Strange Window is appearing on Startup

Since Malwarebytes didn't find anything, it is possible that the problem file is not exactly malware, or at least it hasn't been classified as such by Malwarebytes. Since the window in question appears on startup, I would look on the Startup tab of msconfig, as well as in the Startup folder in the Start Menu, not for that particular file, but for anything that you do not recognize as needed or normal, and delete or disable it. Chances are good that it is pointing to that .tmp folder during startup.

pan said:

seekermeister said:

Since that file has a .tmp extension, have you checked in the temp folders, both in Windows and Users?

I tried but there are a lot of files there. I'll do a more thorough search in the morning, I really have to get some sleep. Thanks for all of the help so far everybody.

Try deleting all of those .tmps, since they should not be needed any longer. You should regularly clean the Temp folders anyway. Some temps may not delete, and you may have to skip them, but that shortens the list considerably, making it easier to see if what is left is part of the problem.

You can also use Ccleaner to automate cleaning.

For a more aggressive cleaning of temp files I'd try this:

TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums

If you don't find any unknown startup items where I mentioned, you might also try using StartupCPL, because some things start up from the registry, and won't appear in the places mentioned:

Mike Lin's Home Page

So I just performed sfc /SCANNNOW and it said it found no integrity violations. Now I will try the other stuff mentionted. Thanks for all of the help so far.

seekermeister said:

Since Malwarebytes didn't find anything, it is possible that the problem file is not exactly malware, or at least it hasn't been classified as such by Malwarebytes. Since the window in question appears on startup, I would look on the Startup tab of msconfig, as well as in the Startup folder in the Start Menu, not for that particular file, but for anything that you do not recognize as needed or normal, and delete or disable it. Chances are good that it is pointing to that .tmp folder during startup.

Ok, some good news.......I checked the startup tab of msconfig and found a strange thing called Bulletstorm from People Can Fly....which as you can see in the picture had the strange file location in it........I went there and found it and deleted it, as well as a thing called jucheck from the same person created at the same time (People Can Fly)........Then I restarted my computer and the popup message did not appear. However, when I went to msconfig again I found that the thing was still selected, although it is now called something different by an unknown author. I then disabled it from startup by unchecking the box. I'm worried that there might still be some residual files on my computer. So how do I delete all of the files related to this. By scrolling right on the msconfig tab it says that its location is HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. But I have no idea how to get to this place, or is this not where I should be looking. Any help is much appreciated. Thanks in advance.

Deleting a registry key is ultra simple, but it can also cause severe problems if it isn't done right. Therefore, I would recommend backing up the registry before attempting to change anything in it:

Registry - Backup and Restore

After doing that, open Regedit and in much the same manner that you would use a file manager, you use Regedit by expanding the left hand tree one step at a time, according to the path given in msconfig. Once there, find the key in the right window, right click it and select delete. Keep in mind that there are probably other keys in that location that are not from that program, so take care in your selection.

EDIT: Another precaution that would be good to take is to create a new System Restore point beforehand.

Golden said:

Hi Pan,

Those HKCU are registry references. Can you browse to "C:Users\Stephen....."as per the second image you attached, and see if those files are in that location?

BulletStorm is a first-person shooter game. Did you download this, or install it from a DVD/CD?

Regards,
Golden

In "C:Users\Stephen....." is where I found the two files jucheck and and the .tmp. I already deleted those. And no I have never even heard of bulletstorm.

I will now try to do what seekermeister has recommended and post back the results in a bit. Thanks everybody for all your help.