Windos 10 - Strange Web Browser Default Issue

On my home PC, for my wife's account (local account, not MSFT Online) she started having issues with following URLs from emails. Every time she clicked on a URL she was given a choice of browsers (Edge, IE, Firefox, Chrome) to use and an option to make the one she chose the default browser. However the default she chose (Edge) never stuck & the next time she clicked a link she was given the same choice.

I tried to fix this following a few routes:

1) Using the default option in PC settings I tried to set the default browser. Whatever I chose didn't stick (it just went back to blank)
2) I then went to "Set Default Programs" in Control Panel and set Edge as default, but it still didn't stick. I went into the associations setting for Edge and noticed that file types .htm and .html and protocols http and https were not set as default for Edge (or for any of the other browsers for that matter), so tried to set them, but again it didn't stick
3) As we dont use Firefox or Chrome at home (and I didn't install them anyway) I went to uninstall them both, but neither are visible in the program list in Control Panel :S

There are two other accounts on the PC (one a MSFT Online account the other local) and neither have the same issue in browser defaults (default browser is set to Edge on both of them), though the same issue as item (3) above does exist

Any ideas on what to do next?

 

Are both users having this issue using User Accounts that are ADMINISTRATOR accounts?

 

Only one user has the default browser issue - that is my wife's account. I am pretty sure it is an admin account, but I may be wrong (I am not at home at the moment - I will check later today). The other two accounts dont have the issue are my own (definitely admin) and a general account (not an admin) - though I need to double check them as well (sorry).

There is one other account on the PC that I have not checked - will do so later.

Item 3 (inability to uninstall Firefox & Chrome) is seen on all accounts (or at least the 3 accounts I have checked)

 

Only a full ADMINISTRATOR account can make any changes of any kind to any system setting or installs or uninstalls.

Try using a decent uninstaller such as Revo or IoBit or Ashampoo or Geek - all available free here:
http://www.majorgeeks.com/mg/sortname/uninstallers.html
but using an administrator account.
If that doesn't work run sfc /scannow following the instructions here EXACTLY and carefully:
https://support.microsoft.com/en-gb...l-to-repair-missing-or-corrupted-system-files

 

Thanks - I'll try that this evening

 

Update:

Firstly the accounts on the PC are :

- My account (MSFT online account, ADMINISTRATOR )
- My wifes account (local, ADMINISTRATOR)
- two other local accounts (not ADMINISTRATOR)

The browser default issue is only present on my wife's account (local, ADMIN) not on any of the other three

Uninstalling Firefox & Chrome using Control Panel is not possible on either admin account (programs not listed).

I downloaded & ran IoBit (from my account - msft online, ADMIN), but neither firefox or chrome were listed to be uninstalled (looked for firefox, mozilla, chrome, google - none were listed)

Ran sfc (also from my account) - result was "Windows Resource Protection did not find any integrity violations."

Problem still exists , as described above

Not - I saw reported a problem following URLs specifically from Outlook, so to be sure copied the URLs into excel & wpord, but saw same issue following them from there

We can live with the problem as it stands, but I am concerned there is a bigger underlying issue that may cause more problems in the future

 

If you look in these TWO folders: 'program files' and 'program files(x86)' and if you see NO folder marked 'Mozilla..' or 'Google Chrome' or 'Chrome..'
then it was never installed. The only reason a folder would be there, but unable to uninstall it is because the 'uninstall.exe' file is missing or corrupt.

 

There is a "program files(x86)\firefox" folder - it includes a "uninstall" subfolder that includes just "helper.exe"

There were no chrome or google chrome folders, but a search on chrome.exe found it in the following folders :

program files(x86)\Altoe\Application
program files(x86)\Bangcar\Application
program files(x86)\Tooleat\Application
program files(x86)\Willjob\Application

None of Altoe, Bangcar, Tooleat or Willjob appear in the programs list in control panel or in IoBit.

 

OK let me just focus on Firefox. Because there is a programs folder for it, there will be many other folders. The simplest way to delete it fully using uninstall and power-scan with IoBit Uninstaller, you should INSTALL it again from a NEW setup exe file (x86 version) from the official Mozilla website, restart your system, and then uninstall it using IoBit.

The other files I can't speak for but it doesn't look good.
BUT after doing the above for Firefox I would seriously consider the possibility of MALWARE in which case you need to run all the steps in The Read & Run Me First Malware Guide, then post the resulting and required scan logs in a new thread (not here) in The Specialist Malware Forum where an expert will analyse your system and advise you further.

 

Thank you , sir

Firefox dealt with ... Ill head over to the malware forum to deal with the rest

 

Great - good luck with the rest!

 

By the way, McAfee LiveSafe is not an anti-virus program. If you don't currently have one, you need one.
Get one of the decent free AV programs such as Comodo, Avira etc see here:
http://www.majorgeeks.com/mg/sortname/all_in_one_anti_virus_suites.html

For your LOG IN issues run SFC /scannow and follow this guide carefully and accurately:
https://support.microsoft.com/en-gb...l-to-repair-missing-or-corrupted-system-files

If the above doesn't work use TWEAKING in Safe Mode:
http://www.majorgeeks.com/files/details/tweaking_com_windows_repair.html

 

Thanks for keeping an eye on me I will try your suggestions later today

McAfee LiveSafe includes McAfee Internet Security which is, as far as I can tell, anti virus SW. However this review - http://www.pcmag.com/article2/0,2817,2470466,00.asp - does suggest its virus protection is "mediocre" in lab tests. I use it as I get it free through work, but do you suggest I disable the virus protection aspects & install an alternative instead?

 

Ran SFC and it found no issues

Tried logging in to safe mode to run TWEAKING, but got the following problem (repeatedly over 4-5 attempts):

- after entering password get a Dialog box with "sihost.exe - System Warning" in the title bar and "Unknown Hard Error" in the body.
- There is an "OK" button, but the mouse is not working (at this stage) and hitting Enter had no effect (or Escape for that matter).
- I found ignoring it meant I still got into Windows, but once in the Start button cannot be used (clicking has no effect).
- Desktop icons seem to work (I opened Adobe Acrobat), but unfortunately the TWEAKING install file (though saved to desktop) is not visible
- now I have the mouse back, clicking on the dialog (OK or X) just caused the screen to go blank (albeit with the mouse visible), and the only recovery was to power off the PC again.

I tried to workaround by logging back into normal mode and placing a shortcut to file explorer on the desktop, but that is not visible in safe mode either

One other possible workaround that I considered, but have not tried, is to reassign one of the desktop icons (shortcut) that are visible in Safe Mode to point to the TWEAKING install file. It seems I can open the properties of the shortcuts & edit them. However at this stage I am walking away from the PC (before I put my fist through it) and awaiting your advice

Couple of questions :-

1) I downloaded the TWEAKING install file, but was waiting to get into safe mode before installing. Can I install it in normal mode and (assuming I can see the desktop icon) run it from safe mode?

2) In the post malware cleanup, I have not executed the step to toggle System Restore, just in case restore points were needed to help with the login issue .... can you advise if I should do that?

 

Yes if you have the full McAfee suite then it is a real-time AV program. Obviously thoughts about individual AV programs are a little subjective, but independent testing of those programs' AV effectiveness is useful and it is true that McAfee doesn't come very high on the list.
Many free programs score highly. If you do decide to go for a different one such as Comodo IS, Avira, Bitdefender etc then before you install it you would need to do a total and clean uninstall f McAfee - disabling wont stop a serious conflict with another AV installed. McAfee has a special removal tool:
http://www.majorgeeks.com/files/details/mcafee_consumer_product_removal_tool.html

 

If you launch Tweaking in normal start up mode, then within the Tweaking window use the bottom command to 'restart in safe mode' that should work.

 

OK - I managed to run Tweaking in safe mode. I ran all sections, except SFC (as had done that already). Also I ran the REPAIR section twice, as the tool suggests. I saved the logs- if you need to see them I can upload then

Unfortunately I think I still have a problem

Restarted the PC 5 times & for the first 4 it logged in OK, so was looking good, but on the fifth I got the same "user profile" login issue I reported in the malware thread.

The issue I reported logging in to safe mode also still persists, but I have learnt that if I sit & wait (10 minutes!!!) it gets into safe mode eventually

Many Thanks for your ongoing help

 

The only thing I can suggest now is to carry out a Refresh of Windows:
https://www.drivereasy.com/knowledge/how-to-reinstall-refresh-windows-10-fast-and-easily/

 

OK - a refresh will leave the accounts & all files, but will change some settings to default - is that right?

 

Yes it provides a list to the desktop of all programs and windows apps (installed after it was first installed) so that you can reinstall them after.

 

That isn't correct at all. Read the link Max gave you - it tells you exactly what will be removed, basically everything you have installed or changed since Win 10 was first installed but you can optionally retain your personal files. That's all.

 

It removes software programs and windows apps (if any) that were installed AFTER the original OS install. That's the choice to leave non system files (ie personal files) in place.

 

Got it - will try over the weekend

Am I ok to toggle System Restore? I'd held off on that from the malware removal pending this gettign solved

 

As soon as the refresh is done make sure System Restore is on

 

Done the refresh & it does seem to have solved the problem - many thanks, again

Now to reinstall all my apps ... though looking at the list provided, there really are only a few I really want back. So this has helped me get rid of a load of unneeded crap

 

That all sounds good!

By the way, if you want to disable/turn off all the privacy issues in Win 10, where the system sends a lot of data to MS (and it does a LOT of that!) then my favourite program to do that because it is very simple is O & O Shut Up 10.
I use the 'recommended settings'.
You do no need to rerun it each month after the standard Windows Updates on 2nd Tuesday of each month.

 

Thanks Max - I'll try that

 

I've discovered what I think is the cause of the resetting of the default web browser in Windows 10. I noticed this happened on two of my Win 10 systems after recent successful cumulative Windows 10 updates when the default browser was set to Microsoft Edge, so I merely reset them back to Firefox. However, today when trying to get a different system to update I was fortunately at the screen at the time and Comodo Internet Security threw a pop up saying that an element of the WU update file was trying to change my default web browser, so I disallowed it.
This is a sneaky little part of Microsoft in Windows 10 to push Microsoft Edge.

 

I am pretty sure my issue was caused by malware - the default browser was blank & I could not set it to anything (Edge, FF or IE). Malwarebytes fixed it

BTW - I installed O&O Shutup per your suggestion - is it good for all users on a PC or do I need to rerun it on each account?

 

With O&O Shut Up as long as you are logged into an administrator user account, and right click the exe file and choose 'run as administrator' it should apply to the system as a whole. But any user can run it and it will show if certain things are not disabled in its standard window.