Password reset and notification emails are now sending correctly.
If you recently requested a password reset, please check your inbox (and spam folder just in case).
You can now reset your password and log in as normal.
Welcome back to PCHF, and thank you for your patience during our migration process!
— The PCHF Team
Welcome to PC Help Forum!
You’re viewing our community as a guest.
That means you can browse posts, but can’t yet reply or start new topics.
Join us today — it's completely free!
As a member, you'll be able to:
✅ Get personalized tech support from trusted volunteers
🦠 Work one-on-one with our Malware Removal Specialists
When I first run my PC its fine, using between 20 - 45% RAM after maybe 20 minutes it runs at 95%+ the PC runs slow and I can hear the PC making like a surging noise continuously, the PC is very well maintained, manually and with software but this started maybe 3 months ago, I have tried everything to no avail, any suggestions please? spec below..
Win 10 pro
8GB RAM
Intel i5 2500 64 BIT CPU 3.30Ghz
64 BIT Operating system
If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.
Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.
Both scans run, results below, as a matter of course I swapped over the power supplies, the PC is still the same..running very slow and RAM is nearly flat out!
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08-2017
Ran by scct (administrator) on DESKTOP-TN0A1RB (15-08-2017 12:43:09)
Running from C:\Users\scct\Desktop
Loaded Profiles: defaultuser0 & scct (Available Profiles: defaultuser0 & scct)
Platform: Windows 10 Pro Version 1703 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-08-11 21:18
[HEADING=1]==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-08-2017
Ran by scct (15-08-2017 12:47:21)
Running from C:\Users\scct\Desktop
Windows 10 Pro Version 1703 (X64) (2017-06-20 19:20:51)
Boot Mode: Normal[/HEADING]
==================== Accounts: =============================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: AVG Antivirus (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG Antivirus (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}
==================== Event log errors: =========================
[HEADING=1]Application errors:[/HEADING]
Error: (08/15/2017 12:59:06 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (08/15/2017 12:59:06 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (08/15/2017 12:59:06 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (08/15/2017 12:51:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-TN0A1RB)
Description: Package Microsoft.Windows.Photos_2017.35063.13610.0_x64__8 wekyb3d8bbwe+App was terminated because it took too long to suspend.
Error: (08/15/2017 12:50:12 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (08/15/2017 12:50:10 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (08/15/2017 12:41:38 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (08/15/2017 12:40:37 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (08/15/2017 12:39:54 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (08/15/2017 12:39:54 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for “C:\Program Files (x86)\IncrediMail\Bin\MFC80U.DLL”.
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture=“x86”, publicKeyToken=“1fc8b3b9a1e18e3b”,type=“win32”,ver sion=“8.0.50608.0” could not be found.
Please use sxstrace.exe for detailed diagnosis.
[HEADING=1]System errors:[/HEADING]
Error: (08/14/2017 02:56:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The ClickToRunSvc service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (08/14/2017 02:56:58 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the ClickToRunSvc service to connect.
Error: (08/14/2017 02:56:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The SDScannerService service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (08/14/2017 02:56:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the SDScannerService service to connect.
Error: (08/14/2017 02:56:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The CldFlt service failed to start due to the following error:
The request is not supported.
Error: (08/14/2017 02:09:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The CldFlt service failed to start due to the following error:
The request is not supported.
Error: (08/14/2017 01:17:52 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Downloaded Maps Manager service did not respond on starting.
Error: (08/14/2017 01:12:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The CldFlt service failed to start due to the following error:
The request is not supported.
Error: (08/14/2017 12:06:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The CldFlt service failed to start due to the following error:
The request is not supported.
Error: (08/14/2017 12:06:17 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:40:49 AM on 8/14/2017 was unexpected.
[HEADING=1]CodeIntegrity:[/HEADING]
Date: 2017-08-15 10:01:36.646
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-15 10:01:36.643
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-15 10:01:36.640
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-08-15 10:01:36.636
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-07-23 20:04:03.860
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-07-23 20:04:03.830
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-07-23 20:04:03.785
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-07-23 20:04:03.781
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Core™ i5-2500 CPU @ 3.30GHz
Percentage of memory in use: 92%
Total physical RAM: 8109.11 MB
Available physical RAM: 648.44 MB
Total Virtual: 13385.07 MB
Available Virtual: 3768.87 MB
[ul]Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.[/ul]
[ul]Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.[/ul]
[ul]The tool will open and start scanning your system.[/ul]
[ul]Please be patient as this can take a while to complete depending on your system’s specifications.[/ul]
[ul]On completion, a log is saved to your desktop and will automatically open.[/ul]
[ul]Please post the JRT log.[/ul]
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Pro x64
Ran by scct (Administrator) on 15/08/2017 at 14:08:17.59
Scan was completed on 15/08/2017 at 14:15:21.28
End of JRT log
~ ZHPDiag v2017.8.15.140 By Nicolas Coolman (2017/08/15)
~ Run by scct (Administrator) (2017/08/15 14:25:39)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: ZHP
~ Certificate ZHPDiag: Legal
~ State version: Version OK
~ Mode: Scan
~ Report: C:\Users\scct\Desktop\ZHPDiag.txt
~ Report: C:\Users\scct\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 15063) =>.Microsoft Corporation
—\ Internet Browsers (4) - 0s
~ GCIE: Google Chrome v60.0.3112.90
~ MFIE: Mozilla Firefox 54.0.1 (x86 en-US)
~ MSIE: Microsoft Edge v40
~ MSIE: Internet Explorer v11.540.15063.0
—\ Windows Product Information (3) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
—\ System protection software (1) - 17s
Windows Defender (Deactivate)
—\ Surveillance software (2) - 17s
~ Adobe Flash Player 26 PPAPI (Surveillance)
~ Adobe Acrobat Reader DC (Surveillance)
—\ Information on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 8303.732 MB (5% free) : ATTENTION =>Warning RAM
System Restore: Activé (Enable)
System drive C: has 23 GB (15%) free of 152 GB : OK =>.Disk Space
—\ Connection to the system mode (3) - 0s
~ Computer Name: DESKTOP-TN0A1RB
~ User Name: scct
~ Logged in as Administrator
—\ Enumeration of the disk units (2) - 0s
~ Drive C: has 23 GB free of 152 GB (System)
~ Drive D: has 1692 GB free of 1907 GB
—\ State of the Windows Security Center (7) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\Curren tVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
—\ Mozilla Firefox,Plugins,Start,Search,Extensions (1) - 10s
P2 - EXT FILE: (.IObit Surfing Protection Ads Rem - Protect your PC from malicious website.) – C:\Users\scct\AppData\Roaming\Mozilla\Firefox\Prof iles\es7scrkr.default\extensions\ascsurfingprotectionnew@iobit.com.xpi =>.IObit Surfing Protection Ads Rem
Download attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system. Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
Zoek Scan
Disable your antivirus prior to this scan.
Download Zoek
Save the file to your desktop.
Right click Zoek.exe and run as administrator. (XP Users double click)
Copy and paste the items in red below and paste them into Zoek.
We will need a log from AdwCleaner for further information.
Please download a copy of AdwCleaner from HERE, it is important to download it to your desktop.
Once downloaded to the desktop AdwCleaner will create an icon https://pchelpforum.net/attachments/...160702-jpg.828
Should you receive any security warnings or your User Account Control warning appears whilst you are using this application you can safely allow AdwCleaner to continue.
Before running AdwCleaner please ensure all other programs and browsers are closed, then double left click the icon to open it.
AdwCleaner will open, click the scan button to start searching.
The scan may take some time to complete, and when it has any malware found will be automatically selected for quarantining. Click the “Cleaning” button.
After a few seconds a message should tell you your computer will now reboot. Allow the reboot.
When the computer restarts a log file will be displayed, but if its closed for any reason before copying the contents, you will find a copy of the file if you navigate to C:\AdwCleaner[s#].txt
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Restart the computer to complete this action.
========= End of CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 7364608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 279127504 B
Java, Flash, Steam htmlcache => 506 B
Windows/system/drivers => 656320 B
Edge => 28689 B
Chrome => 265709213 B
Firefox => 5287030 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 29401268 B
NetworkService => 4358 B
defaultuser0 => 0 B
scct => 3627418157 B
RecycleBin => 35118721 B
EmptyTemp: => 4 GB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 15-08-2017 18:04:13)
Result of scheduled keys to remove after reboot:
HKLM\System\CurrentControlSet\Services\AVG Antivirus => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\AVG Firewall => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbIDSAgen t => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbdisk => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbidsdriv er => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbidsh => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgblog => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgbuniv => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgHwid => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgMonFlt => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgNetSec => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgRdr => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgRvrt => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgSnx => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgSP => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgStm => key could not remove, key could be protected
HKLM\System\CurrentControlSet\Services\avgVmm => key could not remove, key could be protected
==== End of Fixlog 18:04:14 ====
zoek.exe v5.0.0.1 Updated 27-09-2015
Tool run by scct on 15/08/2017 at 18:15:22.63.
Microsoft Windows 10 Pro 10.0.15063 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\scct\Desktop\zoek.exe [Scan all users] [Deep Scan]
==== System Restore Info ======================
15/08/2017 18:22:04 Zoek.exe System Restore Point Created Successfully.
Windows: Windows Version 6.2 (Build 9200)
Memory (RAM): 8110 MB
CPU Info: Intel(R) Core™ i5-2500 CPU @ 3.30GHz
CPU Speed: 3342.7 MHz
Sound Card: Speakers (Realtek High Definiti |
T27D390S-0 (NVIDIA High Definit |
Realtek Digital Output (Realtek |
Realtek Digital Output(Optical) |
Display Adapters: NVIDIA GeForce GT 240 | NVIDIA GeForce GT 240 | Intel(R) HD Graphics | Intel(R) HD Graphics
Monitors: 1x; Generic PnP Monitor |
Screen Resolution: 1920 X 1080 - 32 bit
Network: Network Present
Network Adapters: Realtek PCIe GBE Family Controller | TAP-Windows Adapter V9
CD / DVD Drives: No optical drives found.
Ports: COM1 LPT1
Mouse: 3 Button Wheel Mouse Present
Hard Disks: C: 148.6GB | D: 1863.0GB
Hard Disks - Free: C: 34.0GB | D: 1652.5GB
Manufacturer *: Award Software International, Inc.
BIOS Info: AT/AT COMPATIBLE | 06/16/11 | GBT - 42302e31
Time Zone: GMT Standard Time
Motherboard *: Gigabyte Technology Co., Ltd. Z68AP-D3
Country: United Kingdom
Language: ENG
==== System Specs (Software) ======================
Internet Explorer Version: 11.540.15063.0
Mozilla Firefox version: 54.0.1 (x86 en-US)
Google Chrome version: 60.0.3112.90
Adobe Reader version: 17.12.20095.239572
==== Files Recently Created / Modified ======================
==== EOF on 15/08/2017 at 18:29:45.28 ======================
[HEADING=1]AdwCleaner 7.0.1.0 - Logfile created on Tue Aug 15 18:39:17 2017[/HEADING]
[HEADING=1]Updated on 2017/05/08 by Malwarebytes[/HEADING]
[HEADING=1]Database: 07-31-2017.1[/HEADING]
[HEADING=1]Running on Windows 10 Pro (X64)[/HEADING]
[HEADING=1]Mode: scan[/HEADING]
[HEADING=1]Support: https://www.malwarebytes.com/support[/HEADING]
***** [ Services ] *****
Sorry posted the Adware log before the clean, here is the logfile after Adware was run…
[HEADING=1]AdwCleaner 7.0.1.0 - Logfile created on Tue Aug 15 18:53:53 2017[/HEADING]
[HEADING=1]Updated on 2017/05/08 by Malwarebytes[/HEADING]
[HEADING=1]Running on Windows 10 Pro (X64)[/HEADING]
[HEADING=1]Mode: clean[/HEADING]
[HEADING=1]Support: https://www.malwarebytes.com/support[/HEADING]
***** [ Services ] *****
We will install new software to replace these. But the ones we are removing are junk and useless. IOBit is a resource hog and tried to pass itself off as Malwarebytes, therefore they are the bottom of the totem pole. AVG has proven itself time and time again to cause blue screens, errors, and resource hogging.
The following options can be a replacement for the listed removals:
CCleaner (Uninstalls and cleans)
Defraggler
Avast, Kaspersky Free, Avira, 360 Total Security
Malwarebytes or Zemana
VoodooShield
They are all free and trusted Malwarebytes and Zemana are on-demand scanners that can be run as-needed VoodooShield acts as a whitelist protector and I use it myself You can read information about it here
Here it is
[HEADING=1]Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-08-2017 01
Ran by scct (16-08-2017 09:28:22)
Running from C:\Users\scct\Desktop\New folder (2)
Windows 10 Pro Version 1703 (X64) (2017-06-20 19:20:51)
Boot Mode: Normal[/HEADING]
==================== Accounts: =============================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.
By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also acknowledge that this forum may be hosted outside your country and you consent to the collection, storage, and processing of your data in the country where this forum is hosted.
Tweet
Comment