commented:
Hi abhijeet,

Can you show me step-by-step?

Hi sqsm81,

That may be my last resort
0
 
SteveIT ManagerCommented:
Also check the autodisconnect value in a cmd window for

net config server
0
 
StinkyPeteCommented:
You can check for known malware using the Microsoft Malicious Software Removal Tool, at the run box type mrt.exe
Allow the updates to be downloaded then start the full scan wait until finished (Time to complete may be hours)
If this cannot start, or complete the computer is probably compromised.
Let us know the results of the scan.
0
 
BalackAuthor Commented:
Does this MS tool is effective enough to detect malware? Shall we consider 3rd party tool, such as, Malwarebyte?
0
 
StinkyPeteCommented:
The MRT tool is recommened. This is part of the Operating System and is preferable to 3rd party tools initially.
You should limit this client machines access to the internet, and therefore not download 3rd party tools.
0
 
BalackAuthor Commented:
What is the root cause of this problem? Does this caused by the malware or else?
0
 
johnb6767Commented:
Is there an AutoRun.INF at the root of those mapped drives?

0
 
BalackAuthor Commented:
nope
0
 
StinkyPeteCommented:
Currently there is insufficient niformation to determin the cause of the problem.

Because you have told us about symptoms which are often the behaviour of some viruses/malware the first step is to address a possible infection.

Once we have reasonable assurance that malware/virus is not involved, we can continue to debug the problem.

0
 
BalackAuthor Commented:
I saw autorun.inf in the root of almost all the mapped drives. There is thumb.db in one of the mapped drive as well. I've removed them away. What's next?
0
 
BalackAuthor Commented:
I did tried to run "mrt.exe", but it doesn't run. Think Removal tool is not installed.
0
 
johnb6767Commented:
Look in the Autorun.inf. Whats the .exe name that it points to to launch?

Search the below reg key for an Autoplay value for that bad file, and delete it's parent key.....

You can really delete most stuff under the key, as long as you dont delete anything related to your fixed drives.

Might actually see your mapped drive letters. If so, kill those, and retry....
0
 
BalackAuthor Commented:
I have to go onsite to try it...
0
 
BalackAuthor Commented:
Hi Johnb6767,

Pls see the content of the autorun.inf:

[autorun]
open=

shell\open\Command=RECYCLED\INFO.exe
shell\open\Default=1
shell\explore\Command=RECYCLED\INFO.exe

That means I have to run regedit, and search for "info.exe"?  
0
 
johnb6767Commented:
Its under HKCR\Drive

Search for Info.exe though, to make sure Im not having a brain fart......

If it is under there, DL the following. If not, remind me of where you found it, and we can reset it.....
If this is correct location in  the registry, then run the following to reset it to the default.....

Windows® XP File Association Fixes
http://www.dougknox.com/xp/fileassoc/xp_drive_association_fix.zip

0
 
BalackAuthor Commented:
Hi Johnb6767,

Your mean HKey_Classes_Root? I think I found it in HKey_User, for the selective user(s)
0
 
johnb6767Commented:
Yes, HKCR.....

Whats the exat key it was in?
0
 
BalackAuthor Commented:
HKEY_Users\S-1-5-21-220523388-1801674531\Software\Microsoft\Windows\CurrentVersion\Explorer\Mountpoint2,

A registry value: “Default” with value “RECYCLED\INFO.exe”
0
 
BalackAuthor Commented:
Ok, will do it and update you...
0
 
BalackAuthor Commented:
Great, it works perfectly
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.