registry recovery at logon

I'm not sure that this is a malware problem. I will give you steps at the end to take if you want to be sure that it is not malware, but I think your problem is either:

• corrupted registry keys for the user account
• hardware related - maybe bad RAM. Did you install any lately? If not, have you run a memory test?
• have you run a disk error check or chkdsk to check for problems on your hard disk?
• have you run sfc /scannow to check for problems with the Windows system files?
• Have you tried login in to another user account? If you don't have another user account, create one. Do you still see the problem?

Give the below procedure a run, it may just fix this for you (again this is not a malware fix):

• Click Start, Run, enter prefetch then click Ok
• In the next window in the top menu click Edit then Select All, right click file section of the window and select Delete click Yes to the confirmation
• Click Start, All Programs, Accessories, System Tools and select Disc Cleanup and run the cleanup on your hard disk.
• Click Start, All Programs, Accessories, System Tools and select Disc Defragmenter. Click the Defragment tab. And then go eat dinner....this will take awhile.
• Click Start, Run, type sfc /scannow then press enter, you may need your Windows CD so hopefully you have it. If you don't have a CD and it asks for one you will have to abort this step and continue without it.
• Download and install Tune Up Utilities 2007 Trial
• Run Tune Up Disc Clean Up
• Run Tune Up Registry Clean Up
• Disable any antivirus program you have running now because it could interfere with the next steps.
• Click Optimize and Improve to run Reg Defrag. This will take a few minutes and will require a reboot.
• After the reboot, click Optimize then System Optimizer to optimize the computer, select computer with an internet connection from the drop down menu, this also requires a reboot
• After the reboot, click Optimize then System Optimizer to accelerate downloads, select the speed just above your actual connection speed, this requires a reboot
• After the reboot, click Optimize then System Optimizer to run System Advisor
  

Did that help?



To check for malware the below will be required!

Welcome to Majorgeeks!

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, renaming, running, and posting HijackThis logs as attachments.

• Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
• Make sure you check version numbers and get all updates.
• Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

• After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis​

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.​

• When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
  • CounterSpy
  • AVG Antispyware log - ONLY IF NEEDED you were not able to run CounterSpy
  • Bitdefender - from step 6
  • Panda Scan - from step 6
  • runkeys.txt - the log from GetRunKey.bat
  • newfiles.txt - the log from ShowNew.bat
  • HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

 

Yes you mentioned sfc. I missed it. But there was no mention of chkdsk. A disk error check looking for bad sectors would be even better. But my other procedure with Tune Up may be better to try first.