Member Avatar for lovebug

Every time i turn on my computer, the owner documents pop up, please help need to get rid of this.

  • 4 Contributors
  • 19 Replies
  • 314 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by lovebug

Dani AI

Generated

Short summary and next steps (advanced checks)

The usual fixes suggested by , and (checking the Startup folder, Folder Options and running spyware scans) are the right first moves but, since the problem persists for , this looks like an autostart/persistence item or a corrupted shell-folder registry entry. The following checks go deeper than the Start Menu Startup folder and will find hidden shortcuts, registry Run entries, scheduled tasks or shell-folder redirects that can open My Documents at logon.

Use Autoruns to find everything that runs at logon

  • Download/run Sysinternals Autoruns and look under the Logon/Explorer tabs. It shows Startup folder items, Run/RunOnce registry entries, scheduled-task hooks and Explorer add-ons in one view; uncheck suspicious items to test quickly. Autoruns also has a Jump/Properties feature to inspect the actual target (look for anything that launches explorer.exe with a folder path or a .lnk pointing to My Documents). (learn.microsoft.com)

Check the registry Run keys and scheduled tasks

  • Look at these registry locations for commands that start at logon:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
(and RunOnce variants)
  • Scheduled Tasks can also launch programs at logon. The Run/RunOnce mechanism is documented by Microsoft. (learn.microsoft.com)

Verify the "User Shell Folders" entries for My Documents/Startup

  • Open regedit (export the branch first) and check:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

    Confirm Personal points to your My Documents folder and Startup points to your user Startup path (and check the All Users startup folder). If those values are wrong (some malware or a mistaken tool can redirect them to %TEMP% or other locations), restore the defaults or fix them. Microsoft documents these shell-folder values. Back up the registry before any edits. (support.microsoft.com)

Isolate with msconfig / Safe Mode and re-scan

  • Use msconfig to do a selective startup (disable non-Microsoft items), reboot and see if the folder still opens. If the problem stops, re-enable items one-by-one to find the culprit. Also boot to Safe Mode and run up-to-date antivirus/anti-malware scans. Microsoft documents using msconfig for selective troubleshooting and recommends backing up the registry first. (learn.microsoft.com)

If these steps are followed (export the registry before editing, disable suspect autoruns with Autoruns, test in Safe Mode, and review Run keys/User Shell Folders), the cause is usually exposed: a hidden shortcut/registry autorun, a scheduled task, or a redirected shell-folder value.

Recommended Answers

All 19 Replies

Member Avatar for DMR

"owner documents"? Could you clarify that please?

Member Avatar for lovebug

"owner documents"? Could you clarify that please?

owner document on xp professional keeps popping up

Member Avatar for lovebug

owner document on xp professional keeps popping up

owner documents what i mean is all my documents that are in "my documents" popup

Member Avatar for DMR

In Explorer's Tools->Folder Options->View preferences, do you have the "Restore previous folder windows at logon" option enabled? If so, uncheck it.

Member Avatar for lovebug

ok can you tell me how to get to that please

Member Avatar for lovebug

In Explorer's Tools->Folder Options->View preferences, do you have the "Restore previous folder windows at logon" option enabled? If so, uncheck it.

no it is not enabled just checked

Member Avatar for DMR

Um, I just did... :mrgreen:

Seriously though- what I meant was open Windows Explorer, go to the "Tools" option on the top menu bar, choose "Folder Options..", and then click on the "View" tab. If you scroll down towards the bottom of the selectable items in the "advanced" area, you'll find the option I mentioned. If the box next to it is checked, uncheck it.

Member Avatar for DMR

OK. Looks like we were posting at the same time.

Which version of Windows are you using?

Member Avatar for lovebug

OK. Looks like we were posting at the same time.

Which version of Windows are you using?

windows xp

Member Avatar for DMR

OK- unfortunately I have to log off now. Hopefully another one of our members will pick up on this for you in the mean time.

Member Avatar for caperjack

Click start ,lower left corner ,go to all progrms/Startup folder ,and check to see if its there ,loading at startup ,if so right click and delete it

Member Avatar for lovebug

Click start ,lower left corner ,go to all progrms/Startup folder ,and check to see if its there ,loading at startup ,if so right click and delete it

nope it is not there but thanks

Member Avatar for Catweazle

Is there anything in 'Startup' at all?

Why you say "all your documents", do you mean the "My Documents" folder itself? If not, can you explain more clearly please just what you do mean?

I'd also like to clarify.


[img][/img]Quote:[img][/img][img][/img]Originally Posted by DMR[img][/img][img][/img]In Explorer's Tools->Folder Options->View preferences, do you have the "Restore previous folder windows at logon" option enabled? If so, uncheck it. [img][/img][img][/img]
no it is not enabled just checked

Do you mean by that you have verified that there is no 'tick' in the box? If there is a 'tick' please remove it and ensure you press the 'Apply' button when you exit from the dialogue boxes.


If all of that is in order, then you should use the links in caperjack's signature to download and install both Spybot and AdAware, and use them to check your system for malware, removing any that they find. There is a link there which describes setting the programs up.

Please let us know if there are any remaining problems afterwards

Member Avatar for lovebug

What I mean by all of my documents is that the my documents folder pops up andeverything that is in it is showing there is not anything at all in my startup folder and the restore previous windows at logon is not checked I will run spybot and ad aware

Member Avatar for Catweazle

OK, those two tools are ones every windows user should have and use regularly in any event. If they don't fix your problem, ensure that you have a recent and updated AntiVirus program installed, and run a check. You could be infected with a Trojan called DIDer.

I'd suggest you read the "Helping Yourself" topic in the Security section, and if none of these tips work for you, try the 'Trojan Remover' and 'Stinger' tools that are mentioned there.

Member Avatar for lovebug

ok run spybot and adawre restarted my computer and the documents are still coming up

Member Avatar for lovebug

Is there anything in 'Startup' at all?

Why you say "all your documents", do you mean the "My Documents" folder itself? If not, can you explain more clearly please just what you do mean?

I'd also like to clarify.


Do you mean by that you have verified that there is no 'tick' in the box? If there is a 'tick' please remove it and ensure you press the 'Apply' button when you exit from the dialogue boxes.


If all of that is in order, then you should use the links in caperjack's signature to download and install both Spybot and AdAware, and use them to check your system for malware, removing any that they find. There is a link there which describes setting the programs up.

Please let us know if there are any remaining problems afterwards

ok run sbybot and adaware and restarted my computer and it is still popping up

Member Avatar for Catweazle

I've already given my next instructions :D

Member Avatar for lovebug

ok I have tried everything that everyone has told me to do so far nothing has worked please help

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.