windows xp shutdown problem - all shortcuts deleted in "Program" m

[bugs]

When my Windows XP shuts down, hibernates or standby, all shortcuts in the
"start menu -> program" folder will be deleted, and the "Show Desktop"
shortcut will mysteriously appear in the folder. I checked the application
and system log, didn't find anything that runs after the system shutdown. Is
there any registry key I should look into, or is there anyway I can setup a
more detail log to track which program is doing this prank? thanks

 

[Pegasus \(MVP\)]

When my Windows XP shuts down, hibernates or standby, all shortcuts in the
"start menu -> program" folder will be deleted, and the "Show Desktop"
shortcut will mysteriously appear in the folder. I checked the application
and system log, didn't find anything that runs after the system shutdown.
Is
there any registry key I should look into, or is there anyway I can setup
a
more detail log to track which program is doing this prank? thanks

Sounds like malware. Did you check out your startup tasks? Click Start / Run
/ msconfig.exe, then examine the items under the Startup tab. Does the
problem happen in Safe Mode too?

 

[Elmo]

When my Windows XP shuts down, hibernates or standby, all shortcuts in the
Start menu, Programs folder will be deleted, and the "Show Desktop"
shortcut will mysteriously appear in the folder. I checked the application
and system log, didn't find anything that runs after the system shutdown. Is
there any registry key I should look into, or is there any way I can set up a
more detailed log to track which program is doing this prank? Thanks

Maybe this registry tweak:

http://www.kellys-korner-xp.com/xp_tweaks.htm
Line 30. Windows XP Doesn't Save User Settings

 

[bugs]

Just tried safe mode, created a shortcut in programs menu, after reboot,
shortcut is gone again.

If i set the shortcut property to "read only", it stays. So it doesn't look
like the system wasn't able to store user settings.

I scanned the system with latest Norton data, didn't find any malware or
virus.

 

[Pegasus \(MVP\)]

Try this:
1. Physically disconnect your machine from the Internet.
2. Boot it into Safe Mode. Log on as Administrator.
3. Run msconfig.exe via the Start / Run box.
4. Disable each and every task under the Startup tab.
5. Tick the box under the Services tab thad hides all Microsoft services.
6. Disable the remaining services.
7. Reboot and check if you have lost your shortcuts.
If the shortcuts remain then one of the currently disabled tasks or services
is responsible for their deletion. Your challenge will be to identify the
culprit by process of elimination.