Hi, dbrisendine and Eddy,
PFA FRST and Addition files.
Thanks again and again for your help.
FIRST >>>>
Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed):
Google Chrome Packages
To do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window.
Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software.
SECOND >>>>
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
- Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
- Press the Fix button just once and wait.
- If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
- When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please attach it to your reply.
Hi, dbrisendine and Eddy,
Thanks again for your help.
When I opened Control Panel to Uninstall Programs, Google Chrome Packages is in the list.
The “Installed On” date is in 2015. Nothing is shown in the Size column.
When I clicked on uninstall Google Chrome Packages, I got this message:
You have already uninstalled all the offers that came with Google Chrome Packages or that the installation is still in progress.
So, I clicked on CLOSE.
Then, I ran FRST and clicked on Fix. The Fixlog.txt file is attached.
Then, I saw the list of programs using Control Panel. Google Chrome Packages is still there. When I click on Uninstall, I get the same message as before.
The date is still in 2015 and the size is not shown.
Thanks again.
Run a few searchs with FRST.
First a registry search.
- Right click on FRST on your desktop and select “Run as Administrator…” When the tool opens click Yes to disclaimer.
- Type Google Chrome Packages into the Search Box.
- Press the Search Registry button.
- It will produce a log called SearchReg.txt in the same directory the tool is run from.
- Please attach the log file back here.
Run a File Search with FRST.
- Right click on FRST on your desktop and select “Run as Administrator…” When the tool opens click Yes to disclaimer.
- Type Google Chrome Packages into the Search Box.
- Press the Search Files button.
- It will produce a log called SearchFiles.txt or Search.txtin the same directory the tool is run from.
- Please attach the log file back here.
Hi, dbrisendine and Eddy,
Thanks again for your help.
I have attached the Search and SearchReg files. I have also attached a Screen Shot of the Processes that are running.
It shows that AvasuUI is running but nothing happens when a right-click on a filename is followed by a Scan with Avast.
Thanks.
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
- Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
- Press the Fix button just once and wait.
- If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
- When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please attach it to your reply.
Hi dbrisendine,
Great news. I followed your instructions. After running FRST Fix, Google Chrome Packages is no longer running in the computer.
PFA the Fixlog file.
I uninstalled the Avast program. I have downloaded the off-line Avast installer using another computer. Should I install Avast using the off-line installer or …? There is no anti-virus running in the computer now.
Thanks again.
Install Avast using the offline installation file. Once installed, please reboot the system (if the installer does not ask for it) and then run a update in Avast until it tells you there are no more updates.
Tell us how this progresses for you.
Hi dbrisendine,
Avast Free Anitvirus is now running. It is seen in Programs and Features. Google Chrome Packages is not there in the list.
Avast icons is there in the Notification area.
However, I see “You are unprotected. Avast background service is not running”. Clicking on “Start Now” or “Resolve All” seems to do nothing.
Under components, File Sys Shield, Mail Shield, and Web Shield are OFF.
Software Updater, Browser Cleanup, and others are ON.
I tried to Update. The current version of the program is 12.3.2280 (build 12.3.3154.0). Release date 1/1/1970.
For virus definitions, when I try to update, it says “Failed to update. The Avast service is not running”.
I restarted. Then did an Update on the program. I was offered Essential update or Essential update + internet Security. I chose Essential. There is no change in the Program Current Version number. For virus definitions, Current version is unknown. Update failed.
Will registration of Avast help? I will ask the owner to do so using owner’s email id.
Thanks and thanks again.
The registration is valid till next month, it says.
When I click on register now, I get a “The AAVM subsystem detected a RPC error” message.
The registration is valid till next month, it says.Sounds like it now is a 30 day trial.
When I click on register now, I get a "The AAVM subsystem detected a RPC error" message.Perform a repair of avast. If that doesn't solve it, perform a clean installation.
Hi, dbrisendine and Eddy,
Thanks for your advice.
After my last post, I did a “repair” of Avast. File Sys Shield, Mail Shield, and Web Shield remained OFF. This was my original problem (reported in my first post).
I did a clean install of AVAST. I followed the steps in https://goo.gl/4Ptzkf including the AVASTClear uninstall in safe mode.
I did an off-line AVAST installation using a downloaded 220 MB file. The file is about one month old. The three shields remained OFF. I could not Update at that time. I can try to do that if you think it will be useful.
Thanks again.
When you uninstalled Avast did Windows Defender turn on or become enabled?
The following scanner will check the state of the services running on your system.
Please download Farbar Service Scanner to your desktop and double click on the file to run it.
Make sure the following options are checked:
Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender
Other Services
Press “Scan”.
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.
Hi dbrisendine and Eddy
Windows Defender Service has stopped. I checked it first and then ran FSS. All options were checked.
Thank you very much for the help that you continue to give.
The FSS.txt file is below.
Farbar Service Scanner Version: 27-01-2016
Microsoft Windows 7 Ultimate (X86)
Boot Mode: Normal
Internet Services:
Connection Status:
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Windows Firewall:
Firewall Disabled Policy:
System Restore:
System Restore Policy:
Action Center:
Windows Update:
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.
BITS Service is not running. Checking service configuration:
The start type of BITS service is OK.
The ImagePath of BITS service is OK.
The ServiceDll of BITS service is OK.
Windows Autoupdate Disabled Policy:
Windows Defender:
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.
Windows Defender Disabled Policy:
Other Services:
File Check:
C:\Windows\system32\nsisvc.dll => File is digitally signed
C:\Windows\system32\Drivers\nsiproxy.sys => File is digitally signed
C:\Windows\system32\dhcpcore.dll => File is digitally signed
C:\Windows\system32\Drivers\afd.sys => File is digitally signed
C:\Windows\system32\Drivers\tdx.sys => File is digitally signed
C:\Windows\system32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\system32\dnsrslvr.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\mpssvc.dll => File is digitally signed
C:\Windows\system32\bfe.dll => File is digitally signed
C:\Windows\system32\Drivers\mpsdrv.sys => File is digitally signed
C:\Windows\system32\SDRSVC.dll => File is digitally signed
C:\Windows\system32\vssvc.exe => File is digitally signed
C:\Windows\system32\wscsvc.dll => File is digitally signed
C:\Windows\system32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\system32\wuaueng.dll => File is digitally signed
C:\Windows\system32\qmgr.dll => File is digitally signed
C:\Windows\system32\es.dll => File is digitally signed
C:\Windows\system32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\system32\ipnathlp.dll => File is digitally signed
C:\Windows\system32\iphlpsvc.dll => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
**** End of log ****
Please download “Windows Repair - All in One” from here. Please choose “Save file…” if you get options to open the file. Once the download is complete, run the file and install the program on your system. Please use the default settings for locations as it will help with log retrieval and fixing the registry should anything be needed.
Right click on the desktop shortcut for “Tweaking.com - Windows Repair” and select ‘Run as administrator’.
The program will run a self check to make sure that all the correct files are in place for it to run and then it will load the program. As you can see, there are many steps to take in using this program. Mainly, the first few steps involve checking for proper Windows files and backing up the system as a precaution.
You can read the notes on the first screen but the important thing to do is click on “ReBoot to Safe Mode” and allow the system to restart itself. Once the system is started in safe mode and you have logged in (using an administrative level account), restart the program and move onto the Step2 screen.
Please click on “Open Pre-Scan” to load a utility to verify some Windows resource / build files and settings.
Click on “Start Scan” and allow the routine to run. You can see the status of the checks in the window.
When the routine is finished, it will report on any problems found and you can click on the appropriate repair button if needed. Once this is done, you can close this window and click on Step3.
Click on the “Check” to see if a repair disk check routine needs to run. A Command Prompt window will open and you can view the status of the routine. If the routine finds that repairs need to be made, please select “Open Disk Check at Next Boot” and then click on the “Reboot To Safe Mode” button. Once the routine(s) completes, please select Step4.
Please click on “Do It” to run a SFC /scannow routine. If the routine makes any repairs, please reboot your system (again into Safe Mode). If the routine does not make any repairs, please move onto Step5.
Once there, click on “Backup” under the 1. Registry Backup. This will make a complete backup of the current registry which can be reloaded should anything go wrong with the repairs that are going to be made. Next, click on the “Create” under 2. System Restore. Once both of these backups are made, select Repairs.
I would suggest that you read the Tips For The Best Repairs Results. Once this is done, click on “Open Repairs”.
On this screen, uncheck All Repairs and then check All Repairs. Click “Start Repairs” and confirm that the program starts running the fixes. This will take a while to run, so you can let it run unattended if you like. Log files are being recorded as the repairs are being executed. Once the repairs are finished, reboot your system (normal boot now) and tell me how it is running now.