Sleep mode no longer working (Lenovo z40 Windows 10)

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • rebelnature
    PCHF Member
    • Oct 2016
    • 5

    #1

    Sleep mode no longer working (Lenovo z40 Windows 10)

    For the past few weeks my laptop won’t go into sleep mode. I like to put podcasts on as I fall asleep and usually my laptop will go to sleep after 20 minutes of inactivity, and I pick up the podcast where it left off the next night. Now it just runs all night or, if I unplug it, it runs until the battery drains, whether the podcast is still playing or not. The power settings have been checked and adjusted. I’ve run a command prompt to make sure nothing is keeping my laptop turned on. I’ve troubleshooted Power and System Maintenance and fixed any issues. Nothing works. Any suggestions?
  • Malnutrition
    PCHF Moderator
    • Jul 2016
    • 7045

    #2
    Welcome to PCHF. Let’s take a look at a bit of information from your machine, so I can get the ball rolling on solving your issue.

    Please download MINITOOLBOX and run it.

    Checkmark following boxes:

    Flush DNS
    Reset FF proxy Settings
    Reset Ie Proxy Settings
    Report IE Proxy Settings
    Report FF Proxy Settings
    List content of Hosts
    List IP configuration
    List Winsock Entries
    List last 10 Event Viewer log
    List Installed Programs
    List Users, Partitions and Memory size
    List Devices (problems only)

    Click Go post the result.

    Download Autoruns and Autorunsc Unzip it to your desktop and then double click autoruns.exe
    After the scan is finished then click on File>>>>>>>>>>>Save
    The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option.
    in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.

    Comment

    • rebelnature
      PCHF Member
      • Oct 2016
      • 5

      #3
      Originally posted by Malnutrition
      Welcome to PCHF. Let’s take a look at a bit of information from your machine, so I can get the ball rolling on solving your issue.

      Please download MINITOOLBOX and run it.

      Checkmark following boxes:

      Flush DNS
      Reset FF proxy Settings
      Reset Ie Proxy Settings
      Report IE Proxy Settings
      Report FF Proxy Settings
      List content of Hosts
      List IP configuration
      List Winsock Entries
      List last 10 Event Viewer log
      List Installed Programs
      List Users, Partitions and Memory size
      List Devices (problems only)

      Click Go post the result.

      Download Autoruns and Autorunsc Unzip it to your desktop and then double click autoruns.exe
      After the scan is finished then click on File>>>>>>>>>>>Save
      The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option.
      in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.
      MiniToolBox by Farbar Version: 17-06-2016
      Ran by El (administrator) on 21-10-2016 at 17:16:40
      Running from “C:\Users\El\Downloads”
      Microsoft Windows 10 Home (X64)
      Model: 20366 Manufacturer: LENOVO
      Boot Mode: Normal


      ========================= Flush DNS: ===================================

      Windows IP Configuration

      Successfully flushed the DNS Resolver Cache.

      ========================= IE Proxy Settings: ==============================

      Proxy is not enabled.
      No Proxy Server is set.

      “Reset IE Proxy Settings”: IE Proxy Settings were reset.

      ========================= FF Proxy Settings: ==============================

      “Reset FF Proxy Settings”: Firefox Proxy settings were reset.

      ========================= Hosts content: =================================
      0.0.0.1 mssplus.mcafee.com
      ========================= IP Configuration: ================================

      Realtek RTL8723BE Wireless LAN 802.11n PCI-E NIC = Wi-Fi (Connected)
      Realtek PCIe GBE Family Controller = Ethernet (Media disconnected)
      Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)
      [HEADING=1]----------------------------------[/HEADING]
      [HEADING=1]IPv4 Configuration[/HEADING]
      [HEADING=1]----------------------------------[/HEADING]
      pushd interface ipv4

      reset
      set global
      set interface interface=“Local Area Connection* 1” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
      set interface interface=“Ethernet” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
      set interface interface=“Wi-Fi” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
      set interface interface=“Local Area Connection* 2” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
      set interface interface=“Bluetooth Network Connection” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

      popd
      [HEADING=1]End of IPv4 configuration[/HEADING]
      Windows IP Configuration

      Host Name . . . . . . . . . . . . : RebelsLaptop
      Primary Dns Suffix . . . . . . . :
      Node Type . . . . . . . . . . . . : Hybrid
      IP Routing Enabled. . . . . . . . : No
      WINS Proxy Enabled. . . . . . . . : No
      DNS Suffix Search List. . . . . . : satx.rr.com

      Ethernet adapter Ethernet:

      Media State . . . . . . . . . . . : Media disconnected
      Connection-specific DNS Suffix . : satx.rr.com
      Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
      Physical Address. . . . . . . . . : 68-F7-28-06-A4-5F
      DHCP Enabled. . . . . . . . . . . : Yes
      Autoconfiguration Enabled . . . . : Yes

      Wireless LAN adapter Local Area Connection* 2:

      Media State . . . . . . . . . . . : Media disconnected
      Connection-specific DNS Suffix . :
      Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
      Physical Address. . . . . . . . . : 12-08-B1-73-3D-99
      DHCP Enabled. . . . . . . . . . . : Yes
      Autoconfiguration Enabled . . . . : Yes

      Wireless LAN adapter Wi-Fi:

      Connection-specific DNS Suffix . : satx.rr.com
      Description . . . . . . . . . . . : Realtek RTL8723BE Wireless LAN 802.11n PCI-E NIC
      Physical Address. . . . . . . . . : 10-08-B1-73-3D-99
      DHCP Enabled. . . . . . . . . . . : Yes
      Autoconfiguration Enabled . . . . : Yes
      IPv4 Address. . . . . . . . . . . : 192.168.0.3(Preferred)
      Subnet Mask . . . . . . . . . . . : 255.255.255.0
      Lease Obtained. . . . . . . . . . : Friday, October 21, 2016 9:46:38 AM
      Lease Expires . . . . . . . . . . : Friday, October 21, 2016 5:46:52 PM
      Default Gateway . . . . . . . . . : 192.168.0.1
      DHCP Server . . . . . . . . . . . : 192.168.0.1
      DNS Servers . . . . . . . . . . . : 209.18.47.61
      209.18.47.62
      NetBIOS over Tcpip. . . . . . . . : Enabled

      Ethernet adapter Bluetooth Network Connection:

      Media State . . . . . . . . . . . : Media disconnected
      Connection-specific DNS Suffix . :
      Description . . . . . . . . . . . : Bluetooth PAN HelpText
      Physical Address. . . . . . . . . : 10-08-B1-73-3D-9A
      DHCP Enabled. . . . . . . . . . . : Yes
      Autoconfiguration Enabled . . . . : Yes

      Tunnel adapter Local Area Connection* 3:

      Connection-specific DNS Suffix . :
      Description . . . . . . . . . . . : Microsoft Teredo Tunneling Adapter
      Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
      DHCP Enabled. . . . . . . . . . . : No
      Autoconfiguration Enabled . . . . : Yes
      IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:2c14:2ac8:bde6:514a(Preferred)
      Link-local IPv6 Address . . . . . : fe80::2c14:2ac8:bde6:514a%8(Preferred)
      Default Gateway . . . . . . . . . : ::
      DHCPv6 IAID . . . . . . . . . . . : 134217728
      DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-B3-05-5E-68-F7-28-06-A4-5F
      NetBIOS over Tcpip. . . . . . . . : Disabled

      Tunnel adapter isatap.satx.rr.com:

      Media State . . . . . . . . . . . : Media disconnected
      Connection-specific DNS Suffix . : satx.rr.com
      Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
      Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
      DHCP Enabled. . . . . . . . . . . : No
      Autoconfiguration Enabled . . . . : Yes
      Server: dns-cac-lb-01.rr.com
      Address: 209.18.47.61

      Name: google.com
      Addresses: 2607:f8b0:4000:80d::200e
      216.58.218.110

      Pinging google.com [216.58.194.78] with 32 bytes of data:
      Reply from 216.58.194.78: bytes=32 time=19ms TTL=53
      Reply from 216.58.194.78: bytes=32 time=19ms TTL=53

      Ping statistics for 216.58.194.78:
      Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
      Approximate round trip times in milli-seconds:
      Minimum = 19ms, Maximum = 19ms, Average = 19ms
      Server: dns-cac-lb-01.rr.com
      Address: 209.18.47.61

      Name: yahoo.com
      Addresses: 2001:4998:c:a06::2:4008
      2001:4998:58:c02::a9
      2001:4998:44:204::a7
      98.139.183.24
      206.190.36.45
      98.138.253.109

      Pinging yahoo.com [206.190.36.45] with 32 bytes of data:
      Reply from 206.190.36.45: bytes=32 time=84ms TTL=45
      Reply from 206.190.36.45: bytes=32 time=71ms TTL=45

      Ping statistics for 206.190.36.45:
      Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
      Approximate round trip times in milli-seconds:
      Minimum = 71ms, Maximum = 84ms, Average = 77ms

      Pinging 127.0.0.1 with 32 bytes of data:
      Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
      Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
      [HEADING=1]Ping statistics for 127.0.0.1:
      Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
      Approximate round trip times in milli-seconds:
      Minimum = 0ms, Maximum = 0ms, Average = 0ms[/HEADING]
      [HEADING=1]Interface List
      12…68 f7 28 06 a4 5f …Realtek PCIe GBE Family Controller
      6…12 08 b1 73 3d 99 …Microsoft Wi-Fi Direct Virtual Adapter
      5…10 08 b1 73 3d 99 …Realtek RTL8723BE Wireless LAN 802.11n PCI-E NIC
      10…10 08 b1 73 3d 9a …Bluetooth PAN HelpText
      1…Software Loopback Interface 1
      8…00 00 00 00 00 00 00 e0 Microsoft Teredo Tunneling Adapter
      11…00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3[/HEADING]
      [HEADING=1]IPv4 Route Table[/HEADING]
      [HEADING=1]Active Routes:
      Network Destination Netmask Gateway Interface Metric
      0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.3 55
      127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
      127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
      127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
      192.168.0.0 255.255.255.0 On-link 192.168.0.3 311
      192.168.0.3 255.255.255.255 On-link 192.168.0.3 311
      192.168.0.255 255.255.255.255 On-link 192.168.0.3 311
      224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
      224.0.0.0 240.0.0.0 On-link 192.168.0.3 311
      255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
      255.255.255.255 255.255.255.255 On-link 192.168.0.3 311[/HEADING]
      Persistent Routes:
      None
      [HEADING=1]IPv6 Route Table[/HEADING]
      [HEADING=1]Active Routes:
      If Metric Network Destination Gateway
      8 331 ::/0 On-link
      1 331 ::1/128 On-link
      8 331 2001::/32 On-link
      8 331 2001:0:5ef5:79fd:2c14:2ac8:bde6:514a/128
      On-link
      8 331 fe80::/64 On-link
      8 331 fe80::2c14:2ac8:bde6:514a/128
      On-link
      1 331 ff00::/8 On-link
      8 331 ff00::/8 On-link[/HEADING]
      Persistent Routes:
      None
      ========================= Winsock entries =====================================

      Catalog5 01 C:\WINDOWS\SysWoW64\napinsp.dll [55808] (Microsoft Corporation)
      Catalog5 02 C:\WINDOWS\SysWoW64\pnrpnsp.dll [70656] (Microsoft Corporation)
      Catalog5 03 C:\WINDOWS\SysWoW64\pnrpnsp.dll [70656] (Microsoft Corporation)
      Catalog5 04 C:\WINDOWS\SysWoW64\NLAapi.dll [65024] (Microsoft Corporation)
      Catalog5 05 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog5 06 C:\WINDOWS\SysWoW64\winrnr.dll [24064] (Microsoft Corporation)
      Catalog5 07 C:\WINDOWS\SysWoW64\wshbth.dll [51712] (Microsoft Corporation)
      Catalog9 01 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 02 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 03 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 04 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 05 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 06 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 07 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 08 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 09 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 10 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 11 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 12 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      Catalog9 13 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
      x64-Catalog5 01 C:\Windows\System32\napinsp.dll [67584] (Microsoft Corporation)
      x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
      x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
      x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [80896] (Microsoft Corporation)
      x64-Catalog5 05 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog5 06 C:\Windows\System32\winrnr.dll [31744] (Microsoft Corporation)
      x64-Catalog5 07 C:\Windows\System32\wshbth.dll [62976] (Microsoft Corporation)
      x64-Catalog9 01 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 02 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 03 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 04 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 05 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 06 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 07 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 08 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 09 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 10 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 11 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 12 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
      x64-Catalog9 13 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)

      ========================= Event log errors: ===============================
      [HEADING=1]Application errors:[/HEADING]
      Error: (10/20/2016 08:17:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: REBELSLAPTOP)
      Description: Package Microsoft.Windows.Photos_16.722.10060.0_x64__8weky b3d8bbwe+App was terminated because it took too long to suspend.

      Error: (10/19/2016 07:03:32 PM) (Source: Application Error) (User: )
      Description: Faulting application name: ETDCtrl.exe, version: 11.59.4.56, time stamp: 0x57a30dda
      Faulting module name: ntdll.dll, version: 10.0.14393.206, time stamp: 0x57dac931
      Exception code: 0xc0000005
      Fault offset: 0x00000000000ab46f
      Faulting process id: 0x7a8
      Faulting application start time: 0xETDCtrl.exe0
      Faulting application path: ETDCtrl.exe1
      Faulting module path: ETDCtrl.exe2
      Report Id: ETDCtrl.exe3
      Faulting package full name: ETDCtrl.exe4
      Faulting package-relative application ID: ETDCtrl.exe5

      Error: (10/19/2016 09:42:04 AM) (Source: Application Error) (User: )
      Description: Faulting application name: OneDriveStandaloneUpdater.exe, version: 17.3.6517.809, time stamp: 0x57aa1ede
      Faulting module name: ntdll.dll, version: 10.0.14393.206, time stamp: 0x57dacde1
      Exception code: 0xc0000374
      Fault offset: 0x000d9841
      Faulting process id: 0x8a0
      Faulting application start time: 0xOneDriveStandaloneUpdater.exe0
      Faulting application path: OneDriveStandaloneUpdater.exe1
      Faulting module path: OneDriveStandaloneUpdater.exe2
      Report Id: OneDriveStandaloneUpdater.exe3
      Faulting package full name: OneDriveStandaloneUpdater.exe4
      Faulting package-relative application ID: OneDriveStandaloneUpdater.exe5

      Error: (10/18/2016 04:20:11 PM) (Source: Application Error) (User: )
      Description: Faulting application name: Microsoft.Photos.exe, version: 1.0.1607.22006, time stamp: 0x57929979
      Faulting module name: SharedLibrary.dll, version: 1.4.24201.0, time stamp: 0x574e6cd1
      Exception code: 0x802a0201
      Fault offset: 0x000000000041cf48
      Faulting process id: 0x304
      Faulting application start time: 0xMicrosoft.Photos.exe0
      Faulting application path: Microsoft.Photos.exe1
      Faulting module path: Microsoft.Photos.exe2
      Report Id: Microsoft.Photos.exe3
      Faulting package full name: Microsoft.Photos.exe4
      Faulting package-relative application ID: Microsoft.Photos.exe5

      Error: (10/18/2016 04:05:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: REBELSLAPTOP)
      Description: Activation of app Microsoft.Windows.CloudExperienceHost_cw5n1h2txyew y!App failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

      Error: (10/18/2016 03:45:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: REBELSLAPTOP)
      Description: Activation of app Microsoft.Windows.CloudExperienceHost_cw5n1h2txyew y!App failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

      Error: (10/18/2016 03:40:35 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: REBELSLAPTOP)
      Description: Activation of app Microsoft.Windows.CloudExperienceHost_cw5n1h2txyew y!App failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

      Error: (10/18/2016 03:16:34 PM) (Source: Application Hang) (User: )
      Description: The program explorer.exe version 10.0.14393.206 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

      Process ID: 1570

      Start Time: 01d226928833240c

      Termination Time: 0

      Application Path: C:\Windows\explorer.exe

      Report Id: 03db3d2c-956f-11e6-938a-1008b1733d9a

      Faulting package full name:

      Faulting package-relative application ID:

      Error: (10/18/2016 12:40:08 AM) (Source: Microsoft-Windows-CAPI2) (User: )
      Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

      Details:
      AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

      System Error:
      Access is denied.
      .

      Error: (10/14/2016 10:17:42 PM) (Source: Perflib) (User: )
      Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4
      [HEADING=1]System errors:[/HEADING]
      Error: (10/21/2016 09:46:39 AM) (Source: DCOM) (User: NT AUTHORITY)
      Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

      Error: (10/21/2016 03:33:34 AM) (Source: NetBT) (User: )
      Description: The name “WORKGROUP :1d” could not be registered on the interface with IP address 192.168.0.3.
      The computer with the IP address 192.168.0.6 did not allow the name to be claimed by
      this computer.

      Error: (10/20/2016 08:18:02 PM) (Source: DCOM) (User: NT AUTHORITY)
      Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

      Error: (10/19/2016 07:03:34 PM) (Source: DCOM) (User: NT AUTHORITY)
      Description: application-specificLocalActivation{3185A766-B338-11E4-A71E-12E3F512A338}{7006698D-2974-4091-A424-85DD0B909E23}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)UnavailableUnavailable

      Error: (10/19/2016 09:38:12 AM) (Source: DCOM) (User: NT AUTHORITY)
      Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

      Error: (10/19/2016 01:12:28 AM) (Source: bowser) (User: )
      Description: The master browser has received a server announcement from the computer SCREWTAPE
      that believes that it is the master browser for the domain on transport NetBT_Tcpip_{5110B79B-1034-41FE-A975-EFEC00CEC923}.
      The master browser is stopping or an election is being forced.

      Error: (10/18/2016 07:23:31 PM) (Source: DCOM) (User: REBELSLAPTOP)
      Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}RebelsLaptopRebelS-1-5-21-2215311793-1544632459-3505437252-1004LocalHost (Using LRPC)Microsoft.WindowsStore_11609.1001.28.0_x64__8 wekyb3d8bbweS-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157

      Error: (10/18/2016 06:22:20 PM) (Source: DCOM) (User: NT AUTHORITY)
      Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

      Error: (10/18/2016 03:40:36 PM) (Source: DCOM) (User: REBELSLAPTOP)
      Description: Windows.Security.Authentication.Web.Core.Backgroun dGetTokenTask.ClassId.WebAccountProvider

      Error: (10/17/2016 07:11:41 PM) (Source: DCOM) (User: NT AUTHORITY)
      Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable
      [HEADING=1]Microsoft Office Sessions:[/HEADING]
      [HEADING=1]CodeIntegrity Errors:[/HEADING]
      Date: 2016-10-21 13:49:11.040
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:49:11.037
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:49:11.032
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:49:10.846
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:49:10.842
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:49:10.835
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:49:10.471
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:49:10.468
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:49:10.461
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      Date: 2016-10-21 13:48:53.657
      Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

      =========================== Installed Programs ============================

      µTorrent (HKCU...\uTorrent) (Version: 3.4.8.42576 - BitTorrent Inc.)
      Ace Stream Media 3.1.0 (HKCU...\AceStream) (Version: 3.1.0 - Ace Stream Media)
      Adobe Acrobat Reader DC (HKLM-x32...{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.020.20039 - Adobe Systems Incorporated)
      Adobe Flash Player 23 NPAPI (HKLM-x32...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated)
      Adobe Lightroom (HKLM-x32...{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.1 - Adobe Systems Incorporated)
      Adobe Photoshop CC 2015 (HKLM-x32...{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
      Adobe Shockwave Player 12.2 (HKLM-x32...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.)
      Apple Application Support (HKLM-x32...{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
      Apple Software Update (HKLM-x32...{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
      BatteryBar (remove only) (HKLM...\BatteryBar) (Version: - )
      BBC iPlayer Downloads (HKLM-x32...{148784F3-3B6E-4DFA-B7A1-3400B277DAF3}) (Version: 1.14.2 - BBC)
      BlueStacks App Player (HKLM-x32...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
      Canon MX920 series MP Drivers (HKLM...{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.00 - Canon Inc.)
      Canon MX920 series On-screen Manual (HKLM-x32...\Canon MX920 series On-screen Manual) (Version: 7.6.0 - Canon Inc.)
      Canon MX920 series User Registration (HKLM-x32...\Canon MX920 series User Registration) (Version: - ‭Canon Inc.)
      Canon Speed Dial Utility (HKLM-x32...\Speed Dial Utility) (Version: 1.3.0 - Canon Inc.)
      CCleaner (HKLM...\CCleaner) (Version: 5.14 - Piriform)
      Conexant HD Audio (HKLM...\CNXT_AUDIO_HDA) (Version: 8.66.4.0 - Conexant)
      Curse (HKLM-x32...{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
      DAZ Install Manager (HKLM-x32...\DAZ Install Manager 1.1.0.64) (Version: 1.1.0.64 - DAZ 3D)
      Dolby Digital Plus Home Theater (HKLM...{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
      Google Chrome (HKLM-x32...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
      Google Update Helper (HKLM-x32...{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.31.5 - Google Inc.) Hidden
      Gyazo 3.2.2 (HKLM-x32...{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
      Intel Security True Key (HKLM...\TrueKey) (Version: 4.4.129.1 - Intel Security)
      Intel(R) Processor Graphics (HKLM-x32...{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4279 - Intel Corporation)
      Java 8 Update 101 (64-bit) (HKLM...{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
      Lenovo EasyCamera (HKLM-x32...{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 6.3.9600.11105 - Realtek Semiconductor Corp.)
      Lenovo Service Bridge (HKCU...\dda9ca0b023f4c56) (Version: 1.6.3.3 - Lenovo)
      Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
      McAfee Security Scan Plus (HKLM...\McAfee Security Scan) (Version: 3.11.309.1 - McAfee, Inc.)
      Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32...{90120000-0030-0000-0000-0000000FF1CE}ENTERPRISE{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
      Microsoft Office Enterprise 2007 (HKLM-x32...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
      Microsoft Silverlight (HKLM...{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
      Microsoft Visual C++ 2005 Redistributable (x64) (HKLM...{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
      Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM...{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
      Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM...{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32...{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
      Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
      Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
      Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32...{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
      Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
      Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32...{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
      Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32...{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
      Minecraft1.8.4 (HKLM-x32...\Minecraft1.8.4) (Version: - )
      Mozilla Firefox 45.0.1 (x86 en-US) (HKLM-x32...\Mozilla Firefox 45.0.1 (x86 en-US)) (Version: 45.0.1 - Mozilla)
      Mozilla Maintenance Service (HKLM-x32...\MozillaMaintenanceService) (Version: 45.0.1.5918 - Mozilla)
      Nox APP Player (HKLM-x32...\Nox) (Version: 3.7.0.0 - Duodian Technology Co. Ltd.)
      OpenOffice 4.1.1 (HKLM-x32...{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software Foundation)
      Picasa 3 (HKLM-x32...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.)
      QuickTime 7 (HKLM-x32...{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
      Recuva (HKLM...\Recuva) (Version: 1.52 - Piriform)
      ShopTracker 1.1.16 (HKLM-x32...\AmazonMeter) (Version: 1.1.16 - Nielsen)
      Skype Click to Call (HKLM-x32...{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)
      Skype™ 7.28 (HKLM-x32...{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.28.101 - Skype Technologies S.A.)
      swMSM (HKLM-x32...{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
      TeamViewer 11 (HKLM-x32...\TeamViewer) (Version: 11.0.59518 - TeamViewer)
      TeleTech WB ISA (HKLM-x32...\TeleTech ISA) (Version: 1.2.4.0 - TeleTech)
      Update for 2007 Microsoft Office System (KB967642) (HKLM-x32...{90120000-0030-0000-0000-0000000FF1CE}ENTERPRISE{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
      VLC media player (HKLM-x32...\VLC media player) (Version: 2.2.4 - VideoLAN)
      Windows Driver Package - BigNox Corporation (VBoxUSB) USB (09/16/2015 4.3.12) (HKLM...\76B144D15273552931249392EDB13C0BBD52C84E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
      Windows Driver Package - BigNox Corporation VBoxUSBMon System (09/16/2015 4.3.12) (HKLM...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
      Windows Driver Package - BigNox Corporation XQHDrv System (09/16/2015 4.3.12) (HKLM...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
      Yahoo Search Set (HKLM-x32...\Yahoo! SearchSet) (Version: - Yahoo Inc.)

      ========================= Devices: ================================

      ========================= Memory info: ===================================

      Percentage of memory in use: 83%
      Total physical RAM: 8084.27 MB
      Available physical RAM: 1327.23 MB
      Total Virtual: 22293.4 MB
      Available Virtual: 6384.52 MB

      ========================= Partitions: =====================================

      1 Drive c: (Windows8_OS) (Fixed) (Total:889.49 GB) (Free:374.24 GB) NTFS
      2 Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.68 GB) NTFS
      4 Drive g: () (Removable) (Total:14.83 GB) (Free:0.38 GB) FAT32

      ========================= Users: ========================================

      User accounts for \REBELSLAPTOP

      Administrator DefaultAccount Guest
      El UpdatusUser

      **** End of log ****

      Comment

      • Malnutrition
        PCHF Moderator
        • Jul 2016
        • 7045

        #4
        Please remove the programs below with Geek Uninstaller.

        McAfee Security Scan Plus (HKLM...\McAfee Security Scan) (Version: 3.11.309.1 - McAfee, Inc.)
        ShopTracker 1.1.16 (HKLM-x32...\AmazonMeter) (Version: 1.1.16 - Nielsen)
        Yahoo Search Set (HKLM-x32...\Yahoo! SearchSet) (Version: - Yahoo Inc.)

        Then get me the Autoruns log, so we can see what items are starting with your machine. Often too many startups and task running can prevent a computer from sleeping…

        HijackThis.

        1- Please click HERE to download HijackThis.
        2- Run the program.
        3- Click on the Main Menu button if not already there.
        4- Select Do a system scan and save a logfile.
        5- Copy paste the log here.

        Security Check Scan.

        [ul]
        [li]Download Security Check to your desktop.[/li][li]Right click it run as administrator.[/li][li]When the program completes, the tool will automatically open a log file.[/li][li]Please post that log here in your next post.[/li][/ul]

        Comment

        • rebelnature
          PCHF Member
          • Oct 2016
          • 5

          #5
          Originally posted by Malnutrition
          Please remove the programs below with Geek Uninstaller.

          McAfee Security Scan Plus (HKLM...\McAfee Security Scan) (Version: 3.11.309.1 - McAfee, Inc.)
          ShopTracker 1.1.16 (HKLM-x32...\AmazonMeter) (Version: 1.1.16 - Nielsen)
          Yahoo Search Set (HKLM-x32...\Yahoo! SearchSet) (Version: - Yahoo Inc.)

          Then get me the Autoruns log, so we can see what items are starting with your machine. Often too many startups and task running can prevent a computer from sleeping…

          HijackThis.

          1- Please click HERE to download HijackThis.
          2- Run the program.
          3- Click on the Main Menu button if not already there.
          4- Select Do a system scan and save a logfile.
          5- Copy paste the log here.

          Security Check Scan.

          [ul]
          [li]Download Security Check to your desktop.[/li][li]Right click it run as administrator.[/li][li]When the program completes, the tool will automatically open a log file.[/li][li]Please post that log here in your next post.[/li][/ul]
          Done!

          Comment

          • Malnutrition
            PCHF Moderator
            • Jul 2016
            • 7045

            #6
            Ok. FYI, there is no need to quote me each post.

            Can you get me the Autoruns log? As well as the other two requested logs, so that we can get your machine :sleep: again.

            Comment

            • rebelnature
              PCHF Member
              • Oct 2016
              • 5

              #7
              My bad. Here is the Autoruns file, Hijack file and Security Check file.


              SecurityCheck by glax24 & Severnyj v.1.4.0.46 [22.09.16]

              WebSite: www.safezone.cc
              DateLog: 21.10.2016 18:28:25
              Path starting: C:\Users\El\AppData\Local\Temp\SecurityCheck\Secur ityCheck.exe
              Log directory: C:\SecurityCheck
              IsAdmin: True
              User: El
              VersionXML: 3.45is-20.10.2016


              Windows 10(6.3.14393) (x64) Core Lang: English(0409)
              Installation date OS: 24.08.2016 14:52:02
              LicenseStatus: Windows(R), Core edition The machine is permanently activated.
              LicenseStatus: Office 15, OfficeO365HomePremR_SubTrial5 edition Windows is in Notification mode
              LicenseStatus: Office 15, OfficeO365HomePremR_Grace edition Windows is in Notification mode
              Boot Mode: Normal
              Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              SystemDrive: C: FS: [NTFS] Capacity: [889.5 Gb] Used: [515.3 Gb] Free: [374.2 Gb]
              ------------------------------- [ Windows ] -------------------------------
              Internet Explorer 11.321.14393.0
              User Account Control enabled
              The elevation prompt for administrators disabled
              ^It is recommended to enable: Win+R typing UserAccountControlSettings and Enter[1]
              Automatically download and schedule installation
              Windows Update (wuauserv) - The service is running
              Security Center (wscsvc) - The service is running
              Remote Registry (RemoteRegistry) - The service has stopped
              SSDP Discovery (SSDPSRV) - The service is running
              Remote Desktop Services (TermService) - The service has stopped
              Windows Remote Management (WS-Management) (WinRM) - The service has stopped
              ------------------------------ [ MS Office ] ------------------------------
              Microsoft Office 2007 v.12.0.6612.1000
              ---------------------------- [ Antivirus_WMI ] ----------------------------
              Windows Defender (enabled and up to date)
              --------------------------- [ FirewallWindows ] ---------------------------
              Windows Firewall (MpsSvc) - The service is running
              --------------------------- [ AntiSpyware_WMI ] ---------------------------
              Windows Defender (enabled and up to date)
              -------------------------- [ SecurityUtilities ] --------------------------
              Malwarebytes Anti-Malware version 2.2.1.1043 v.2.2.1.1043
              --------------------------- [ OtherUtilities ] ----------------------------
              Microsoft Silverlight v.5.1.50901.0
              Picasa 3 v.3.9.140.248 Warning! This software is no longer supported.
              TeamViewer 11 v.11.0.59518 Warning! Download Update
              VLC media player v.2.2.4
              OpenOffice 4.1.1 v.4.11.9775 Warning! Download Update
              TeamViewer 11 (TeamViewer) - The service is running
              --------------------------------- [ IM ] ----------------------------------
              Skype™ 7.28 v.7.28.101 Warning! Download Update
              ^Optional update.[2]
              --------------------------------- [ P2P ] ---------------------------------
              µTorrent v.3.4.8.42576 Warning! P2P-client.
              -------------------------------- [ Java ] ---------------------------------
              Java 8 Update 101 (64-bit) v.8.0.1010.13 Warning! Download Update
              Uninstall old version and install new one (jre-8u112-windows-x64.exe).
              --------------------------- [ AppleProduction ] ---------------------------
              QuickTime 7 v.7.78.80.95 Warning! This software is no longer supported. Please uninstall it and use another software.
              --------------------------- [ AdobeProduction ] ---------------------------
              Adobe Flash Player 23 NPAPI v.23.0.0.185
              Adobe Shockwave Player 12.2 v.12.2.5.195
              Adobe Acrobat Reader DC v.15.020.20039
              ------------------------------- [ Browser ] -------------------------------
              Google Chrome v.53.0.2785.143 Warning! Download Update
              Mozilla Firefox 45.0.1 (x86 en-US) v.45.0.1 Warning! Download Update
              --------------------------- [ RunningProcess ] ----------------------------
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe v.53.0.2785.143
              ------------------ [ AntivirusFirewallProcessServices ] -------------------
              C:\Program Files\Windows Defender\MsMpEng.exe v.4.10.14393.0
              C:\Program Files\Windows Defender\MpCmdRun.exe v.4.10.14393.0
              C:\Program Files\Windows Defender\NisSrv.exe v.4.10.14393.0
              Windows Defender Service (WinDefend) - The service is running
              Windows Defender Network Inspection Service (WdNisSvc) - The service is running
              ---------------------------- [ UnwantedApps ] -----------------------------
              Ace Stream Media 3.1.0 v.3.1.0 Unwanted software.
              Skype Click to Call v.8.3.0.9150 Warning! Browser’s toolbar. It can slow down the working of your browser and have violation privacy problems.
              ----------------------------- [ End of Log ] ------------------------------


              Logfile of Trend Micro HijackThis v2.0.4

              Scan saved at 6:28:02 PM, on 10/21/2016
              Platform: Unknown Windows (WinNT 6.02.1008)
              MSIE: Internet Explorer v11.0 (11.00.14393.0000)
              Boot mode: Normal

              Running processes:
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Windows\System32\TiltWheelMouse.exe
              C:\Program Files (x86)\Gyazo\GyStation.exe
              C:\Users\El\AppData\Local\Microsoft\BingSvc\BingSv c.exe
              C:\Program Files (x86)\Skype\Phone\Skype.exe
              C:\Program Files (x86)\BlueStacks\HD-Agent.exe
              C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files\WindowsApps\Microsoft.BingWeather_4.16.15.0_ x86__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe
              C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Users\El\AppData\Roaming\uTorrent\uTorrent.exe
              C:\Users\El\AppData\Roaming\uTorrent\updates\3.4.8 _42576\utorrentie.exe
              C:\Users\El\AppData\Roaming\uTorrent\updates\3.4.8 _42576\utorrentie.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
              C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
              C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
              C:\Users\El\Downloads\Autoruns\Autoruns.exe
              C:\Users\El\Downloads\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Search - Microsoft Bing
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search - Microsoft Bing
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search - Microsoft Bing
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = .local
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
              F2 - REG:system.ini: UserInit=
              O2 - BHO: True Key Helper - {0F4B8786-5502-4803-8EBC-F652A1153BB6} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll
              O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
              O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
              O3 - Toolbar: True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll
              O4 - HKLM..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
              O4 - HKLM..\Run: [GrooveMonitor] “C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe”
              O4 - HKLM..\Run: [APSDaemon] “C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe”
              O4 - HKLM..\Run: [QuickTime Task] “C:\Program Files (x86)\QuickTime\QTTask.exe” -atboottime
              O4 - HKLM..\Run: [SunJavaUpdateSched] “C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe”
              O4 - HKCU..\Run: [OneDrive] “C:\Users\El\AppData\Local\Microsoft\OneDrive\OneD rive.exe” /background
              O4 - HKCU..\Run: [ShowBatteryBar] “C:\Program Files\BatteryBar\ShowBatteryBar.exe” show
              O4 - HKCU..\Run: [Gyazo] C:\Program Files (x86)\Gyazo\GyStation.exe
              O4 - HKCU..\Run: [BingSvc] C:\Users\El\AppData\Local\Microsoft\BingSvc\BingSv c.exe
              O4 - HKCU..\Run: [Skype] “C:\Program Files (x86)\Skype\Phone\Skype.exe” /minimized /regrun
              O4 - HKCU..\Run: [CCleaner Monitoring] “C:\Program Files\CCleaner\CCleaner64.exe” /MONITOR
              O4 - HKCU..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
              O4 - Startup: Curse.lnk = C:\Users\El\AppData\Roaming\Curse Client\Bin\Curse.exe
              O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
              O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
              O9 - Extra ‘Tools’ menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
              O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
              O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
              O15 - Trusted Zone: http://
              .hola.org
              O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control) - https://fpdownload.macromedia.com/pu...irector/sw.cab
              O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
              O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
              O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
              O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
              O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
              O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe
              O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
              O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
              O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
              O23 - Service: BlueStacks Plus Android Service (BstHdPlusAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe
              O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
              O23 - Service: @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\WINDOWS\system32\CxAudMsg64.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.Sta ndardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.Standa rdCollector.Service.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
              O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
              O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
              O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
              O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
              O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
              O23 - Service: Intel(R) Biometric and Context Agent Service (IntelBCAsvc) - Intel(R) Corporation - C:\Program Files\Intel\BCA\pabeSvc64.exe
              O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
              O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
              O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
              O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
              O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
              O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
              O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\WINDOWS\system32\SAsrv.exe
              O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
              O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
              O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
              O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
              O23 - Service: TeamViewer 11 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
              O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
              O23 - Service: Intel Security True Key (TrueKey) - McAfee, Inc. - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
              O23 - Service: Intel Security True Key Scheduler (TrueKeyScheduler) - McAfee, Inc. - C:\Program Files\TrueKey\McTkSchedulerService.exe
              O23 - Service: Intel Security True Key Helper Service (TrueKeyServiceHelper) - McAfee, Inc. - C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe
              O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
              O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
              O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
              O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
              O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
              O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
              O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)


              End of file - 15381 bytes

              1. /B ↩︎
              2. /B ↩︎

              Comment

              • Malnutrition
                PCHF Moderator
                • Jul 2016
                • 7045

                #8
                Ok, give me about 30 minutes or so to look things over.

                Comment

                • Malnutrition
                  PCHF Moderator
                  • Jul 2016
                  • 7045

                  #9
                  Step 1: Update your out of date programs.

                  Ok please use PatchMyPc to update your outdated programs, having these older versions can leave your machine vulnerable to many issues.

                  Step 2: Autoruns.

                  Ok, please open Autoruns and disable the items below under the “Task Scheduler” Tab. Only Un Check the box, do not delete anything.
                  • “\Adobe Acrobat Update Task” “Adobe Reader and Acrobat Manager” “Adobe Systems Incorporated” “c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe” “9/16/2016 1:18 PM” “”
                  • “\AdobeAAMUpdater-1.0-MicrosoftAccount-el-th@hotmail.com” “Adobe Updater Startup Utility” “Adobe Systems Incorporated” “c:\program files (x86)\common files\adobe\oobe\pdapp\uwa\updaterstartuputility.e xe” “5/17/2015 9:36 AM” “”
                  • “\Apple\AppleSoftwareUpdate” “Apple Software Update” “Apple Inc.” “c:\program files (x86)\apple software update\softwareupdate.exe” “6/1/2011 7:46 PM” “”
                  • “\GyazoUpdateTaskMachine” “Gyazo Auto Update Machine” “” “c:\program files (x86)\gyazo\gyazoupdate.exe” “12/31/1969 7:00 PM” “”
                  • “\GyazoUpdateTaskMachineDaily” “Gyazo Auto Update Machine” “” “c:\program files (x86)\gyazo\gyazoupdate.exe” “12/31/1969 7:00 PM” “”
                  • “\Lenovo\Lenovo Service Bridge\S-1-5-21-2215311793-1544632459-3505437252-1004” “” “” “” “7/16/2016 6:42 AM” “”
                  • “\Microsoft\Windows\NetTrace\GatherNetworkInfo” “” “” “c:\windows\system32\gathernetworkinfo.vbs” “7/16/2016 6:42 AM” “”
                  • “\Microsoft\Windows\Windows Defender\Windows Defender Cleanup” “Microsoft Malware Protection Command Line Utility” “Microsoft Corporation” “c:\program files\windows defender\mpcmdrun.exe” “7/15/2016 9:23 PM” “”
                  • “\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan” “Microsoft Malware Protection Command Line Utility” “Microsoft Corporation” “c:\program files\windows defender\mpcmdrun.exe” “7/15/2016 9:23 PM” “”
                  • “\Microsoft\Windows\Windows Defender\Windows Defender Verification” “Microsoft Malware Protection Command Line Utility” “Microsoft Corporation” “c:\program files\windows defender\mpcmdrun.exe” “7/15/2016 9:23 PM” “”
                  • “\Microsoft\Windows\Windows Media Sharing\UpdateLibrary” “Windows Media Player Network Sharing Service Configuration Application” “Microsoft Corporation” “c:\program files\windows media player\wmpnscfg.exe” “7/15/2016 9:25 PM” “”
                  • “\OneDrive Standalone Update Task” “Standalone Updater” “Microsoft Corporation” “c:\users\el\appdata\local\microsoft\onedrive\17.3 .6517.0809\onedrivestandaloneupdater.exe” “8/9/2016 1:20 PM” “”

                    Step 3: CCleaner

                  Please use Ccleaner to disable these items from starting with your machine. These items do not need to be running all of the time on your machine. They can be enabled at any time by you, by double clicking the program icon when needed. You will never be able to use them all at once. So having them running at all times, will use resources on your machine.

                  To do this you will need to click on tools then start up then under the Windows Tab select each item then disable

                  http://i.imgur.com/GjWwvEu.png

                  O4 - HKLM..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
                  O4 - HKLM..\Run: [GrooveMonitor] “C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe”
                  O4 - HKLM..\Run: [APSDaemon] “C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe”
                  O4 - HKLM..\Run: [QuickTime Task] “C:\Program Files (x86)\QuickTime\QTTask.exe” -atboottime
                  O4 - HKLM..\Run: [SunJavaUpdateSched] “C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe”
                  O4 - HKCU..\Run: [OneDrive] “C:\Users\El\AppData\Local\Microsoft\OneDrive\OneD rive.exe” /background
                  O4 - HKCU..\Run: [ShowBatteryBar] “C:\Program Files\BatteryBar\ShowBatteryBar.exe” show
                  O4 - HKCU..\Run: [Gyazo] C:\Program Files (x86)\Gyazo\GyStation.exe
                  O4 - HKCU..\Run: [BingSvc] C:\Users\El\AppData\Local\Microsoft\BingSvc\BingSv c.exe
                  O4 - HKCU..\Run: [Skype] “C:\Program Files (x86)\Skype\Phone\Skype.exe” /minimized /regrun
                  O4 - HKCU..\Run: [CCleaner Monitoring] “C:\Program Files\CCleaner\CCleaner64.exe” /MONITOR
                  O4 - HKCU..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks
                  \HD-Agent.exe

                  Step 4: Reboot your machine.

                  After rebooting your computer. Please try and put the machine into sleep mode and let me know the outcome.

                  Comment

                  • rebelnature
                    PCHF Member
                    • Oct 2016
                    • 5

                    #10
                    Followed your steps, rebooted, adjusted the sleep settings to 1min just to test it and it now goes to sleep again, woohoo! Thank you!

                    Comment

                    • Malnutrition
                      PCHF Moderator
                      • Jul 2016
                      • 7045

                      #11
                      Alright… I am marking this one as solved.

                      Glad to have helped!! Please tell a friend … or two about us. https://forum.windowsinstructed.com/...cons/smile.png

                      Suggest the following in place of adblock.
                      Alternate DNS Server. Ad Blocking DNS.
                      Ublock Origin.
                      Anti Ad Block Killer.

                      Also, keep your browsing private with these tools:

                      Self Destructing Cookies.
                      Self Destructing Cookies Chrome.

                      Some items to keep you safe on the internet.

                      VooDoo Shield. control of what is running on your machine
                      Qualys BrowserCheck To update plugins.
                      Web Of Trust To Avoid Shady Websites.
                      Unchecky To Avoid Bundled Software.
                      Privazer To Clean up your mahcine.

                      Now Lets Clean up the tools we used and remove old restore points.

                      Download DelFix by “Xplode” to your Desktop.
                      Right Click the tool and Run as Admin ( Xp Users Double Click)
                      Put a check mark next the items below:

                      Remove disinfection tools
                      Create registry backup
                      Purge System Restore

                      Now click on “Run” button.
                      allow the program to complete its work.
                      all the tools we used will be removed.
                      Tool will create and open a log report (DelFix.txt)
                      Note: The report can be located at the following location C:\DelFix.txt

                      Comment

                      • Malnutrition
                        PCHF Moderator
                        • Jul 2016
                        • 7045

                        #12
                        As a side note, I suggest that you disable windows defender.

                        Install one of these antivirus, this will leave you better protected.

                        360 Total Security
                        Panda Cloud

                        Also, consider using a tool to protect your privacy with windows 10.\

                        O&O ShutUp Win !0
                        Destroy Windows Spying

                        Have a good night.

                        Comment

                        Working...