[DR M]

I don't think that removing them from the Desktop will make any remarkable difference. 
 
May I see what start-up items you left enabled in the Task Manager? (See my post here: http://www.geekstogo.com/forum/topic/376731-my-pc-seems-very-slow-and-locks-up-when-using-browser/#entry2666281) Could you please take a screenshot for me to check?
 

 

What I also see is that you have many tasks running in the background. They are not all necessary.
 
This fix will remove them, without removing the files or the associated programs:

 

 

FRST fix

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
CreateRestorePoint:
CloseProcesses:
Task: {08D9BE40-BB0A-403B-9B9B-8DF56CFDFEBA} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe /default (No File)
Task: {5BC24D20-38CC-4A0D-9BA0-33411F13A9A9} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe RebootDialog (No File)
Task: {74C892B5-18A8-4E50-8C75-BE40397E021F} - System32\Tasks\CareCenter\Nero BackItUp_Reg_HKLMWow6432Run => C:\Program Files (x86)\Nero\Nero 2018\Nero BackItup\BackItUp.exe /WinStart (No File)
Task: {99623E9F-1E61-4B4C-B0CD-67B8BA5B9560} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe -auto (No File)
Task: {A0F7A91E-3E93-4DEA-96D7-B1E9A3B6D43F} - System32\Tasks\CareCenter\SecurityHealth_Reg_HKLMRun => C:\Program Files\Windows Defender\MSASCuiL.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Task: {0600DD45-FAF2-4131-A006-0B17509B9F78} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\sc.exe start InventorySvc
Task: {08BD09F4-BBD5-4759-9418-2A6680D41823} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => C:\WINDOWS\system32\SecureBootEncodeUEFI.exe [49152 2022-05-07] (Microsoft Windows -> )
Task: {1445DA5A-DA8E-41F2-AFBA-F0862C099121} - System32\Tasks\CreateExplorerShellUnelevatedTask => c:\windows\explorer.exe /NoUACCheck
Task: {2C6CA63D-12D0-4E86-B7A9-B92443E7798E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8502776 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E548EA3-13BC-4316-A9A2-D7CF4FCDE18C} - System32\Tasks\PowerDirectorStyleAgent => C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe [103032 2022-07-08] (CyberLink Corp. -> CyberLink Corp.)
Task: {5EA8D87D-8113-4004-BD75-9935DE0373EE} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Nero\Nero Apps\NeroInfo\NeroInfo.exe [3914864 2022-08-08] (Nero AG -> Nero AG)
Task: {8C06097D-BCB8-4C65-8A40-01CD4AC9FE6C} - System32\Tasks\CCleanerSkipUAC - steven => C:\Program Files\CCleaner\CCleaner.exe [32204304 2022-09-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {8DB3FB0F-E6DB-4FFE-83B2-938F7D74B3CF} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)
Task: {B0AFD0CE-5196-42EF-AD09-3A755CAC7F40} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317480 2022-03-14] (CyberLink Corp. -> )
Task: {B683611E-D9B6-4005-8FC7-2A00D41F97F7} - System32\Tasks\AcerCMUpdateTask2.5.22250 => C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe [96904 2022-09-25] (Acer Incorporated -> )
Task: {C24246B5-2F68-4EEB-9417-0B250C3F60AA} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317480 2022-03-14] (CyberLink Corp. -> )
Task: {DCADD776-01F6-4B49-B097-46F410F50506} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4666896 2022-09-12] (Piriform Software Ltd -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "9dac4439-e6f9-4785-9ff9-123e643f51d6" --version "6.04.10044" --silent
Task: {E254F695-21D1-4CB4-A94D-F66A063F0A75} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]
Task: {E3F9FE37-F3B2-486A-BE0A-CFC87AB481B8} - System32\Tasks\CorelUpdateHelperTask-A8920757F59B1BA85897CD3CEDA3D8AB => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)
Task: {EC1E8988-AD5C-4BC1-A0EC-955BD0B9F303} - System32\Tasks\CorelUpdateHelperTask-E710F9D26B744BFC23F8BB83361DCD6E => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)
EmptyTemp:
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

 

In your next reply please post:

1. The Task Manager screenshot
2. The fixlog
3. Feedback: Is there any improvement? 

[Advertisements]

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-10-2022

Ran by steven (25-10-2022 18:22:00) Run:5

Running from C:\Users\steve\Desktop\FRST-OlderVersion

Loaded Profiles: steven & Hannah & Gillian

Boot Mode: Normal

==============================================

 

fixlist content:

*****************

Start::

CreateRestorePoint:

CloseProcesses:

Task: {08D9BE40-BB0A-403B-9B9B-8DF56CFDFEBA} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe /default (No File)

Task: {5BC24D20-38CC-4A0D-9BA0-33411F13A9A9} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)

Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe RebootDialog (No File)

Task: {74C892B5-18A8-4E50-8C75-BE40397E021F} - System32\Tasks\CareCenter\Nero BackItUp_Reg_HKLMWow6432Run => C:\Program Files (x86)\Nero\Nero 2018\Nero BackItup\BackItUp.exe /WinStart (No File)

Task: {99623E9F-1E61-4B4C-B0CD-67B8BA5B9560} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe -auto (No File)

Task: {A0F7A91E-3E93-4DEA-96D7-B1E9A3B6D43F} - System32\Tasks\CareCenter\SecurityHealth_Reg_HKLMRun => C:\Program Files\Windows Defender\MSASCuiL.exe (No File)

Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)

Task: {0600DD45-FAF2-4131-A006-0B17509B9F78} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\sc.exe start InventorySvc

Task: {08BD09F4-BBD5-4759-9418-2A6680D41823} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => C:\WINDOWS\system32\SecureBootEncodeUEFI.exe [49152 2022-05-07] (Microsoft Windows -> )

Task: {1445DA5A-DA8E-41F2-AFBA-F0862C099121} - System32\Tasks\CreateExplorerShellUnelevatedTask => c:\windows\explorer.exe /NoUACCheck

Task: {2C6CA63D-12D0-4E86-B7A9-B92443E7798E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8502776 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {4E548EA3-13BC-4316-A9A2-D7CF4FCDE18C} - System32\Tasks\PowerDirectorStyleAgent => C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe [103032 2022-07-08] (CyberLink Corp. -> CyberLink Corp.)

Task: {5EA8D87D-8113-4004-BD75-9935DE0373EE} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Nero\Nero Apps\NeroInfo\NeroInfo.exe [3914864 2022-08-08] (Nero AG -> Nero AG)

Task: {8C06097D-BCB8-4C65-8A40-01CD4AC9FE6C} - System32\Tasks\CCleanerSkipUAC - steven => C:\Program Files\CCleaner\CCleaner.exe [32204304 2022-09-12] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {8DB3FB0F-E6DB-4FFE-83B2-938F7D74B3CF} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)

Task: {B0AFD0CE-5196-42EF-AD09-3A755CAC7F40} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317480 2022-03-14] (CyberLink Corp. -> )

Task: {B683611E-D9B6-4005-8FC7-2A00D41F97F7} - System32\Tasks\AcerCMUpdateTask2.5.22250 => C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe [96904 2022-09-25] (Acer Incorporated -> )

Task: {C24246B5-2F68-4EEB-9417-0B250C3F60AA} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317480 2022-03-14] (CyberLink Corp. -> )

Task: {DCADD776-01F6-4B49-B097-46F410F50506} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4666896 2022-09-12] (Piriform Software Ltd -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "9dac4439-e6f9-4785-9ff9-123e643f51d6" --version "6.04.10044" --silent

Task: {E254F695-21D1-4CB4-A94D-F66A063F0A75} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]

Task: {E3F9FE37-F3B2-486A-BE0A-CFC87AB481B8} - System32\Tasks\CorelUpdateHelperTask-A8920757F59B1BA85897CD3CEDA3D8AB => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)

Task: {EC1E8988-AD5C-4BC1-A0EC-955BD0B9F303} - System32\Tasks\CorelUpdateHelperTask-E710F9D26B744BFC23F8BB83361DCD6E => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)

EmptyTemp:

End::

*****************

 

Restore point was successfully created.

Processes closed successfully.

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{08D9BE40-BB0A-403B-9B9B-8DF56CFDFEBA}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08D9BE40-BB0A-403B-9B9B-8DF56CFDFEBA}" => removed successfully

C:\WINDOWS\System32\Tasks\Oem\AcerJumpstartTask => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Oem\AcerJumpstartTask" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BC24D20-38CC-4A0D-9BA0-33411F13A9A9}" => not found

"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A}" => not found

"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74C892B5-18A8-4E50-8C75-BE40397E021F}" => not found

"C:\WINDOWS\System32\Tasks\CareCenter\Nero BackItUp_Reg_HKLMWow6432Run" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CareCenter\Nero BackItUp_Reg_HKLMWow6432Run" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99623E9F-1E61-4B4C-B0CD-67B8BA5B9560}" => not found

"C:\WINDOWS\System32\Tasks\ACC" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ACC" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0F7A91E-3E93-4DEA-96D7-B1E9A3B6D43F}" => not found

"C:\WINDOWS\System32\Tasks\CareCenter\SecurityHealth_Reg_HKLMRun" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CareCenter\SecurityHealth_Reg_HKLMRun" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => not found

"C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0600DD45-FAF2-4131-A006-0B17509B9F78}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0600DD45-FAF2-4131-A006-0B17509B9F78}" => removed successfully

C:\WINDOWS\System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{08BD09F4-BBD5-4759-9418-2A6680D41823}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08BD09F4-BBD5-4759-9418-2A6680D41823}" => removed successfully

C:\WINDOWS\System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PI\SecureBootEncodeUEFI" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1445DA5A-DA8E-41F2-AFBA-F0862C099121}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1445DA5A-DA8E-41F2-AFBA-F0862C099121}" => removed successfully

C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CreateExplorerShellUnelevatedTask" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2C6CA63D-12D0-4E86-B7A9-B92443E7798E}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C6CA63D-12D0-4E86-B7A9-B92443E7798E}" => removed successfully

C:\WINDOWS\System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\OfficeTelemetryAgentLogOn2016" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4E548EA3-13BC-4316-A9A2-D7CF4FCDE18C}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E548EA3-13BC-4316-A9A2-D7CF4FCDE18C}" => removed successfully

C:\WINDOWS\System32\Tasks\PowerDirectorStyleAgent => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PowerDirectorStyleAgent" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5EA8D87D-8113-4004-BD75-9935DE0373EE}" => not found

"C:\WINDOWS\System32\Tasks\Nero\Nero Info" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Nero\Nero Info" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C06097D-BCB8-4C65-8A40-01CD4AC9FE6C}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C06097D-BCB8-4C65-8A40-01CD4AC9FE6C}" => removed successfully

C:\WINDOWS\System32\Tasks\CCleanerSkipUAC - steven => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC - steven" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8DB3FB0F-E6DB-4FFE-83B2-938F7D74B3CF}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8DB3FB0F-E6DB-4FFE-83B2-938F7D74B3CF}" => removed successfully

C:\WINDOWS\System32\Tasks\CorelUpdateHelperTaskCore => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CorelUpdateHelperTaskCore" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B0AFD0CE-5196-42EF-AD09-3A755CAC7F40}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0AFD0CE-5196-42EF-AD09-3A755CAC7F40}" => removed successfully

C:\WINDOWS\System32\Tasks\CLToast => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CLToast" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B683611E-D9B6-4005-8FC7-2A00D41F97F7}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B683611E-D9B6-4005-8FC7-2A00D41F97F7}" => removed successfully

C:\WINDOWS\System32\Tasks\AcerCMUpdateTask2.5.22250 => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AcerCMUpdateTask2.5.22250" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C24246B5-2F68-4EEB-9417-0B250C3F60AA}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C24246B5-2F68-4EEB-9417-0B250C3F60AA}" => removed successfully

C:\WINDOWS\System32\Tasks\CLToastRun => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CLToastRun" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DCADD776-01F6-4B49-B097-46F410F50506}" => not found

C:\WINDOWS\System32\Tasks\CCleanerCrashReporting => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerCrashReporting" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E254F695-21D1-4CB4-A94D-F66A063F0A75}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E254F695-21D1-4CB4-A94D-F66A063F0A75}" => removed successfully

C:\WINDOWS\System32\Tasks\DashlaneUpgradeCheck => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DashlaneUpgradeCheck" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E3F9FE37-F3B2-486A-BE0A-CFC87AB481B8}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3F9FE37-F3B2-486A-BE0A-CFC87AB481B8}" => removed successfully

C:\WINDOWS\System32\Tasks\CorelUpdateHelperTask-A8920757F59B1BA85897CD3CEDA3D8AB => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CorelUpdateHelperTask-A8920757F59B1BA85897CD3CEDA3D8AB" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EC1E8988-AD5C-4BC1-A0EC-955BD0B9F303}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC1E8988-AD5C-4BC1-A0EC-955BD0B9F303}" => removed successfully

C:\WINDOWS\System32\Tasks\CorelUpdateHelperTask-E710F9D26B744BFC23F8BB83361DCD6E => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CorelUpdateHelperTask-E710F9D26B744BFC23F8BB83361DCD6E" => removed successfully

 

=========== EmptyTemp: ==========

 

FlushDNS => completed

BITS transfer queue => 1310720 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 7473588 B

Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B

Windows/system/drivers => 2975676 B

Edge => 0 B

Chrome => 489582066 B

Firefox => 0 B

Opera => 0 B

 

Temp, IE cache, history, cookies, recent:

Default => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 0 B

systemprofile32 => 0 B

LocalService => 661496 B

NetworkService => 673120 B

steve => 483501962 B

Hannah => 483501962 B

Gillian => 794913329 B

 

RecycleBin => 613334802 B

EmptyTemp: => 2.7 GB temporary data Removed.

 

================================

 

 

The system needed a reboot.

 

 

Powewred down and then back up again and was 5 seconds faster

==== End of Fixlog 18:24:26 ====

[Steviep]

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-10-2022

Ran by steven (25-10-2022 18:22:00) Run:5

Running from C:\Users\steve\Desktop\FRST-OlderVersion

Loaded Profiles: steven & Hannah & Gillian

Boot Mode: Normal

==============================================

 

fixlist content:

*****************

Start::

CreateRestorePoint:

CloseProcesses:

Task: {08D9BE40-BB0A-403B-9B9B-8DF56CFDFEBA} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe /default (No File)

Task: {5BC24D20-38CC-4A0D-9BA0-33411F13A9A9} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)

Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe RebootDialog (No File)

Task: {74C892B5-18A8-4E50-8C75-BE40397E021F} - System32\Tasks\CareCenter\Nero BackItUp_Reg_HKLMWow6432Run => C:\Program Files (x86)\Nero\Nero 2018\Nero BackItup\BackItUp.exe /WinStart (No File)

Task: {99623E9F-1E61-4B4C-B0CD-67B8BA5B9560} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe -auto (No File)

Task: {A0F7A91E-3E93-4DEA-96D7-B1E9A3B6D43F} - System32\Tasks\CareCenter\SecurityHealth_Reg_HKLMRun => C:\Program Files\Windows Defender\MSASCuiL.exe (No File)

Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)

Task: {0600DD45-FAF2-4131-A006-0B17509B9F78} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\sc.exe start InventorySvc

Task: {08BD09F4-BBD5-4759-9418-2A6680D41823} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => C:\WINDOWS\system32\SecureBootEncodeUEFI.exe [49152 2022-05-07] (Microsoft Windows -> )

Task: {1445DA5A-DA8E-41F2-AFBA-F0862C099121} - System32\Tasks\CreateExplorerShellUnelevatedTask => c:\windows\explorer.exe /NoUACCheck

Task: {2C6CA63D-12D0-4E86-B7A9-B92443E7798E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8502776 2022-10-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {4E548EA3-13BC-4316-A9A2-D7CF4FCDE18C} - System32\Tasks\PowerDirectorStyleAgent => C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe [103032 2022-07-08] (CyberLink Corp. -> CyberLink Corp.)

Task: {5EA8D87D-8113-4004-BD75-9935DE0373EE} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Nero\Nero Apps\NeroInfo\NeroInfo.exe [3914864 2022-08-08] (Nero AG -> Nero AG)

Task: {8C06097D-BCB8-4C65-8A40-01CD4AC9FE6C} - System32\Tasks\CCleanerSkipUAC - steven => C:\Program Files\CCleaner\CCleaner.exe [32204304 2022-09-12] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {8DB3FB0F-E6DB-4FFE-83B2-938F7D74B3CF} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)

Task: {B0AFD0CE-5196-42EF-AD09-3A755CAC7F40} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317480 2022-03-14] (CyberLink Corp. -> )

Task: {B683611E-D9B6-4005-8FC7-2A00D41F97F7} - System32\Tasks\AcerCMUpdateTask2.5.22250 => C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe [96904 2022-09-25] (Acer Incorporated -> )

Task: {C24246B5-2F68-4EEB-9417-0B250C3F60AA} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317480 2022-03-14] (CyberLink Corp. -> )

Task: {DCADD776-01F6-4B49-B097-46F410F50506} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4666896 2022-09-12] (Piriform Software Ltd -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "9dac4439-e6f9-4785-9ff9-123e643f51d6" --version "6.04.10044" --silent

Task: {E254F695-21D1-4CB4-A94D-F66A063F0A75} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]

Task: {E3F9FE37-F3B2-486A-BE0A-CFC87AB481B8} - System32\Tasks\CorelUpdateHelperTask-A8920757F59B1BA85897CD3CEDA3D8AB => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)

Task: {EC1E8988-AD5C-4BC1-A0EC-955BD0B9F303} - System32\Tasks\CorelUpdateHelperTask-E710F9D26B744BFC23F8BB83361DCD6E => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [3813600 2021-12-03] (Corel Corporation -> Corel Corporation)

EmptyTemp:

End::

*****************

 

Restore point was successfully created.

Processes closed successfully.

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{08D9BE40-BB0A-403B-9B9B-8DF56CFDFEBA}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08D9BE40-BB0A-403B-9B9B-8DF56CFDFEBA}" => removed successfully

C:\WINDOWS\System32\Tasks\Oem\AcerJumpstartTask => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Oem\AcerJumpstartTask" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BC24D20-38CC-4A0D-9BA0-33411F13A9A9}" => not found

"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A}" => not found

"C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74C892B5-18A8-4E50-8C75-BE40397E021F}" => not found

"C:\WINDOWS\System32\Tasks\CareCenter\Nero BackItUp_Reg_HKLMWow6432Run" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CareCenter\Nero BackItUp_Reg_HKLMWow6432Run" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99623E9F-1E61-4B4C-B0CD-67B8BA5B9560}" => not found

"C:\WINDOWS\System32\Tasks\ACC" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ACC" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0F7A91E-3E93-4DEA-96D7-B1E9A3B6D43F}" => not found

"C:\WINDOWS\System32\Tasks\CareCenter\SecurityHealth_Reg_HKLMRun" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CareCenter\SecurityHealth_Reg_HKLMRun" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => not found

"C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0600DD45-FAF2-4131-A006-0B17509B9F78}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0600DD45-FAF2-4131-A006-0B17509B9F78}" => removed successfully

C:\WINDOWS\System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{08BD09F4-BBD5-4759-9418-2A6680D41823}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08BD09F4-BBD5-4759-9418-2A6680D41823}" => removed successfully

C:\WINDOWS\System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PI\SecureBootEncodeUEFI" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1445DA5A-DA8E-41F2-AFBA-F0862C099121}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1445DA5A-DA8E-41F2-AFBA-F0862C099121}" => removed successfully

C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CreateExplorerShellUnelevatedTask" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2C6CA63D-12D0-4E86-B7A9-B92443E7798E}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C6CA63D-12D0-4E86-B7A9-B92443E7798E}" => removed successfully

C:\WINDOWS\System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\OfficeTelemetryAgentLogOn2016" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4E548EA3-13BC-4316-A9A2-D7CF4FCDE18C}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E548EA3-13BC-4316-A9A2-D7CF4FCDE18C}" => removed successfully

C:\WINDOWS\System32\Tasks\PowerDirectorStyleAgent => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PowerDirectorStyleAgent" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5EA8D87D-8113-4004-BD75-9935DE0373EE}" => not found

"C:\WINDOWS\System32\Tasks\Nero\Nero Info" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Nero\Nero Info" => not found

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C06097D-BCB8-4C65-8A40-01CD4AC9FE6C}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C06097D-BCB8-4C65-8A40-01CD4AC9FE6C}" => removed successfully

C:\WINDOWS\System32\Tasks\CCleanerSkipUAC - steven => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC - steven" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8DB3FB0F-E6DB-4FFE-83B2-938F7D74B3CF}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8DB3FB0F-E6DB-4FFE-83B2-938F7D74B3CF}" => removed successfully

C:\WINDOWS\System32\Tasks\CorelUpdateHelperTaskCore => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CorelUpdateHelperTaskCore" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B0AFD0CE-5196-42EF-AD09-3A755CAC7F40}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0AFD0CE-5196-42EF-AD09-3A755CAC7F40}" => removed successfully

C:\WINDOWS\System32\Tasks\CLToast => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CLToast" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B683611E-D9B6-4005-8FC7-2A00D41F97F7}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B683611E-D9B6-4005-8FC7-2A00D41F97F7}" => removed successfully

C:\WINDOWS\System32\Tasks\AcerCMUpdateTask2.5.22250 => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AcerCMUpdateTask2.5.22250" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C24246B5-2F68-4EEB-9417-0B250C3F60AA}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C24246B5-2F68-4EEB-9417-0B250C3F60AA}" => removed successfully

C:\WINDOWS\System32\Tasks\CLToastRun => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CLToastRun" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DCADD776-01F6-4B49-B097-46F410F50506}" => not found

C:\WINDOWS\System32\Tasks\CCleanerCrashReporting => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerCrashReporting" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E254F695-21D1-4CB4-A94D-F66A063F0A75}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E254F695-21D1-4CB4-A94D-F66A063F0A75}" => removed successfully

C:\WINDOWS\System32\Tasks\DashlaneUpgradeCheck => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DashlaneUpgradeCheck" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E3F9FE37-F3B2-486A-BE0A-CFC87AB481B8}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3F9FE37-F3B2-486A-BE0A-CFC87AB481B8}" => removed successfully

C:\WINDOWS\System32\Tasks\CorelUpdateHelperTask-A8920757F59B1BA85897CD3CEDA3D8AB => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CorelUpdateHelperTask-A8920757F59B1BA85897CD3CEDA3D8AB" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EC1E8988-AD5C-4BC1-A0EC-955BD0B9F303}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EC1E8988-AD5C-4BC1-A0EC-955BD0B9F303}" => removed successfully

C:\WINDOWS\System32\Tasks\CorelUpdateHelperTask-E710F9D26B744BFC23F8BB83361DCD6E => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CorelUpdateHelperTask-E710F9D26B744BFC23F8BB83361DCD6E" => removed successfully

 

=========== EmptyTemp: ==========

 

FlushDNS => completed

BITS transfer queue => 1310720 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 7473588 B

Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B

Windows/system/drivers => 2975676 B

Edge => 0 B

Chrome => 489582066 B

Firefox => 0 B

Opera => 0 B

 

Temp, IE cache, history, cookies, recent:

Default => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 0 B

systemprofile32 => 0 B

LocalService => 661496 B

NetworkService => 673120 B

steve => 483501962 B

Hannah => 483501962 B

Gillian => 794913329 B

 

RecycleBin => 613334802 B

EmptyTemp: => 2.7 GB temporary data Removed.

 

================================

 

 

The system needed a reboot.

 

 

Powewred down and then back up again and was 5 seconds faster

==== End of Fixlog 18:24:26 ====

[Steviep]

[DR M]

Disable Cortana and enable Security HealthSystray.

 

I believe you are OK. Having in mind the amount of your installed programs, the start-up time is not out of the normal levels. 

 

Is there anything else you would like to ask? 

[Steviep]

Hi Dr M,

 

I have disabled Cortana and enabled SecurityHealthSystray.

 

I havenothing else to ask and would like to pass on my thanks to you for all of your assistance, I really appreciate it- thank you

[DR M]

You are very welcome.

The following tool will remove the tools we used as well as reset system restore points:

Download KpRm by kernel-panik and save it to your desktop.

• Right-click kprm_(version).exe and select Run as Administrator.
• Read and accept the disclaimer.
• When the tool opens, ensure all boxes under Actions are checked.
• Under Delete Quarantines select Delete Now, then click Run.
• Once complete, click OK.
• A log will open in Notepad titled kprm-(date).txt.
• Please copy and paste its contents in your next reply.

[Steviep]

# Run at 27/10/2022 08:28:36

# KpRm (Kernel-panik) version 2.9.3

# Website https://kernel-panik.me/tool/kprm/

# Run by steven from C:\Users\steve\Desktop

# Computer Name: DESKTOP-T3QOQ8M

# OS: Windows 10 X64 (22621) 

# Number of passes: 1

 

- Checked options -

 

    ~ Registry Backup

    ~ Delete Tools

    ~ Restore System Settings

    ~ UAC Restore

    ~ Delete Restore Points

    ~ Create Restore Point

    ~ Delete Quarantines

 

- Create Registry Backup -

 

   ~ [OK] Hive C:\WINDOWS\System32\config\SOFTWARE backed up

   ~ [OK] Hive C:\Users\steve\NTUSER.dat backed up

 

     [OK] Registry Backup: C:\KPRM\backup\2022-10-27-08-28-36

 

- Delete Tools -

 

 

  ## AdwCleaner

     [OK] C:\Users\steve\Desktop\adwcleaner(1).exe deleted

     [OK] C:\Users\steve\Desktop\AdwCleaner.exe deleted

     [OK] C:\AdwCleaner deleted

 

  ## ESET Online Scanner

     [OK] C:\Users\steve\Desktop\ESET Online Scanner.lnk deleted

     [OK] C:\Users\steve\Desktop\esetonlinescanner.exe deleted

 

  ## FRST

     [OK] C:\Users\steve\Desktop\FRST-OlderVersion deleted

     [OK] C:\Users\steve\Desktop\FRST64.exe deleted

     [OK] C:\FRST deleted

 

- Restore System Settings -

 

     [OK] Reset WinSock

     [OK] FLUSHDNS

     [OK] Hide Hidden file.

     [OK] Show Extensions for known file types

     [OK] Hide protected operating system files

 

- Restore UAC -

 

     [OK] Set EnableLUA with default (1) value

     [OK] Set ConsentPromptBehaviorAdmin with default (5) value

     [OK] Set ConsentPromptBehaviorUser with default (3) value

     [OK] Set EnableInstallerDetection with default (0) value

     [OK] Set EnableSecureUIAPaths with default (1) value

     [OK] Set EnableUIADesktopToggle with default (0) value

     [OK] Set EnableVirtualization with default (1) value

     [OK] Set FilterAdministratorToken with default (0) value

     [OK] Set PromptOnSecureDesktop with default (1) value

     [OK] Set ValidateAdminCodeSignatures with default (0) value

 

- Clear Restore Points -

 

   ~ [OK] RP named AdwCleaner_BeforeCleaning_25/10/2022_15:29:43 created at 10/25/2022 14:29:44 deleted

     [OK] All system restore points have been successfully deleted

 

- Create Restore Point -

 

     [OK] System Restore Point created

 

- Display System Restore Point -

 

   ~ [I] RP named KpRm created at 10/27/2022 07:29:37

 

-- KPRM finished in 161.77s --

[DR M]

Thanks, Steviep.
 
You are clean and ready to go now.

Now your computer is clean, here are some final tips about your computer's security from now on:

Some of the following, are from Klein's (2005) article, So how did I get infected in the first place. Since then, the article has been reproduced or linked to in dozens of locations. As a result, many malware experts have continued updating it, to include current operating systems and software program information. My source is Security Garden, and I marked for you the following:

1. Keep your Windows updated!
It is important always to keep current with the latest security fixes from Microsoft. This can patch many of the security holes through which attackers can infect your computer.

2. Update 3rd Party Software Programs
Third Party software programs have long been targets for malware creators. It has been stated that "Adobe’s Reader and Flash and all versions of Java are together responsible for a total of 66 percent of the vulnerabilities in Windows systems exploited by malware.'' It's important to keep everything updated.

3. Update the browsers you use
Many malware infections install themselves by exploiting security holes in the Internet browser that you use. So... Keep them updated.

4. Be careful about what you download and what you open!

• Many "freeware" programs come with an enormous amount of bundled spyware that will slow down your system, spawn pop-up advertisements, or just plain crash your browser or even Windows itself. Watch for pre-checked options such as toolbars that are not essential to the operation of the installed software.
• Peer-to-peer (P2P) programs like Kazaa, BearShare, Imesh, Warez P2P, and others, allow the creation of a network enabling people to connect with other users and upload or download material in a fast efficient manner. BUT even if the P2P software you are using is "clean", a large percentage of the files served on the P2P network are likely to be infected.
• Cracked or pirated programs are not only illegal, but also can make your computer a malware target. Have this in mind.
• Do not open any files without being certain of what they are!

5. Avoid questionable web sites!
Visit web sites that are trustworthy and reputable. Many disreputable sites will attempt to install malware on your system through "drive-by" exploits just by visiting the site in your browser. Lyrics sites, free software sites (especially ones that target young children), cracked software sites, and pornography sites are some of the worst offenders. Also, never give out personal information of any sort online or click "OK" to a pop-up unless it is signed by a reputable company and you know what it is.

6. Registry cleaners/driver boosters/system optimizers
I do not recommend registry cleaners, system optimizers, driver boosters and the like. It is your computer and certainly your choice. However, please consider that modifying registry keys incorrectly can cause Windows instability, or make Windows unbootable. With registry cleaner and system optimization software programs, the potential is ever present to cause more problems than they claim to fix. Do note, however, that Microsoft does not support the use of registry cleaners. See Microsoft support policy for the use of registry cleaning utilities.

7. PC means personal computer!
Don't give access to your computer to friends or family who appear to be clueless about what they are doing.

8. Back-up your work!
Make back-ups of your personal files frequently. You never know when you'll have to reformat and start from scratch. You can always reformat and reinstall programs, but you cannot replace your data if you haven't made backups.

9. Must-Have Software
An anti-virus and an anti-spyware program is a necessity for the security of your computer. Be sure that you keep them updated, and that real time protection is enabled. You have now the built-in Windows 10 antivirus, Windows Defender. Together with Malwarebytes, if you run it occasionally, depending on how often you use your computer, can keep you safe.

Happy safe computing.


I'm glad I was able to help you.

[Steviep]

thanks again for all of your help and I take on board your hints above

[DR M]

You are very welcome.