Folder pop-up on start up

[sick_unit]

when i turn my compter on after it has booted up and goes to the desktop the Common folder pop-ups C:\Program Files\Common

its getting annoying and i dont know how to get rid of it. can some1 please help me


thanks

[Jazz]

There is a Common Files folder in Program Files...Do you mean that one?

Type msconfig into Start > Run and hit Ok. Under the Startup tab, is there anything there that relates to this folder, or common, for that matter?

Also, what does it say when you browse to the following: -

Start > Programs > Startup?

[sick_unit]

thanks for the reply but still no luck. when i go Start > Programs > Startup ive got:
Limewire
Microsoft Office
Picture Package Menu
Picture Package VCD Maker
WinZip Quick Pick

[Jazz]

Using Windows Explorer, open up C:\Program Files\Common. Does it contain any files or folders that you are familiar with?

Also, you did not mention anything iro msconfig. Was there anything in the Startup tab that looked reminiscent of the folder in question?

If the answer is no, dl the following free app, located in the Downloads section, written by merijn, the author of CWShredder, which is way better than msconfig: -

StartupList

Run it and see if it mentions or lists anything that relates to the folder in question.

Let us know how you get on.........

[sick_unit]

hey

when i typed msconfig then startup nothing was related to the Common folder. also i d/l startuplist and still no luck

heres wat i got if you could find wat is wrong:


Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\carpserv.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\DVD Region Killer\RegKillTray.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Acrobat 5.0\Reader\AcroRd32.exe
C:\unzipped\startuplist\StartupList.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
LimeWire 4.0.8.lnk = C:\Program Files\LimeWire\LimeWire.exe
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
Picture Package Menu.lnk = ?
Picture Package VCD Maker.lnk = ?
WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

NvCplDaemon = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
SunJavaUpdateSched = C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
Advanced Tools Check = C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
RegKillElbyCheck = "C:\Program Files\DVD Region Killer\ElbyCheck.exe" /L RegKill
NeroFilterCheck = C:\WINDOWS\system32\NeroCheck.exe
CARPService = carpserv.exe
nwiz = nwiz.exe /install
Lexmark X6100 Series = "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
RegKillTray = C:\Program Files\DVD Region Killer\RegKillTray.exe
SSC_UserPrompt = C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MsnMsgr = "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\ssstars.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
NAV Helper - C:\Program Files\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Symantec NetDetect.job

--------------------------------------------------

Enumerating Download Program Files:

[Checkers Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\msgrchkr.dll
CODEBASE = http://messenger.zone.msn.com/binary...r.cab30149.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/s...ctor/swdir.cab

[MSSecurityAdvisor Class]
InProcServer32 = C:\WINDOWS\System32\mssecadv.dll
CODEBASE = http://download.microsoft.com/downlo...?1077095412591

[Minesweeper Flags Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\minesweeper.dll
CODEBASE = http://messenger.zone.msn.com/binary...r.cab30149.cab

[MessengerStatsClient Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll
CODEBASE = http://messenger.zone.msn.com/binary...t.cab30149.cab

[{9F1C11AA-197B-4942-BA54-47A8489BB47F}]
CODEBASE = http://v4.windowsupdate.microsoft.co...035.0288657407

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\System32\macromed\flash\Flash.ocx
CODEBASE = http://download.macromedia.com/pub/s...sh/swflash.cab

[{F5192746-22D6-41BD-9D2D-1E75D14FBD3C}]
CODEBASE = http://download.rfwnad.com/cab/crack.CAB

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll

--------------------------------------------------
End of report, 6,689 bytes
Report generated in 0.078 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[Jazz]

I can't see anything that would relate to the problem in question.

However, there are some 'questionable' items in your startup.

I suggest that you perform the following scans, disabling System Restore prior to doing so. When you have completed the scans and deleted/quarantined any pests/nasties, dl HijackThis, located at the following link and post an updated log: -

Disable Systen Restore: -

Microsoft Knowledge Base Article - 310405

How to turn on and turn off System Restore in Windows XP

Perform an online virus scan: -

Panda ActiveScan

Download, immediately update, and run these free tools: -

Spybot-S&D 1.3

Spybot - Search & Destroy 1.3 Tutorial

Ad-Aware SE Personal Edition

Ad-Aware SE Personal Edition Tutorial

CWShredder 1.59.1

To protect against possible reinfection, download and use these: -

SpywareBlaster 3.2

SpywareGuard 2.2

HijackThis 1.98.2

Re-enable System Restore if you wish to.

[herekittykitty]

Did you happen to have/download AOL Explorer browser then later uninstall it? That can cause this very issue. Luckily it's very easy to get rid of.

To get rid of the Common folder, click on START > MY COMPUTER > Local Disc [C:] > Program Files

If you have Windows XP, it may tell you that the files in this directory are hidden. Click on the link provided on that page to reveal the files. The next screen will show you a group of yellow folders. In the list, click on the COMMON folder. And I stress - it will ONLY say COMMON. (NOT COMMON FILES - which is the folder sitting right next to it, so be double sure you have the right one before you go any further!!!)

Take the COMMON folder and open it to make sure there is nothing important inside. All this folder should have in it - if anything at all - is a help.dll file and help.src file. These are remnants of AOL Explorer, or whatever file you uninstalled. If these are the ONLY files inside this folder, close the folder, take the ENTIRE Common folder and drag it to your recycle bin.

Restart your computer, and the common file on startup issue should be gone.

***Again, a word of precaution to cover my donkey, DO NOT delete the Common Files folder! That is a different folder entirely, one you need! The one you're looking for simply says Common.

Best wishes,
Kitty

[pilgrim55]

The fix worked great Kitty....Thank you.