according to the registry, wmplayer is listed to open .exes? + other Q

1. For some reason, in this registry location:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithList

Wmplayer.exe is listed. Why is it listed? I have never opened an executable file with it.


2. And a second question non related question.

If I open up a previous version of a folder, e.g c:/users/xxxx/downloads, and move a shadow copy file to tye desktop, I get an internet security warning saying the file might be harmful. Clicking show details shows the desktop directory. Why is this?

I don't have that Registry key on my Win7 64-bit Ultimate so I'd certainly suspicion an infection has hit your computer. Update your antivirus, run a full/deep scan, download and install Malwarebytes and run a full scan.

Your second question should be separately posted since as you say, it's not related. I get similar messages now and then that say the file came from a different computer and do I want to run it, have not had a problem as I always know the site I get my downloads from. Copying a file from the Downloads Folder to the Desktop is probably making Windows think it's coming from an unknown source.

Berton said:

I don't have that Registry key on my Win7 64-bit Ultimate so I'd certainly suspicion an infection has hit your computer. Update your antivirus, run a full/deep scan, download and install Malwarebytes and run a full scan.

Your second question should be separately posted since as you say, it's not related. I get similar messages now and then that say the file came from a different computer and do I want to run it, have not had a problem as I always know the site I get my downloads from. Copying a file from the Downloads Folder to the Desktop is probably making Windows think it's coming from an unknown source.

I have a second pc that also shows wmplayer in the list for .exe.

Doing a google image search for the key shows similar entries.

Arc said:

Keyes said:

1. For some reason, in this registry location:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithList

Wmplayer.exe is listed. Why is it listed? I have never opened an executable file with it.

It is not there for me, too. It should not be there. Filetype associations should be default, not with windows media player.

Go to Default File Type Associations - Restore ... get the registry entries for exe and lnk ... merge these two with registries.

Also, scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Instead of downloading those reg files, can I just manually delete the entry?

I dont see how it could be malware, as the system is running fine I have not downloaded anything since the key was modified. I will scan with mbam and tdss. Mse is clean.

Mbam and mbam anti rookit are clean.

Arc said:

Well, if all the programs are properly working, then you need not to be afraid about it.

If you want to delete the registry entry, I would suggest you to have a backup before doing it.

I checked at the beeping computer forums, and some others have the same entry. So its all safe? I just want to be certain its not something bad,
wmplayer.exe under openwithlist registry key for .exe - Am I infected? What do I do?