New
#1
Strange message at restart and shutdown...
I have a Windows 10 Pro 64-bit system, updated from Windows 8.1 about two weeks ego, wired connection assigned to a workgroup. The system works just fine with one exception. At the time of restart/shutdown, the system may display the following message:
This message is more prevalent, if the restart/shutdown initiated right after login, or even prior to login, but shows up after 8-10 using the system and initiating a shutdown. My knee-jerk reaction was that the system has some malware, but had not been able to locate any. Admittedly, it does not mean the system has none..."If you shut down now, you and any other people using this PC could lose unsaved work."
Actions taken so far:
- Scan system with Viper, Malwarebytes and Emisoft security software, came up empty
- Scan system off-line via Kaspersky and BitDefender, came up empty
Disconnecting the PC from the network, for the purpose of eliminating remote connections to the PC, did not make the message go away. Evidently, this is a local logon by some process and/or scheduled task.
The disabled UIDs are:
- Adminstrator
- DefaultAccount
- Guest
- WDAGUtilityAccount
The enabled UIDs are:
- UID1, standard user account
- UID2, standard user account
- UID3, local administarator account
The message is coming from the file named "authui.dll":
Windows 10 DLL File Information - authui.dll
Reviewing the security event did not show any unknown account and the Task Scheduler shows mainly Windows scheduled tasks, with a few third-party application schedules.
Reinstalling windows isn't really an option, one of the reasons for the update is to preserve the application and user data.
Does anyone have an idea what triggers this message and how to get rid of it?
TIA...