Slow Laptop, nothing specific

**Malnutrition** · 02-22-2017, 09:53 PM

Please uninstall the programs listed below with Geek Uninstaller.

Best Buy pc app (Version: 3.0.0.0 - Best Buy) Hidden
Bing Bar (HKLM-x32...{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
Easy SpeedUp Manager (HKLM-x32...{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.1.1.1 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (HKLM-x32...{4A331D24-A9E8-484F-835E-1BA7B139689C}) (Version: 4.0.0.4 - Samsung)
EasyFileShare (HKLM-x32...{EA76E65F-6679-495A-A8A6-42AD6602ED4C}) (Version: 1.0.11 - Samsung)
Java 8 Update 101 (HKLM-x32...{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
McAfee Security Scan Plus (HKLM...\McAfee Security Scan) (Version: 3.11.500.3 - McAfee, Inc.)
Mozilla Maintenance Service (HKLM-x32...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
WildTangent Games (HKLM-x32...\WildTangent wildgames Master Uninstall) (Version: 1.0.1.5 - WildTangent)

Update all old programs with Patch My PC – One click and free.

FRST Fix.

Download attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Zemana Scan.

Please download Zemana AntiMalware and save it to your Desktop.
[ul]
[li]Install the program and once the installation is complete it will start automatically.[/li][li]Click the Cog/Sproket Wheel, https://pchelpforum.net/attachments/...3-19-png.1462/ at the top right of Zemana[/li][li]Select Advanced - I have read the warning and wish to proceed.[/li][li]Place a tick next to Detect Suspicious (Root CA) Certificates.[/li][li]Then click the house icon in Zemana.[/li][li]Then, press Scan to begin.[/li][li]After the short scan is finished, if threats are detected press Next to remove them.[/li][/ul]
Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn’t required, please restart your computer manually.
[ul]
[li]Open Zemana AntiMalware again.[/li][li]Click on http://i63.tinypic.com/4zu6vb.jpg icon and double click the latest report.[/li][li]Now click File > Save As and choose your Desktop before pressing Save.[/li][li]The only left thing is to Copy Paste saved report in your next message.[/li][/ul]
[ul]
[li]This will open a logfile, post that in your next reply[/li][/ul]

**Cory** · 02-23-2017, 01:01 PM

Still working on it. Life, “the bar” got in the way last night.

The best buy app that is hidden was not in the geek tool, How should i remove it? I had already removed some of the other bust buy apps.

**Malnutrition** · 02-23-2017, 01:04 PM

Originally posted by Cory

How should i remove it?

File Search With Everything Search Engine.

Download and install the Everything Search Engine
Right Click Run As Admin. Type or Copy Paste best buy into search window.
Then Click Edit. >>>Select all.
Right Click highlighted items>>>>>>>> Copy full name to clipboard.
Paste content of clipboard, here in your next reply.

**Cory** · 02-23-2017, 08:37 PM

here is the FRST fix file:

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-02-2017 01

[/quote]

[HEADING=1]Ran by Tonya (23-02-2017 14:18:31) Run:1
Running from C:\Users\Tonya\Desktop
Loaded Profiles: Tonya (Available Profiles: Tonya)
Boot Mode: Normal[/HEADING]
fixlist content:

start
emptytemp:
CloseProcesses:
CreateRestorePoint:
HKLM-x32...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000...\MountPoints2: {4be0b2c6-d323-11e5-9fd1-e8039a37613a} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000...\MountPoints2: {4c9d58d1-59f7-11e1-8884-806e6f6e6963} - E:\Start.exe
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000...\MountPoints2: {fc124739-1a20-11e5-a1c0-e8039a37613a} - F:\LG_PC_Programs.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Amazon Unbox.lnk [2013-01-29]
ShortcutTarget: Amazon Unbox.lnk → C:\Program Files (x86)\Amazon\Amazon Unbox Video\ADVWindowsClientSystemTray.exe (Amazon.com)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-02-02]
ShortcutTarget: McAfee Security Scan Plus.lnk → C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\Startup\Best Buy pc app.lnk [2012-02-01]
ShortcutTarget: Best Buy pc app.lnk → C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk [2012-02-01]
ShortcutTarget: Best Buy pc app.lnk → C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)
C:\ProgramData\Best Buy pc app
C:\Program Files\McAfee Security Scan
Tcpip\Parameters: [DhcpNameServer] 75.75.76.76 75.75.75.75
Tcpip..\Interfaces{3948824D-B2F4-423C-A1D2-78CAED095655}: [DhcpNameServer] 192.168.0.1 205.171.3.25
Tcpip..\Interfaces{8B2C9FE4-360D-455D-B5AA-B6F66AF92C97}: [DhcpNameServer] 75.75.76.76 75.75.75.75
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com/
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
SearchScopes: HKLM-x32 → DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
SearchScopes: HKLM-x32 → {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14] (CANON INC.)
BHO-x32: Bing Bar Helper → {d2ce3e00-f94a-4740-988e-03dc2f38c34f} → C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.)
FF NetworkProxy: Mozilla\Firefox\Profiles\pcw27saw.default → type", 4
FF Plugin: @microsoft.com/GENUINE → disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE → disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 → C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 → C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\Peppe rFlash\pepflashplayer.dll => No File
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\ppGoo gleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\pdf.d ll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => No File
CHR Plugin: (Java™ Platform SE 7 U10) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => No File
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll => No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll => No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_50 2_149.dll => No File
CHR Plugin: (Java Deployment Toolkit 7.0.100.18) - C:\windows\SysWOW64\npDeployJava1.dll => No File
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
C:\ProgramData\Avg
C:\Users\Tonya\AppData\Local\AvgSetupLog
C:\Users\Tonya\AppData\Local\Avg
C:\Users\Tonya\Downloads\AVG_Protection_Free_1606. exe
C:\windows\System32\Tasks\Adobe Acrobat Update Task
C:\Users\Tonya\AppData\Local{81BBAFF1-8DC9-4541-8384-B85370A15226}
C:\Users\Tonya\AppData\Local{5C8F2909-566B-47D4-8101-10F51F5CD5C9}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
C:\windows\Tasks\Adobe Flash Player Updater.job
C:\windows\System32\Tasks\Adobe Flash Player Updater
C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
C:\ProgramData{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
C:\ProgramData{34FBC7C4-CD31-4D93-A428-0E524EAC4586}.log
C:\ProgramData{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
C:\ProgramData{80E158EA-7181-40FE-A701-301CE6BE64AB}.log
C:\ProgramData{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Task: {069BB839-FC15-419E-8C6F-7DDB43847102} - System32\Tasks\SUPBackground => C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe [2010-08-26] (Samsung Electronics)
Task: {1191F933-570A-4668-85A6-86A35A38883E} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe [2010-08-04] (Samsung Electronics Co., Ltd.)
Task: {148F1AA6-732D-4488-9646-1C5A3A359D86} - System32\Tasks\EasySpeedUpManager => C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManage r2.exe [2010-12-22] (Samsung Electronics)
Task: {1647740E-1BAE-465F-8326-5345FD017923} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)
Task: {2DEDB326-6F84-4453-B8A4-FBEE8D32A27A} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe [2017-02-16] (Adobe Systems Incorporated)
Task: {40704A58-0AB1-4216-86B8-E73BC5AB5639} - System32\Tasks\MovieColorEnhancer => C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-11-28] (Samsung Electronics Co., Ltd.)
Task: {44BF78AC-944F-4FAE-86A8-0208DF37C8E2} - System32\Tasks\EasyBatteryManager => C:\Program Files (x86)\Samsung\EasyBatteryManager\EasyBatteryMgr4.e xe [2010-07-19] (SAMSUNG Electronics co., LTD.)
Task: {5080A8AD-21F0-4996-98EC-EAD722F95AAF} - System32\Tasks\SamsungSupportCenter => C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe [2011-09-04] (SAMSUNG Electronics)
Task: {AE68459D-AFEF-4D5D-A82E-0496E00A6FF6} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [2010-12-23] (Samsung Electronics Co., Ltd.)
Task: {CDB304D7-81BA-4E03-B39F-6410CDA32002} - System32\Tasks\advSRS5 => C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2010-11-17] (SEC)
Task: {DBFA864B-B8C3-48B2-9C26-243CB8860C17} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExten der.exe [2010-12-17] (Samsung Electronics. Co. Ltd.)
Task: {E1376645-1707-4E45-AC11-C8112ECD7C94} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)
Task: {EEF72E03-9A7E-4223-AEBC-204D70C87AC4} - System32\Tasks\EasyPartitionManager => C:\Windows\MSetup\BA46-12225A02\EPM.exe
Task: {F185412F-8A50-4006-957D-71BEF30733E0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {F2640E01-75F3-4907-BA34-FDFEAAAEC299} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2010-11-10] (CyberLink)
C:\windows\Tasks\Adobe Flash Player Updater.job
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state On
CMD: ipconfig /flushdns
C:\windows\system32\Drivers\etc\hosts
Hosts:
reboot:
end

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Run\QuickTime Task => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Run\SunJavaUpdateSched => value not found.
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\MountPoints2{4be0b2c6-d323-11e5-9fd1-e8039a37613a} => key removed successfully
HKCR\CLSID{4be0b2c6-d323-11e5-9fd1-e8039a37613a} => key not found.
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\MountPoints2{4c9d58d1-59f7-11e1-8884-806e6f6e6963} => key removed successfully
HKCR\CLSID{4c9d58d1-59f7-11e1-8884-806e6f6e6963} => key not found.
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\MountPoints2{fc124739-1a20-11e5-a1c0-e8039a37613a} => key removed successfully
HKCR\CLSID{fc124739-1a20-11e5-a1c0-e8039a37613a} => key not found.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Amazon Unbox.lnk => moved successfully
C:\Program Files (x86)\Amazon\Amazon Unbox Video\ADVWindowsClientSystemTray.exe => moved successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk => not found.
C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe => not found.
C:\Users\Default\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\Startup\Best Buy pc app.lnk => moved successfully
C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe => moved successfully
C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk => not found.
C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe => not found.
C:\ProgramData\Best Buy pc app => moved successfully
“C:\Program Files\McAfee Security Scan” => not found.
HKLM\System\CurrentControlSet\Services\Tcpip\Param eters\DhcpNameServer => value removed successfully
HKLM\System\CurrentControlSet\Services\Tcpip\Param eters\Interfaces{3948824D-B2F4-423C-A1D2-78CAED095655}\DhcpNameServer => value removed successfully
HKLM\System\CurrentControlSet\Services\Tcpip\Param eters\Interfaces{8B2C9FE4-360D-455D-B5AA-B6F66AF92C97}\DhcpNameServer => value removed successfully
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\Software\Microsoft\Internet Explorer\Main\Start Page => value restored successfully
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\Software\Microsoft\Internet Explorer\Main\Default_Page_URL => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key removed successfully
HKCR\Wow6432Node\CLSID{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{8dcb7100-df86-4384-8842-8fa844297b3f} => value not found.
HKCR\Wow6432Node\CLSID{8dcb7100-df86-4384-8842-8fa844297b3f} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} => value removed successfully
HKCR\Wow6432Node\CLSID{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Curren tVersion\Explorer\Browser Helper Objects{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => key not found.
HKCR\Wow6432Node\CLSID{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => key not found.
Firefox Proxy settings were reset.
HKLM\Software\MozillaPlugins@microsoft.com/GENUINE => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins@microsoft.com/GENUINE => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins@tools.google.com/Google Update;version=3 => key removed successfully
C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll => moved successfully
HKLM\Software\Wow6432Node\MozillaPlugins@tools.google.com/Google Update;version=9 => key removed successfully
C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\Peppe rFlash\pepflashplayer.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\ppGoo gleNaClPluginChrome.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\pdf.d ll => not found.
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => not found.
C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => not found.
C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => not found.
C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll => not found.
C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll => not found.
C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_50 2_149.dll => not found.
C:\windows\SysWOW64\npDeployJava1.dll => not found.
McComponentHostService => service not found.
C:\ProgramData\Avg => moved successfully
C:\Users\Tonya\AppData\Local\AvgSetupLog => moved successfully
C:\Users\Tonya\AppData\Local\Avg => moved successfully
C:\Users\Tonya\Downloads\AVG_Protection_Free_1606. exe => moved successfully
C:\windows\System32\Tasks\Adobe Acrobat Update Task => moved successfully
C:\Users\Tonya\AppData\Local{81BBAFF1-8DC9-4541-8384-B85370A15226} => moved successfully
C:\Users\Tonya\AppData\Local{5C8F2909-566B-47D4-8101-10F51F5CD5C9} => moved successfully
“C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus” => not found.
C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 => moved successfully
C:\windows\Tasks\Adobe Flash Player Updater.job => moved successfully
C:\windows\System32\Tasks\Adobe Flash Player Updater => moved successfully
“C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk” => not found.
C:\ProgramData{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log => moved successfully
C:\ProgramData{34FBC7C4-CD31-4D93-A428-0E524EAC4586}.log => moved successfully
C:\ProgramData{40BF1E83-20EB-11D8-97C5-0009C5020658}.log => moved successfully
C:\ProgramData{80E158EA-7181-40FE-A701-301CE6BE64AB}.log => moved successfully
C:\ProgramData{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{069BB83 9-FC15-419E-8C6F-7DDB43847102} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{069BB83 9-FC15-419E-8C6F-7DDB43847102} => key removed successfully
C:\windows\System32\Tasks\SUPBackground => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SUPBackg round => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{1191F93 3-570A-4668-85A6-86A35A38883E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{1191F93 3-570A-4668-85A6-86A35A38883E} => key removed successfully
C:\windows\System32\Tasks\SmartRestarter => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartRes tarter => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{148F1AA 6-732D-4488-9646-1C5A3A359D86} => key not found.
C:\windows\System32\Tasks\EasySpeedUpManager => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EasySpee dUpManager => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain{1647740 E-1BAE-465F-8326-5345FD017923} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{1647740 E-1BAE-465F-8326-5345FD017923} => key removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskMachineU A => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUp dateTaskMachineUA => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain{2DEDB32 6-6F84-4453-B8A4-FBEE8D32A27A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{2DEDB32 6-6F84-4453-B8A4-FBEE8D32A27A} => key removed successfully
C:\windows\System32\Tasks\Adobe Flash Player Updater => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{40704A5 8-0AB1-4216-86B8-E73BC5AB5639} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{40704A5 8-0AB1-4216-86B8-E73BC5AB5639} => key removed successfully
C:\windows\System32\Tasks\MovieColorEnhancer => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MovieCol orEnhancer => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{44BF78A C-944F-4FAE-86A8-0208DF37C8E2} => key not found.
C:\windows\System32\Tasks\EasyBatteryManager => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EasyBatt eryManager => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{5080A8A D-21F0-4996-98EC-EAD722F95AAF} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{5080A8A D-21F0-4996-98EC-EAD722F95AAF} => key removed successfully
C:\windows\System32\Tasks\SamsungSupportCenter => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SamsungS upportCenter => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{AE68459 D-AFEF-4D5D-A82E-0496E00A6FF6} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{AE68459 D-AFEF-4D5D-A82E-0496E00A6FF6} => key removed successfully
C:\windows\System32\Tasks\EasyDisplayMgr => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EasyDisp layMgr => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{CDB304D 7-81BA-4E03-B39F-6410CDA32002} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{CDB304D 7-81BA-4E03-B39F-6410CDA32002} => key removed successfully
C:\windows\System32\Tasks\advSRS5 => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\advSRS5 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{DBFA864 B-B8C3-48B2-9C26-243CB8860C17} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{DBFA864 B-B8C3-48B2-9C26-243CB8860C17} => key removed successfully
C:\windows\System32\Tasks\BatteryLifeExtender => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BatteryL ifeExtender => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{E137664 5-1707-4E45-AC11-C8112ECD7C94} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{E137664 5-1707-4E45-AC11-C8112ECD7C94} => key removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskMachineC ore => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUp dateTaskMachineCore => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{EEF72E0 3-9A7E-4223-AEBC-204D70C87AC4} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{EEF72E0 3-9A7E-4223-AEBC-204D70C87AC4} => key removed successfully
C:\windows\System32\Tasks\EasyPartitionManager => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EasyPart itionManager => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{F185412 F-8A50-4006-957D-71BEF30733E0} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{F185412 F-8A50-4006-957D-71BEF30733E0} => key removed successfully
C:\windows\System32\Tasks\Adobe Acrobat Update Task => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{F2640E0 1-75F3-4907-BA34-FDFEAAAEC299} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{F2640E0 1-75F3-4907-BA34-FDFEAAAEC299} => key removed successfully
C:\windows\System32\Tasks\MirageAgent => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MirageAg ent => key removed successfully
“C:\windows\Tasks\Adobe Flash Player Updater.job” => not found.

========= RemoveProxy: =========

HKU.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVers ion\Internet Settings\Connections\DefaultConnectionSettings => value removed successfully
HKU.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVers ion\Internet Settings\Connections\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings\Connections\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-2880522861-2664208021-4051181673-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings\Connections\SavedLegacySettings => value removed successfully

========= End of RemoveProxy: =========

========= netsh advfirewall reset =========

Ok.

========= End of CMD: =========

========= netsh advfirewall set allprofiles state On =========

Ok.

========= End of CMD: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

C:\windows\system32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 81703208 B
Java, Flash, Steam htmlcache => 107441010 B
Windows/system/drivers => 21201131083 B
Edge => 0 B
Chrome => 882184543 B
Firefox => 107137000 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 42344254 B
systemprofile32 => 5039461 B
LocalService => 128 B
NetworkService => 15416070 B
Tonya => 2972439112 B

RecycleBin => 21462082752 B
EmptyTemp: => 43.7 GB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 14:21:28 ====

**Malnutrition** · 02-23-2017, 08:43 PM

Originally posted by Cory

EmptyTemp: => 43.7 GB temporary data Removed.

…

Most temp files cleaned that I’ve seen in my 9 years of helping on forums…

Clean up temp files and reduce startup load with CCleaner.

Note: This tool will clean your browsing history as well.
[ul]
[li]Download CCleaner from here.[/li][li]After install Click Options.[/li][li]Go to monitoring.[/li][li]Uncheck All Monitoring items.[/li][li]Go to advanced – Click close program after cleaning.[/li][li]Go to settings – click run ccleaner when the computer starts.[/li][li]Now that you have ccleaner installed and set-up:[/li][li]Open the program.[/li][li]Go to Tools[/li][li]Go to Startup[/li][li]Now double click each item. To Disable.[/li][li]Leave only your antivirus enabled.[/li][li]Then disable All items in your scheduled task as well.[/li][li]Unless they are related to windows defender.Or your antivirus.[/li][li]Reboot the machine.[/li][/ul]
ZHP Scan.

Please download Zhp Cleaner to your desktop. Right Click the icon and select run as administrator.

Once you have started the program, you will need to click the scanner button.

[IMG alt="EgsT69u" width="602px" height="129px"]https://windowsinstructed.com/wp-content/uploads/2015/06/EgsT69u.png[/IMG]

The program will close all open browsers!
3. Once the scan is completed, the you will want to click the Repair button.
[URL unfurl="true"]http://windowsinstructed.com/wp-content/uploads/2015/06/6QJjV50.png[/URL]

At the end of the process you may be asked to reboot your machine. After you reboot a report will open on your desktop.
Copy and paste the report here in your next reply.

Auto logger scan!

[ul]
[li]Disable your Antivirus & Anti spyware applications!![/li][li]Download Autologger to your desktop.[/li][li]Unzip it there. – If you are unsure how to unzip a program, then use ---- http://www.7-zip.org/ ----[/li][li]Right click Autologger and run as admin. (Xp user double click)[/li][li]AVZ4 will open and scan your machine, allow this to complete.[/li][li]Upload Collectionlog.zip to your next reply.[/li][/ul]

**Malnutrition** · 02-23-2017, 08:49 PM

Might also Clean up some more and then defrag the void…

Deep Clean the machine with Privazer, then defrag with SmartDefrag.

**Cory** · 02-23-2017, 09:40 PM

she probably never emptied them! lol

here is the zemana log:

Zemana AntiMalware 2.72.2.101 (Installed)

[/quote]

Scan Result : Completed
Scan Date : 2017/2/23
Operating System : Windows 7 64-bit
Processor : 4X Intel(R) Core™ i5-2450M CPU @ 2.50GHz
BIOS Mode : Legacy
CUID : 12F7A3D67813DC210CBF86
Scan Type : System Scan
Duration : 22m 16s
Scanned Objects : 65123
Detected Objects : 1
Excluded Objects : 0
Read Level : SCSI
Auto Upload : Enabled
Detect All Extensions : Disabled
Scan Documents : Disabled
Domain Info : WORKGROUP,0,2
[HEADING=1]Detected Objects[/HEADING]
Michael Oborne
Status : Scanned
Object : HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT\Ce rtificates\B6B1638E5EFC0DA254F575DF248AD0D1D227924 B\Blob
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Root CA
Cleaning Action : Delete
Related Objects :
Registry Entry - HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT\Ce rtificates\B6B1638E5EFC0DA254F575DF248AD0D1D227924 B\Blob = 190000000100000010000000A8C1451ACA8907CCBC39E5AA6D 26BE5A0F0000000100000010000000B6E04C6F0B1CC890615F 5814C1A933810B00000001000000320000004D006900630068 00610065006C0020004F0062006F0072006E0065005F007700 6900780043006500720074005F003100000003000000010000 0014000000B6B1638E5EFC0DA254F575DF248AD0D1D227924B 1400000001000000140000004DEFA5581A7DEBB6EE20BC5AF1 CBB9087CAF0C5B200000000100000009020000308202053082 016EA0030201020210A44E89781464CBA14C9803DF025C8B36 300D06092A864886F70D010104050030193117301506035504 03130E4D69636861656C204F626F726E65301E170D31323131 31343232353330315A170D3339313233313233353935395A30 19311730150603550403130E4D69636861656C204F626F726E 6530819F300D06092A864886F70D010101050003818D003081 8902818100C2FBB61F31249506B7EC86DC707AF6E070DA777A 453D8F0C31A7FCE0F611B52E47C99BFB1A91FBCFA77E11172A F561F17B8BE74E4FB2862FFC462452F52FF3B92619E08E8F14 E7F64A5FFB4210A489AE6B00CC89796813B38F1B19D8E5F0B4 7E3CF3443C9A70A2BE7DDA46AEFD0D94FC8A277F8894BD3DD2 D676986F7DD92FE50203010001A34E304C304A0603551D0104 433041801086026F4B058056D6DE89DF66592B32A5A11B3019 311730150603550403130E4D69636861656C204F626F726E65 8210A44E89781464CBA14C9803DF025C8B36300D06092A8648 86F70D01010405000381810016EA77FFEA1057D01CAB9CE6F1 726C5C3D93534BECBEB934A6E2F0D6530ECC29966CCBE373A0 F783B00A513CB0E030253971B423B7CAFE9834DD92882863F2 E15F0BF616955C71AF535A2F91A25440E97DAA262125192DD8 98B56869CC81EF271C227A4541177C516D53F5A09392A0F1DE 272EFBBC6F709E68ECF3636735D4C1
[HEADING=1]Cleaning Result[/HEADING]
Cleaned : 1
Reported as safe : 0
Failed : 0

**Cory** · 02-23-2017, 09:45 PM

Here is the search everthing info:

C:\FRST\Quarantine\C\ProgramData\Best Buy pc app
C:\FRST\Quarantine\C\ProgramData\Best Buy pc app\Best Buy pc app
C:\Users\Tonya\AppData\Local\Best Buy pc app
C:\Users\Tonya\Desktop\Desktop Icons\Best Buy Connect.lnk
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.dat
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.exe
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.lnk
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.msi
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.par
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.res
C:\FRST\Quarantine\C\ProgramData\Best Buy pc app\Best Buy pc app\Best Buy pc app.3.0.0.0.application
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\B6BEAD2D\Best Buy pc app.3.0.0.0.application
C:\FRST\Quarantine\C\ProgramData\Best Buy pc app\Best Buy pc app\Best Buy pc app.application
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\B6BEAD2D\Best Buy pc app.application
C:\FRST\Quarantine\C\ProgramData\Best Buy pc app\Best Buy pc app\3.0.0.0\Best Buy pc app.exe.config.deploy
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\AFDB8260\Best Buy pc app.exe.config.deploy
C:\FRST\Quarantine\C\ProgramData\Best Buy pc app\Best Buy pc app\3.0.0.0\Best Buy pc app.exe.deploy
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\AFDB8260\Best Buy pc app.exe.deploy
C:\FRST\Quarantine\C\ProgramData\Best Buy pc app\Best Buy pc app\3.0.0.0\Best Buy pc app.exe.manifest
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\AFDB8260\Best Buy pc app.exe.manifest
C:\FRST\Quarantine\C\ProgramData\Best Buy pc app\Best Buy pc app\Best Buy pc app.lnk
C:\FRST\Quarantine\C\Users\Default\AppData\Roaming \Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk.xBAD
C:\Program Files\Intel\WiMAX\Bin\WiMAXData\BestBuyConnectOper ator.dat
C:\FRST\Quarantine\C\ProgramData\Best Buy pc app\Best Buy pc app\3.0.0.0\BestBuySoftwareInstaller.dll.deploy
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\AFDB8260\BestBuySoft wareInstaller.dll.deploy

**Malnutrition** · 02-23-2017, 09:59 PM

Alright, when you post the info from Auto logger I will include the removal of the Best Buy items..

**Cory** · 02-23-2017, 10:32 PM

I am getting this screen from ZHP and not option to repair. not for sure what to do.

[ATTACH]1664[/ATTACH]

**Malnutrition** · 02-23-2017, 10:35 PM

Exit that screen then press repair on the program.

**Malnutrition** · 02-23-2017, 10:39 PM

Zoek Scan

Disable your antivirus prior to this scan.
Download Zoek
Save the file to your desktop.
Right click Zoek.exe and run as administrator. (Xp Users double click)
Copy the items in red below, and paste them into Zoek.

createsrpoint;
{FBF3739B-717D-4429-BCEB-98D514E65F29};c
C:\Users\Tonya\AppData\Local\Best Buy pc app;f
C:\Users\Tonya\Desktop\Desktop Icons\Best Buy Connect.lnk;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.dat;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.exe;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.lnk;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.msi;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.par;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\Best Buy pc app Setup.res;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\B6BEAD2D\Best Buy pc app.3.0.0.0.application;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\B6BEAD2D\Best Buy pc app.application;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\AFDB8260\Best Buy pc app.exe.config.deploy;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\AFDB8260\Best Buy pc app.exe.deploy;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\AFDB8260\Best Buy pc app.exe.manifest;f
C:\Program Files\Intel\WiMAX\Bin\WiMAXData\BestBuyConnectOper ator.dat;f
C:\ProgramData{FBF3739B-717D-4429-BCEB-98D514E65F29}\OFFLINE\D979B9B\AFDB8260\BestBuySoft wareInstaller.dll.deploy;f
emptyfolderscheck;delete
emptyclsid;
emptyalltemp;
ipconfig /flushdns;b
ResetHosts;
autoclean;

Now hit the run script button.
The log will appear after a reboot, also you can find it on the C: drive.
Post the log in your next reply.

**Cory** · 02-24-2017, 01:54 AM

I tried that on the ZHP Cleaner but the buttons are not active.

**Malnutrition** · 02-24-2017, 10:24 AM

Just skip the ZHP Cleaner step.

Slow Laptop, nothing specific

Slow Laptop, nothing specific

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment