Windows 10 Boot "issue"

[DyllyZ]

Hello friendly people on this forum, here is a question.

I went to sleep yesterday and I shut down my pc without any issues. The next morning I start it up again and it loads all the programs and web pages that were running the night before. Is this some kind of new feature or something? If it is how can I make it boot without programs and browsers opening, because this obviously slows down the startup. I assume that I dont have to close everything before I shut down my PC.

I hope somebody knows what the “problem” is, thanks!

[phillpower2]

Welcome to PCHF DyllyZ,

The next morning I start it up again and it loads all the programs and web pages that were running the night before. Is this some kind of new feature or something?

Not sure what has happened there tbh, if Windows and the computer itself were both fully shut down the last tasks that were carried out shut have been cleared from the system memory and everything then loaded afresh on the next clean boot.

Were the programs that you mention online programs at all, this in case your internet browser somehow restored you last browsing session/s for some reason - what were the programs that loaded on boot.

I assume that I dont have to close everything before I shut down my PC.

You should always close every program before shutting down a computer, they can become corrupted if you don`t and in the case of Windows render your computer useless when it cannot boot.

[Rustys]

To add what has been stated

Which browser are you using?
Chrome has a section under settings Under Startup it will Continue Where You Left Off.

[DyllyZ]

Welcome to PCHF DyllyZ,

Not sure what has happened there tbh, if Windows and the computer itself were both fully shut down the last tasks that were carried out shut have been cleared from the system memory and everything then loaded afresh on the next clean boot.

Were the programs that you mention online programs at all, this in case your internet browser somehow restored you last browsing session/s for some reason - what were the programs that loaded on boot.

You should always close every program before shutting down a computer, they can become corrupted if you don`t and in the case of Windows render your computer useless when it cannot boot.

The program that loaded was bittorrent so it is an online program but this never happened to me before.

[DyllyZ]

To add what has been stated

Which browser are you using?
Chrome has a section under settings Under Startup it will Continue Where You Left Off.

Yes i was using google chrome thank you I will try that!

[phillpower2]

The program that loaded was bittorrent so it is an online program but this never happened to me before.

Downloading torrents is one of if not the quickest way of getting your computer infected by malware

[DyllyZ]

Downloading torrents is one of if not the quickest way of getting your computer infected by malware

I am aware of that, I just did a clean install of windows 10 and im using it to gather some software that I normally use. The torrents that I use have been used before without any issues but thanks anyway for letting me know I appreciate it. Still this problem proceeds with bittorrent and chrome when I restart my PC bittorrent and chrome just pop up on my screen I tried this with mozilla firefox to and this browser doesn’t have this issue. what you said earlier is true I have to close all my programs first to prevent corrupt files but if i do that I still know that my pc has this issue. :\

[Malnutrition]

Sounds to me like these two programs are loading with windows. You can disable them from loading at start with msconfig or with a program like ccleaner

Download CCleaner builds | CCleaner Portable, Slim, and more

[DyllyZ]

Sounds to me like these two programs are loading with windows. You can disable them from loading at start with msconfig or with a program like ccleaner

Download CCleaner builds | CCleaner Portable, Slim, and more

I already tried that but these programs are not listed. I just tested if taskmanager would do the same thing so I opened task manager, shut down my pc, started it again and task manager also pops up? so weird

[Malnutrition]

HijackThis.

1- Please click here to download HijackThis.
2- Run the program.
3- Click on the Main Menu button if not already there.
4- Select Do a system scan and save a logfile.
5- Copy paste the log here.

[Malnutrition]

Or your perhaps your machine is set to sleep when you turn it off. Try and see if the programs still load when turn off the machine then unplug the power source.

[DyllyZ]

HijackThis.

1- Please click here to download HijackThis.
2- Run the program.
3- Click on the Main Menu button if not already there.
4- Select Do a system scan and save a logfile.
5- Copy paste the log here.

first of all thank you for your time my good sir here is the log
Logfile of HiJackThis Fork (Alpha) by Alex Dragokas v.2.6.4.24

Platform: x64 Windows 10 (Pro), 10.0.16299 (ReleaseId: 1709), Service Pack: 0
Time: 18.11.2017 - 19:41
Language: OS: Dutch (0x413). Display: Dutch (0x413). Non-Unicode: Dutch (0x413)
Elevated: Yes
Ran by: DyllyZ (group: Administrator) on DESKTOP-F5536NE

Chrome: 62.0.3202.94
Firefox: 57.0.0.6525
Edge: 11.0.16299.15
Internet Explorer: 11.0.16299.15

Boot mode: Normal

Running processes:
Number | Path
11 C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
1 C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
1 C:\Program Files\Windows Defender\MSASCuiL.exe
1 C:\Program Files\Windows Defender\MsMpEng.exe
1 C:\Program Files\Windows Defender\NisSrv.exe
1 C:\Users\DyllyZ\AppData\Local\Temp\Rar$EXa1108.749 9\MemCompression
1 C:\Users\DyllyZ\AppData\Roaming\BitTorrent\BitTorr ent.exe
2 C:\Users\DyllyZ\AppData\Roaming\BitTorrent\updates \7.10.0_44091\bittorrentie.exe
1 C:\Users\DyllyZ\Desktop\HiJackThis.exe
3 C:\Windows\System32\RuntimeBroker.exe
1 C:\Windows\System32\SearchFilterHost.exe
1 C:\Windows\System32\SearchIndexer.exe
1 C:\Windows\System32\SearchProtocolHost.exe
1 C:\Windows\System32\SecurityHealthService.exe
1 C:\Windows\System32\ViakaraokeSrv.exe
1 C:\Windows\System32\WUDFHost.exe
1 C:\Windows\System32\audiodg.exe
2 C:\Windows\System32\csrss.exe
1 C:\Windows\System32\ctfmon.exe
1 C:\Windows\System32\dllhost.exe
1 C:\Windows\System32\dwm.exe
2 C:\Windows\System32\fontdrvhost.exe
1 C:\Windows\System32\lsass.exe
2 C:\Windows\System32\nvvsvc.exe
1 C:\Windows\System32\services.exe
1 C:\Windows\System32\sihost.exe
1 C:\Windows\System32\smartscreen.exe
1 C:\Windows\System32\smss.exe
1 C:\Windows\System32\spoolsv.exe
58 C:\Windows\System32\svchost.exe
1 C:\Windows\System32\taskhostw.exe
1 C:\Windows\System32\wininit.exe
1 C:\Windows\System32\winlogon.exe
1 C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw 5n1h2txyewy\SearchUI.exe
1 C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2t xyewy\ShellExperienceHost.exe
1 C:\Windows\explorer.exe

O4 - HKCU..\StartupApproved\Run: [OneDrive] (2017/11/18)C:\Users\DyllyZ\AppData\Local\Microsoft\OneDriv e\OneDrive.exe /background
O4 - HKLM..\StartupApproved\Run: [SecurityHealth] (1601/01/01)C:\Program Files\Windows Defender\MSASCuiL.exe
O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O17 - DHCP DNS - 1: 192.168.2.254
O22 - Task (Disabled): \Microsoft\Windows\PushToInstall\LoginCheck - C:\WINDOWS\system32\sc.exe start pushtoinstall login
O22 - Task (Disabled): \Microsoft\Windows\Subscription\LicenseAcquisition - C:\WINDOWS\system32\ClipRenew.exe
O22 - Task (Disabled): \Microsoft\Windows\UNP\RunUpdateNotificationMgr - C:\WINDOWS\System32\UNP\UpdateNotificationMgr.exe
O22 - Task (Disabled): \Microsoft\Windows\Workplace Join\Recovery-Check - C:\WINDOWS\System32\dsregcmd.exe /checkrecovery
O22 - Task (Ready): GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Task (Ready): GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Task (Ready): OneDrive Standalone Update Task-S-1-5-21-1314789830-172498510-431026138-1001 - C:\Users\DyllyZ\AppData\Local\Microsoft\OneDrive\O neDriveStandaloneUpdater.exe
O22 - Task (Ready): \Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh - {61BCD1B9-340C-40EC-9D41-D7F1C0632F05},BitLockerPolicy - C:\WINDOWS\System32\edptask.dll
O22 - Task (Ready): \Microsoft\Windows\BrokerInfrastructure\BgTaskRegi strationMaintenanceTask - {E984D939-0E00-4DD9-AC3A-7ACA04745521} - (no file)
O22 - Task (Ready): \Microsoft\Windows\Chkdsk\SyspartRepair - C:\WINDOWS\system32\bcdboot.exe %windir% /sysrepair
O22 - Task (Ready): \Microsoft\Windows\DeviceDirectoryClient\RegisterD eviceProtectionStateChanged - {AE31B729-D5FD-401E-AF42-784074835AFE},-RegisterDevice -ProtectionStateChanged -FreeNetworkOnly -NoLocation - C:\WINDOWS\system32\DeviceDirectoryClient.dll
O22 - Task (Ready): \Microsoft\Windows\EDP\EDP App Launch Task - {61BCD1B9-340C-40EC-9D41-D7F1C0632F05},AppLaunch - C:\WINDOWS\System32\edptask.dll
O22 - Task (Ready): \Microsoft\Windows\EDP\EDP Auth Task - {61BCD1B9-340C-40EC-9D41-D7F1C0632F05},ReAuth - C:\WINDOWS\System32\edptask.dll
O22 - Task (Ready): \Microsoft\Windows\EDP\EDP Inaccessible Credentials Task - {61BCD1B9-340C-40EC-9D41-D7F1C0632F05},MissingCredentials - C:\WINDOWS\System32\edptask.dll
O22 - Task (Ready): \Microsoft\Windows\EDP\StorageCardEncryption Task - {61BCD1B9-340C-40EC-9D41-D7F1C0632F05},SDCardEncryptionPolicy - C:\WINDOWS\System32\edptask.dll
O22 - Task (Ready): \Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh - {711001CD-CC1D-4470-9B7E-1EF73849C79E},ExploitGuardPolicy - C:\WINDOWS\System32\MitigationConfiguration.dll
O22 - Task (Ready): \Microsoft\Windows\Management\Provisioning\Cellula r - C:\WINDOWS\system32\ProvTool.exe /turn 7 /source CellStateChangeTask
O22 - Task (Ready): \Microsoft\Windows\Management\Provisioning\Logon - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source LogonIdleTask
O22 - Task (Ready): \Microsoft\Windows\Maps\MapsToastTask - {9885AEF2-BD9F-41E0-B15E-B3141395E803},$(Arg0);$(Arg1);$(Arg2);$(Arg3);$(Ar g4);$(Arg5);$(Arg6);$(Arg7) - C:\WINDOWS\System32\mapstoasttask.dll
O22 - Task (Ready): \Microsoft\Windows\Printing\EduPrintProv - C:\WINDOWS\system32\eduprintprov.exe
O22 - Task (Ready): \Microsoft\Windows\PushToInstall\Registration - C:\WINDOWS\system32\sc.exe start pushtoinstall registration
O22 - Task (Ready): \Microsoft\Windows\SMB\UninstallSMB1ClientTask - C:\WINDOWS\system32\WindowsPowerShell\v1.0\powersh ell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden “& %windir%\system32\WindowsPowerShell\v1.0\Modules\S mbShare\DisableUnusedSmb1.ps1 -Scenario Client”
O22 - Task (Ready): \Microsoft\Windows\SMB\UninstallSMB1ServerTask - C:\WINDOWS\system32\WindowsPowerShell\v1.0\powersh ell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden “& %windir%\system32\WindowsPowerShell\v1.0\Modules\S mbShare\DisableUnusedSmb1.ps1 -Scenario Server”
O22 - Task (Ready): \Microsoft\Windows\Subscription\EnableLicenseAcqui sition - C:\WINDOWS\system32\ClipRenew.exe -e
O22 - Task (Ready): \Microsoft\Windows\USB\Usb-Notifications - {E05BE1C8-92A8-4757-B575-ACAECB4E6A40} - C:\Windows\System32\UsbTask.dll
O22 - Task (Ready): \Microsoft\Windows\UpdateOrchestrator\USO_Broker_D isplay - C:\WINDOWS\system32\MusNotification.exe Display
O22 - Task (Ready): \Microsoft\Windows\WaaSMedic\PerformRemediation - C:\WINDOWS\System32\WaaSMedic.exe None
O22 - Task (Ready): \Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - C:\Program Files\Windows Defender\MpCmdRun.exe Scan -ScheduleJob -ScanTrigger 55
O22 - Task (Ready): \Microsoft\Windows\WwanSvc\NotificationTask - C:\WINDOWS\System32\WiFiTask.exe wwan
O23 - Service R2: @oem56.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service - (VIAKaraokeService) - C:\WINDOWS\system32\viakaraokesrv.exe
O23 - Service R2: NVIDIA Display Driver Service - (nvsvc) - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service R2: Windows Defender Antivirus Service - (WinDefend) - C:\Program Files\Windows Defender\MsMpEng.exe
O23 - Service R3: Windows Defender Antivirus Network Inspection Service - (WdNisSvc) - C:\Program Files\Windows Defender\NisSrv.exe
O23 - Service S2: Google Update-service (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service S3: Google Update-service (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service S3: Windows Defender Advanced Threat Protection Service - (Sense) - C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe

–
End of file - Time spent: 26 sec. - 16694 bytes, CRC32: FFFFFFFF. Sign: 뻬

[DyllyZ]

Or your perhaps your machine is set to sleep when you turn it off. Try and see if the programs still load when turn off the machine then unplug the power source.

Thats something I was thinking aswell ill try that

[DyllyZ]

Or your perhaps your machine is set to sleep when you turn it off. Try and see if the programs still load when turn off the machine then unplug the power source.

Just tried that, unplugged the power cable and still the same issue

[Malnutrition]

Are you sure you copied the hijackthis log completely? It seems like some items are missing as the structure of the log is altered… can you run it again and post the entire log this time please