Technology in terms you understand. Sign up for the Confident Computing newsletter for weekly solutions to make your life easier. Click here and get The Ask Leo! Guide to Staying Safe on the Internet — FREE Edition as my thank you for subscribing!

Where'd this message box come from?

On my wife’s computer when she signs on, she gets this message in a small rectangular box:

ERROR – Unexpected error; Quitting

With an OK button.

This message comes on when she signs on and stays on the screen for 2 minutes and then disappears. Or I can click it off anytime.

Is there any way we can get it to stop?

At a gut level, this kinda sorta feels like spyware of some sort. But we should probably first see if we can figure out what program is generating this message, and then decide what to do from there.

Become a Patron of Ask Leo! and go ad-free!

Actually finding out the source of the message should be relatively easy.

Download a copy of Process Explorer from When you run it, you’ll see on it’s toolbar, a small round icon that looks a little like a radar or sonar screen:

Process Explorere Sonar Icon

When you click and hold on this icon, Process Explorer hides itself, and highlights the window you move your mouse cursor over. Once you’ve highlighted the window you are interested in, when you release the mouse, Process Explorer pops back to the foreground, with the process that owns that window highlighted.

So step one here will be, while that error message is still up, start Process Explorer, click and hold on the sonar icon, drag it on top of the error message and release. Process Explorer should now highlight the program that generated that error.

What happens next depends on what you find out.

You might recognize the program, and realize that something about it needs to be corrected. Or you can pursue support options with that program to try and understand why it’s generating that error, and eventually correct it.

You might not recognize the program, at which point you should probably Google it, or follow some of the other steps from my article What’s this program running on my machine? to try and identify it. Again, knowing what it should help determine your course of action.

It might show up as a system file – like, say, svchost.exe. Things get tricky here, because many system programs like svchost are multi-purpose workhorses, so just knowing their names tells you little. However adding that to the Google search could also turn up some interesting results.

Since it happens at login, you can then use the results of the investigation so far, and start looking at What’s all this stuff running after I boot Windows? You may decide that it’s the result of a program that shouldn’t be running on startup anyway, and simply disabling the startup item will both clear the problem and free up a little memory on your machine.

As I said at the beginning, this “smells” like spyware … or even a virus … so my bottom line recommendation, of course, is that you make sure to run an up-to-date anti-virus scan and anti-spyware scan.

In fact, whether or not you actually are experiencing a problem, both scans are an important part of simply staying safe on the internet.

Do this

Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.

I'll see you there!

1 thought on “Where'd this message box come from?”

  1. Hi Leo,

    Thanks for the advice. I downloaded and used process explorer to find what caused the pop-up that keeps on telling me restart my computer even after I have just re-booted.

    I found it was the Adobe updater application file causing it. After I deleted the file ….walah no more pop-up.

    Thanks for our help. You are a star.



Leave a reply:

Before commenting please:

  • Read the article.
  • Comment on the article.
  • No personal information.
  • No spam.

Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.

I want comments to be valuable for everyone, including those who come later and take the time to read.