Vista laptop running slow, constant hard drive activity

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Malnutrition
    PCHF Moderator
    • Jul 2016
    • 7041

    #46
    Can you run ZHP Diag now? If not, please run UVS… If neither will run, then go ahead and run the repair…

    ZHP Diag Scan

    Download ZHP Diag to your desktop.
    1. Right Click Run as Admin.
      2. Click the Scanner button.



    When complete please push the report button.
    A notepad will open… copy and paste the report in your next reply.

    Comment

    • paulwb
      PCHF Member
      • Nov 2016
      • 159

      #47
      Originally posted by Malnutrition
      Once you have completed the above, then right click FRST run as admin.
      Type Panda into the search field.
      Then Click on Search Registry.
      [ATTACH]1809[/ATTACH]
      An output file will appear on your desktop.
      Copy and paste that into your next reply.

      File Search With Everything Search Engine.

      Download and install the Everything Search Engine
      Right Click Run As Admin. Type or Copy Paste Panda into search window.
      Then Click Edit. >>>Select all.
      Right Click highlighted items>>>>>>>> Copy full name to clipboard.
      Paste content of clipboard, here in your next reply.

      Below are the FRST & Everything Search logs …

      FRST - Search Panda result
      Farbar Recovery Scan Tool (x86) Version: 08-03-2017
      Ran by psimoes (09-03-2017 23:43:05)
      Running from C:\Users\psimoes\Desktop
      Boot Mode: Normal

      ================== Search Registry: “Panda” ===========

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\P SUAMain.exe]
      “TaskbarGroupIcon”=“C:\ProgramData\Panda Security\Panda Security Protection\Res\Current\Images\MainIcon.ico”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75}\InprocServer32]
      “”=“C:\Program Files\Panda Security\Panda Security Protection\PSUAShell.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Asse mblies\C:
      Program Files
      Panda Security
      Panda Security Protection
      msvcm80.dll]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\2B8459F343B035449AE25350B650F391]
      “Plugins”=“PandaDevicesAgentFiles”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\2B8459F343B035449AE25350B650F391]
      “PandaDevicesAgentFiles”=“”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\2B8459F343B035449AE25350B650F391]
      “Externals”=“PandaDevicesAgentFiles”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\46A2962616680404CAC62FE48493E302]
      “PandaDevicesAgent”=“Tools”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Feat ures\46A2962616680404CAC62FE48493E302]
      “PandaToolBar”=“Tools”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\2B8459F343B035449AE25350B650F391]
      “ProductName”=“Panda Devices Agent”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\2B8459F343B035449AE25350B650F391\SourceList]
      “PackageName”=“PandaDevicesAgent.msi”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\2B8459F343B035449AE25350B650F391\SourceList]
      “LastUsedSource”=“n;1;C:\Users\psimoes\AppData\Loc al\Temp\7zS814DFE72\Program Files\Panda Security\Panda Cloud Antivirus\Tools"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\2B8459F343B035449AE25350B650F391\SourceList\N et]
      “1”=“C:\Users\psimoes\AppData\Local\Temp\7zS814DFE 72\Program Files\Panda Security\Panda Cloud Antivirus\Tools"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\46A2962616680404CAC62FE48493E302]
      “ProductName”=“Panda Free Antivirus”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Prod ucts\46A2962616680404CAC62FE48493E302\SourceList]
      “PackageName”=“PandaCloudAntivirus_x86.msi”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSUAScanner\Sc an\Shell\open\command]
      “”=”“C:\Program Files\Panda Security\Panda Security Protection\PSUAMain.exe” /LaunchAutorunAnalysis /custom:”%1""
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib{A7DF5B D5-7139-4D75-BEBE-EE785C0AAE24}\1.0\0\win32]
      “”=“C:\Program Files\Panda Security\Panda Security Protection\PSUAService.exe”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib{A7DF5B D5-7139-4D75-BEBE-EE785C0AAE24}\1.0\HELPDIR]
      “”=“C:\Program Files\Panda Security\Panda Security Protection”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib{AA50F6 CC-C49D-44DF-B397-ADF57A8DE4EC}\1.0\0\win32]
      “”=“C:\Program Files\Panda Security\Panda Security Protection\PSUAShell.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib{AA50F6 CC-C49D-44DF-B397-ADF57A8DE4EC}\1.0\HELPDIR]
      “”=“C:\Program Files\Panda Security\Panda Security Protection”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib{B40BE4 17-D17C-4382-A8F1-5457C7D04C57}\1.0\0\win32]
      “”=“C:\Program Files\Panda Security\Panda Security Protection\PSANHost.exe”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib{B40BE4 17-D17C-4382-A8F1-5457C7D04C57}\1.0\HELPDIR]
      “”=“C:\Program Files\Panda Security\Panda Security Protection”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography \Providers\Trust\Message{096CE0A5-8160-4557-866E-3A80540F34A1}]
      “$DLL”=“C:\Program Files\Panda Security\Panda Security Protection\PSNCDSEX.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{BB2DE08D-AF76-42f2-80E9-E5EEE624A973}]
      “AppPath”=“C:\Program Files\pandasecuritytb”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{CC2DE09D-AF76-42f2-80E9-E5FFE623B971}]
      “AppPath”=“C:\Program Files\pandasecuritytb”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\explorer\AutoplayHandlers\Handlers\PSUA Scanner]
      “Provider”=“Panda Security”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\explorer\AutoplayHandlers\Handlers\PSUA Scanner]
      “Action”=“Scan with Panda Free Antivirus”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\explorer\AutoplayHandlers\Handlers\PSUA Scanner]
      “DefaultIcon”=“C:\ProgramData\Panda Security\Panda Security Protection\Res\Current\Images\MainIcon.ico”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Cache"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\CfgData"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\CloudCleaner"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\Download"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\Download\0x04015000"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\NPS"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\PSF"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\Quarantine"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\Res"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\UAData"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\Logs"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Security Protection\Upselling"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\LostandFound"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\PskTmp"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\bul"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\chi"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\chi-tw"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\dan"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\dut"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\eng"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\fin"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\fre"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\ger"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\gre"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\hun"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\ita"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\jpn"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\nor"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\pol"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\por"=””
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\por-br"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\rus"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\slo"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\slv"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\spa"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\swe"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Lang\tur"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\DG"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Drivers\NNSNahsL\WVista"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Drivers\NNSNahsL"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Drivers"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Security Protection\Tools"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus"=”"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      "C:\ProgramData\Panda Security\Panda Devices Agent\Downloads"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      "C:\ProgramData\Panda Security\Panda Devices Agent"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      "C:\ProgramData\Panda Security\Panda Devices Agent\Logs"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\ProgramData\Panda Security\Panda Devices Agent\Queue"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Devices Agent"=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Installer\Folders]
      “C:\Program Files\Panda Security\Panda Devices Agent\Plugins"=””
      [N1wv!4F!Dk6KNlPT&AgTYSwNk7Ri=Nh]PX]V9@Lx_P)%7-c-q’42@6prx9Zpt=2A8-SO%rWIr^0j39Dbznx_[ICODE]oNF6T?AZ.k(5=I&ucq3U7Klthp%+[/ICODE]ICB@p82n$=P).RLNMtev%,m8am%xKlNH6%”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDLLs]
      “C:\Program Files\Panda Security\Panda Devices Agent\Plugins\Plugin_Inventory.dll”=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDLLs]
      “C:\Program Files\Panda Security\Panda Devices Agent\putczip.dll”=“1”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Devices Agent]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Devices Agent]
      “DisplayName”=“Panda Devices Agent”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Devices Agent]
      “InstallLocation”="C:\Program Files\Panda Security\Panda Devices Agent"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Devices Agent]
      “Publisher”=“Panda Security”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Security URL Filtering]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Security URL Filtering]
      “Publisher”=“Panda Security”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Security URL Filtering]
      “InstallLocation”=“C:\Program Files\Panda Security URL Filtering”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Security URL Filtering]
      “UninstallString”=“C:\Program Files\Panda Security URL Filtering\uninstall.exe”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{3F9548B2-0B34-4453-A92E-35056B053F19}]
      “InstallLocation”="C:\Program Files\Panda Security\Panda Devices Agent"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{3F9548B2-0B34-4453-A92E-35056B053F19}]
      “InstallSource”=“C:\Users\psimoes\AppData\Local\Te mp\7zS814DFE72\Program Files\Panda Security\Panda Cloud Antivirus\Tools"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{3F9548B2-0B34-4453-A92E-35056B053F19}]
      “Publisher”=“Panda Security”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{3F9548B2-0B34-4453-A92E-35056B053F19}]
      “URLInfoAbout”=” http://www.pandasecurity.com "
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{3F9548B2-0B34-4453-A92E-35056B053F19}]
      “DisplayName”=“Panda Devices Agent”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{62692A64-8661-4040-AC6C-F24E48393E20}]
      “InstallLocation”=“C:\Program Files\Panda Security\Panda Security Protection"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{62692A64-8661-4040-AC6C-F24E48393E20}]
      “Publisher”=“Panda Security”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{62692A64-8661-4040-AC6C-F24E48393E20}]
      “URLInfoAbout”=” Panda Security | Official Website "
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{62692A64-8661-4040-AC6C-F24E48393E20}]
      “DisplayName”=“Panda Free Antivirus”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Live]
      “DownloadFolder”="C:\ProgramData\Panda Security\Panda Security Protection\Download"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\00-PSANModNotification]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModNotification.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\01-PSANModCfg]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModCfg.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\02-PSANModScheduler]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModScheduler.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\03-PSANModBLA]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModBLA.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\04-PSANModRep]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModRep.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\08-PSANModAV]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModAV.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\10-PSANModADM]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModADM.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\12-PSANModProactive]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModProactive.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\14-PSANModShield]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModShield.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\20-PSANModCtrlCfg]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModCtrlCfg.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\22-PSANModRol]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModRol.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\23-PSANModStats]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModStats.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\26-PSANModUSBVac]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModUSBVac.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\30-PSANModFirewall]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModFirewall.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\33-PSANModProcMon]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModProcMon.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\34-PSANModTuneUp]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModTuneUp.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\50-PSANModURL]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModURL.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Panda Main Service\Plugins\60-PSANModAdiag]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModAdiag.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Nano Av\Setup]
      “Path”="C:\Program Files\Panda Security\Panda Security Protection"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Cloud Cleaner]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Cloud Cleaner]
      “CurrentPath”=“C:\Users\psimoes\Desktop\Panda.Clou d.Cleaner_Portable\PandaCloudCleaner”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Research]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\05-PSANModLive]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANModLive.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\10-PSANMSrvc]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSANMSrvc.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\12-PSINUNC]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSINUNC.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\15-PSENKrnl]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSENKrnl.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\25-PSINApAg]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSINApAg.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\30-PSINEnAg]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSINEnAg.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\35-PSINEvAg]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\PSINEvAg.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\50-Nconverter]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\NConv.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\Panda Service Host\Plugins\60-NNSManager]
      “strPath”=“C:\Program Files\Panda Security\Panda Security Protection\NNSManager.dll”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\SetupEx\DMP Agent]
      “LProductName”=“Panda Devices Agent”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\SetupEx\DMP Agent]
      “InitialCompanyName”=“Panda Security”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\SetupEx\DMP Agent]
      “InitialProductName”=“Panda Devices Agent”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\SetupEx\DMP Agent]
      “MProductName”=“Panda Devices Agent”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\SetupEx\DMP Agent]
      “Path”=“C:\Program Files\Panda Security\Panda Devices Agent"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\SetupEx\DMP Agent]
      “ProductName”=“Panda Devices Agent”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security\SetupEx\DMP Agent]
      “SProductName”=“Panda Agent”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software]
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “LProductName”=“Panda Free Antivirus”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “ProductName”=“Panda Free Antivirus”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “InitialCompanyName”=“Panda Security”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “InitialProductName”=“Panda Security Protection”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “Path”=“C:\Program Files\Panda Security\Panda Security Protection"
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “SCompanyName”=“Panda”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “UnPath”=”“C:\Program Files\Panda Security\Panda Security Protection\Setup.exe” /X{62692A64-8661-4040-AC6C-F24E48393E20} "
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “SProductName”=“Panda Free Antivirus”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “MProductName”=“Panda Free Antivirus”
      [HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup]
      “FirewallName”=“Panda Firewall”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_DASBOOT\0000]
      “DeviceDesc”=“Panda AntiMalware Support”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_DASBOOTF\0000]
      “DeviceDesc”=“Panda AntiMalware Support MF”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_DASPTCT\0000]
      “DeviceDesc”=“Panda AntiMalware Dynamic Support”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_NANOSERVICEMAIN\0000]
      “DeviceDesc”=“Panda Protection Service”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_PSUASERVICE\0000]
      “DeviceDesc”=“Panda Product Service”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\AnalysisSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\AnalysisSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\ApplicationFirewallSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\ApplicationFirewallSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\AutodiagSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\AutodiagSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\AVSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\AVSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\FirewallSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\FirewallSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\IdentityProtectSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\IdentityProtectSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\KRESource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\KRESource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\MVSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\MVSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\ROLSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\ROLSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\TuneUpSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\TuneUpSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\UpdateSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\UpdateSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\WebProtectionSource]
      “EventMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano\WebProtectionSource]
      “CategoryMessageFile”=“C:\Program Files\Panda Security\Panda Security Protection\PSNEvts.dll”
      [HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\pandasecuritytb]
      [HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\AppDataLow\Software\panda]
      [HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\AppDataLow\Software\pandasecuritytb]
      [HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\AppDataLow\Software\pandasecuritytb]
      “AutoSearchURL”=” How To Redirect to Bing "
      [HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
      “C:\Program Files\Panda Security\Panda Security Protection\PSUAMain.exe”=“AV Console”
      [HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
      “C:\Users\psimoes\Desktop\PandaCloudCleaner.exe”=" Panda Cloud Cleaner Setup "

      ====== End of Search ======

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~

      Search Everything - Registry Panda

      C:\FRST\Quarantine\C\Program Files\Panda Security\Panda Devices Agent
      C:\ProgramData\Panda Security\Panda Devices Agent
      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus
      C:\FRST\Quarantine\C\Program Files\Panda Security
      C:\FRST\Quarantine\C\Users\psimoes\AppData\Roaming \Panda Security
      C:\ProgramData\Panda Security
      C:\FRST\Quarantine\C\Program Files\Panda Security\Panda Security Protection
      C:\FRST\Quarantine\C\Users\psimoes\AppData\Roaming \Panda Security\Panda Security Protection
      C:\ProgramData\Panda Security\Panda Security Protection
      C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSec urity.Software\1AntiVirus\Panda.AV
      C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble
      C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble\PandaCloudCleaner
      C:\Users\psimoes\Desktop\LOGS\2017.03.09__Panda.Se c.files_Search.Every.JPG
      C:\Users\psimoes\Desktop\LOGS\2017.03.09_AutoRuns_ Panda.JPG
      C:\ProgramData\Panda Security\Panda Security Protection\Res\115\Images\LOGO_PANDA.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\3657\Images\LOGO_PANDA.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\3756\Images\LOGO_PANDA.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\4002\Images\LOGO_PANDA.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\4251\Images\LOGO_PANDA.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\Common\images\LOGO_PANDA.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\Current\Images\LOGO_PANDA.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\115\Images\LOGO_PANDA_negativo.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\3657\Images\LOGO_PANDA_negativo.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\3756\Images\LOGO_PANDA_negativo.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\4002\Images\LOGO_PANDA_negativo.png
      C:\ProgramData\Panda Security\Panda Security Protection\Res\Common\images\LOGO_PANDA_negativo.p ng
      C:\ProgramData\Panda Security\Panda Security Protection\Res\Current\Images\LOGO_PANDA_negativo. png
      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus\Panda Free Antivirus.lnk
      C:\Users\Public\Desktop\Panda Free Antivirus.lnk
      C:\ProgramData\Panda Security\PSLogs\Panda Free Antivirus_MSI_4F28.Log
      C:\ProgramData\Panda Security\PSLogs\Panda Free Antivirus_MSI_8141.Log
      C:\AdwCleaner\quarantine\files\gvhwumfytdkopqkkblf ljpuxuhijhygw\2.0.43_0\images\Panda-logo.png
      C:\AdwCleaner\quarantine\files\gvhwumfytdkopqkkblf ljpuxuhijhygw\2.0.43_0\images\Panda-watermask.png
      C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSec urity.Software\1AntiVirus\Panda.AV\Panda_15.1.0_FR EEAV.exe
      C:\Users\psimoes\Desktop\PandaCloudCleaner.exe
      C:\Users\psimoes\Documents\1PS Docs\PC_Info\PC Tech Support\PC Help Forum\1portable antivirus and antimalware\PandaCloudCleaner.exe
      C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSec urity.Software\PandaCloudCleaner.exe
      C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble\PandaCloudCleaner\PandaCloudCleaner.ini
      C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble\PandaCloudCleaner.zip
      C:\ProgramData\Panda Security\PSLogs\PandaDevicesAgent_MSI_70C1.Log
      C:\FRST\Quarantine\C\Program Files\Panda Security\Panda Security Protection\Tools\PandaSecurityTb.exe

      Comment

      • Malnutrition
        PCHF Moderator
        • Jul 2016
        • 7041

        #48
        FRST Fix.

        Click Here To Download Fixlist.


        Download attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

        Comment

        • paulwb
          PCHF Member
          • Nov 2016
          • 159

          #49
          Originally posted by Malnutrition
          Can you run ZHP Diag now? If not, please run UVS… If neither will run, then go ahead and run the repair…

          ZHP Diag Scan

          Download ZHP Diag to your desktop.
          1. Right Click Run as Admin.
            2. Click the Scanner button.



          When complete please push the report button.
          A notepad will open… copy and paste the report in your next reply.

          ZHPDiag failed to run. Here is the error pop up …
          [ATTACH]1813[/ATTACH]

          uVS did run … but I’m unable to upload the image file … extension is not allowed
          [ATTACH]1814[/ATTACH]

          Comment

          • Malnutrition
            PCHF Moderator
            • Jul 2016
            • 7041

            #50
            Upload it to sendspace.com, send me the link.

            Comment

            • paulwb
              PCHF Member
              • Nov 2016
              • 159

              #51
              Originally posted by Malnutrition
              Upload it to sendspace.com, send me the link.
              uVS image file link …
              SendSpace lets you transfer large files quickly and securely for free. Enjoy hassle-free file sharing today.

              Comment

              • Malnutrition
                PCHF Moderator
                • Jul 2016
                • 7041

                #52
                Go ahead and run the last FRST fix then the repair. This log takes Days to go over… I will look at it a while tonight then a while tomorrow. Too much information to go over in one sitting…

                Comment

                • paulwb
                  PCHF Member
                  • Nov 2016
                  • 159

                  #53
                  Originally posted by Malnutrition
                  FRST Fix.

                  Click Here To Download Fixlist.


                  Download attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

                  Apps definitely open much quicker. Panda AV is finally gone.

                  FRST Fix log ..
                  Fix result of Farbar Recovery Scan Tool (x86) Version: 08-03-2017
                  Ran by psimoes (10-03-2017 00:27:43) Run:3
                  Running from C:\Users\psimoes\Desktop
                  Loaded Profiles: psimoes (Available Profiles: psimoes & Guest)
                  Boot Mode: Normal

                  ==============================================

                  fixlist content:


                  Start
                  CreateRestorePoint:
                  Closeprocesses:
                  Emptytemp:
                  C:\ProgramData\Panda Security\Panda Devices Agent
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus
                  C:\ProgramData\Panda Security
                  C:\ProgramData\Panda Security\Panda Security Protection
                  C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSec urity.Software\1AntiVirus\Panda.AV
                  C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble
                  C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble\PandaCloudCleaner
                  C:\Users\psimoes\Desktop\LOGS\2017.03.09__Panda.Se c.files_Search.Every.JPG
                  C:\Users\psimoes\Desktop\LOGS\2017.03.09_AutoRuns_ Panda.JPG
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\115\Images\LOGO_PANDA.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\3657\Images\LOGO_PANDA.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\3756\Images\LOGO_PANDA.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\4002\Images\LOGO_PANDA.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\4251\Images\LOGO_PANDA.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\Common\images\LOGO_PANDA.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\Current\Images\LOGO_PANDA.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\115\Images\LOGO_PANDA_negativo.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\3657\Images\LOGO_PANDA_negativo.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\3756\Images\LOGO_PANDA_negativo.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\4002\Images\LOGO_PANDA_negativo.png
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\Common\images\LOGO_PANDA_negativo.p ng
                  C:\ProgramData\Panda Security\Panda Security Protection\Res\Current\Images\LOGO_PANDA_negativo. png
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus\Panda Free Antivirus.lnk
                  C:\Users\Public\Desktop\Panda Free Antivirus.lnk
                  C:\ProgramData\Panda Security\PSLogs\Panda Free Antivirus_MSI_4F28.Log
                  C:\ProgramData\Panda Security\PSLogs\Panda Free Antivirus_MSI_8141.Log
                  C:\AdwCleaner\quarantine\files\gvhwumfytdkopqkkblf ljpuxuhijhygw\2.0.43_0\images\Panda-logo.png
                  C:\AdwCleaner\quarantine\files\gvhwumfytdkopqkkblf ljpuxuhijhygw\2.0.43_0\images\Panda-watermask.png
                  C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSec urity.Software\1AntiVirus\Panda.AV\Panda_15.1.0_FR EEAV.exe
                  C:\Users\psimoes\Desktop\PandaCloudCleaner.exe
                  C:\Users\psimoes\Documents\1PS Docs\PC_Info\PC Tech Support\PC Help Forum\1portable antivirus and antimalware\PandaCloudCleaner.exe
                  C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSec urity.Software\PandaCloudCleaner.exe
                  C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble\PandaCloudCleaner\PandaCloudCleaner.ini
                  C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble\PandaCloudCleaner.zip
                  C:\ProgramData\Panda Security\PSLogs\PandaDevicesAgent_MSI_70C1.Log
                  DeleteKey: HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\AppDataLow\Software\pandasecuritytb
                  DeleteKey: HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\AppDataLow\Software\panda
                  DeleteKey: HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\pandasecuritytb
                  DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano
                  DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_PSUASERVICE
                  DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_NANOSERVICEMAIN
                  DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_DASPTCT
                  DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_DASBOOTF
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{62692A64-8661-4040-AC6C-F24E48393E20}
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{3F9548B2-0B34-4453-A92E-35056B053F19}
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Security URL Filtering
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Devices Agent
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\explorer\AutoplayHandlers\Handlers\PSUA Scanner
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\P SUAMain.exe
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75}
                  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSUAScanner
                  reboot:
                  end


                  Error: (0) Failed to create a restore point.
                  Processes closed successfully.
                  C:\ProgramData\Panda Security\Panda Devices Agent => moved successfully
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus => moved successfully
                  C:\ProgramData\Panda Security => moved successfully
                  “C:\ProgramData\Panda Security\Panda Security Protection” => not found.
                  C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSec urity.Software\1AntiVirus\Panda.AV => moved successfully
                  C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Porta ble => moved successfully
                  “C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Port able\PandaCloudCleaner” => not found.
                  C:\Users\psimoes\Desktop\LOGS\2017.03.09__Panda.Se c.files_Search.Every.JPG => moved successfully
                  C:\Users\psimoes\Desktop\LOGS\2017.03.09_AutoRuns_ Panda.JPG => moved successfully
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\115\Images\LOGO_PANDA.png” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\3657\Images\LOGO_PANDA.png” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\3756\Images\LOGO_PANDA.png” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\4002\Images\LOGO_PANDA.png” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\4251\Images\LOGO_PANDA.png” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\Common\images\LOGO_PANDA.png” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\Current\Images\LOGO_PANDA.png” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\115\Images\LOGO_PANDA_negativo.png” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\3657\Images\LOGO_PANDA_negativo.png ” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\3756\Images\LOGO_PANDA_negativo.png ” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\4002\Images\LOGO_PANDA_negativo.png ” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\Common\images\LOGO_PANDA_negativo.p ng” => not found.
                  “C:\ProgramData\Panda Security\Panda Security Protection\Res\Current\Images\LOGO_PANDA_negativo. png” => not found.
                  “C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Free Antivirus\Panda Free Antivirus.lnk” => not found.
                  C:\Users\Public\Desktop\Panda Free Antivirus.lnk => moved successfully
                  “C:\ProgramData\Panda Security\PSLogs\Panda Free Antivirus_MSI_4F28.Log” => not found.
                  “C:\ProgramData\Panda Security\PSLogs\Panda Free Antivirus_MSI_8141.Log” => not found.
                  C:\AdwCleaner\quarantine\files\gvhwumfytdkopqkkblf ljpuxuhijhygw\2.0.43_0\images\Panda-logo.png => moved successfully
                  C:\AdwCleaner\quarantine\files\gvhwumfytdkopqkkblf ljpuxuhijhygw\2.0.43_0\images\Panda-watermask.png => moved successfully
                  “C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSe curity.Software\1AntiVirus\Panda.AV\Panda_15.1.0_F REEAV.exe” => not found.
                  C:\Users\psimoes\Desktop\PandaCloudCleaner.exe => moved successfully
                  C:\Users\psimoes\Documents\1PS Docs\PC_Info\PC Tech Support\PC Help Forum\1portable antivirus and antimalware\PandaCloudCleaner.exe => moved successfully
                  C:\Users\psimoes\Downloads\1GOOD_Progs_in_use\zSec urity.Software\PandaCloudCleaner.exe => moved successfully
                  “C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Port able\PandaCloudCleaner\PandaCloudCleaner.ini” => not found.
                  “C:\Users\psimoes\Desktop\Panda.Cloud.Cleaner_Port able\PandaCloudCleaner.zip” => not found.
                  “C:\ProgramData\Panda Security\PSLogs\PandaDevicesAgent_MSI_70C1.Log” => not found.
                  HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\AppDataLow\Software\pandasecuritytb => key removed successfully.
                  HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\AppDataLow\Software\panda => key removed successfully.
                  HKEY_USERS\S-1-5-21-3399307451-3074549587-1771456082-1000\S-1-5-21-3399307451-3074549587-1771456082-1000\Software\pandasecuritytb => key removed successfully.
                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Eventlog\Nano => key removed successfully.
                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_PSUASERVICE => key removed successfully.
                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_NANOSERVICEMAIN => key removed successfully.
                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_DASPTCT => key removed successfully.
                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_DASBOOTF => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Panda Security => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{62692A64-8661-4040-AC6C-F24E48393E20} => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall{3F9548B2-0B34-4453-A92E-35056B053F19} => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Security URL Filtering => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\Panda Devices Agent => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\explorer\AutoplayHandlers\Handlers\PSUA Scanner => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\P SUAMain.exe => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID{A9B8E64D-3F7E-4D32-8FC9-E391DEE67D75} => key removed successfully.
                  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PSUAScanner => key removed successfully.

                  =========== EmptyTemp: ==========

                  BITS transfer queue => 12582912 B
                  DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 7290831 B
                  Java, Flash, Steam htmlcache => 0 B
                  Windows/system/drivers => 1855199 B
                  Edge => 0 B
                  Chrome => 0 B
                  Firefox => 0 B
                  Opera => 11132716 B

                  Temp, IE cache, history, cookies, recent:
                  Users => 0 B
                  Default => 0 B
                  Public => 0 B
                  ProgramData => 0 B
                  systemprofile => 66228 B
                  LocalService => 0 B
                  NetworkService => 0 B
                  psimoes => 3279414 B
                  Guest => 0 B

                  RecycleBin => 4475973 B
                  EmptyTemp: => 38.8 MB temporary data Removed.

                  ================================

                  The system needed a reboot.

                  ==== End of Fixlog 00:29:10 ====

                  Comment

                  • Malnutrition
                    PCHF Moderator
                    • Jul 2016
                    • 7041

                    #54
                    Alright, let me know how the repair goes…

                    Comment

                    • paulwb
                      PCHF Member
                      • Nov 2016
                      • 159

                      #55
                      Originally posted by Malnutrition
                      Alright, let me know how the repair goes…
                      Apps definitely open much quicker. Panda AV is finally gone.
                      HD icon still flickers constantly and cannot install some applications due to "Variable must be of type “Object” or “Variable used without being declared” error

                      Comment

                      • Malnutrition
                        PCHF Moderator
                        • Jul 2016
                        • 7041

                        #56
                        There was nothing of concern in the UVS logs, what else can I help you with?

                        "Variable must of type “Object” or “Variable used without being declared” error

                        Have you tried a new admin account? I suspect profile corruption, this along with many other errors…

                        Comment

                        • Malnutrition
                          PCHF Moderator
                          • Jul 2016
                          • 7041

                          #57
                          Open Elevated Command Prompt.
                          Copy and paste reg query “HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment” /s > “%userprofile%\Desktop\Export.txt”
                          Hit enter.
                          A notepad named export.txt will appear, copy and paste that in your next reply.

                          Comment

                          • paulwb
                            PCHF Member
                            • Nov 2016
                            • 159

                            #58
                            Originally posted by Malnutrition
                            Open Elevated Command Prompt.
                            Copy and paste reg query “HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment” /s > “%userprofile%\Desktop\Export.txt”
                            Hit enter.
                            A notepad named export.txt will appear, copy and paste that in your next reply.
                            Here’s the text …

                            HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Session Manager\Environment
                            ComSpec REG_EXPAND_SZ %SystemRoot%\system32\cmd.exe
                            FP_NO_HOST_CHECK REG_SZ NO
                            OS REG_SZ Windows_NT
                            Path REG_EXPAND_SZ %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\sy stem32\wbem;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files\PC Connectivity Solution;C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG;C:\Pro gram Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\QuickTime\QTSystem;%SYSTEMROOT%\System32\Win dowsPowerShell\v1.0;C:\Program Files\Windows Live\Shared;C:\Program Files\Skype\Phone;C:\Program Files\Skype\Phone
                            PATHEXT REG_SZ .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;. MSC
                            PROCESSOR_ARCHITECTURE REG_SZ x86
                            TEMP REG_EXPAND_SZ %SystemRoot%\TEMP
                            TMP REG_EXPAND_SZ %SystemRoot%\TEMP
                            USERNAME REG_SZ SYSTEM
                            windir REG_EXPAND_SZ %SystemRoot%
                            PROCESSOR_LEVEL REG_SZ 6
                            PROCESSOR_IDENTIFIER REG_SZ x86 Family 6 Model 15 Stepping 13, GenuineIntel
                            PROCESSOR_REVISION REG_SZ 0f0d
                            NUMBER_OF_PROCESSORS REG_SZ 2
                            TRACE_FORMAT_SEARCH_PATH REG_EXPAND_SZ \NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
                            DFSTRACINGON REG_EXPAND_SZ FALSE
                            PSModulePath REG_EXPAND_SZ %SystemRoot%\system32\WindowsPowerShell\v1.0\Modul es
                            CLASSPATH REG_SZ .;C:\Program Files\Java\jre7\lib\ext\QTJava.zip
                            QTJAVA REG_SZ C:\Program Files\Java\jre7\lib\ext\QTJava.zip
                            asl.log REG_SZ Destination=file

                            Comment

                            • paulwb
                              PCHF Member
                              • Nov 2016
                              • 159

                              #59
                              Hi M, I appreciate your continued help on this.
                              I’m going to review my first thread back in Nov 2016 which reported similar issues with executables not working and find out what the fix was.
                              As mentioned, PC applications & boot times are much quicker.
                              The remaining issues are constant HD activity, System Restore & some .exe files won’t run.
                              [ATTACH]1835[/ATTACH]

                              [ATTACH]1834[/ATTACH]
                              [ATTACH]1836[/ATTACH]

                              Comment

                              • paulwb
                                PCHF Member
                                • Nov 2016
                                • 159

                                #60
                                SpaceSniffer shows a lot of HD activity from the areas below … SystemIndex.Ntfy36.gthr, Indexer & CFiles
                                [ATTACH]1838[/ATTACH]

                                The size of the areas constantly changes …
                                [ATTACH]1839[/ATTACH]

                                Comment

                                Working...