Step 1 :
Tweaking.com Registry Backup
- Download Tweaking.com Registry Backup from here, and save tweaking.com_registry_backup_portable.zip to your desktop.
- Now we need to create a new folder to extract the zipped contents into. Right click on the zipped folder you just downloaded and select "Extract All".
- Click the "Browse" button and from the list, expand "Computer", then expand "Windows (C:)", and click the "Make New Folder" button.
- Call this folder something you will remember...like "RegBackup" then click "Ok", and then click "Extract".
- From the newly extracted files, right click on and select Run as Administrator (XP users just double click) to start Tweaking.com Registry Backup.
(Windows Vista/7/8 users: Accept UAC warning if it is enabled.)
- A screen like this should appear:
This image has been resized. Click this bar to view the full image.
- Type a custom name in Backup Name if you want, then choose Backup Now.
- If backup is successful, a message will appear at the lower half of the screen with an option to view logs.
- The registry backup will be created in %WindowsDrive%\RegBackup by default. You can customize the path in Settings.
- Close Tweaking.com Registry Backup when done.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Step 2 :
McAfee Consumer Product Removal Tool
Note: This tool will uninstall all McAfee products from your PC. If you are using a paid version of McAfee, please be sure you have safely stored your product key.
Download MCPR (McAfee Consumer Product Removal Tool) and save it to your desktop.
- Right-click MCPR.exe and click Run as Administrator.
- At the "McAfee Software Removal" window, click Next.
- Accept the license agreement.
- Complete the "Security Validation" question and click Next.
- You will receive a message that the removal of McAfee products is complete.
- Restart the computer.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Step 3 :
Boot your computer to Safe Mode.
Farbar Recovery Scan Tool - Fix
- Highlight the contents of the below code box and press Ctrl + C on your keyboard:
Start::
CreateRestorePoint:
CloseProcesses:
C:\Windows\WinSxS\Manifests\amd64_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_5b87bb4915fad71f.cat
C:\Windows\WinSxS\Manifests\amd64_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_5b87bb4915fad71f.manifest
C:\Windows\WinSxS\Manifests\amd64_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_6067bd3b12cf0652.cat
C:\Windows\WinSxS\Manifests\amd64_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_6067bd3b12cf0652.manifest
[2020-02-13 14:26][2020-02-13 14:26] 000001231 _____ () F90B15D80727F34B8CD739271E149031 [File not signed]
C:\Windows\WinSxS\Manifests\amd64_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_4e76363ccee8be59.cat
C:\Windows\WinSxS\Manifests\amd64_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_4e76363ccee8be59.manifest
C:\Windows\WinSxS\Manifests\amd64_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_5356382ecbbced8c.cat
C:\Windows\WinSxS\Manifests\amd64_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_5356382ecbbced8c.manifest
C:\Windows\WinSxS\Manifests\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_a334f2202a770025.cat
C:\Windows\WinSxS\Manifests\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_a334f2202a770025.manifest
C:\Windows\WinSxS\Manifests\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_a814f412274b2f58.cat
C:\Windows\WinSxS\Manifests\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_a814f412274b2f58.manifest
C:\Windows\WinSxS\Manifests\x86_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_96236d13e364e75f.cat
C:\Windows\WinSxS\Manifests\x86_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_96236d13e364e75f.manifest
C:\Windows\WinSxS\Manifests\x86_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_9b036f05e0391692.cat
C:\Windows\WinSxS\Manifests\x86_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_9b036f05e0391692.manifest
C:\Windows\System32\Tasks_Migrated\McAfee Remediation (Prepare)
C:\Windows\System32\Tasks_Migrated\McAfeeLogon
C:\Windows\System32\Tasks_Migrated\McAfee\McAfee Auto Maintenance Task Agent
C:\Windows\System32\Tasks_Migrated\McAfee\McAfee DAT Built in test
C:\Windows\System32\Tasks_Migrated\McAfee\McAfee Idle Detection Task
C:\Windows\Prefetch\AVASTUI.EXE-19622E35.pf
C:\Windows\Prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-E7A92B38.pf
C:\Windows\Log\McAfee.txt
C:\Users\asus\AppData\Roaming\Mozilla\Firefox\Profiles\m9bs51ze.default-release\extensions\[email protected]
C:\Users\Administrator\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\125\5A894077_McAfeeSecurity_wafk5atnkzcwy!App
C:\Users\Administrator\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\100\5A894077_McAfeeSecurity_wafk5atnkzcwy!App
C:\ProgramData\Microsoft\Windows\AppRepository\5A894077.McAfeeSecurity_2.1.16.0_neutral_split.scale-125_wafk5atnkzcwy.xml
C:\ProgramData\Microsoft\Windows\AppRepository\5A894077.McAfeeSecurity_2.1.16.0_neutral_~_wafk5atnkzcwy.xml
C:\ProgramData\Microsoft\Windows\AppRepository\5A894077.McAfeeSecurity_2.1.16.0_x64__wafk5atnkzcwy.xml
C:\ProgramData\AVAST Software\Subscriptions\license.avastlic
C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.12527.20242.0_x86__8wekyb3d8bbwe\Office16\1060\DataServices\+NovaPovezavaStrežnikaSQL.odc
C:\Program Files\WindowsApps\microsoft.office.desktop_16051.12228.20364.0_x86__8wekyb3d8bbwe\Office16\1060\DataServices\+NovaPovezavaStrežnikaSQL.odc
C:\Program Files\WindowsApps\DeletedAllUserPackages\B9ECED6F.ASUSPCAssistant_2.0.15.0_neutral_split.scale-200_qmba6cd70vzyy\AsusHello\Assets\asus_hello_logo1_mcafee.scale-200.png
C:\Windows\WinSxS\amd64_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_5b87bb4915fad71f
C:\Windows\WinSxS\amd64_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_6067bd3b12cf0652
C:\Windows\WinSxS\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.27821.0_none_a334f2202a770025
C:\Windows\WinSxS\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.27821.0_none_a814f412274b2f58
C:\Windows\System32\Tasks_Migrated\McAfee
C:\Windows\System32\Tasks\Avast Software
C:\Users\Administrator\AppData\Local\Packages\5A894077.McAfeeSecurity_wafk5atnkzcwy
C:\ProgramData\AVAST Software
C:\ProgramData\Packages\5A894077.McAfeeSecurity_wafk5atnkzcwy
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5A894077.McAfeeSecurity_2.1.16.0_neutral_split.scale-125_wafk5atnkzcwy
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5A894077.McAfeeSecurity_2.1.16.0_neutral_~_wafk5atnkzcwy
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5A894077.McAfeeSecurity_2.1.16.0_x64__wafk5atnkzcwy
C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0_neutral_split.scale-100_wafk5atnkzcwy
C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0_neutral_split.scale-125_wafk5atnkzcw
C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0_neutral_~_wafk5atnkzcwy
C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0_x64__wafk5atnkzcwy
C:\Program Files\WindowsApps\DeletedAllUserPackages\5A894077.McAfeeSecurity_1.4.1.0_neutral_split.language-zh-hans_wafk5atnkzcwy
C:\Program Files\WindowsApps\DeletedAllUserPackages\5A894077.McAfeeSecurity_1.4.1.0_neutral_split.scale-100_wafk5atnkzcwy
C:\Program Files\WindowsApps\DeletedAllUserPackages\B9ECED6F.ASUSPCAssistant_2.0.15.0_neutral_split.scale-200_qmba6cd70vzyy\AsusHello\Assets\asus_hello_logo2_mcafee.scale-200.png
C:\Program Files\WindowsApps\DeletedAllUserPackages\B9ECED6F.ASUSPCAssistant_2.0.15.0_neutral_split.scale-200_qmba6cd70vzyy\AsusHello\Assets\asus_hello_McAfee.scale-200.png
C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_2.2.10.0_x64__qmba6cd70vzyy\AsusHello\Assets\asus_hello_logo1_mcafee.png
C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_2.2.10.0_x64__qmba6cd70vzyy\AsusHello\Assets\asus_hello_logo2_mcafee.png
C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_2.2.10.0_x64__qmba6cd70vzyy\AsusHello\Assets\asus_hello_McAfee.png
C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_2.1.1.0_x64__qmba6cd70vzyy\AsusHello\Assets\asus_hello_logo1_mcafee.png
C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_2.1.1.0_x64__qmba6cd70vzyy\AsusHello\Assets\asus_hello_logo2_mcafee.png
C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_2.1.1.0_x64__qmba6cd70vzyy\AsusHello\Assets\asus_hello_McAfee.png
C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0_x64__wafk5atnkzcwy\mcafee-security.exe
C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0_x64__wafk5atnkzcwy\McAfee.UWP.ResourceStreamer.winmd
C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0_x64__wafk5atnkzcwy\Win32\mcafee-security-ft.exe
C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0_x64__wafk5atnkzcwy\Assets\Offline\mcafee-logo.png
C:\Program Files\Avast Software\Avast\defs\ffffffff\engsup.exe
C:\Program Files\AVAST Software\Avast\setup\instup.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
StartRegedit:
Windows Registry Editor Version 5.00
[-HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\avast]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AvastPersistentStorage]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}]
"DISPLAYNAME"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}]
"PRODUCTEXE"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}]
"REPORTINGEXE"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
"AvastUI.exe"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_avast.vc140.crt_fcc99ee6193ebbca_none_020285fe6d6e0580]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_avast.vc140.mfc_fcc99ee6193ebbca_none_018be6966dc83925]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_none_ef17e13d91c55d96]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\amd64_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_none_eea141d5921f913b]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_avast.vc140.crt_fcc99ee6193ebbca_none_49afbcd581ea2e86]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_avast.vc140.mfc_fcc99ee6193ebbca_none_49391d6d8244622b]
[=HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_policy.14.0.avast.vc140.crt_fcc99ee6193ebbca_none_36c51814a641869c]
[=HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners\x86_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_none_364e78aca69bba41]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software]
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\No Chrome Offer Until]
"AVAST Software"=-
[HKEY_USERS\S-1-5-21-2987826816-1455516208-1627320750-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched]
"{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Temp\asw.9fcc24a91933eb32\avast_free_antivirus_setup_online_x64.exe"=-
[HKEY_USERS\S-1-5-21-2987826816-1455516208-1627320750-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppSwitched]
"avast! Antivirus"=-
[HKEY_USERS\S-1-5-21-2987826816-1455516208-1627320750-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\AVAST Software\Avast\setup\instup.exe"=-
[HKEY_USERS\S-1-5-21-2987826816-1455516208-1627320750-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\AVAST Software\Avast\AvastUI.exe"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AvastPersistentStorage]
"InstupProgress_Description"="Deleting file: C:\Program Files\Avast Software\Avast\defs\ffffffff\engsup.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}]
"PRODUCTEXE"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}]
"REPORTINGEXE"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software]
[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\No Chrome Offer Until]
"AVAST Software"=-
[HKEY_USERS\S-1-5-21-2987826816-1455516208-1627320750-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\AVAST Software\Avast\setup\instup.exe"=-
[HKEY_USERS\S-1-5-21-2987826816-1455516208-1627320750-1001\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Program Files\AVAST Software\Avast\AvastUI.exe"=-
EndRegedit:
EmptyTemp:
End::
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
- Double-click FRST.exe/FRST64.exe to run it.
- Press the Fix button just once and wait.
Note: No need to paste the script into FRST.
- Restart the computer if prompted.
- When the fix is complete FRST will generate a log in the same location it was run from (Fixlog.txt)
- Please copy and paste its contents into your reply.
---------------------------------------------------
In your next reply, please include: