Window opens up before "loading your personal settings" window

[Guest Frustratedone]

Hi there

I have this problem and it is driving me crazy. I cannot seem to find any

solution.

I have windows xp home on 1 computer and windows xp pro on my laptop. This

problem occurs on both these computers.

When I start my computers, it goes through the usual steps. I see the

windows logo and then a window comes up. It looks more like a notepad window

but the filename on top is garbled. The content of the window is also garbled

but limited to 5-10 characters. On my laptop, I can see C:\windows\system32

as the file name but it looks like notepad is trying to open a system file

but I can't understand why it is doing it. There is an "OK" button at the

bottom and when I click on it, I get the "Loading your personal settings"

screen and everything works normally. I don't know why this window shows up

and I have tried booting in the safe mode and it still shows up. I have run

all 3 anti-virus programs and nothing has been detected. Sometime before

"loading your personal settings" page, the system seems to be running a

program which opens the notepad or soemthing. Apparently it is not important

because when I click ok, everything boots ok. It just started happening a

couple of weeks ago. I have no idea which program caused it or is causing it.

I ran autoruns.exe and ccleaner and I can't seem to find anything wrong with

the registry. I even disabled all startup programs using msconfig and it

still does not get rid of that annoying window. I am not sure if there is a

problem with a driver or what. I am enclosing my startups log that was

created by Hijack this. Maybe someone can help.

Many thanks.

StartupList report, 11/3/2007, 8:10:47 AM

StartupList version: 1.52.2

Started from : F:\Program Files\HijackThis\HijackThis.EXE

Detected: Windows XP SP2 (WinNT 5.01.2600)

Detected: Internet Explorer v7.00 (7.00.6000.16544)

* Using default options

==================================================

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Avast4\aswUpdSv.exe

C:\Program Files\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\SiteAdvisor\6172\SAService.exe

C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Avast4\ashMaiSv.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\PROGRA~1\Avast4\ashDisp.exe

C:\PROGRA~1\ZONELA~1\ZONEAL~1\MailFrontier\mantisp m.exe

C:\Program Files\Avast4\ashWebSv.exe

C:\Program Files\MemOptimizer 3\MemOptimizer.exe

C:\PROGRA~1\emoze\emoze.exe

F:\Program Files\Microsoft ActiveSync\wcescomm.exe

C:\Program Files\SpywareGuard\sgmain.exe

F:\PROGRA~1\MICROS~1\rapimgr.exe

C:\PROGRA~1\emoze\EMAgent.exe

C:\Program Files\YPOPs\ypops.exe

C:\Program Files\SpywareGuard\sgbhp.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

C:\Program Files\SiteAdvisor\6172\SiteAdv.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\regedit.exe

F:\Program Files\HijackThis\HijackThis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:

[C:\Documents and Settings\Pld\Start Menu\Programs\Startup]

SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe

YPOPs.lnk = ?

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ZoneAlarm Client = "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

avast! = C:\PROGRA~1\Avast4\ashDisp.exe

--------------------------------------------------

Autorun entries from Registry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MemOptimizer = C:\Program Files\MemOptimizer 3\MemOptimizer.exe

emoze = C:\PROGRA~1\emoze\emoze.exe

H/PC Connection Agent = "F:\Program Files\Microsoft ActiveSync\wcescomm.exe"

--------------------------------------------------

Autorun entries in Registry subkeys of:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[AutorunsDisabled]

Zone Labs Client = "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

[OptionalComponents]

*No values found*

--------------------------------------------------

Autorun entries in Registry subkeys of:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

[AutorunsDisabled]

emoze = C:\PROGRA~1\emoze\emoze.exe

MemOptimizer = C:\Program Files\MemOptimizer 3\MemOptimizer.exe

--------------------------------------------------

File association entry for .SCR:

HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = NOTEPAD.EXE %1

--------------------------------------------------

File association entry for .HTA:

HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = NOTEPAD.EXE %1

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*

SCRNSAVE.EXE=*INI section not found*

drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe

SCRNSAVE.EXE=C:\WINDOWS\System32\ssmyst.scr

drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*

HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

 

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll -

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

(no name) - C:\Program Files\SiteAdvisor\6172\SiteAdv.dll -

{089FD14D-132B-48FC-8861-0048AE113215}

(no name) - C:\Program Files\Microsoft Money\System\mnyside.dll -

{243B17DE-77C7-46BF-B94B-0B5F309A0E64}

SpywareGuard Download Protection - C:\Program

Files\SpywareGuard\dlprotect.dll - {4A368E80-174F-4872-96B5-0B27DDD11DB2}

(no name) - F:\PROGRA~1\SPYBOT~1\SDHelper.dll -

{53707962-6F74-2D53-2644-206D7942484F}

(no name) - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL -

{72853161-30C5-4D22-B7F9-0BBC1D38A37E}

TrendProtect - C:\Program Files\Trend Micro\TrendProtect\MSIE\wrs.dll -

{E3578B37-6346-4EC1-A82B-38273A100DCF}

--------------------------------------------------

Enumerating Task Scheduler jobs:

1-Click Maintenance.job

shutdown.job

--------------------------------------------------

Enumerating Download Program Files:

[Microsoft Office Template and Media Control]

InProcServer32 = C:\PROGRA~1\MICROS~4\Office12\IEAWSDC.DLL

CODEBASE = http://office.microsoft.com/templates/ieawsdc.cab

[{04E214E5-63AF-4236-83C6-A7ADCBF9BD02}]

CODEBASE = http://housecall60.trendmicro.com/housecall/xscan60.cab

[Windows Genuine Advantage Validation Tool]

InProcServer32 = C:\WINDOWS\system32\LegitCheckControl.DLL

CODEBASE = http://download.microsoft.com/downlo...eckControl.cab

[TmHcmsX Control]

InProcServer32 = C:\WINDOWS\DOWNLO~1\TmHcmsX.ocx

CODEBASE = http://www.trendsecure.com/framework...ex/TmHcmsX.CAB

[symantec AntiVirus scanner]

InProcServer32 = C:\WINDOWS\Downloaded Program Files\avsniff.dll

CODEBASE = http://security.symantec.com/sscv6/S...in/AvSniff.cab

[{544EB377-350A-4295-9BEB-EAB8392E09C6}]

CODEBASE = http://fdl.msn.com/public/investor/v13/invinstl.exe

[symantec RuFSI Utility Class]

InProcServer32 = C:\WINDOWS\Downloaded Program Files\rufsi.dll

CODEBASE = http://security.symantec.com/sscv6/S.../bin/cabsa.cab

[MUWebControl Class]

InProcServer32 = C:\WINDOWS\system32\muweb.dll

CODEBASE = http://update.microsoft.com/microsof...?1139977045515

[{74D05D43-3236-11D4-BDCD-00C04F9A3B61}]

CODEBASE = http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab

[{90051A81-3018-4826-8B38-DD60B6B53F9C}]

CODEBASE = http://www.costcophotocenter.com/CostcoUpload.cab

[{9A9307A0-7DA4-4DAF-B042-5009F29E09E1}]

CODEBASE = http://www.pandasoftware.com/activescan/as5/asinst.cab

[Crucial cpcScan]

InProcServer32 = C:\WINDOWS\Downloaded Program Files\cpcScan.dll

CODEBASE = http://www.crucial.com/controls/cpcScanner.cab

[{CE28D5D2-60CF-4C7D-9FE8-0F47A3308078}]

CODEBASE = http://www.symantec.com/techsupp/act...a/SymAData.cab

[{CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7}]

[{E77C0D62-882A-456F-AD8F-7C6C9569B8C7}]

CODEBASE = https://www-secure.symantec.com/tech...ActiveData.cab

[McFreeScan Class]

InProcServer32 = C:\WINDOWS\McAfee.com\FreeScan\mcfscan.dll

CODEBASE = http://download.mcafee.com/molbin/is...30/mcfscan.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll

CDBurn: C:\WINDOWS\system32\SHELL32.dll

WebCheck: C:\WINDOWS\system32\webcheck.dll

SysTray: C:\WINDOWS\System32\stobject.dll

--------------------------------------------------

End of report, 8,442 bytes

[Guest createwindow@gmail.com]

Re: Window opens up before "loading your personal settings" window

 

 

Dear Frustratedone, It could be this registry key which is meant for

legal pop-ups on logon to windows.

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

\Winlogon

under keys LegalNoticeCaption and LegalNoticeText

 

Hope that helps.

 

CreateWindow

http://mymessagetaker.com

The while-you-were-out message program you have been looking for!

[Guest Frustratedone]

Re: Window opens up before "loading your personal settings" window

 

I checked my registry and there is no value associated with those keys.

 

"createwindow@gmail.com" wrote:

>

> Dear Frustratedone, It could be this registry key which is meant for

> legal pop-ups on logon to windows.

>

> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

> \Winlogon

> under keys LegalNoticeCaption and LegalNoticeText

>

> Hope that helps.

>

> CreateWindow

> http://mymessagetaker.com

> The while-you-were-out message program you have been looking for!

>

>

>

>

[Guest Confuse The Newbie]

Re: Window opens up before "loading your personal settings" window

 

Frustratedone wrote:

> I checked my registry and there is no value associated with those keys.

>

> "createwindow@gmail.com" wrote:

>

>> Dear Frustratedone, It could be this registry key which is meant for

>> legal pop-ups on logon to windows.

>>

>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

>> \Winlogon

>> under keys LegalNoticeCaption and LegalNoticeText

>>

>> Hope that helps.

>>

>> CreateWindow

>> http://mymessagetaker.com

>> The while-you-were-out message program you have been looking for!

>>

>>

>>

>>

 

Spyware scanning time...

[Guest Frustratedone]

Re: Window opens up before "loading your personal settings" window

 

 

I did check for spyware using AVG, Mcafee and symantec.

Any other suggestion?

"Confuse The Newbie" wrote:

> Frustratedone wrote:

> > I checked my registry and there is no value associated with those keys.

> >

> > "createwindow@gmail.com" wrote:

> >

> >> Dear Frustratedone, It could be this registry key which is meant for

> >> legal pop-ups on logon to windows.

> >>

> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

> >> \Winlogon

> >> under keys LegalNoticeCaption and LegalNoticeText

> >>

> >> Hope that helps.

> >>

> >> CreateWindow

> >> http://mymessagetaker.com

> >> The while-you-were-out message program you have been looking for!

> >>

> >>

> >>

> >>

>

> Spyware scanning time...

>

[Guest Frustratedone]

Re: Window opens up before "loading your personal settings" window

 

 

Can anyone help me????

[Guest Elmo]

Re: Window opens up before "loading your personal settings" window

 

Frustratedone wrote:

> Hi there

> I have this problem and it is driving me crazy. I cannot seem to find any

> solution.

> I have windows xp home on 1 computer and windows xp pro on my laptop. This

> problem occurs on both these computers.

> When I start my computers, it goes through the usual steps. I see the

> windows logo and then a window comes up. It looks more like a notepad window

> but the filename on top is garbled. The content of the window is also garbled

> but limited to 5-10 characters. On my laptop, I can see C:\windows\system32

> as the file name but it looks like notepad is trying to open a system file

> but I can't understand why it is doing it. There is an "OK" button at the

> bottom and when I click on it, I get the "Loading your personal settings"

> screen and everything works normally. I don't know why this window shows up

> and I have tried booting in the safe mode and it still shows up. I have run

> all 3 anti-virus programs and nothing has been detected. Sometime before

> "loading your personal settings" page, the system seems to be running a

> program which opens the notepad or soemthing. Apparently it is not important

> because when I click ok, everything boots ok. It just started happening a

> couple of weeks ago. I have no idea which program caused it or is causing it.

> I ran autoruns.exe and ccleaner and I can't seem to find anything wrong with

> the registry. I even disabled all startup programs using msconfig and it

> still does not get rid of that annoying window. I am not sure if there is a

> problem with a driver or what. I am enclosing my startups log that was

> created by Hijack this. Maybe someone can help.

> Many thanks.

 

Maybe this?

 

System32 Folder opens upon Windows Startup

 

Line 260 - right hand side

http://www.kellys-korner-xp.com/xp_tweaks.htm

 

--

Joe =o)

[Guest Frustratedone]

Re: Window opens up before "loading your personal settings" window

 

I tried it. Didn't work.

Thanks for the suggestion.

 

 

"Elmo" wrote:

> Frustratedone wrote:

> > Hi there

> > I have this problem and it is driving me crazy. I cannot seem to find any

> > solution.

> > I have windows xp home on 1 computer and windows xp pro on my laptop. This

> > problem occurs on both these computers.

> > When I start my computers, it goes through the usual steps. I see the

> > windows logo and then a window comes up. It looks more like a notepad window

> > but the filename on top is garbled. The content of the window is also garbled

> > but limited to 5-10 characters. On my laptop, I can see C:\windows\system32

> > as the file name but it looks like notepad is trying to open a system file

> > but I can't understand why it is doing it. There is an "OK" button at the

> > bottom and when I click on it, I get the "Loading your personal settings"

> > screen and everything works normally. I don't know why this window shows up

> > and I have tried booting in the safe mode and it still shows up. I have run

> > all 3 anti-virus programs and nothing has been detected. Sometime before

> > "loading your personal settings" page, the system seems to be running a

> > program which opens the notepad or soemthing. Apparently it is not important

> > because when I click ok, everything boots ok. It just started happening a

> > couple of weeks ago. I have no idea which program caused it or is causing it.

> > I ran autoruns.exe and ccleaner and I can't seem to find anything wrong with

> > the registry. I even disabled all startup programs using msconfig and it

> > still does not get rid of that annoying window. I am not sure if there is a

> > problem with a driver or what. I am enclosing my startups log that was

> > created by Hijack this. Maybe someone can help.

> > Many thanks.

>

> Maybe this?

>

> System32 Folder opens upon Windows Startup

>

> Line 260 - right hand side

> http://www.kellys-korner-xp.com/xp_tweaks.htm

>

> --

> Joe =o)

>

[Guest John]

Re: Window opens up before "loading your personal settings" window

 

Did you scan in Safe Mode?

 

Tap F8 before Windows boots.

Run a full scan.

 

"Frustratedone" wrote:

>

> I did check for spyware using AVG, Mcafee and symantec.

> Any other suggestion?

> "Confuse The Newbie" wrote:

>

> > Frustratedone wrote:

> > > I checked my registry and there is no value associated with those keys.

> > >

> > > "createwindow@gmail.com" wrote:

> > >

> > >> Dear Frustratedone, It could be this registry key which is meant for

> > >> legal pop-ups on logon to windows.

> > >>

> > >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

> > >> \Winlogon

> > >> under keys LegalNoticeCaption and LegalNoticeText

> > >>

> > >> Hope that helps.

> > >>

> > >> CreateWindow

> > >> http://mymessagetaker.com

> > >> The while-you-were-out message program you have been looking for!

> > >>

> > >>

> > >>

> > >>

> >

> > Spyware scanning time...

> >

[Guest godaral]

Re: Window opens up before "loading your personal settings" window

 

 

Visit this site for more information on Avast Web Scanner --

ashwebsv.exe 'Avast Web Scanner -- ashwebsv.exe'

(http://tinyurl.com/4cv6b8)