Jump to content

i can't uninstall win10 tweaker v2.2 (2018)

Miha

By Miha
in Resolved Malware Removal Logs

 Share

Recommended Posts

  • Replies 84
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Posted Images

kevinf80

kevinf80

Posted
Posted

Thanks, lets run another reg query with FRST see if we can find where they live ...

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Ok,  try another query:

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Nothing of note in that log.. Go here:  https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns  Download and unzip Autoruns folder to your Desktop,

Open that folder, right click on "Autoruns64.exe" and select "Run as Administrator" Open the "Explorer" tab, you should see all of the entries related to the context menu. Do you see the problem ones...?

Select file > save > save to your Desktop. Zip up that entry and attach to your reply

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Unfortunately there is no reference to the two items showing in the context menu on your system... I want you to export a copy of a reg key using FRST fix... zip up and attach that reg file to your reply..

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

You posted a screen shot in reply #14, have you any idea what the two entries mean, can you translate..?

 

fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Thanks for the update,

Tweaking.com Registry Backup
 
  • Download Tweaking.com Registry Backup from here, and save tweaking.com_registry_backup_portable.zip to your desktop.
  • Now we need to create a new folder to extract the zipped contents into. Right click on the zipped folder you just downloaded and select "Extract All".
  • Click the "Browse" button and from the list, expand "Computer", then expand "Windows (C:)", and click the "Make New Folder" button.
  • Call this folder something you will remember...like "RegBackup" then click "Ok", and then click "Extract".
  • From the newly extracted files, right click on hPxdDvj.png and select Run as Administrator (XP users just double click) to start Tweaking.com Registry Backup.(Windows Vista/7/8/10 users: Accept UAC warning if it is enabled.)
  • A screen like this should appear:
    user posted image
     
  • Type a custom name in Backup Name if you want, then choose Backup Now.
  • If backup is successful, a message will appear at the lower half of the screen with an option to view logs.
  • The registry backup will be created in %WindowsDrive%\RegBackup by default. You can customize the path in Settings.
  • Close Tweaking.com Registry Backup when done.

Next,

I`ve attached runas.zip to this reply, download and unzip to your Desktop so you have a registry key named runas.reg Right click on that file and select "Merge" agree any alerts...

Reboot when complete,

Any change..?

runas.zip

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Thanks for the update, export that key again, lets see if the previous merge made any changes..

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

 

fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

fixlist.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Very strange, full reg keys were removed....

Download and install CCleaner from here:

http://www.piriform.com/ccleaner/builds

Make sure to go for the slim version it should have no unwanted extras that some free software may carry... 

Run CCleaner, from the main GUI Select > Tools > Startup > Context Menu. Do the Russian entries show in the menu list..? if so single left click to highlite, then select delete from righthand pane commands....

Any good..?
Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

I believe the bottom two in the screen shot are legitimate. Run CCleaner again, from the main GUI Select > Tools > Startup > Context Menu.  At the bottom right hand corner is the option "Save to text file" Do that and save to your Desktop or somewhere else of your choice, attach that file to your reply...

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.