Firefox Default program settings being wrecked by installer

[HD-False]

I've been using FireFox 11 in Windows 7 x86, x64, and Windows 8CP and have no problems with all versions Shark007.
I see no connection between SHARK007 and an Internet browser?

[Solace]

(03-19-2012 03:40 PM)HD-False Wrote:  I've been using FireFox 11 in Windows 7 x86, x64, and Windows 8CP and have no problems with all versions Shark007.
I see no connection between SHARK007 and an Internet browser?

its quite weird as well as i assume the installer sets the same registry entries for file types regardless of the browser installed since its related to videos. what else is weird and disturbing is that both inside and outside of vmware i am able to reproduce this issue and installing FF 3 seems to be not affected and remedys the issue. any thoughts on the cause would be appreciated.

[Solace]

After analyzing what changes occur from setting the filetype permissions it seems that within the FirefoxHTML directory of the following registry settings are the reason behind such behavior. This is a export of the section after applying the changes via gui file types. Is the codecs suppose to be changing the file permissions for such extensions? i recall in the past that was never the case and the icon/extensions remained to be opened by firefox. If this is normal behavior from the software then this is false report by me. I do not recall this occurring in the past though.

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML]
"FriendlyTypeName"="Firefox Document"
@="Firefox Document"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\DefaultIcon]
@="C:\\Windows\\SysWOW64\\wmploc.dll,-610"
"oldicon"="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell]
@="Play"
"oldverb"="open"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\Enqueue]
@="&Add to Windows Media Player list"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,​\
  00,75,00,6e,00,72,00,65,00,67,00,6d,00,70,00,32,00,2e,00,65,00,78,00,65,00,​\
  2c,00,2d,00,39,00,38,00,30,00,30,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\Enqueue\command]
"DelegateExecute"="{45597c98-80f6-4549-84ff-752cf55e2d29}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -requestPending -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec]
@="\"%1\",,0,0,,,,"
"NoActivateHandler"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec\Application]
@="Firefox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec\Topic]
@="WWW_OpenURL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\Play]
@="&Play"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,​\
  00,75,00,6e,00,72,00,65,00,67,00,6d,00,70,00,32,00,2e,00,65,00,78,00,65,00,​\
  2c,00,2d,00,39,00,39,00,39,00,31,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\Play\command]
@=hex(2):22,00,25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,00,69,00,6c,\
  00,65,00,73,00,28,00,78,00,38,00,36,00,29,00,25,00,5c,00,57,00,69,00,6e,00,​\
  64,00,6f,00,77,00,73,00,20,00,4d,00,65,00,64,00,69,00,61,00,20,00,50,00,6c,​\
  00,61,00,79,00,65,00,72,00,5c,00,77,00,6d,00,70,00,6c,00,61,00,79,00,65,00,​\
  72,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,00,50,00,6c,00,61,00,79,00,20,​\
  00,22,00,25,00,4c,00,22,00,00,00
"DelegateExecute"="{ed1d0fdf-4414-470a-a56d-cfb68623fc58}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shellex]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shellex\{8895b1c6-b41f-4c1c-a562-0d564250836f}]
@="{031EE060-67BC-460d-8847-E4A7C5E45A27}"

changing "open -> Play" changes the behavior on all the file types for the shell. restoring it fixes the file types. restoring the path to FF restores the default icon and its back to normal.

also i figured out why the Firefox was completely removed on rare cases. If i install FF11 and click Restore file types it assumes the backups exists in registry and still goes ahead to remove the entries leaving nothing and removing Firefox from the default programs list and file types. The backups must exist prior to executing this script otherwise nothing will remain.

[Shark007]

your registry post has some interesting entries.
some of the terminolgy does belong to my software but I have no idea how it is getting into the Firefox HKLM key.

my software doesnt write these values to HKEY_LOCAL_MACHINE - it writes to HKEY_CLASSES_ROOT
So, somehow, Firefox is re-directing/re-interpretting my intension and using it for itself. very stange indeed.

Do you disable UAC?

[Solace]

(03-19-2012 08:13 PM)Shark007 Wrote:  your registry post has some interesting entries.
some of the terminolgy does belong to my software but I have no idea how it is getting into the Firefox key.

Do you disable UAC?

heres the same registry folder after setting filetypes through your gui.

FF 3.0 After applying file types

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML]
@="Firefox Document"
"FriendlyTypeName"="Firefox Document"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\DefaultIcon]
@="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell]
@="open"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -requestPending -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec]
@="\"%1\",,0,0,,,,"
"NoActivateHandler"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec\Application]
@="Firefox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec\Topic]
@="WWW_OpenURL"

FF 11 after

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML]
@="Firefox Document"
"FriendlyTypeName"="Firefox Document"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\DefaultIcon]
@="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell]
@="open"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\Enqueue]
@="&Add to Windows Media Player list"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,​\
  00,75,00,6e,00,72,00,65,00,67,00,6d,00,70,00,32,00,2e,00,65,00,78,00,65,00,​\
  2c,00,2d,00,39,00,38,00,30,00,30,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\Enqueue\command]
"DelegateExecute"="{45597c98-80f6-4549-84ff-752cf55e2d29}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -requestPending -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec]
@="\"%1\",,0,0,,,,"
"NoActivateHandler"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec\Application]
@="Firefox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\ddeexec\Topic]
@="WWW_OpenURL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\Play]
@="&Play"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,​\
  00,75,00,6e,00,72,00,65,00,67,00,6d,00,70,00,32,00,2e,00,65,00,78,00,65,00,​\
  2c,00,2d,00,39,00,39,00,39,00,31,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\Play\command]
@=hex(2):22,00,25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,00,69,00,6c,\
  00,65,00,73,00,28,00,78,00,38,00,36,00,29,00,25,00,5c,00,57,00,69,00,6e,00,​\
  64,00,6f,00,77,00,73,00,20,00,4d,00,65,00,64,00,69,00,61,00,20,00,50,00,6c,​\
  00,61,00,79,00,65,00,72,00,5c,00,77,00,6d,00,70,00,6c,00,61,00,79,00,65,00,​\
  72,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,00,50,00,6c,00,61,00,79,00,20,​\
  00,22,00,25,00,4c,00,22,00,00,00
"DelegateExecute"="{ed1d0fdf-4414-470a-a56d-cfb68623fc58}"
"oldcmd"="\"%ProgramFiles(x86)%\\Windows Media Player\\wmplayer.exe\" /Play \"%L\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shellex]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shellex\{8895b1c6-b41f-4c1c-a562-0d564250836f}]
@="{031EE060-67BC-460d-8847-E4A7C5E45A27}"

Both in vmware and in the alternate OS i installed to check both this and some other minor things i wanted to check has UAC enabled. these 2 registry exports are from vmware after installing the respective version of firefox.

---

its pretty weird to me as well as the version of firefox seems to affect the results as well lol. i was using comodos HIPS to identify what changes are being made and where. blocking such attempts resulted in normal results for FF 11 within that section.

[Shark007]

the keys you are quoting are written by Windows are are Mirrors of what exists in HKEY_CLASSES_ROOT
I write to HKEY_CLASSES_ROOT

What I do not understand is how HKEY_CLASSES_ROOT\FirefoxHTML is getting involved at all.
I write to specific keys and not to \FirefoxHTML.
Somehow FF11 is picking up on the 'associations write' and using it for itself.

[Solace]

Oh, ok i understand now. With UAC enabled it will write to "CU" instead of "LM" for the registry entries. i just navigated to the HKCU section and the same entries exist that are causing the issue. Without UAC it just writes the same stuff to HKLM which is why my original registry post shows that pathing. hope that removes the confusion about the pathing.

the other question stands though about the entries themselves since me altering those 2 settings will fix the issue. let me get 2 exports of the current user section for the same entries. odds are they will be the same but i might as well check.

edit:

yea sorry i realized that after and probably created a bit of confusion.

[Shark007]

(03-19-2012 08:52 PM)Solace Wrote:  Oh, ok i understand now. With UAC enabled it will write to "CU" instead of "LM" for the registry entries.

this is not correct.

as stated, I write to SPECIFIC keys, neither of which are CU or LM but I do write to CR
UAC state does not change this - but UAC state can cause different interactions within the registry.
Disabling UAC is usually a bad thing to do and i wonder if it is the cause of 'your' anomolies.

[Solace]

sorry my mistake again i misread that initially.

it still occurs within the proper pathing to classes.

heres FF 11 before.

Code:

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\FirefoxHTML]
@="Firefox HTML Document"
"FriendlyTypeName"="Firefox HTML Document"

[HKEY_CLASSES_ROOT\FirefoxHTML\DefaultIcon]
@="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,1"

[HKEY_CLASSES_ROOT\FirefoxHTML\shell]
@="open"

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open]

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -requestPending -osint -url \"%1\""

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\ddeexec]
@="\"%1\",,0,0,,,,"
"NoActivateHandler"=""

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\ddeexec\Application]
@="Firefox"

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\ddeexec\Topic]
@="WWW_OpenURL"

and after

Code:

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\FirefoxHTML]
@="WebM File"
"FriendlyTypeName"="Firefox HTML Document"
"olddesc"="Firefox HTML Document"

[HKEY_CLASSES_ROOT\FirefoxHTML\DefaultIcon]
@="C:\\Windows\\SysWOW64\\wmploc.dll,-610"
"oldicon"="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,1"

[HKEY_CLASSES_ROOT\FirefoxHTML\shell]
@="Play"
"oldverb"="open"

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\Enqueue]
@="&Add to Windows Media Player list"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,​\
  00,75,00,6e,00,72,00,65,00,67,00,6d,00,70,00,32,00,2e,00,65,00,78,00,65,00,​\
  2c,00,2d,00,39,00,38,00,30,00,30,00,00,00

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\Enqueue\command]
"DelegateExecute"="{45597c98-80f6-4549-84ff-752cf55e2d29}"

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open]

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -requestPending -osint -url \"%1\""

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\ddeexec]
@="\"%1\",,0,0,,,,"
"NoActivateHandler"=""

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\ddeexec\Application]
@="Firefox"

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\open\ddeexec\Topic]
@="WWW_OpenURL"

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\Play]
@="&Play"
"MUIVerb"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
  6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,​\
  00,75,00,6e,00,72,00,65,00,67,00,6d,00,70,00,32,00,2e,00,65,00,78,00,65,00,​\
  2c,00,2d,00,39,00,39,00,39,00,31,00,00,00

[HKEY_CLASSES_ROOT\FirefoxHTML\shell\Play\command]
@=hex(2):22,00,25,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,46,00,69,00,6c,\
  00,65,00,73,00,28,00,78,00,38,00,36,00,29,00,25,00,5c,00,57,00,69,00,6e,00,​\
  64,00,6f,00,77,00,73,00,20,00,4d,00,65,00,64,00,69,00,61,00,20,00,50,00,6c,​\
  00,61,00,79,00,65,00,72,00,5c,00,77,00,6d,00,70,00,6c,00,61,00,79,00,65,00,​\
  72,00,2e,00,65,00,78,00,65,00,22,00,20,00,2f,00,50,00,6c,00,61,00,79,00,20,​\
  00,22,00,25,00,4c,00,22,00,00,00
"DelegateExecute"="{ed1d0fdf-4414-470a-a56d-cfb68623fc58}"

[HKEY_CLASSES_ROOT\FirefoxHTML\shellex]

[HKEY_CLASSES_ROOT\FirefoxHTML\shellex\{8895b1c6-b41f-4c1c-a562-0d564250836f}]
@="{031EE060-67BC-460d-8847-E4A7C5E45A27}"

[Shark007]

I am not disputing that it occurs.

What I am trying to reslove is WHY it occurs.
My software is not specifically writing to the FirefoxHTML key.

Please do some testing without disabling UAC.
I am guessing that disabling UAC is causing this situation.