InboxAce Removal Tutorial

Ehshell.exe Application Error - What is it?

Ehshell.exe is a type of .exe (executable file). This file functions as an essential component of the Microsoft Media Center.  By default, it is located in a subfolder of C:\Windows. Ehshell.exe application error is an error code that pops up when tasks in the Media Center freezes. The Ehshell.exe application error is usually displayed on the screen in the following format:

“ehshell.exe – Common Language Runtime Debugging Services Application has generated an exception that could not be handled. Process id=0xa18 (2584), Thread id=0xa24 (2596).”

Solution

Error Causes

Ehshell.exe application error is triggered when PC users perform repetitive tasks in Media Center on a Windows XP Media Center Edition. The computer stops to respond and the error message is displayed. This error occurs if users perform one or more of the following repetitive tasks in the Media Center:

• Repeated resize, restore and minimize the Media Center Window
• Schedule TV shows to record
• Repeatedly change the channel while Media Center is in a window
• Ehshell.exe file corruption due to malware infection or registry issues

Though this is not a fatal error, to avoid any kind of inconvenience, it is advisable to fix the error right away.

Further Information and Manual Repair

To fix the ehshell.exe application error on your system, you don’t have to hire a professional and spend hundreds of dollars on repair. Here are some of the best and most effective do-it-yourself methods that you can try to resolve this issue on your PC immediately.

Method 1 - Install the Latest Service Pack for Microsoft Windows

To repair the issue, install the latest Windows service pack. A service pack is basically a Windows update, often combines previously released updates that help make Windows more reliable. These are offered free of charge on Microsoft’s official website.  To get started, simply log on to Microsoft’s official website and download the latest service pack compatible with your Windows version. The installation process may take 30 minutes to install. And you will be prompted to restart your PC about halfway through the installation process. Once the Windows Service Pack is installed, the ehshell.exe application error will be fixed. If the error still persists, then try method 2.

Method 2 - Scan for Malware

Ehshell.exe application error may also appear on your PC due to malware infection. Malware programs like viruses, Trojans, and worms deliberately give their malicious processes similar .exe file names, so it is hard to identify the malware. In such an event, it is advisable to download a powerful antivirus and scan your entire PC. Run it to remove all the hidden malware programs on your system. Once malware is removed, the ehshell.exe application error will be resolved.

Method 3 - Clean Registry

Sometimes .exe files can also get corrupt when the registry gets overloaded with unnecessary and obsolete files. If this is the underlying reason for the error code occurrence then it is advisable to download Restoro. This is a multi-functional and user-friendly PC Fixer deployed with a registry cleaner. It removed all the unnecessary files, cleans and repairs the registry in seconds thereby fixing all registry-related errors. Click here to download Total System Care and resolve the Ehshell.exe application error on your PC.

If you encounter an error message saying, “ERR SSL VERSION OR CIPHER MISMATCH” while visiting a website, then it is not primarily your fault as an end-user. In fact, it can happen on any website like Chrome, Edge, Firefox, and even Internet Explorer. Getting this error means that the website you are visiting is using an SSL certificate which your browser seems to be rejected because there is some issue with the certificate. It is also possible that the certificate that’s downloaded on your computer is corrupted or that your computer configuration for TSL/SSL is misconfigured. Here are the complete details of the error message:

“A secure connection cannot be established because this site uses an unsupported protocol, Error code ERR_SSL_VERSION_OR_CIPHER_MISMATCH”

To resolve the ERR_SSL_VERSION_OR_CIPHER_MISMATCH error, refer to the options given below and see which one works for you.

Option 1 – Try to access the website with the only HTTP

The first thing you can do is to try accessing the website using HTTP instead of HTTPS. If you can open the website using HTTP then it means that the problem is in the website itself. And if you are the website owner, you can check the following:

• Check if your website’s SSL certificate name is mismatched. Here you need to ensure that the name and alias of the websites match with the actual website URL where the certificate is installed.
• Second, check if your server is using the RC4 Cipher. If it is, then you need to fix that.

On the other hand, you may also check if your CDN also supports SSL since most of the CDN nowadays supports SSL. All you have to do is configure it correctly and it should be good to go.

Option 2 – Try enabling SSL 3 / TLS and disable QUIC Protocol

If you were using Google Chrome when you got the ERR SSL VERSION OR CIPHER MISMATCH error, then you need to follow the protocol fixes for SSL3/TLS and QUIC which are usually some of the reasons that cause the SSL version / Cipher Mismatch. It also has a few fixes for Windows 10 computer where you can clear the certificates and make sure that your computer date and time is in sync with your time zone and so on. If you were using Edge or Internet Explorer when you got the error, then you have to follow the steps below.

• Type “Internet” in the search box of your browser. After that, you should see the Internet Options from the search results.
• Next, open the Internet Properties window and switch to the Advanced tab and then scroll down to the Security section.
• From there, check the “Use TLS 1.1” checkbox as well as the “Use TLS 1.2” checkbox and then click OK to save the changes made.
• Restart the browser.

On the other hand, if you were using Firefox when you go the error, here’s what you have to do.

• Open Firefox and in the address bar, type “about:config” and hit Enter.
• If a warning appears, just click on the “I accept the risk!” button to proceed.
• Next, type in “TLS” in the search field and hit Enter.
• Then look for “security.tls.version.min” and double click on it and set its integer value to 3 to force the protocol of TLS 1.3.
• Now click OK and restart Firefox and do the same thing with SSL.

If you are using Google Chrome browser in surfing the web, you might have experienced a situation where you’re trying to connect to a website but were unable to since Chrome failed to fetch the website to the browser and throws an error that says, This webpage is not available – Err Connection Timed Out. Aside from an issue with the network connection, there are also other reasons why this error suddenly shows up, read on to fix it. There are times when the Windows computer is responsible for this kind of issue. And it can happen not just to Google Chrome but to other browsers as well. To resolve this issue, here are some suggestions that might be of help.

Option 1 – Try checking the network cables and then restart your router and reconnect

The first thing you can do is to check if all the network cables are properly connected be it to your computer or to the router. And if your computer is connected via Wi-Fi, you need to restart your router once. And of course, you can always opt to forget the Wi-Fi details and then reconnect again just make sure that you know the password.

Option 2 – Check the Windows Host file

You can also try to cross-check the Windows Hosts file to find out if the website you are trying to open has been blocked because if it is, then it’s no wonder why you’re getting the ERR CONNECTION TIMED OUT error in Chrome. There are instances when some third-party application modifies the file and adds some websites to the blocklists. So if the website is indeed blocked, you need to remove it from the list.

Option 3 – Try removing Proxy

Removing the Proxy might also help you in fixing the ERR CONNECTION TIMED OUT error. Here’s how you can do it:

• Tap the Win + R keys to open the Run dialog box.
• Then type “inetcpl.cpl” in the field and hit Enter to pull up the Internet Properties.
• After that, go to the Connections tab and select the LAN settings.
• From there. Uncheck the “Use a Proxy Server” option for your LAN and then make sure that the “Automatically detect settings” option is checked.
• Now click the OK and the Apply buttons.
• Restart your PC.

Note: If you are using a third-party proxy service, you have to disable it.

Option 4 – Try to clear the browsing data of Google Chrome

If your browsing data in Chrome hasn’t been cleared for some time now then that might be the reason why you’re suddenly getting the ERR CONNECTION TIMED OUT error when you browse the web. To fix this error, you need to clear your web browsing data. Refer to the following steps to do so.

• Tap the Ctrl + Shift + Delete buttons to go to the Clear browsing data section in Chrome.
• Next, set the time range to “All time” and tick all the boxes and then click on the Clear data button.
• After that, restart the Chrome browser and try to open the website you were trying to open earlier.

Option 5 – Flush the DNS and reset TCP/IP

You might also want to flush the DNS and reset TCP/IP as it could help in fixing the ERR CONNECTION TIMED OUT error. To do so, refer to these steps:

• Click the Start button and type in “command prompt” in the field.
• From the search results that appear, right-click on Command Prompt and select the “Run as administrator” option.
• After opening Command Prompt, you have to type each one of the commands listed below. Just make sure that after you type each command, you hit Enter
  • ipconfig /release
  • ipconfig /all
  • ipconfig /flushdns
  • ipconfig /renew
  • netsh int ip set dns
  • netsh winsock reset

After you key in the commands listed above, the DNS cache will be flushed and the Winsock, as well as the TCP/IP, will reset.

• Now restart your computer and open Google Chrome then try opening the website you were trying to open earlier.

Option 6 – Run the built-in Malware Scanner and Cleanup Tool in Chrome

In case you don’t know, there is actually a built-in malware scanner and cleanup tool in Chrome that helps you get rid of any unwanted ads, pop-ups, and even malware, as well as unusual startup pages, toolbars, and other things that could affect the performance of the browser.

Option 7 – Reset Chrome

Resetting Chrome can also help you get rid of the ERR CONNECTION TIMED OUT error. Resetting Chrome means restoring its default settings, disabling all the extensions, add-ons, and themes. Aside from that, the content settings will be reset as well and the cookies, cache, and site data will also be deleted. To reset Chrome, here’s what you have to do:

• Open Google Chrome, then tap the Alt + F keys.
• After that, click on Settings.
• Next, scroll down until you see the Advanced option, once you see it, click on it.
• After clicking the Advanced option, go to the “Restore and clean up the option and click on the “Restore settings to their original defaults” option to reset Google Chrome.
• Now restart Google Chrome.

What is 0x3D55? As you know, Windows 10 is loaded with various Universal Windows Platform or UWP apps such as the Microsoft News, Weather, Calculator, Windows Mail, and many other applications that are based on the modern UWP platform of Microsoft that was introduced in Windows 10. Each one of these apps has a shared piece of code in the kernel for them to be able to get executed across any device that runs the Windows 10 OS which includes laptops, PCs, 2-in-1 devices, mobile phones, mixed reality headsets, and many more. However, there are times when the runtime information for these apps ends up getting corrupted which causes them not to function as expected and throws errors like the error 0x3D55. This kind of error can be pinned down when the UWP app malfunctions and you can also find an error message in the Event Log that reads, “0x3D55: Package family <App name with ID> runtime information is corrupted”. So if you encounter this error, read on for this post will walk you through fixing it. There are three suggestions you need to check out to fix this error – first, you can try to reset the Microsoft Store cache, second, you can try to re-register or reinstall the problematic app and lastly, run the Windows Store App troubleshooter.

Option 1 – Try to reset the Microsoft Store cache

Just like browsers, Microsoft Store also caches as you view apps and games so it is most likely that the cache is no longer valid and must be removed. To do so, follow the steps below.

• Right-click on the start button and click on Command Prompt (administrator).
• Next, type in the command, “wsreset.exe” and tap Enter. Once you do, the command will clear the cache for the Windows Store app.
• Now restart your PC and afterward, try opening Microsoft Store again and then try to install your app or update your computer again.

Option 2 – Run the Microsoft Store Apps troubleshooter

The Microsoft Store Apps Troubleshooter will help you in fixing the error 0x3D55. This is a great built-in tool from Microsoft that helps users fix any app installation issues. So this is worth a try to solve the problem. This built-in tool also helps you fix the Windows 10 Store if it isn’t working. To use the Windows Store Troubleshooter, follow the steps below.

1. Tap Win + I keys again to open the Windows Settings panel.
2. Go to Update & Security and then go to Troubleshoot.
3. On your right-hand side, scroll down to find the Windows Store Apps and then click on the Run the troubleshooter option and see if it fixes the problem.

Option 3 – Try to re-register the UWP app via PowerShell

• First, type “command prompt” in the Start Search and right-click on Command Prompt and then select the “Run as administrator” option.
• Next, navigate to this location in the command line utility: C:/Users/<Insert Username>/AppData/Local/Packages
• After that, execute the “DIR” command to view the list of all the directories in the given location.
• Once the list appears, look for the ID of the problematic app and take note of it.
• Now tap the Win + X key combination or right-click on the Start button and click on the Windows PowerShell (Admin) option.
• If a User Account Control or UAC prompt appears, just click on Yes to proceed and open the Windows PowerShell window.
• Next, type in or copy-paste the following command to re-register the Microsoft Store app and tap Enter:

PowerShell -ExecutionPolicy Unrestricted -Command "& {$manifest = (Get-AppxPackage Microsoft.<YOUR APP ID HERE>).InstallLocation + 'AppxManifest.xml' ; Add-AppxPackage -DisableDevelopmentMode -Register $manifest}"

• Wait for the process to be completed and then restart your computer.

Error Code 0x80070643 – What is it?

Error Code 0x80070643 or Windows Update error code affects various versions of the Windows operating system, including Windows 10. Error code 0x80070643 usually occurs due to corruption within the .Net Framework. When this occurs, users will be unable to install updates they have downloaded on their PC.

Solution

Error Causes

Error codes within Windows occur for many reasons including corrupt system files, viruses, and lack of space on your PC. In terms of error code 0x80070643 in Windows 10, the cause usually relates to a problem with the .NET framework or errors within one’s registry.

Further Information and Manual Repair

To solve error code 0x80070643 in Windows 10, users will need to employ various manual repair methods. These methods seek to fix core problems that result in the error being present on your device in the first place. Thus, the methods include the use of the .Net Framework Repair tool, resetting Windows Update components, or running a clean boot.

Note that the instructions provided in this article must be followed correctly, as making changes to your computer via these manual repair methods can result in serious problems if mistakes are made. Consider a Windows repair technician if you are unable to complete the steps mentioned in the manual repair methods below. Note, failure to rectify this error might result in other error messages, such as error code 0xc004fc03

Method One: Run the .Net Framework Repair Tool

As error code 0x80070643 may be triggered by issues related to the .Net Framework on your machine, it’s important that you download the .Net Framework Repair tool. This tool, as the name suggests, helps to repair errors it detects within the setup or updates associated with the framework.

The tool is available on the official Windows site. Download the tool and follow the instructions provided. Once you’ve downloaded the .Net Framework Repair tool, run it and wait until it fixes all problems detected within the framework.

Afterward, reboot your computer and check to see if Windows Update is functioning properly. If the error code reoccurs, proceed to another solution by implementing the second manual repair method listed in this article.

Method Two: Reset Windows Update Components

This method is the most technical of all the methods mentioned in this article. It will require that Windows 10 user access Command Prompt and make modifications to the Windows registry – an area of the operating system which stores important information, settings and other details regarding hardware and programs installed on your machine. Follow the steps carefully and be sure to back up the registry before proceeding with this manual repair method.

Step one: Type Command Prompt in the search box near Start, then select Command Prompt (Admin).

Step two: Select Yes as soon as the User Account Control box appears.

Step three: Stop Windows Update service, the BITS service, and Cryptographic service by typing the following commands:

net stop bits

net stop wuauserv

net stop appidsvc

net stop cryptsvc

Step four: Be sure to press Enter after typing each command.

Step five: Type the following command, then Enter to delete qmgr*.dat files:

        Del "%ALLUSERSPROFILE%Application DataMicrosoftNetworkDownloaderqmgr*.dat"

Step six: Press enter after typing the following command:

        cd /d %windir%system32

Step seven: Reregister the files for BITS and Windows Update that you stopped in step three. To do this, type the following commands, selecting Enter after each command:

        regsvr32.exe atl.dll

        regsvr32.exe urlmon.dll

        regsvr32.exe mshtml.dll

        regsvr32.exe shdocvw.dll

        regsvr32.exe browseui.dll

        regsvr32.exe jscript.dll

        regsvr32.exe vbscript.dll

        regsvr32.exe scrrun.dll

        regsvr32.exe msxml.dll

        regsvr32.exe msxml3.dll

        regsvr32.exe msxml6.dll

        regsvr32.exe actxprxy.dll

        regsvr32.exe softpub.dll

        regsvr32.exe wintrust.dll

        regsvr32.exe dssenh.dll

        regsvr32.exe rsaenh.dll

        regsvr32.exe gpkcsp.dll

        regsvr32.exe sccbase.dll

        regsvr32.exe slbcsp.dll

        regsvr32.exe cryptdlg.dll

        regsvr32.exe oleaut32.dll

        regsvr32.exe ole32.dll

        regsvr32.exe shell32.dll

        regsvr32.exe initpki.dll

        regsvr32.exe wuapi.dll

        regsvr32.exe wuaueng.dll

        regsvr32.exe wuaueng1.dll

        regsvr32.exe wucltui.dll

        regsvr32.exe wups.dll

        regsvr32.exe wups2.dll

        regsvr32.exe wuweb.dll

        regsvr32.exe qmgr.dll

        regsvr32.exe qmgrprxy.dll

        regsvr32.exe wucltux.dll

        regsvr32.exe muweb.dll

        regsvr32.exe wuwebv.dll

Step eight: Reset Winsock in Command Prompt by typing the following command, then selecting Enter:

      netsh winsock reset

Step nine: Configure proxy settings in Windows 10 with the following command, then press Enter:

     netsh winhttp reset proxy

Step ten: To restart the BITS, Windows Update, and Cryptographic service, type the following commands, then press Enter:

        net start bits

        net start wuauserv

        net start appidsvc

        net start cryptsvc

Step eleven: Install the latest Windows Update Agent.

Step twelve: Restart your machine.

Once you’ve restarted your PC, check Windows Update to verify if the error code is resolved. You should now be able to access the latest updates on your device. However, if a problem has arisen and the error code reoccurs, you will need to proceed with a Clean Boot.

Method Three: Download an Automated Tool

If you wish to always have at your disposal a utility tool to fix these Windows 8 and other related issues when they do arise, download and install a powerful automated tool.

If you wish to continue where you have left off when you signed out of Windows follow this guide and learn how to continue your work after signing in, restart apps in your Windows. You can set Windows 10 to Automatically save your restartable apps when you sign out and restart them after you sign in. Here’s how:

1. Right-click on the Windows logo to open the secret menu
2. Select Settings
3. Click open Accounts
4. From the left side, select Sign-in options
5. Scroll down till you see Restart apps setting
6. Toggle the Automatically save your restartable apps when you sign out and restart them after you sign in setting to On position

Error Code 0x80248014 - What is it?

Error Code 0x80248014 is an error that is particularly associated with the Windows 10 operating system. It generally appears during the Windows Update process and can interrupt the update installation, causing it to fail.

Common symptoms include:

• Inability to download, install, or run updates on the Windows 10 operating system
• The vague message that appears when the error occurs
• Inability to finalize purchases made from the Windows Store
• Inability to run a check to see if updates need to be installed

The resolutions available for Error Code 0x80248014 include the use of the command prompt and delving into the settings for Windows. While most users should be able to navigate the resolution methods on their own if you do not feel comfortable undertaking these steps on your own or if you aren’t able to resolve the error fully using these methods, get in touch with a qualified Windows repair technician who is familiar with issues in Windows updates.

Solution

Error Causes

There are several common culprits that can make Error Code 0x80248014 appear on your Windows device. The most common ones include problems with your connections, interference on the server, or problems in the settings for the Windows Store itself from which the updates are downloaded.

If you believe that your error relates most specifically to the Windows Store, you may want to jump directly to method two in order to attempt to resolve the issue.

Further Information and Manual Repair

There are a number of ways that you can try to resolve Error Code 0x80248014 on your Windows 10 operating system. The first will attempt to reset the issue using the command prompt, while the second attempts to address the issues that are associated directly with the Windows Store.

If you do not feel comfortable taking the steps below, be sure to get in touch with a qualified Windows repair technician to assist you.

Here are the top two methods to resolve Error Code 0x80248014 on the Windows 10 operating system:

Method One:  Attempt to Resolve the Error Using the Command Prompt

To use this method, employ the following steps in order:

• Step One: To begin, open up the Start menu and select the option for the Command Prompt, choosing to run it in Admin mode.
• Step Two: Put in the commands below, hitting the Enter key after each one:
  • net stop WuAuServ
  • %windir%
• Step Three: Open up the Windows folder on your local hard drive. Look for the folder labeled “SoftwareDistribution” and change the name to “SDold”.
• Step Four: Go back into the Command Prompt as an administrator and enter this command:  “net start WuAuServ”.
• Step Five: Attempt to run your check for Updates again.

You may want to reboot your computer after running the steps above to ensure that the changes that you’ve made are fully applied to your device.

Method Two:  Reset Your Windows Store Settings

In some cases, Error Code 0x80248014 can appear on a device when the settings for the Windows Store have been altered or cannot be successfully read by the machine in question. If you believe that this is the case on your machine, you can run a simple command to renew your Windows Store settings.

To attempt to reset your Windows Store settings, open up your search bar and type in the following phrase “wsreset.exe,” then hitting Enter. Running this command will reset your Windows Store settings to their defaults.

After you reset your Windows Store settings, it may be a good idea to reboot your computer to ensure that all changes have fully taken effect on your device. Once this has been done, you can open the Windows Store back up and try to download or install the programs that you were attempting to purchase when the error code occurred.

If you are still experiencing the effects on your Windows 10 operating system or if you have not been able to follow the steps above to completion, it may be time to get in touch with a qualified Windows repair technician to assist you with the error resolution process.

Method Three: Use An Automated Tool

If you wish to always have at your disposal a utility tool to fix these Windows 10 and other related issues when they do arise, download and install a powerful automated tool.

After a lot of backlash about choosing the default Windows browser, Microsoft has officially backed up and brought back a one-click browser change into Windows 11. For anyone who is not aware, when Windows 11 was released if you wanted to switch to another browser you had to go into the settings app and choose the default browser for different types of file extensions like HTML, HTM, PDF for opening on the web, etc. Of course, this was completely unnecessary and it was not well received by users. So after some time, Microsoft backpedaled to standard one click, choose your default browser solution that existed in the previous version of Windows OS. Altho sometimes Microsoft knows how to irritate its users base, it is good to know that they can also listen and fix things that are required.

Windows 11 has been officially presented during Microsoft’s virtual event on June 24^th. Since presentation internet has been pretty live and busy with a discussion about it, some discussions are positive, some not so much but that is expected and it happens always when a new product is presented. One of information that we have about Windows 11 is tied to the home edition of this OS, Windows 11 home edition will require an internet connection at setup, and a Microsoft account in order to be installed and used. Previous versions of Windows could be installed and used with local accounts but it seems Microsoft has abandoned that idea for its new OS. OS will be delivered mostly as updates or via internet download so internet and online requirement make sense but why it cannot use the local account and must have a Microsoft one is beyond me.

Shortcut virus is an easily spreadable and annoying combination of Worm and Trojan that hides all of your files and folders and then replaces them with shortcuts that look identical to replaced files and folders. Once disguised it will wait patiently for a user's click and once that happens it will replicate itself and further infect the system. This rapid spread can lead to stolen personal data, some system hick-ups, and other system-related issues. This malware mainly affects physical file transfer devices like for example and most USB drives, hard drives, and SD memory cards and it can easily transfer itself to the computer. The advantage of this shortcut virus comparing it to others is that it is mostly undetected by a vast variety of antivirus software. So running just anti-virus software maybe not be enough to remove it from your system. Luckily for all unfortunate users that have caught this annoyance, it can be easily removed fully manually in a short time.

How to Remove Virus from USB and other removable media

Firstly plugin USB, SD, or removable drive. The infection will transfer to your computer when the infected drive is plugged in so before we go to clean the computer itself, clean each removable drive that you have. Also know that infection will spread from computers into removable devices as well if it is not cleaned. Open the File Explorer and remember under which letter is removable drive registered. Open Command prompt but with administrator privileges and go to infected rive by typing its letter followed with “:” (for example D:) and press ENTER Once you have successfully gone to infected drive type in command prompt: Attrib -s -r -h /s /d *.* This will unlock all original files back into removable storage, next copy all files to your computer, and format the removable drive. Once the format is complete, unplug the removable device. Continue to clean all devices with the same method.

How to Permanently Remove a Shortcut Virus from Your PC

Now once we have cleaned all removable devices it is time to fully clean the PC Firstly open the task manager ( CTRL + SHIFT + ESC ), in the process tab find wscript.exe or wscript.vbs, right-click on it (or both if present), and select End Task. Now close the task manager and press Start. Inside start typing in registry editor to search for it and once found open it. Find the following key inside the registry editor: HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run In the right panel, look for any strange-looking key names, such as odwcamszas, WXCKYz, OUzzckky, etc. For each one, run a Google search to see if it's related to shortcut viruses. If any returns a positive match, right-click on them and select Delete. !!! Accidentally deleting an important key can cause Windows to become unstable, so double-check everything !!!. Close the Registry Editor Now press ⊞ WINDOWS + R to open the run dialog and type in it Msconfig followed by ENTER. Once the System Configuration window opens go to the Startup tab. In the Startup tab, look for any strange-looking .EXE or .VBS programs, select each one and click Disable. Close the Window. Once again open the run dialog and type inside %TEMP% and press ENTER in order to open the Windows temp folder. Inside this folder delete everything. Next in the File explorer go to C:\Users\[username]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Look for any strange-looking .EXE or .VBS files and delete them.