Jump to content

Strange login event, windows 11


Recommended Posts

Hello support!
Recently a new strange event has started to accour when I login in to my user account on windows 11.
Not every time but often when I login either a powershell window pop up and disappear. Or a transparent powershell window pop up and stay there until closed.
Have googled the issue and the probable cause would be that powershell is mistakenly put on autostart. 
Have checked the auto start folder and it is not present and on the activity manager powershell is set as inactive on start.
Have searched the computer with windows own virus search and malwarebytes and have not got any warnings.
Do you have any idea what it might be? Or how to solve it?

Kind regards2134655738_Powershellafterlogin(aftercomputerbeenlockedbutnotloggedout).thumb.png.c527537be6376681654f75788370af88.png1063315281_Afterpressingtheplusbutton.thumb.png.017343f3b7100d0804402185b562525f.png2134655738_Powershellafterlogin(aftercomputerbeenlockedbutnotloggedout).thumb.png.c527537be6376681654f75788370af88.png

Link to post
Share on other sites

Hi. This can help to remove some bloatware added from Lenovo. 

Let's do one scan with Malwarebytes Adwcleaner to check for adwares. Just before pressing that "scan" button, be sure that Chrome & Edge, or other web browser are Closed.

It will not take much time,

First download & save it
guide & download link

Then be sure to close all web browsers after the download & before launching the tool.

Then go to where the EXE file is saved. Start Adwcleaner.  Then do a scan with Adwcleaner

Guide article

Attach the clean log from Adwcleaner when all completed.

Link to post
Share on other sites

Hello @FNKLMBe sure to do the ADWCLEANER tips listed above.What follows is a custom script intended to help out overall.

Take these actions so that Windows 11 is set to show all hidden files and folders.
Open File Explorer from the taskbar.

Select View > Show > Hidden items.

Select ViewShowFile name extensions

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this. THIS run will do a Windows RESTART. Once it starts it will auto-close any other running app.

We will use FRST64.exe  on the Downloads folder to run a custom script.    The system will be rebooted after the script has run. This is intended to do some system checks using System File Checker ( SFC ) & the Windows 11 DISM check tool and a quick scan with MS Defender. It will also rebuild the Winsock. It will clear the cache temporary files of the web browsers.

This custom script is for  FNKLM  machine  only / for this machine only.

  • Please save the (attached file named) FIXLIST.txt   to the   Downloads   folder

fixlist.txt    <<< - - - - -

Then, Start the Windows Explorer and then, go  to the Downloads    folder.

RIGHT click on FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.

  •    If the tool warns you the version is outdated, please download and run the updated version.
  • IF Windows prompts you about running this, select YES to allow it to proceed.
  • IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

  • on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience.  Please attach the Fixlog.txt with your next reply. 

Edited by Maurice Naggar
Link to post
Share on other sites

Hello again,
here are the requested files.
ADWCleaner might have found a false positive, it flagged a registry key for a software named Claro.
Have visited here once before and then they connected that key to the Claro software.
Since I need that software to work I have not deleted that key, other than that followed the instructions to the letter.



Fixlog.txt AdwCleaner[C01].txt

Link to post
Share on other sites

I would emphasize to reduce the auto-started applications that start with Windows down to the absolute minimum. Which would basically be just security applications.
Apply these principles now from the following How-to
How to perform a clean boot in Windows

  • Like 1
Link to post
Share on other sites

  • 1 month later...

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.