On boot up I get there is no file extension in "c:\users\**** "

[Moogera]

Hi no idea about the firewall,I have Fl20 and the game Modern warfare blocked ,FL 20 ,I don’t know what the other file is? I’ll see if I can find it

" Lync" never seen it dunno what it is,should I delete it?

Kms was for Office 16 but I thought id removed it as I changed over to libre office

Avira I had installed at one time because defender wouldn’t run on it’s own ,it would only do an on demand scan .

No I didn’t know bitlocker was running,no I don’t use One drive

Lot to look into there

[Malnutrition]

Ok, we are gonna remove the remnants of Avira and Kms, then we will reset the firewall. Let’s use one more software tool to give me a look at other areas of the machine.

Download ZHP Suite to your desktop.
Right Click Run as admin.
Hit the scanner button.
Once it is complete a file name ZHPdiag.txt will be on your desktop.
Attach it.

[Moogera]

Hi ZHP suite doesn’t download,sits there saying getting files together for 30 mins

One problem solved now I have another Google chrome has suddenly defaulted back to default,I’ve lost all my bookmarks
Google tells me theres a back up in C:\users\name\appdata\local\Google\Chrome\user data\default
The folders empty
Has this anything to do with FRST ?

[Malnutrition]

We deleted the cache data from within Chrome. This standard practice when I help users, you can see this command only deletes the cache.

CMD: del /s /q “%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache*.*”

This would be a first if your bookmarks were deleted. Which is not indicated in the fixlog, you can look there and see everything that was deleted from your machine via FRST

---

---

Zhp uploaded for you.

[Moogera]

Hi yeah it’s the loss of the bookmarks that’s annoyed me but not only that,it’s a full reset of Chrome,no browser extensions or history.
50% redone today adding bookmarks,it was just something I’ve not seen before.

My son came today he’s a bit more PC savvy than me,so he -
Renamed the suspicious msregsvv.dll to .bak
Removed the Avira remnants
Turned off bitlocker
Removed the two Auto Kms files
He’s not sure if " Lync" in Windows start up isn’t something to do with MS Office

Anyway I’m going to say this is resolved,I can only thank you for your help and I’ve learnt along the way,some good tools that can be put to use

I will be travelling to my Daughter’s today to spend Christmas ??? with her and my Grandson.

Hope you have a good Christmas and Happy New Year
Thank you once again ???

[Bruce]

@Moogera - still going strong?
Happy to have this closed as solved?

[PeterOz]

ome good tools that can be put to use

Only if you know how to use them correctly.

[Moogera]

@Moogera - still going strong?
Happy to have this closed as solved?

Hi many thanks to everyone PC is running well my son followed Malnutritions instructions and I’m happy
Thank you

[Malnutrition]

Download KpRM
Save to Desktop
Check Delete Tools’
Check Delete Restore points.
Create Restore point.
Click delete quarantines.
Then click run.

---

I suggest:
Ublock Origin
O&O Shutup Ten
O&O App Buster