Screen freeze within 2/3 minutes of Pc switched on.

**jmarket** · 08-12-2017, 03:20 AM

Hi caskin,

Originally posted by caskin

Since reinstalling Freemalwarebytes,have started getting blue screens and my first freeze since we started??

doesn’t agree with

Originally posted by caskin

Up until this moment the Pc had been totally stable with no porblems whatsoever,

from yesterday, but let’s remove both Utorrent and Malwarebytes with Geek uninstaller. Please note the comment re “FORCE REMOVAL”

Please go HERE and download Geek Uninstaller portable and save it to somewhere you can find later. Now use you favorite Unzip application to extract the zipped file from the download. This should create a new folder that contains a Geek.exe file which you can now double left click to open the program.

Optionally you can create a desktop shortcut by right clicking the Geek.exe file and choose “Send to” from the drop down menu. This will give you a shortcut icon on the desktop for future use of this handy application.

You can safely ignore any security pop ups that may appear before the program opens.

Either way you open it once Geek Uninstaller is running select the program you wish to uninstall by right clicking it and then choose “Uninstall” from the drop down menu.

[MEDIA=imgur]dvNuQMe[/MEDIA]

Follow and accept all uninstall options once the uninstaller begins.

It is recommended when removing any Antivius/Security program, or if you have errors or difficulty removing any program to use “Force removal” to uninstall the program.

[MEDIA=imgur]m089MyG[/MEDIA]

Should you have any further difficulty removing any items please ask us for help

**caskin** · 08-12-2017, 10:11 AM

All done,all traces removed…PC now appears clean and stable,so where do we go from here?
Once again thanks for all your time

**jmarket** · 08-13-2017, 01:19 AM

Hello Caskin, Not quite finished yet, let me finish reviewing your frst log, there’s a few bits left that can go and we’ll clean up our tools.

BTW the reason I asked you to reinstall Malwarebytes was because it appeared there was a failed uninstall of it and often reinstalling and then uninstalling is the easiest way to fix things. Even though malwarebytes free only works as a resident scanner for 14 days it is very important not to use more than one resident Antivirus as they can conflict with each other and really cause issues, especially if they fight over control of a suspected malicious file.

Give me a bit of time to check your log and ill be back with you.

**caskin** · 08-13-2017, 11:33 AM

Originally posted by gus

Hello Caskin, Not quite finished yet, let me finish reviewing your frst log, there’s a few bits left that can go and we’ll clean up our tools.

BTW the reason I asked you to reinstall Malwarebytes was because it appeared there was a failed uninstall of it and often reinstalling and then uninstalling is the easiest way to fix things. Even though malwarebytes free only works as a resident scanner for 14 days it is very important not to use more than one resident Antivirus as they can conflict with each other and really cause issues, especially if they fight over control of a suspected malicious file.

Give me a bit of time to check your log and ill be back with you.

As already said cannot thank you enough,the PC is smoother and faster then it has ever been.(y)

**jmarket** · 08-14-2017, 12:33 AM

Glad your PC is running well, we will now run a FRST fix to remove a few remnants including ATTENTIONLOL, and then we shall remove our tools from your machine

The Fixlist is attached.

To run the fix right click the FRST icon and choose “Run as Administrator” then click on “Fix”

Please note for the fix to work the Fixlist.txt file and FRST program will have to be in the same location.

[MEDIA=imgur]cp0349X[/MEDIA]

Depending on the amount of data to be moved it may take a few minutes to complete, and the computer may reboot. When the fix is complete and/or the computer has rebooted the “Fixlist.txt” you created will be renamed “Fixlog.txt”

Please COPY and PASTE the contents of this new file in your next post:slight_smile:

Please note this fixlist was made for this users machine only and the use of it on another machine may render the operating system permanently damaged.

**caskin** · 08-14-2017, 10:54 AM

[HEADING=1]Fix result of Farbar Recovery Scan Tool (x64) Version: 12-08-2017
Ran by Delboy (14-08-2017 11:48:30) Run:2
Running from C:\Users\Delboy\Documents
Loaded Profiles: Delboy (Available Profiles: Delboy)
Boot Mode: Normal[/HEADING]
fixlist content:

Start
CreateRestorepoint:
CloseProcesses:
FF Plugin: @microsoft.com/GENUINE → disabled [No File]
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin → C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.7\npsitesafety.dll [No File]
CHR HKLM...\Chrome\Extension: [pmagdleikobihfikldcpmgfjcppcddnf] - hxxps://clients2.google.com/service/update2/crx
S3 NisSrv; “C:\Program Files\Microsoft Security Client\NisSrv.exe”
Task: {72C52707-58E7-4FC0-9877-80DF94DA2DD0} - \UALU notificatin → No File <==== ATTENTION
Task: {75894266-7812-4A8E-80F0-BE25282FF3BB} - \Adobe Acrobat Update Task → No File <==== ATTENTIONLOL
C:\Program Files (x86)\Common Files\AVG Secure Search
C:\Users\Delboy\Downloads\avast_free_antivirus_set up_online.exe
C:\Program Files\AVAST Software
C:\ProgramData\FullRemove.exe
EmptyTemp:
End

Restore point was successfully created.
Processes closed successfully.
HKLM\Software\MozillaPlugins@microsoft.com/GENUINE => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin => key removed successfully
HKLM\SOFTWARE\Google\Chrome\Extensions\pmagdleikob ihfikldcpmgfjcppcddnf => key removed successfully
HKLM\System\CurrentControlSet\Services\NisSrv => key removed successfully
NisSrv => service removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain{72C5270 7-58E7-4FC0-9877-80DF94DA2DD0} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{72C5270 7-58E7-4FC0-9877-80DF94DA2DD0} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UALU notificatin => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{7589426 6-7812-4A8E-80F0-BE25282FF3BB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{7589426 6-7812-4A8E-80F0-BE25282FF3BB} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task => key removed successfully
“C:\Program Files (x86)\Common Files\AVG Secure Search” => not found.
“C:\Users\Delboy\Downloads\avast_free_antivirus_se tup_online.exe” => not found.
C:\Program Files\AVAST Software => moved successfully
C:\ProgramData\FullRemove.exe => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 5248041 B
Java, Flash, Steam htmlcache => 492 B
Windows/system/drivers => 259895 B
Edge => 0 B
Chrome => 0 B
Firefox => 15514832 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 0 B
Delboy => 25330915 B

RecycleBin => 121296 B
EmptyTemp: => 52.3 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 11:48:53 ====

**caskin** · 08-14-2017, 11:08 AM

Reply as requested Thanks.

Restore point was successfully created.
Processes closed successfully.
HKLM\Software\MozillaPlugins@microsoft.com/GENUINE => key not found.
HKLM\Software\Wow6432Node\MozillaPlugins@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin => key not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\pmagdleikob ihfikldcpmgfjcppcddnf => key not found.
NisSrv => service not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{72C5270 7-58E7-4FC0-9877-80DF94DA2DD0} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UALU notificatin => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{7589426 6-7812-4A8E-80F0-BE25282FF3BB} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task => key not found.
“C:\Program Files (x86)\Common Files\AVG Secure Search” => not found.
“C:\Users\Delboy\Downloads\avast_free_antivirus_se tup_online.exe” => not found.
“C:\Program Files\AVAST Software” => not found.
“C:\ProgramData\FullRemove.exe” => not found.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 3152363 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 0 B
Edge => 0 B
Chrome => 0 B
Firefox => 3081719 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
Delboy => 177328 B

RecycleBin => 5402 B
EmptyTemp: => 14.1 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 12:01:26 ====

**jmarket** · 08-15-2017, 12:35 AM

Hi Caskin, this should hopefully finish up your clean up

Please go HERE and download Delfix Save it to your desktop.
Right click the new Delfix desktop icon [MEDIA=imgur]3gArQoZ[/MEDIA] and then click “run as administrator”
Place a tick in the following checkboxes
[ol]
[li]Remove disinfection tools[/li][li]Create registry backup[/li][li]Purge system restore[/li][li]Then select “Run”[/li][/ol]
[MEDIA=imgur]tdR6h0N[/MEDIA]

Delfix will remove the tools used to clean your PC and remove itself. When finished a .txt file will display on your desktop. A copy of this file will be also located as C:\Delfix.txt.

Please post a copy of this file in your next post:slight_smile:

**caskin** · 08-15-2017, 11:18 AM

[HEADING=1]DelFix v1.013 - Logfile created 15/08/2017 at 12:14:19[/HEADING]
[HEADING=1]Updated 17/04/2016 by Xplode[/HEADING]
[HEADING=1]Username : Delboy - DELBOY-PC[/HEADING]
[HEADING=1]Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)[/HEADING]
~ Removing disinfection tools …

~ Creating registry backup … OK

~ Cleaning system restore …

Deleted : RP #177 [End of disinfection | 08/15/2017 11:09:55]

New restore point created !

########## - EOF - ##########

Again thanks for all your help and patience will miss our morning meets!

**jmarket** · 08-16-2017, 12:41 AM

Thanks for letting us help Caskin, happy computing

**caskin** · 08-16-2017, 10:45 AM

Originally posted by gus

Thanks for letting us help Caskin, happy computing

I firmly believe I owe you all my thanks and for your patience Cheers Derek

**jmarket** · 08-16-2017, 10:33 PM

Originally posted by caskin

I firmly believe I owe you all my thanks and for your patience Cheers Derek

A pleasure Derek, will now mark this thread closed and solved

Screen freeze within 2/3 minutes of Pc switched on.

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment