[Steviep]

Good

[Advertisements]

Good

[Steviep]

Good

[Steviep]

It was Good

[DR M]

It's good that ... it's good.

 

I'll review your logs by tomorrow and be back to you with some other suggestions/fixes/scans. 

[DR M]

Hi.
 
1. F-Secure extension

 

I still see the extension in Chrome's profile 3. Please, remove it, as you did with the Default Profile before.

 

 

 

2. FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-1741543102-3776721137-2454621359-1001\...\MountPoints2: {9674c4fe-ccbc-11e8-8391-7c2a317b0e98} - "F:\unlock.exe" autoplay=true
Task: {8174534F-846C-43D6-9F52-56BA44C95357} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\steve\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe  LOGON (No File)
Task: {2DF26393-3B13-41E8-8885-11D78F2F04A9} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\steve\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe  SCHED (No File)
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2022-03-16] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2023-02-22] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 MpKsl8b4d2d82; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B9FF093F-9641-4574-88EB-31266A401FFF}\MpKslDrv.sys [X]
S3 nlwt; C:\WINDOWS\system32\DRIVERS\nlwt.sys [39360 2020-10-30] (TEFINCOM S.A. -> WireGuard LLC)
C:\WINDOWS\system32\DRIVERS\nlwt.sys
C:\WINDOWS\System32\drivers\wintun.sys
C:\WINDOWS\System32\drivers\wireguard.sys
DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2
CMD: DISM /Online /Cleanup-Image /RestoreHealth
CMD: SFC /scannow
EmptyTemp:
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

 

 

In your next reply please post:

1. If you successfully uninstalled the extension
2. The fixlog.txt
3. Feedback: how is the computer running now. Please, if the issues are still there, describe them in some detail