Positron

Attached are the latest FRST.txt and Addition.txt files. FRST.txt Addition.txt

I ran the program and attached the fixlog.txt. Three things to note so far. "Turn on Windows Security Center" came up Firefox make Update. I clicked no. "This copy of Windows is not genuine." What is next? Fixlog.txt

"enable all startup programs and services". Does this imply I stop Malwarebytes premium, glary, and other programs in the bottom tray first, or does FRST automatically disable these programs? Thanks. pos

Thanks Porthos. Attached are the two files you requested. I looked at the txt and saw avast, which I also cannot get out. I am attaching the msconfig "Start" for your inspection. Sorry about the quality, cheap phone. FRST.txt Addition.txt

Hello, I finally perfomed, as a last resort, another Restore from my System Image Disk dated in March, 2024. (Last week my windows suddenly says not genuine.) After Restoring, my win is genuine again (has been for the past 8 years since my purchase.) I thought I had all Ccleaner out of my computer, but no so. I found two listings of Ccleaner when checking my msconfig "Startup". The second one just came up this evening. No where else that I could find.. Both Ccleaners were unchecked but I want to rid of them. Here is some info. 1st listing. CCleaner Smart Cleaning Manufacturer Unknown Dated May 11, 2023 "C:\ProgramFiles\CCleaner\CCleaner64.exe" /Monitor HKCU\software\microsoft\windows\currentversion\run I checked under Program files and Program files 86x and found no listing of ccleaner. 2nd Listing ccleaner_emergency_update Manufacturer Unknown Dated May 11, 2023 "C:\Program Files|CCleaner\ccupdate611_free.exe" /S /INSTDIR="C:\Program Files\Cleaner\" HKCU\software\microsoft\windows\currentversion\runonce Again, I found no listing of ccleaner under Program files or Program files 86x. Is there a way of permanently ridding of ccleaner remnants? Thanks pos

Thanks JS. Much appreciated. I never really storied what happened last weekend. I had not added any programs for a long time. I run a couple of cleaning programs, one was X (I don't want to get the company in trouble) version 5.8; had for years. Well, last weekend I simply powered on the computer and when Win 7 "normally" opened, all I saw was X upgraded version 6.11 across the entire screen, and my computer was locked up. I was blind sided for sure, I never opened X 5.8 program, it was just there across the entire screen. I could only power off and attempt to get back in. All sorts of things were messed up; bios, settings etc, I still have to open in safe mode and then restart in order to open win 7 normally. If I simply power on, windows starts, Welcome and Icon forms and then screen goes all black. This past week I found bios setting changed, msconfig normal boot was changed to "Selective Startup". I have forgotten the other settings that changed. What is quite interesting to me is that I performed an experiments several times this week. First I disconnect the ethernet cable so No computer connection to the internet. Then I uninstall X cleaner, rid in scheduled tasks, searched under different names, even version numbers and can't find X in any drives and external backups. Then I installed version 5.8 from different external backups. Clicked and 5.8 pops up as it should. However, when I reboot the computer, 5.8 was "upgraded" to 6.11. That cannot occur unless 6.11 upgrade is hiding somewhere in my computer/backup system. Amazing to me, when I performed several System Image Restores over the past week, (computer disconnected from the internet), using System Images dating back to 2018, the same "upgrade" to 6.11 still occurred. So even a Restore from the System Image does not get rid of the X upgrade to 6.11. I know about a year ago, other individuals had the same upgrade occur without their permission. Why it took a year for me to get it I don't know. Is it possible for malware etc to hide outside of any programs, including outside windows? I am grateful to the staff here for their time and efforts. Much appreciated. and efforts. pos

Hi JS, I think I have accomplished about as much as I could with your directions. Thanks for your help and time. Here is what I came up with. Pertaining to Silverlight, should I delete it or keep it? Malwarebytes premium has been updated I could not download KB3125574 for some reason I tried finding NET Framework 4.7 files but the numbers I found did not match ours. I searched in 4.71, 4.8 with the same results. My apology if I make a mistake of some sort. I cannot afford new office suite, so I will continue with what I have. Attached is the fixlog.txt file Fixlog.txt

Hi JS, I found "Disk Cleanup" on my computer. Never ran it before with numbers listed below. Thought this might help. Files with check marks indicated by /. Downloaded program files / 0 zero Temporary internet files / 0 Game statistics files 3.7 KB Recycle bin 0 Service pack backup files 0 System error memory dump files 2.3 MB Temporary files 0 Temporary windows installation files 59.7 MB Thumbnails / 1 MB Windows update cleanup / 8.07 GB View files, No files listed I have not deleted those numbers as I need your expert opinion on if you can use this information. Thanks pos

Thanks JS, Here is the txt attachment. Thanks pos SecurityCheck.txt

May I post again since I have found new information that might help with my problem? I have found that using my System Image Backups, back to 2018, did not affect the problems. I performed an experiment. I manually disconnected my internet ethernet cable form the computer, so the computer is not connected in any way to the internet. I uninstalled C program, rid of firewall in and out for C rules, Performed search at start under manufacturer, program name, version numbers etc, task scheduler and program does not list/show. C program appears gone. I then installed C version 5.8 from different backups (I have three, two thumbs and one HD backup.), opened C program and version 5.8 came up as it should. I then rebooted my computer and when I got windows opened, I clicked and opened C version 5.8. The program opened as upgraded 6.11 again. How is this possible? So C program upgrade with any nefarious attachments are hidden on the HD? And System Image is not able to delete it? Any programs to search out this hidden C upgrade on the HD? Thanks again for time and help. pos

Thank you Advanced Setup. Much appreciated. I will just have to deal with it, or get another computer. Thanks again for your time and efforts. pos

I saw a spot where it said win 10 and on, so I guess I cannot perform at least one task in order to post. Quick question. Hopefully not dumb. Can I format my C: drive, ridding all on the drive, including corrupt files, and use my Win 7 repair disk to reinstall one of my Win 7 System Images on the C: drive? pos

Thanks once again JS. I have a couple of questions if I may. 1. I tried several system restore from actual images from as far back as 2018, since last sunday, from an outboard G drive, which I had used before to successfully restore, but which did not fix my computer this time. Does that mean my backups are corrupted as well? Can I use Malware Antimalware to check G drive? 2. I was up at 5 am this morning and powered on the computer. It still went as far as welcoming me and the win icon came on, and then black screen only. So I rebooted into safe mode and opened msconfig and this time it was set to normal startup, an improvement. I rebooted and normal windows came up. I just checked in normal windows and it still says ok. 3. I checked the link and it still says for win 7 among others, including lessers. I shall try them and see if they can repair the corrupt files. Thanks again and I shall report back what Windows Update Forum was able to do or not do. pos

Thanks for your post JS. I performed the requests and after finishing fixlog.txt, I rebooted and diskcheck was requested, so I performed that. I hope I did not make a mistake doing that. So I have three attachments for your checking. Thanks again JS. Much appreciated. pos Fixlog.txt DiskCheckLog.txt cureit.log

I have some other problems after checking things out. 1. I powered off the computer and when I start the computer, the computer starts windows 7 with Icon and then goes black screen, no cursor. I rebooted in "Safe Mode" and in msconfig I found "Selective Startup" instead of "Normal Startup". Every time I restart/reboot the computer, "Selective Startup" is checked. After switching to "Normal Startup", all boots up ok until the next time I power on. 2. I also see "Hibernate" is next to "Sleep" button. 3. I checked my bios and found mouse was disabled to power on, I think from "Sleep" mode. 4. I checked the battery, which checked good, but still replaced it. 5. I see bios was now set to S3 and zero seconds for power button, so I reset. 6. I have tried several "Restore" Images from different times and the problem still persists. Thanks again for your time and efforts. pos

Thanks for your time and help Porthos. I will respond in order for clarity. I created a restore point. I could not find any smart screen. I checked in regedit and there was no hiberboot under keylocal machine\system etc etc to change value, shut off. There was no "change settings" so no fast startup on my computer that I could find. My computer refused to let me open hidden files, folders, and drives even though I was able to check "show hidden files and folders and uncheck "Hide Protected Operating System Files (recommended). I ran ADWcleaner, Malwarebytes and then rebooted. I then ran FRST. Attached are the results. Thanks again for your time and help. pos Malwarebytes 8-27-24.txt AdwCleaner[C00].txt FRST.txt Addition.txt

My Malware doesn't seem to work properly. I had a problem booting as well. Need help checking the computer. Help. Thanks for time and help. I am running win 7 ultimate pos

Just wanted to let everyone know that after a couple of days, not one outbound "event" was attempted; Great job Maurice. Appreciate your time and efforts. Solved, finished. pos

I am in a pinch Maurice. I am dirt poor and cannot afford to upgrade programs. I stayed with dated ccleaner and glary because their upgrades killed some of my programs. I blocked both from communicating home, so no ads or surprise add ons. I think I tried updating win 7 and it seemed something did not work (Had to restore more than once if I recall). I did copy all your links though, so once I create an image backup, I might try downloading the updates. Malware Antimalware has worked amazingly good for me. (I have another, never connected to internet XP computer with win 98 because I also have programs that won't work on win 7 etc. I absolutely love XP, wish I could have kept it online.) I saved your above post for reference. As you can see I am in a real bind and inflation is making things really tough. Glad to have malware antimalware. Thanks for your time and efforts Maurice. I really appreciated your help. pos

Here is the file Maurice. Thanks. SecurityCheck.txt

Here is the report you requested. Kaspersky found no threats. cheers pos report_2022.09.22_22.46.03.txt

Here is the results Maurice. Thanks. pos ESET 22- 9-22.txt

Accomplished entering all three lines as per instructions.

Already set, thanks. Now to create a system image for reference. Appreciate all you have done and thanks for your patience Maurice. Cheers pos

Good morning Maurice. I turned on Defender. I opened Malwarebytes, settings,. windows security center and turned off "always register............." (to the left) I have attached the info requested. Cheers and thanks Maurice. pos Fixlog.txt msert.log