Windows XP desktop keeps reverting to Default

[DarrellS]

Everytime that XP stops responding and I have to restart, the desktop reverts back to XP default or XP modified. I have to go into display properties and change everything back to the way I had it.

Sometimes, I can walk away from the PC and when I come back, it has a login screen that I have to use to access the PC and all my settings are changed again. I have the PC set to start automatically without a password logon screen.

This is driving me crazy. Is there any way to keep Windows from trying to force me to use their defaults? The display problem happens at least three or four times a week. This has been happening ever since I installed XP in May.

[Supreme2k]

Two things that I can think of off the top of my head:

1. Virus scan (deep)

2. Go to task manager (ctrl-alt-del) and check what processes are running (2nd tab). See if there's any suspicious programs running. If you find any, do a google search for them and get rid of them, if necessary.

the only other things that could possibly be wrong is that you have a user timeout that goes to the login screen after so many minutes, and maybe a "return to default settings" or "lock settings" program running or set.

[DarrellS]

No Virus

My power scheme is Home/ Office Desk_Turn off Monitor-Never_Turn off Hard discs-Never_Standby-Never
Should I change it to Always On?

I don't see anything fishy in my HiJackThis log.

Logfile of HijackThis v1.99.1
Scan saved at 11:43:40 AM, on 8/1/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe
C:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe
C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\progra~1\scansoft\paperp~1\pptd40nt.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\NoAds\NoAds.exe
C:\Program Files\WinTV\Ir.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: Octh Class - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [DiscWizardMonitor.exe] C:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [HPHUPD08] C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PaperPort PTD] c:\progra~1\scansoft\paperp~1\pptd40nt.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [PPWebCap] C:\PROGRA~1\ScanSoft\PAPERP~1\PPWebCap.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [NoAds] "C:\Program Files\NoAds\NoAds.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_1_0 -reboot 1
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: HauppaugeTVServer - Hauppauge Computer Works - C:\PROGRA~1\WinTV\HCWTVS~1.EXE
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

There are a few file missing logs

I'm wondering if it is a hardware problem (video card?). It's been doing this since I first installed XP. It's a new computer (except for case and DVD combo drive). I've been having problems with the desktop Icons taking their time to refresh when I close a program and if I open My Downloads folder, it takes about a minute for all the icons to pop up. I thought it was a memory problem but thumbnails pop up almost instantly in Irfanview and MemoryTest shows no problems.

[Caple]

It's not a virus.
There is a topic about that here on the forums.
I had it last year.
I changed the desktop theme and saved with a new name. That didn't solve the problem 100%, but the desktop didn't revert to default every time I rebooted.
I have no idea what was the problem.

[Midzuki]

Here go my £2.00 ( yes, inflation is an issue... ) :

--- First, run a chkdsk /f /r (reboot required) ;

--- 2nd, try turning off the antivirus manually before
logging off/rebooting/shutting down the PC. It's not improbable that
Windows itself has been partially corrupting your user settings
while attempting to shut down the antivirus processes

--- as a last resource, consult an exorcist

[SLK001]

Sounds like your profile isn't being saved. Was it created using admin privileges?

[DarrellS]

It's not a virus.
There is a topic about that here on the forums.
I had it last year.
I changed the desktop theme and saved with a new name. That didn't solve the problem 100%, but the desktop didn't revert to default every time I rebooted.
I have no idea what was the problem.

I'll try this and see what happens.

I notice when I'm in properties and set up how I want it to be, Classic mode with no background and no screen saver and then set the color of the desktop that it changes it to Classic Modified and if I look at the settings again, it has set the screen saver to XP. I'm not sure how to set it the way I want unless I can delete the other modes.

Sounds like your profile isn't being saved. Was it created using admin privileges?

Yes, I am the administrator account. There is also an ASP.NET Machine account which was created by net framework.

[MOVIEGEEK]

This is driving me crazy. Is there any way to keep Windows from trying to force me to use their defaults? The display problem happens at least three or four times a week. This has been happening ever since I installed XP in May.

It sounds like something got mucked up on the install,XP isn't saving your preferences.Did you do a clean install or an upgrade?
Install CCleaner then run the cleaner and registry fix.
www.ccleaner.com

[Malicious]

It sounds more like a registry problem more so then anything else. CCleaner's registry fixes are very simple. If you have the XP operation systems disc try doing a 'soft restore'. Basically you will reinstall windows components without reformatting the drive. It will say "repair windows" after the disc loads and you get past a few prompts.

[DarrellS]

I've reinstalled the operating system but it still does it. It was a clean install.

XP remembers the settings since I can go a few days with everything working right and then one day it will decide not to remember them. It usually happens after a crash (program freeze up) but sometimes it does it for no reason.

What I think is happening is that I've turned everything related to XP off and XP is pissed off about it and refuses to run the way I want it to run. This is exactly why it took me eight years to install XP because I didn't want to have anything to do with a Spyware, Malware operating system. The only reason I'm running it now is because my new hardware isn't compatible with Windows 2000.

EDIT: I have a software called Uninstaller that I used with 98SE and W2K to keep the registry clean but it won't install on XP.

[minidv2dvd]

maybe you've turned off one thing too many? i've had installs of winXP go years and never lose a setting. sounds like after a crash winXP is reloading an old uncorrupted version of your registry that hasn't been updated at all, so it only has your old original settings. you could try setting restore points manually whenever you change something, but if you've turn off the necessary services you'll just have to live with the consequences.

you might try taking off the aluminum foil hat for a while. there isn't any spyware/malware in winXP itself.

[poisondeathray]

Why are you crashing every few days? This is a relatively new system with new OS install?

I find XP very stable, and Vista even more so (even though I hate it)

1) What programs cause crashes? Is this the BSOD variety? If so what error code? What scenarios are causing crashes?

2) Are you sure this isn't hardware related? What kind of PSU? Maybe the ripple is high? Have you run memtest64+ on your memory?

3) Update your graphics drivers. The most common cause of crashes (at least on Vista)