Page 2 of 4 FirstFirst 1234 LastLast
  1.    21 Apr 2017 #11
    Join Date : Apr 2015
    Posts : 12,819
    W10Prox64

    Quote Originally Posted by WinTenUser View Post
    Wow, lot's of stuff. I will do my best. I actually did a bunch of this. but will repeat.

    Can you explain the Change the DNS servers on her NICs to Open DNS (its purpose)

    Thanks for the details!

    Brian
    Yes, please, and be sure to post the logs for me.
    Changing the DNS servers to Open DNS will force her NIC to use them for all internet requests (and not her ISP's DNS servers). OpenDNS actively blocks all known bad sites. You don't need to add the Marc's Updater part unless you create an account with OpenDNS to modify the blocking settings.
    Last edited by simrick; 22 Apr 2017 at 10:08.
      My ComputerSystem Spec
  2.    21 Apr 2017 #12
    Join Date : Jun 2016
    Posts : 35
    Windows 10 Home
    Thread Starter

    Quote Originally Posted by simrick View Post
    Yes, please, and be sure to post the logs for me.
    Changing the DNS servers to Open DNS will force her NIC to use them for all internet requests (and not her ISP's DNS servers. OpenDNS actively blocks all known bad sites. You don't need to add the Marc's Updater part unless you create an account with OpenDNS to modify the blocking settings.
    That makes sense. She doesn't visit many sites, but it's a good safeguard.
    Will get on this tomorrow!

    Thanks

    Will post logs

    Brian
      My ComputerSystem Spec
  3.    21 Apr 2017 #13
    Join Date : Apr 2015
    Posts : 12,819
    W10Prox64

    Quote Originally Posted by WinTenUser View Post
    That makes sense. She doesn't visit many sites, but it's a good safeguard.
    Will get on this tomorrow!

    Thanks

    Will post logs

    Brian
    If you want to post the list of installed programs (using Ccleaner) feel free and I'll have a look at that as well.

    Click image for larger version. 

Name:	image.png 
Views:	4 
Size:	57.5 KB 
ID:	131302


    Cheers Brian.
      My ComputerSystem Spec
  4.    22 Apr 2017 #14
    Join Date : Jun 2016
    Posts : 35
    Windows 10 Home
    Thread Starter

    Click image for larger version. 

Name:	InstallHistory.JPG 
Views:	9 
Size:	159.1 KB 
ID:	131404

    Took this capture before your suggestion. Didn't realize I could save a list via the prog!!

    Brian

    Getting ready to connect with my mother's computer.

    CCleaner - Installed Programs

    Weather Microsoft Corporation 4/22/2017 4.20.1102.0 All users
    Mozilla Maintenance Service Mozilla 4/20/2017 256 KB 53.0.0.6312 All users
    Mozilla Firefox 53.0 (x86 en-US) Mozilla 4/20/2017 88.8 MB 53.0 All users
    Malwarebytes version 3.0.6.1469 Malwarebytes 4/20/2017 154 MB 3.0.6.1469 All users
    Microsoft Solitaire Collection Microsoft Studios 4/13/2017 3.16.3302.0 All users
    Groove Music Microsoft Corporation 4/13/2017 10.17022.10301.0 All users
    Facebook Facebook Inc 4/13/2017 81.832.151.0 All users
    Microsoft Sticky Notes Microsoft Corporation 4/13/2017 1.8.0.0 All users
    Store Microsoft Corporation 4/13/2017 11701.1001.99.0 All users
    Adobe Flash Player 25 NPAPI Adobe Systems Incorporated 4/12/2017 5.94 MB 25.0.0.148 All users
    Stardock IconPackager Stardock Software, Inc. 4/11/2017 18.6 MB 10.02 All users
    Canon MG3000 series User Registration *Canon Inc. 4/11/2017 All users
    Canon MG3000 series On-screen Manual Canon Inc. 4/11/2017 8.81 MB 1.0.0 All users
    Canon MG3000 series MP Drivers Canon Inc. 4/11/2017 1.00 All users
    Canon Inkjet Printer/Scanner/Fax Extended Survey Program Canon Inc. 4/11/2017 5.2.0 All users
    Canon IJ Scan Utility Canon Inc. 4/11/2017 75.6 MB 1.3.0.19 All users
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 4/9/2017 940 KB 10.0.40219 All users
    TeamViewer 12 TeamViewer 3/25/2017 61.8 MB 12.0.75813 All users
    IncrediMail 2.5 IncrediMail Ltd. 3/25/2017 6.6.0.5302 All users
    Second Copy 9 Centered Systems 3/24/2017 43.9 MB 9.0.0.1 All users
    Pandora Pandora Media Inc 3/23/2017 11.3.1.0 All users
    gpedt.msc 1.0 Richard 3/22/2017 5.24 MB All users
    Backgammon Classic 7.2 Microsys Com Ltd. 3/22/2017 28.9 MB All users
    True Launch Bar Tordex 3/21/2017 17.1 MB 7.3.0.0 All users
    SUPERAntiSpyware SUPERAntiSpyware.com 3/21/2017 10.4 MB 6.0.1236 All users
    Second Nature - Light on the Water Second Nature Software, Inc. 3/21/2017 4.4 All users
    Microsoft SQL Server Compact 3.5 SP2 x64 ENU Microsoft Corporation 3/21/2017 15.2 MB 3.5.8080.0 All users
    Microsoft SQL Server Compact 3.5 SP2 ENU Microsoft Corporation 3/21/2017 12.2 MB 3.5.8080.0 All users
    Heartwild Solitaire Classic 3/21/2017 All users
    Heartwild Solitaire (Author's Edition) 3/21/2017 All users
    Hallmark Card Studio 2017 Deluxe Creative Home 3/21/2017 145 MB 18.0.0.14 All users
    Corel Paint Shop Pro Photo XI Corel Corporation 3/21/2017 197 MB 11.20.0000 All users
    Bonus Pack 2017 Creative Home 3/21/2017 30.1 MB 1.0.0.7 Sheila
    ACDSee 20 ACD Systems International Inc. 3/21/2017 618 MB 20.3.0.611 All users
    Stardock Start10 Stardock Software, Inc. 3/20/2017 41.3 MB 1.53 All users
    Shadow Defender ShadowDefender.com 3/20/2017 1.4.0.650 All users
    Alarms & Clock Microsoft Corporation 3/19/2017 10.1703.602.0 All users
    Calculator Microsoft Corporation 3/19/2017 10.1703.601.0 All users
    Voice Recorder Microsoft Corporation 3/19/2017 10.1703.601.0 All users
    App Installer Microsoft Corporation 3/19/2017 1.0.10332.0 All users
    Store Purchase App Microsoft Corporation 3/19/2017 11608.1000.2431.0 All users
    Xbox Identity Provider Microsoft Corporation 3/19/2017 11.19.19003.0 All users
    NVIDIA Graphics Driver 342.01 NVIDIA Corporation 3/19/2017 476 MB 342.01 All users


    CCleaner - Startup Items

    Yes HKCU:Run IncrediMail IncrediMail, Ltd. Sheila C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c
    Yes HKCU:Run SUPERAntiSpyware SUPERAntiSpyware Sheila C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    Yes HKLM:Run Malwarebytes TrayApp Malwarebytes All users C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe
    Yes HKLM:Run MouseDriver Pixart Imaging Inc All users TiltWheelMouse.exe
    Yes HKLM:Run WindowsDefender All users "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
    Yes Startup Common Snsicon.lnk Second Nature Software, Inc. All users C:\Program Files (x86)\Second Nature\Snsicon.exe
    Yes Startup User USBNavFix.lnk Microsoft Corporation Sheila C:\Windows\regedit.exe

    Note:
    1. Malwarebytes was installed as a trial just for troubleshooting
    2. Second Nature Software - been using this screen saver for years
    3. USBNAVFix - created a batch file to update the registry to remove the 2x removable drive icons from File Managers Navigation Pane
    Seems every time Windows updates that the default is restored.


    Last edited by WinTenUser; 22 Apr 2017 at 10:51.
      My ComputerSystem Spec
  5.    22 Apr 2017 #15
    Join Date : Apr 2015
    Posts : 12,819
    W10Prox64

    Yes, okay. A Ccleaner list would be more helpful for me, and complete.
      My ComputerSystem Spec
  6.    22 Apr 2017 #16
    Join Date : Jun 2016
    Posts : 35
    Windows 10 Home
    Thread Starter

    RKill Log

    Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

    Performing miscellaneous checks:

    * No issues found.

    Checking Windows Service Integrity:

    * agp440 [Missing Service]
    * gagp30kx [Missing Service]
    * IEEtwCollectorService [Missing Service]
    * IoQos [Missing Service]
    * nv_agp [Missing Service]
    * TimeBroker [Missing Service]
    * uagp35 [Missing Service]
    * uliagpkx [Missing Service]
    * WcsPlugInService [Missing Service]
    * wpcfltr [Missing Service]
    * WSService [Missing Service]

    * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]
    * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]

    * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
    * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

    Searching for Missing Digital Signatures:

    * No issues found.

    Checking HOSTS File:

    * No issues found.

    Program finished at: 04/22/2017 11:21:11 AM
    Execution time: 0 hours(s), 0 minute(s), and 23 seconds(s)

    ---------------------------------------------------------------------------------------------------------------------------------------------------------------

    ADWCleaner log

    # AdwCleaner v6.045 - Logfile created 21/04/2017 at 21:01:25
    # Updated on 28/03/2017 by Malwarebytes
    # Database : 2017-04-21.1 [Local]
    # Operating System : Windows 7 Home Premium Service Pack 1 (X86)
    # Username : Brian - DELL-LAPTOP
    # Running from : C:\Users\Brian\Desktop\MOM\02. AdWCleaner 6.045\adwcleaner_6.045.exe
    # Mode: Scan
    # Support : Malwarebytes | Customer Support & Help Center
    Note: Operating System is "mis-listed" It is Windows 10 Home (x64) Updated to April 18th

    ***** [ Services ] *****
    No malicious services found.

    ***** [ Folders ] *****
    Folder Found: C:\Users\Brian\AppData\Roaming\Wise Euask
    Folder Found: C:\ProgramData\Auslogics
    Folder Found: C:\ProgramData\IObit\Advanced SystemCare
    Folder Found: C:\ProgramData\Application Data\Auslogics
    Folder Found: C:\ProgramData\Application Data\IObit\Advanced SystemCare
    Folder Found: C:\Windows\system32\Tasks\WiseCleaner
    Folder Found: C:\Windows\system32\config\systemprofile\AppData\Local\LavasoftTcpService
    Note: Not sure where this stuff comes from, I ran this prog on my laptop last night and it found the same stuff!

    ***** [ Files ] *****
    File Found: C:\spyhunter.fix
    File Found: C:\Windows\system32\lavasofttcpservice.dll
    File Found: C:\Windows\system32\LavasoftTcpServiceOff.ini
    Note: Again, all these items were also found on my laptop!

    ***** [ DLL ] *****
    No malicious DLLs found.

    ***** [ WMI ] *****
    No malicious keys found.

    ***** [ Shortcuts ] *****
    No infected shortcut found.

    ***** [ Scheduled Tasks ] *****
    Task Found: WiseCleaner

    ***** [ Registry ] *****
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController.1
    Key Found: HKLM\SOFTWARE\Classes\AppID\{2CE0F1DC-C504-4B7B-A385-D94A2531DFFB}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{D4EF86C3-77D7-4F82-BBB8-6DFFAB6E2D32}
    Key Found: HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057}
    Key Found: HKLM\SOFTWARE\Tarma Installer
    Key Found: HKLM\SOFTWARE\WISECLEANER
    Key Found: HKLM\SOFTWARE\Auslogics
    Value Found: HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION [WISEREGCLEANER.EXE]
    Key Found: HKLM\SOFTWARE\Classes\AppID\LavasoftTcpService.exe
    Note: Much the same as my laptop!

    ***** [ Web browsers ] *****
    No malicious Firefox based browser items found.
    No malicious Chromium based browser items found.

    *************************
    C:\AdwCleaner\AdwCleaner[S0].txt - [3861 Bytes] - [21/04/2017 21:01:25]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3934 Bytes] ##########

    ...restarting computer...

      My ComputerSystem Spec
  7.    22 Apr 2017 #17
    Join Date : Apr 2015
    Posts : 12,819
    W10Prox64

    Quote Originally Posted by WinTenUser View Post
    RKill Log

    Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

    Performing miscellaneous checks:

    * No issues found.

    Checking Windows Service Integrity:

    * agp440 [Missing Service]
    * gagp30kx [Missing Service]
    * IEEtwCollectorService [Missing Service]
    * IoQos [Missing Service]
    * nv_agp [Missing Service]
    * TimeBroker [Missing Service]
    * uagp35 [Missing Service]
    * uliagpkx [Missing Service]
    * WcsPlugInService [Missing Service]
    * wpcfltr [Missing Service]
    * WSService [Missing Service]

    * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]
    * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]

    * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
    * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

    Searching for Missing Digital Signatures:

    * No issues found.

    Checking HOSTS File:

    * No issues found.

    Program finished at: 04/22/2017 11:21:11 AM
    Execution time: 0 hours(s), 0 minute(s), and 23 seconds(s)

    -------------------------------------------------------------------------------------------------------

    RKILL log looks fine; those missing services and other things are nothing to worry about.

    Quote Originally Posted by WinTenUser View Post
    ADWCleaner log
    Quote Originally Posted by WinTenUser View Post
    # AdwCleaner v6.045 - Logfile created 21/04/2017 at 21:01:25
    # Updated on 28/03/2017 by Malwarebytes
    # Database : 2017-04-21.1 [Local]
    # Operating System : Windows 7 Home Premium Service Pack 1 (X86)
    # Username : Brian - DELL-LAPTOP
    # Running from : C:\Users\Brian\Desktop\MOM\02. AdWCleaner 6.045\adwcleaner_6.045.exe
    # Mode: Scan
    # Support : Malwarebytes | Customer Support & Help Center
    Note: Operating System is "mis-listed" It is Windows 10 Home (x64) Updated to April 18th
    Got it.
    Quote Originally Posted by WinTenUser View Post
    ***** [ Services ] *****
    No malicious services found.

    ***** [ Folders ] *****
    Folder Found: C:\Users\Brian\AppData\Roaming\Wise Euask
    Folder Found: C:\ProgramData\Auslogics
    Folder Found: C:\ProgramData\IObit\Advanced SystemCare
    Folder Found: C:\ProgramData\Application Data\Auslogics
    Folder Found: C:\ProgramData\Application Data\IObit\Advanced SystemCare
    Folder Found: C:\Windows\system32\Tasks\WiseCleaner
    Folder Found: C:\Windows\system32\config\systemprofile\AppData\Local\LavasoftTcpService
    Note: Not sure where this stuff comes from, I ran this prog on my laptop last night and it found the same stuff!
    I will guess that most of this junk is a result of IOBit software. I would not trust anything from them. They were caught stealing proprietary virus-detection databases from Malwarebytes.

    Auslogics is now considered a PUP, as they try to install all kinds of other stuff when you install their program, plus they open your web browser and take you to a Giveaway page - very annoying. Until they clean up their act, I would not use them. Defraggler (free) by Piriform is a good replacement.

    Quote Originally Posted by WinTenUser View Post
    ***** [ Files ] *****
    File Found: C:\spyhunter.fix
    File Found: C:\Windows\system32\lavasofttcpservice.dll
    File Found: C:\Windows\system32\LavasoftTcpServiceOff.ini
    Note: Again, all these items were also found on my laptop!
    Do not ever, under any circumstances, install SpyHunter on a system!

    Quote Originally Posted by WinTenUser View Post
    ***** [ DLL ] *****
    No malicious DLLs found.

    ***** [ WMI ] *****
    No malicious keys found.

    ***** [ Shortcuts ] *****
    No infected shortcut found.

    ***** [ Scheduled Tasks ] *****
    Task Found: WiseCleaner
    Need to get rid of this as well.

    Quote Originally Posted by WinTenUser View Post
    ***** [ Registry ] *****
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager.1
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController
    Key Found: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController.1
    Key Found: HKLM\SOFTWARE\Classes\AppID\{2CE0F1DC-C504-4B7B-A385-D94A2531DFFB}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105}
    Key Found: HKLM\SOFTWARE\Classes\CLSID\{D4EF86C3-77D7-4F82-BBB8-6DFFAB6E2D32}
    Key Found: HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057}
    Key Found: HKLM\SOFTWARE\Tarma Installer often used to install unwanted packed/bundled/questionable software.
    Key Found: HKLM\SOFTWARE\WISECLEANER
    Key Found: HKLM\SOFTWARE\Auslogics
    Value Found: HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION [WISEREGCLEANER.EXE]
    Key Found: HKLM\SOFTWARE\Classes\AppID\LavasoftTcpService.exe
    Note: Much the same as my laptop!

    ***** [ Web browsers ] *****
    No malicious Firefox based browser items found.
    No malicious Chromium based browser items found.

    *************************
    C:\AdwCleaner\AdwCleaner[S0].txt - [3861 Bytes] - [21/04/2017 21:01:25]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3934 Bytes] ##########

    ...restarting computer...
    Lavasoft needs to go.
      My ComputerSystem Spec
  8.    22 Apr 2017 #18
    Join Date : Apr 2015
    Posts : 12,819
    W10Prox64

    When you're in Ccleaner, please save to text file, the list of installed programs, and upload here so I can have a looksee.

    Click image for larger version. 

Name:	image.png 
Views:	4 
Size:	57.5 KB 
ID:	131413
      My ComputerSystem Spec
  9.    22 Apr 2017 #19
    Join Date : Jun 2016
    Posts : 35
    Windows 10 Home
    Thread Starter

    RKill log 2

    Rkill 2.8.4 by Lawrence Abrams (Grinler)
    BleepingComputer.com - News, Reviews, and Technical Support
    Copyright 2008-2017 BleepingComputer.com
    More Information about Rkill can be found at this link:
    RKill - What it does and What it Doesnt - A brief introduction to the program - Anti-Virus, Anti-Malware, and Privacy Software

    Program started at: 04/22/2017 11:46:41 AM in x64 mode.
    Windows Version: Windows 10 Home

    Checking for Windows services to stop:

    * No malware services found to stop.

    Checking for processes to terminate:

    * No malware processes found to kill.

    Checking Registry for malware related settings:

    * No issues found in the Registry.

    Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

    Performing miscellaneous checks:

    * No issues found.

    Checking Windows Service Integrity:

    * agp440 [Missing Service]
    * gagp30kx [Missing Service]
    * IEEtwCollectorService [Missing Service]
    * IoQos [Missing Service]
    * nv_agp [Missing Service]
    * TimeBroker [Missing Service]
    * uagp35 [Missing Service]
    * uliagpkx [Missing Service]
    * WcsPlugInService [Missing Service]
    * wpcfltr [Missing Service]
    * WSService [Missing Service]

    * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]
    * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]

    * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
    * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

    Searching for Missing Digital Signatures:

    * No issues found.

    Checking HOSTS File:

    * No issues found.

    Program finished at: 04/22/2017 11:46:51 AM
    Execution time: 0 hours(s), 0 minute(s), and 9 seconds(s)



    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.1.3 (04.10.2017)
    Operating System: Windows 10 Home x64
    Ran by Sheila (Administrator) on Sat 04/22/2017 at 11:53:47.01
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    File System: 2

    Successfully deleted: C:\Users\Sheila\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\search.lnk (Shortcut)
    Successfully deleted: C:\Windows\system32\Tasks\DriverMagician (Task)

    Note: did not see the IE lnk, probably because I use Truelaunch Bar as a great replacement...rarely have to use the start menu/programs. Also: Driver Magician is a portable program I use to backup drivers.

    Registry: 0

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Sat 04/22/2017 at 11:54:42.11
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      My ComputerSystem Spec
  10.    22 Apr 2017 #20
    Join Date : Apr 2015
    Posts : 12,819
    W10Prox64

    Looks good.
    I know Driver Magician - I use the Lite version all the time. I've never had it come up in a scan (perhaps because it's the portable version - I've never used that?).

    EDIT: No wait - it's a task - that's why it's flagged.
      My ComputerSystem Spec

 
Page 2 of 4 FirstFirst 1234 LastLast


Similar Threads
Thread Forum
Restoring from File History created on old computer to a new computer
I'm thinking this should be easy, but it isn't turning out that way. Computer A is dying, has a current File History. I am setting up Computer B and I want to use File History on B to restore from A. Instead, B can't see A's File History and...
Performance & Maintenance
This change to my computer affect my Wife's computer.
When I setup a screensaver slideshow on my Win 10 computer it also sets itself up on my wife's Win 10 machine. How do I stop this? Is this something to do with a network setting that I don't want or need? Thanks
Customization
Install Win 10 on new computer build and keep old computer running
I am in the process of building a new PC. After updating the old existing Win 7 32 bit desktop to Win 10, can I do a clean Win 10 64 bit install on the new build and keep the old computer running while I install all the necessary programs and...
Installation and Upgrade
Steampunk computer computer cases/keyboards....
http://i.imgur.com/6tiV6Mo.jpg http://i.imgur.com/hDcLSPe.jpg http://i.imgur.com/5s8rLWI.jpg http://i.imgur.com/Q7UIuP6.jpg
Chillout Room
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 00:07.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums