Wind. Explorer File, Tk Manag, Startup Screen Icons: No Text, No Access to Files

Viruses and worms
1

Windows Explorer File, Task Manager, Startup Screen Icons: No Text, No Access to Files.

WWW Address Bar appears elongated with mini-text–I can just read it.

Avast! during a Full Scan about 7 days ago detected over 300 (gulp!!!) Rootkits on my computer but when I tried to Move Them To Chest, Avast! said it couldn’t do it and that possibly the files were missing.

I am running an MBAM Scan as suggested but I don’t think I will be able to post the results since there is no text in Windows Explorer File but if it comes up with anything detected, I can try and remove it.

Sorry, I cannot post any screenshots of what I see; all command texts do not appear.

I have been recently experiencing long waits when I restart my computer probably during the last month or two, like around an hour or two. But after the long wait is over, everything works pretty well.

I think I may have experienced something like this in the past, and I think I restarted my computer and I believe that fixed it, but I think I want to try and remove any possible malware first before a restart, given that I may have over 300 Rootkits on the computer.

Any suggestions?

Once MBAM is finished.

I will run the Farbar Recovery Tool if I can access it.

After that, I plan on doing the ?SFC/scannow; ?DISM/Online/Cleanup-Image /CheckHealth; chkdsk; and an updates search in the Windows Search Bar.

Then running a SAS scan if I can get it working; and then maybe another Avast! Scan, and THEN restarting my computer.

Any advice on what I should do next?

I was going to copy my files but I am unable to do it now.

I have maybe 377 GB of storage on my computer left from around 1 T of storage originally.

Here is my Computer Information again:

OS: Windows 10 Home

Processor: Intel(R) Core™ i5-3570k CPU @ 3.40GHz 3.80Ghz

System Type: 64-bit Operating System, x64-based processor

Installed Memory (RAM): 8.00 GB (7.90GB usable)

2
Any advice on what I should do next?
https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/
3

I ran the chkdsk from the elevated Command Promptor as an Administrator and the result was “Windows has scanned the file system and found no problem. No further action is required.”

I could not upload the MBAM scan to the Avast Forum do to having no access to Files and no computer text but the MBAM full scan of the computer system did not detect any Malware.

I will try the Farbar Recovery Scan Tool but I doubt I will be able to upload the results due to the problem

Ok, I ran the System File Checker Utility (sfc / SCANNOW).

It said: “Windows Resource Protection found corrupt files and successfully repaired them.”

Since sfc / SCANNOW successfully repaired the corrupt files, should I still run the various DISM.exe Commands, or do you think that would be not necessary and redundant since the Command-- sfc / SCANNOW was able to repair the corrupt files???

Should I also run Command: chkdsk C: /f /r /x ?

I tried running that Command but I received the following message: “Chkdsk cannot run because the volume is in use by another process.”

It says I could schedule the Command to run the next time the system is restarted?

Do you think I should maybe try that Command?

4

Select schedule the command and restart the system to start the scan.

5

Ok, I was able to copy part of the Farbar Scan; I will have to either run it again or see if there is a log of it in the program because the other second scan part disappeared when I tried unsuccessfully to copy it.

I will have to post it in pieces because I am limited to posting 2000 characters:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2019
Ran by PC (21-12-2019 18:57:14)
Running from C:\Users\PC\Desktop
Windows 10 Home Version 1809 17763.914 (X64) (2019-08-13 05:02:17)
Boot Mode: Normal

==================== Accounts: =============================

Administrator (S-1-5-21-3533682043-2836845763-3782882393-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3533682043-2836845763-3782882393-503 - Limited - Disabled)
Guest (S-1-5-21-3533682043-2836845763-3782882393-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3533682043-2836845763-3782882393-1003 - Limited - Enabled)
PC (S-1-5-21-3533682043-2836845763-3782882393-1000 - Administrator - Enabled) => C:\Users\PC
UpdatusUser (S-1-5-21-3533682043-2836845763-3782882393-1001 - Limited - Enabled) => C:\Users\UpdatusUser
WDAGUtilityAccount (S-1-5-21-3533682043-2836845763-3782882393-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with “Hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3533682043-2836845763-3782882393-1000.…\uTorrent) (Version: 3.5.5.45311 - BitTorrent Inc.)
Adobe Acrobat Reader DC (HKLM-x32.…{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.021.20061 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32.…\Adobe Flash Player NPAPI) (Version: 32.0.0.293 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32.…\Adobe Flash Player PPAPI) (Version: 32.0.0.238 - Adobe)
Apple Application Support (32-bit) (HKLM-x32.…{C3A282C9-4C8B-4A63-B449-3A064FB378D7}) (Version: 8.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM.…{CC046FB9-E84E-4092-B924-DBE33DA2BE75}) (Version: 8.2 - Apple Inc.)
Apple Mobile Device Support (HKLM.…{45DDDFED-AABC-450C-B49C-5B4A5E547F5B}) (Version: 13.0.0.38 - Apple Inc.)
Apple Software Update (HKLM-x32.…{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
ASUS Xonar DG Audio Driver (HKLM.…\C-Media Oxygen HD Audio Driver) (Version: - )
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32.…{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
Avast Driver Updater (HKLM-x32.…{D606EFF9-3813-4875-B455-AECD2E7B0676}) (Version: 2.3.3 - AVAST Software) Hidden
Avast Driver Updater (HKLM-x32.…\Avast Driver Updater) (Version: 2.3.3 - AVAST Software)
Avast Free Antivirus (HKLM-x32.…\Avast Antivirus) (Version: 19.8.2393 - AVAST Software)
Avast Secure Browser (HKLM-x32.…\Avast Secure Browser) (Version: 77.2.2153.120 - AVAST Software)
Avast SecureLine (HKLM.…{2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1) (Version: 5.2.429 - AVAST Software)
Bonjour (HKLM.…{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CameraHelperMsi (HKLM-x32.…{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
Canon DIGITAL CAMERA Solution Disk Software Guide (HKLM-x32.…\Software Guide) (Version: 1.3.0.1 - Canon Inc.)
Canon Easy-WebPrint EX (HKLM-x32.…\Easy-WebPrint EX) (Version: 1.4.0.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32.…\Canon_IJ_Scan_Utility) (Version: - ‪Canon Inc.‬)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM-x32.…\MyCamera Download Plugin) (Version: 3.1.0.1 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32.…\CANON iMAGE GATEWAY Task) (Version: 1.8.0.1 - Canon Inc.)
Canon Internet Library for ZoomBrowser EX (HKLM-x32.…\Canon Internet Library for ZoomBrowser EX) (Version: 1.7.0.1 - Canon Inc.)
Canon MG5400 series MP Drivers (HKLM.…{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5400_series) (Version: 1.00 - Canon Inc.)
Canon MG5400 series On-screen Manual (HKLM-x32.…\Canon MG5400 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon MG5400 series User Registration (HKLM-x32.…\Canon MG5400 series User Registration) (Version: - Canon Inc.‎)
Canon MOV Decoder (HKLM-x32.…\Canon MOV Decoder) (Version: 1.7.0.6 - Canon Inc.)
Canon MOV Encoder (HKLM-x32.…\Canon MOV Encoder) (Version: 1.5.0.3 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32.…\MovieEditTask) (Version: 3.6.0.5 - Canon Inc.)
Canon My Image Garden (HKLM-x32.…\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32.…\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon My Printer (HKLM-x32.…\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Canon Personal Printing Guide (HKLM-x32.…\Personal Printing Guide) (Version: 1.1.1.3 - Canon Inc.)
Canon PowerShot SX130 IS Camera User Guide (HKLM-x32.…\CameraUserGuide-PSSX130IS) (Version: 1.0.0.1 - Canon Inc.)
Canon Quick Menu (HKLM-x32.…\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
Canon Utilities CameraWindow DC 8 (HKLM-x32.…\CameraWindowDC8) (Version: 8.3.0.6 - Canon Inc.)
Canon Utilities CameraWindow Launcher (HKLM-x32.…\CameraWindowLauncher) (Version: 7.5.0.2 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM-x32.…\MovieUploaderForYouTube) (Version: 1.1.0.4 - Canon Inc.)
Canon Utilities MyCamera (HKLM-x32.…\MyCamera) (Version: 7.4.0.2 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32.…\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32.…\ZoomBrowser EX) (Version: 6.6.0.23 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32.…\ZoomBrowser EX Memory Card Utility) (Version: 1.4.0.4 - Canon Inc.)

6

Discord (HKU\S-1-5-21-3533682043-2836845763-3782882393-1000.…\Discord) (Version: 0.0.305 - Discord Inc.)
Dropbox (HKU\S-1-5-21-3533682043-2836845763-3782882393-1000.…\Dropbox) (Version: 87.4.138 - Dropbox, Inc.)
erLT (HKLM-x32.…{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
GameSpy Comrade (HKLM-x32.…{894084B6-BC69-43B7-BF06-B93AECFEA520}) (Version: 2.1.1.214 - GameSpy)
Google Chrome (HKLM-x32.…\Google Chrome) (Version: 79.0.3945.88 - Google LLC)
Google Photos Backup (HKU\S-1-5-21-3533682043-2836845763-3782882393-1000.…\Google Photos Backup) (Version: 1.1.4.11 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32.…{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32.…{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32.…{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
Google Update Helper (HKLM-x32.…{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
HeavyLoad V3.3 (64 bit) (HKLM.…\HeavyLoad_is1) (Version: 3.3 - JAM Software)
iCloud (HKLM.…{4E727621-3550-4CE0-883E-F27D7D7E0D2C}) (Version: 7.16.0.15 - Apple Inc.)
Intel(R) Management Engine Components (HKLM-x32.…{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32.…{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32.…{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
iTunes (HKLM.…{9C96D8AC-EE43-4B47-877C-D11595511C8E}) (Version: 12.10.3.1 - Apple Inc.)
Java 8 Update 201 (HKLM-x32.…{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Logitech Webcam Software (HKLM-x32.…{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Malwarebytes version 4.0.4.49 (HKLM.…{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32.…{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3533682043-2836845763-3782882393-1000.…\OneDriveSetup.exe) (Version: 19.192.0926.0012 - Microsoft Corporation)
Microsoft Silverlight (HKLM.…{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32.…{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM.…{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM.…{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM.…{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32.…{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32.…{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM.…{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32.…{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32.…{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32.…{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32.…{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 71.0 (x64 en-US) (HKLM.…\Mozilla Firefox 71.0 (x64 en-US)) (Version: 71.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32.…\MozillaMaintenanceService) (Version: 71.0.0.7275 - Mozilla)
NVIDIA 3D Vision Driver 340.52 (HKLM.…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA Graphics Driver 340.52 (HKLM.…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.30.1 (HKLM.…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Update 10.4.0 (HKLM.…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)

7

OpenAL (HKLM-x32.…\OpenAL) (Version: - )
OpenOffice 4.0.1 (HKLM-x32.…{47F460DA-D1BE-4D85-8DF2-AA1F31D3445F}) (Version: 4.01.9714 - Apache Software Foundation)
Picasa 3 (HKLM-x32.…\Picasa 3) (Version: 3.9 - Google, Inc.)
Platform (HKLM-x32.…{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.40 - VIA Technologies, Inc.) Hidden
Print@Home (HKLM-x32.…{123D4082-3194-4191-9139-067E9157C2B2}) (Version: 2.0.0 - Valassis Interactive Inc.)
PunkBuster Services (HKLM-x32.…\PunkBusterSvc) (Version: 0.987 - Even Balance, Inc.)
RealDownloader (HKLM-x32.…{400538DB-DACD-4DBF-B7AF-0647A19C6DE6}) (Version: 18.1.19.201 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM-x32.…{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM-x32.…{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}) (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32.…\RealPlayer 18.1) (Version: 18.1.19 - RealNetworks)
RealTimes (RealPlayer) (HKLM-x32.…\RealPlayer 18.0) (Version: 18.0.2 - RealNetworks)
RealUpgrade 1.1 (HKLM-x32.…{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Skype Web Plugin (HKLM-x32.…{27A9512F-B284-490A-97B7-40713556476D}) (Version: 7.21.0.159 - Skype Technologies S.A.)
Skype™ 7.41 (HKLM-x32.…{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.41.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3533682043-2836845763-3782882393-1000.…\Spotify) (Version: 1.1.19.480.g7d17e3ce - Spotify AB)
Steam (HKLM-x32.…\Steam) (Version: - Valve Corporation)
Stellar Phoenix Windows Data Recovery - Professional (HKLM-x32.…\Stellar Phoenix Windows Data Recovery - Professional_is1) (Version: 6.0.0.0 - Stellar Information Systems Ltd)
SUPERAntiSpyware (HKLM.…{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1042 - SUPERAntiSpyware.com)
TeamViewer 9 (HKLM-x32.…\TeamViewer 9) (Version: 9.0.31064 - TeamViewer)
Unity Web Player (HKU\S-1-5-21-3533682043-2836845763-3782882393-1000.…\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM.…{F14FB68A-9188-4036-AD0D-D054BC9C9291}) (Version: 2.59.0.0 - Microsoft Corporation)
UpdateService (HKLM-x32.…{E3AE96D6-E196-45B4-AF62-2B41998B9E37}) (Version: 1.0.0 - RealNetworks, Inc.) Hidden
vc2012_redist (HKLM-x32.…{9402AEF2-5981-4097-8BE2-6501DAC4DBFD}) (Version: 1.0.0.0 - Realnetworks) Hidden
VIA Platform Device Manager (HKLM-x32.…\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.40 - VIA Technologies, Inc.)
vs2015_redist x64 (HKLM.…{EAED8692-5B63-4665-B857-D626633691DA}) (Version: 1.0.0.0 - Realnetworks) Hidden
vs2015_redist x86 (HKLM-x32.…{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Windows 10 Update Assistant (HKLM-x32.…{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22589 - Microsoft Corporation)
WinRAR 5.71 (64-bit) (HKLM.…\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)
Yahoo Messenger (HKU\S-1-5-21-3533682043-2836845763-3782882393-1000.…\yahoomessenger) (Version: 0.8.288 - Yahoo! Inc)
Yahoo! Messenger (HKLM-x32.…\Yahoo! Messenger) (Version: - Yahoo! Inc.)
Yahoo! Software Update (HKLM-x32.…\Yahoo! Software Update) (Version: - )
Yahoo! Toolbar (HKLM-x32.…\Yahoo! Companion) (Version: - Yahoo! Inc.)

8

Packages:

Candy Crush Saga → C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1661.1.0_x86__kgqvnymyfvs32 [2019-12-20] (king.com)
Candy Crush Soda Saga → C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.154.400.0_x86__kgqvnymyfvs32 [2019-12-11] (king.com)
Canon Inkjet Print Utility → C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.8.0.1_neutral__6e5tt8cgb93ep [2019-05-23] (Canon Inc.)
Disney Magic Kingdoms → C:\Program Files\WindowsApps\A278AB0D.DisneyMagicKingdoms_4.6.0.10_x86__h6adky7gbf63m [2019-12-17] (Gameloft.)
Hulu → C:\Program Files\WindowsApps\HuluLLC.HuluPlus_2.5.5.0_neutral__fphbd361v8tya [2019-11-21] (Hulu.)
Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-17] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-17] (Microsoft Corporation) [MS Ad]
Microsoft News → C:\Program Files\WindowsApps\Microsoft.BingNews_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection → C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-11] (Microsoft Studios) [MS Ad]
MSN Money → C:\Program Files\WindowsApps\Microsoft.BingFinance_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Corporation) [MS Ad]
MSN Sports → C:\Program Files\WindowsApps\Microsoft.BingSports_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Corporation) [MS Ad]
MSN Weather → C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Corporation) [MS Ad]
Photos Add-on → C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2018-09-13] (Microsoft Corporation)
Photos Media Engine Add-on → C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-09-12] (Microsoft Corporation)
Twitter → C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-08] (Twitter Inc.)
WindowsDVDPlayer → C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.13291.0_x64__8wekyb3d8bbwe [2015-11-13] (Microsoft Corporation)

9

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.35.422\psuser_64.dll (Google LLC → Google LLC)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{7B901B1C-1210-4C6D-B66C-2028783DAE2A}\InprocServer32 → C:\Users\PC\AppData\Local\SkypePlugin\7.21.0.159\GatewayActiveX-x64.dll (Microsoft Corporation → Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 → C:\WINDOWS\system32\igfxEM.exe (Intel(R) pGFX → Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{E31EA727-12ED-4702-820C-4B6445F28E1A} → [Dropbox] => C:\Users\PC\Dropbox [2014-04-25 17:33]
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{E31EA727-12ED-4702-820C-4B6445F28E1B} → [dropbox-NamespaceExtensionRole.Business] => 0
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.35.422\psuser_64.dll (Google LLC → Google LLC)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 → C:\Users\PC\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3533682043-2836845763-3782882393-1000_Classes\CLSID{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 → C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc → Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-09] (AVAST Software s.r.o. → AVAST Software)
ShellIconOverlayIdentifiers: [00avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-09] (AVAST Software s.r.o. → AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] → {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] → {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] → {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] → {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] → {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] → {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] → {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ContextMenuHandlers1: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-09] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers1: [PhotoStreamsExt] → {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-12-09] (Apple Inc. → Apple Inc.)
ContextMenuHandlers1: [WinRAR] → {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH → Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] → {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH → Alexander Roshal)
ContextMenuHandlers3: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-09] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] → {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation → Malwarebytes)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] → {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => c:\program files (x86)\real\realplayer\RPDS\Bin64\rpcontextmenu.dll [2019-12-14] (RealNetworks, Inc. → RealNetworks, Inc.)
ContextMenuHandlers5: [Gadgets] → {6B9228DA-9C15-419e-856C-19E768A13BDC} => → No File
ContextMenuHandlers5: [igfxcui] → {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => → No File
ContextMenuHandlers5: [igfxDTCM] → {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Microsoft Windows Hardware Compatibility Publisher → Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] → {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2014-07-02] (NVIDIA Corporation → NVIDIA Corporation)
ContextMenuHandlers6: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-09] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] → {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation → Malwarebytes)
ContextMenuHandlers6: [WinRAR] → {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH → Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] → {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH → Alexander Roshal)
ContextMenuHandlers1_S-1-5-21-3533682043-2836845763-3782882393-1000: [DropboxExt] → {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-3533682043-2836845763-3782882393-1000: [DropboxExt] → {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-3533682043-2836845763-3782882393-1000: [DropboxExt] → {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\PC\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc → Dropbox, Inc.)

10

Ok here’s the last part:

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM.…\Drivers32: [vidc.i420] => C:\WINDOWS\system32\lvcod64.dll [175392 2015-11-02] (Logitech, Inc. → Logitech Inc.)
HKLM.…\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [305000 2015-11-02] (Logitech, Inc. → Logitech Inc.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"“,Filter=”__EventFilter.Name="BVTFilter"::
WMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA “Win32_Processor” AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\tools\kernrate]

==================== Loaded Modules (Whitelisted) =============

2013-12-30 20:16 - 2012-03-28 12:01 - 000359936 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMN6PPM.DLL
2013-10-29 00:18 - 2010-09-17 12:53 - 000121856 _____ (C-Media Electronics Inc.) [File not signed] C:\Windows\System\HsSrv64.dll
2019-03-25 00:41 - 2018-09-05 20:32 - 002095104 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\AVAST Software\SecureLine\libcrypto-1_1.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The “AlternateShell” will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => “”=“Service”

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2019-05-10 01:18 - 000000882 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\Path → C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;c:\Program Files (x86)\Intel\iCLS Client;c:\Program Files\Intel\iCLS Client;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Skype\Phone;%SYSTEMROOT%\System32\OpenSSH
HKU\S-1-5-21-3533682043-2836845763-3782882393-1000\Control Panel\Desktop\Wallpaper → C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp
HKU\S-1-5-21-3533682043-2836845763-3782882393-1001\Control Panel\Desktop\Wallpaper →
DNS Servers: 192.168.2.1 - 75.75.75.75
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

11

@ Jobber
It would have been far easier to attach the farbar log file.

The other problem is that it has been a very long time since we have had any Qualified Malware Removal Specialists active on the forum.

12

Dear DavidR:

Part of the problem with my computer is there is no text commands in most of my Apps and Programs, so the Farbar results just came out in a text box with the results but no way to save or upload it and I cannot access Windows Explorer File, so if was saved in My Downloads, I cannot get to it.

Hence, that’s why I copied and pasted it out here.

–Jobber

13

I appreciate that, but if there were any qualified malware removal specialists on the forums, it makes it harder with the information split over many posts.

Surely you have notepad.exe it comes with windows, you could have opened notepad and copied the Farbar results from the text box into notepad and saved that as a .txt file.

I have collated what you posted into one .txt file attached, you should be able to download and save that.

Right click on the file name and select Save Link As.

14

Thank you David R. for the collation. I appreciate it very much.

Well, everything on the computer crashed on me and the computer came to a grinding halt, with no text and a large balloon like Startup Screen with large balloon like program icons on the Startup Screen.

I worked on it to the bitter end until nothing on the computer was working; so I crossed my fingers and Restarted the computer hoping for the best, and voila!, after a anxious 1 hour wait at the PC Screen with the little white dash circle spinning around, I was able to get into Windows 10.

So my computer is at least in working order: I can get into Windows Explorer File, Task Manager, and have the normal computer text.

I have worked on this the last 2 days now for many hours, so, maybe I will take a break tomorrow and then come back on Sunday and try and post all the scan information.

15

I think the point of Pondus’s post was to follow the instructions on the MBAM link and follow through on that site. The reasoning being that they still have a number of Qualified Malware Removal Specialists active on that forum.

Once you have run the scans to start a new topic on the MBAM forum.

I appreciate that may be difficult given the condition of your system, but infected systems being reported in then Avast Viruses and Worms sub-forum have dropped massively. So those qualified Malware Removal Specialists active on this forum have fallen and activity also. I’m certainly not qualified.