Sequoia33

I was hoping that you could spot something untoward. As you can see, I'm only using 10% of HD and have few downloads of new programs. Have been changing settings for 3 days to try to solve this slow startup, but the delay remains constant. It's just an inconvenience that I'll have to tolerate. Thanks for looking into this.

Here are the files requested. FRST.txt Addition.txt

Here is the file. mbst-grab-results.zip

It takes two minutes for MB to load. Have reinstalled 7 times (4 with the support tool) to no avail. MB is not registered with Windows Security Center and the scan for rootkits is not checked. Disabling Windows Defender had no effect. The startup delay time remains constant. What could be wrong with my system?

No, all good here. Greatly appreciate your help.

I installed Adobe Air in order to watch live horse racing. This is my newest machine. I also have a 2009 HP Compaq. Thank you for all of your time spent solving my problem. I had read that CCleaner was no longer recommended (although I had happily used it for 20 years), so I installed a new cleaner, which turned out to be counterfeit software harboring malware. You have given my machine new life!

Thanks for the recommendations. I need to retain all items marked in Orange and Green, and Adobe Air in the Red group. Do you have any recommendations for a cleaner? I accumulate about 450 MBs of files daily that should be deleted.

New logs attached. FRST.txt Addition.txt

These are the only files in my downloads: fixlist.txt FSS.txt

Security updates seem ok. There was no confirmation dialogue. Checked in Control Panel and have TLS 1.0, TLS 1.1, and TLS 1.2 boxes checked. Had to reinstall MB because it was locked. Are these new programs necessary: CCLEANER UPDATE PACKAGE, 64 BITHP CIO COMPONENT INSTALLER, HP DIAGNOSTIC ALERT, PSE10 STI INSTALLER? Need a cleaner - what do you recommend?

Yes, it's getting late. Will tackle the updates tomorrow. Thank you for your time and help. I was able to locate and download 439 bookmarks which the malware had removed. Have to install one at a time, but it is sooo good to have them back. That counterfeit cleaner was supposed to have shredded them.

Here is the FSS log. FSS.txt

OK, here is the log. I ran 3 full scans of MB and 1 full scan of Defender today, and all came back clear. Later I was - and still am - unable to open MB. Fixlog.txt

Back online. Ran HiJackThis and it found 61 "stopped/disabled" items. I removed several items that were obviously part of the Trojan. Fortunate to be online, as the Chrome service keeps changing to this site: http://go.microsoft.com/fwlink/p/?LinkId=255141 Addition.txt FRST.txt HiJackThis.log

Signing off topic. Thanks, all.

OK, have a thumb drive. Thanks.

Computer is running W7 PRO, Svc Pak 1

Signing off to work on damaged computer.

Sorry, but couldn't send any "fixes" (FRST64, JRT,ComboFix, etc) to damaged computer via email.

OK, thanks. Working on the download(s).

I'm unable to go online. I tried using Internet explorer, but I can only access headings, no text. Using another, older computer now to communicate.

Downloaded a cleaner (BleachBit?) and lost Google Chrome, Windows Defender, and Malwarebytes (on another computer). The icons do not connect to their respective programs. Noticed files that I don't recognize:$R2ZNSAZ.dbus.keyrings, swiftshader, and WidevineCom. Is there anything that I can do?

Hi nasdaq, OK, will delete. Thanks for the links.

Hi nasdaq, All is well, but I have one final question. While ComboFix was on my system, AVAST detected one of its files - CregC.dat - as infected with an IDP.Generic threat. Don't know if this was actually a ComboFix file or something that its scan detected on my machine. Just need to know if I should delete it from my AVAST Virus Chest or add it back. Thanks.

Thank you, nasdaq. Great to hear that the system is clean. I forgot to mention that, several days prior to my "event," AVAST had blocked a connection to "JS:ScriptPE-inf." In addition to the MB Protection and Ransomware buttons being turned off, and all Avast behavior shields turned off, the MB protection history was erased. Thanks again, and here is the Fixit log. (Google settings have been reset.) Fixlog.txt