On Every logon one popup is coming

[Subbaraju]

Dear All,

In my network all the xp systems getting one popup on every logon time and some times if you double click on the drives then also the same popup is coming but this problem is with only xp machines..

PopUp Image attached please helpme..

Subbu

[KUBU]

Originally Posted by Subbaraju

Dear All,

In my network all the xp systems getting one popup on every logon time and some times if you double click on the drives then also the same popup is coming but this problem is with only xp machines..

PopUp Image attached please helpme..

Subbu

Dear Subbu,

Its a simple script added by the vendor, which can be removed from the PC startup.

Sitting over here, I cannot tell you what could be the filename, but it will be really helpful if you can do the following and post a screenshot:
Start > Run > type "msconfig" > OK > Navigate to Start Up > *screenshot*

All you need to do is, uncheck the respective script.

Once the script location is identified, it can be removed from the local disks too.

[Subbaraju]

Thank you Mr KUBU,

I have done the same already and i have disabled all suspected startup programs even though i am unable to trace out the script where it is.

and one more problem is for the same XP machines the floppy drive keeps on reading without any floppy on the drive..

I have ESET NOD32 AV installed in all the systems.. i scanned and there is no virus...


SUbbu

[KUBU]

Originally Posted by Subbaraju

Thank you Mr KUBU,

I have done the same already and i have disabled all suspected startup programs even though i am unable to trace out the script where it is.

and one more problem is for the same XP machines the floppy drive keeps on reading without any floppy on the drive..

I have ESET NOD32 AV installed in all the systems.. i scanned and there is no virus...


SUbbu

Hi Subbu,

These scripts can be made my anyone with minimal computer knowledge using notepad. These are not virus / malware, instead simple scripts to pop a message box. PDO PCs have it while booting up to inform users about the privacy policies, etc. Hence do not expect the anti-virus software to detect it as a potential threat to the PC.

I asked you to send a screenshot of msconfig, it will really help me to find the problem.

Similarly, boot your PC in safe-mode and check if the message pops up.

Please login to BIOS and disable your floppy drive under 'peripheral' option. Let me know if you need any assistance on this.

Combo-Fix can be of help too

[H.Al-Muqbali]

Hi

sorry for my late reply ..

it seems to be a Personal Startup Message

Follow these instructions i made to stop it + get rid of it


Let's Begin ..

unplug any external storage devices ; i.e. USB Memory , External HD ... etc

then , open Task Manager [ ALT+CTRL+Delete]

go to Process and scroll down till you find windows.exe

right click and choose Open File Location



you'll be directly taken to C:\Windows\System32



Keep this window opened and go back to Task Manager

click on windows.exe and click on End Process



system may show a pop up window , click on End Process




now close Task Manager ( no more need for it ) and go back to the window we left



from here .. you should delete 4 files follow the pics bellow :

1. delete windows.exe , make sure it has the same icon bellow



2. delete OEMINFO.INI and oemlogo.bmb



3. look for autorun.inf , open it with notepad and see if it has the same content as the following :



if it's the same .. delete it

now .. just to make sure that you are in the safe side , go to search

and search for : - informer.exe
- OEMINFO.INI
- oemlogo.bmb

you may not find them .. but if you found them just delete them and restart your computer .. and here you are .. the message won't be shown again .. at all


if you needed any more help , i will be glad to help .. just let me know

[KUBU]

Hassan, isn't this to remove the OEM vendor information from Computer Properties? For example "HP / DELL" etc?

[H.Al-Muqbali]

Originally Posted by KUBU

Hassan, isn't this to remove the OEM vendor information from Computer Properties? For example "HP / DELL" etc?

in his case , they were replaced by Ghadeer Al-Jabel properties !
i opened them in notepad and found this out
no risks !

[Subbaraju]

OHOOHoO

THank you Dear H.Al-Muqbali

Great help....

Problem resolved..

I got busy yesterday thats y i didnt checked great Solution Thanks gain....

Subbu

[H.Al-Muqbali]

Originally Posted by Subbaraju

OHOOHoO

THank you Dear H.Al-Muqbali

Great help....

Problem resolved..

I got busy yesterday thats y i didnt checked great Solution Thanks gain....

Subbu

glad that the problem was solved




we are here to help and get helped


wish you all the best

[KUBU]

Hassan++