Posted July 26, 20177 yr FPCH Staff I am concerned about this entry in the FRST log. GroupPolicy: Restriction There are also orphan and no file entries that probably should be addressed. I included an ESET on-line scan log which I ran last. The computer is running well. Just checking it. The only problem I'm having is that I keep getting the message that the MS account needs to be fixed. I logged into the account via a web browser and I'm still getting this warning. I'll be working on that in the meantime. Thank you for your help.FRST.txtAddition.txtMBAM report.txtESET log.txtFRST.txtAddition.txtMBAM report.txtESET log.txtAdwCleaner[C0].txt
July 26, 20177 yr Hi Tony, I am concerned about this entry in the FRST log. GroupPolicy: Restriction <==== ATTENTIONIt's not uncommon for Adware to create Group Policies...... but they can also be set by the user. Considering the amount of Adware removed, I think it's safe to assume this was set by Adware. Removing it isn't a problem. There are also orphan and no file entries that probably should be addressed.Yes, there's no point in leaving them on the system. Copy the script within the quote box below: (make sure that you include Start:: and End:: as these are the clipboard notifiers. Start:: CloseProcesses: Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\S-1-5-21-1627067754-1582462140-715050360-1001\...\Run: [Power2GoExpress] => [X] GroupPolicy: Restriction <==== ATTENTION URLSearchHook: HKU\S-1-5-21-1627067754-1582462140-715050360-1001 - (No Name) - {74fd7a65-0ea2-45c3-9b5a-8ce44349a733} - C:\Program Files (x86)\TrackaPackage_dg\bar\2.bin\dgSrcAs.dll No File SearchScopes: HKU\S-1-5-21-1627067754-1582462140-715050360-1001 -> {CE33AE73-261A-400F-BE55-D307EA89D55D} URL = Toolbar: HKU\S-1-5-21-1627067754-1582462140-715050360-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found 2017-07-25 17:11 - 2015-12-03 05:28 - 00000000 ____D C:\Users\owner\AppData\LocalLow\TrackaPackage_dg 2016-12-02 20:44 - 2016-12-02 20:44 - 0737856 _____ (Oracle Corporation) C:\Users\owner\AppData\Local\Temp\jre-8u111-windows-au.exe ContextMenuHandlers05: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> No File Task: {166864C0-972D-4E77-91A2-9DE6AD48B512} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION Task: {25D7EFF2-AD81-447B-9F4E-67A70F018419} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File <==== ATTENTION Task: {2DC1A953-7F0C-446B-B322-1904F75B71F5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {2DC7A63E-51DE-4C5B-973D-F6E49FA22FEA} - \WPD\SqmUpload_S-1-5-21-1627067754-1582462140-715050360-1001 -> No File <==== ATTENTION Task: {3777FAE5-F96D-433F-B357-4270F88A9812} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {42CBAF75-0D15-4AD1-889E-F82F9A46616A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {5917F2D7-DBEA-465D-94D0-6AFC17E82FD5} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {70A4C000-D4D5-41E9-8547-86E2EC4EF3E8} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION Task: {71AD5E7B-51DD-4F85-88CA-5349F4EA78CF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {790760A9-0686-4CB5-8853-B11439834237} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {7F58BF6D-D42B-41E7-9420-245D648097D0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {89289A2B-8FC9-43F7-B2BB-4384A7FCA3AB} - \WPD\SqmUpload_S-1-5-21-1627067754-1582462140-715050360-1002 -> No File <==== ATTENTION Task: {8DEEC051-2742-43A9-86A9-7F577374FE90} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {9956FD0E-53E1-41BD-A24D-AEB7FC6E4C19} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {9AD24182-C04E-4288-90E4-598E45D2E7B9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION Task: {E6395F5A-984F-4420-A0E7-6DD491B27660} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION Task: {FE77323A-39B0-47C3-AB03-340382877B62} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION AlternateDataStreams: C:\ProgramData\Temp:05113FB9 [225] AlternateDataStreams: C:\ProgramData\Temp:2CB9631F [134] AlternateDataStreams: C:\ProgramData\Temp:4B6A9FDA [163] AlternateDataStreams: C:\ProgramData\Temp:4BEE39B0 [504] HKLM\...\StartupApproved\Run32: => "TrackaPackage AppIntegrator 64-bit" HKLM\...\StartupApproved\Run32: => "TrackaPackage AppIntegrator 32-bit" HKLM\...\StartupApproved\Run32: => "TrackaPackage EPM Support" HKLM\...\StartupApproved\Run32: => "PackageTracer AppIntegrator 64-bit" HKLM\...\StartupApproved\Run32: => "PackageTracer AppIntegrator 32-bit" HKLM\...\StartupApproved\Run32: => "PackageTracer EPM Support" CMD: ipconfig /flushdns Hosts: EmptyTemp: End:: NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Re-run FRST/FRST64 (which ever is installed ) and press the Fix button just once and wait. The tool will make a log in the same directory that FRST is run from (Fixlog.txt). Please post this in your next reply. Btw: Did you sort out the M$ account problem?
July 27, 20177 yr Author FPCH Staff Thanks Pete, I did resolve the MS account issue. I had to bring up the Windows Mail app and click on a Fix button. I entered the password. That seems to have satisfied it. I am getting a Server busy window when I boot. It says This action can not be completed because the program is busy. Choose 'Switch To' to activate the busy program and correct the problem. If I click on the Switch To button, it brings up the window with all the programs. If I click on the Retry button, the Server busy windows goes away. I'll work on it tomorrow. The FTST fix went flawlessly. Fix result of Farbar Recovery Scan Tool (x64) Version: 26-07-2017 Ran by owner (26-07-2017 22:04:30) Run:1 Running from D:\FRST Loaded Profiles: owner (Available Profiles: owner & George) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\S-1-5-21-1627067754-1582462140-715050360-1001\...\Run: [Power2GoExpress] => [X] GroupPolicy: Restriction URLSearchHook: HKU\S-1-5-21-1627067754-1582462140-715050360-1001 - (No Name) - {74fd7a65-0ea2-45c3-9b5a-8ce44349a733} - C:\Program Files (x86)\TrackaPackage_dg\bar\2.bin\dgSrcAs.dll No File SearchScopes: HKU\S-1-5-21-1627067754-1582462140-715050360-1001 -> {CE33AE73-261A-400F-BE55-D307EA89D55D} URL = Toolbar: HKU\S-1-5-21-1627067754-1582462140-715050360-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found 2017-07-25 17:11 - 2015-12-03 05:28 - 00000000 ____D C:\Users\owner\AppData\LocalLow\TrackaPackage_dg 2016-12-02 20:44 - 2016-12-02 20:44 - 0737856 _____ (Oracle Corporation) C:\Users\owner\AppData\Local\Temp\jre-8u111-windows-au.exe ContextMenuHandlers05: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> No File Task: {166864C0-972D-4E77-91A2-9DE6AD48B512} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File Task: {25D7EFF2-AD81-447B-9F4E-67A70F018419} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> No File Task: {2DC1A953-7F0C-446B-B322-1904F75B71F5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File Task: {2DC7A63E-51DE-4C5B-973D-F6E49FA22FEA} - \WPD\SqmUpload_S-1-5-21-1627067754-1582462140-715050360-1001 -> No File Task: {3777FAE5-F96D-433F-B357-4270F88A9812} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File Task: {42CBAF75-0D15-4AD1-889E-F82F9A46616A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File Task: {5917F2D7-DBEA-465D-94D0-6AFC17E82FD5} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File Task: {70A4C000-D4D5-41E9-8547-86E2EC4EF3E8} - \Microsoft\Windows\Setup\gwx\rundetector -> No File Task: {71AD5E7B-51DD-4F85-88CA-5349F4EA78CF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File Task: {790760A9-0686-4CB5-8853-B11439834237} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File Task: {7F58BF6D-D42B-41E7-9420-245D648097D0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File Task: {89289A2B-8FC9-43F7-B2BB-4384A7FCA3AB} - \WPD\SqmUpload_S-1-5-21-1627067754-1582462140-715050360-1002 -> No File Task: {8DEEC051-2742-43A9-86A9-7F577374FE90} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File Task: {9956FD0E-53E1-41BD-A24D-AEB7FC6E4C19} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File Task: {9AD24182-C04E-4288-90E4-598E45D2E7B9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File Task: {E6395F5A-984F-4420-A0E7-6DD491B27660} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File Task: {FE77323A-39B0-47C3-AB03-340382877B62} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File AlternateDataStreams: C:\ProgramData\Temp:05113FB9 [225] AlternateDataStreams: C:\ProgramData\Temp:2CB9631F [134] AlternateDataStreams: C:\ProgramData\Temp:4B6A9FDA [163] AlternateDataStreams: C:\ProgramData\Temp:4BEE39B0 [504] HKLM\...\StartupApproved\Run32: => "TrackaPackage AppIntegrator 64-bit" HKLM\...\StartupApproved\Run32: => "TrackaPackage AppIntegrator 32-bit" HKLM\...\StartupApproved\Run32: => "TrackaPackage EPM Support" HKLM\...\StartupApproved\Run32: => "PackageTracer AppIntegrator 64-bit" HKLM\...\StartupApproved\Run32: => "PackageTracer AppIntegrator 32-bit" HKLM\...\StartupApproved\Run32: => "PackageTracer EPM Support" CMD: ipconfig /flushdns Hosts: EmptyTemp: ***************** Processes closed successfully. HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui => key removed successfully HKU\S-1-5-21-1627067754-1582462140-715050360-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Power2GoExpress => value removed successfully C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully HKU\S-1-5-21-1627067754-1582462140-715050360-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{74fd7a65-0ea2-45c3-9b5a-8ce44349a733} => value removed successfully HKU\S-1-5-21-1627067754-1582462140-715050360-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CE33AE73-261A-400F-BE55-D307EA89D55D} => key removed successfully HKLM\Software\Classes\CLSID\{CE33AE73-261A-400F-BE55-D307EA89D55D} => key not found. HKU\S-1-5-21-1627067754-1582462140-715050360-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully HKLM\Software\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found. HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\msktbird@mcafee.com => value removed successfully C:\Users\owner\AppData\LocalLow\TrackaPackage_dg => moved successfully C:\Users\owner\AppData\Local\Temp\jre-8u111-windows-au.exe => moved successfully HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => key removed successfully HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{166864C0-972D-4E77-91A2-9DE6AD48B512} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{166864C0-972D-4E77-91A2-9DE6AD48B512} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{25D7EFF2-AD81-447B-9F4E-67A70F018419} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{25D7EFF2-AD81-447B-9F4E-67A70F018419} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-Weekend => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2DC1A953-7F0C-446B-B322-1904F75B71F5} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2DC1A953-7F0C-446B-B322-1904F75B71F5} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2DC7A63E-51DE-4C5B-973D-F6E49FA22FEA} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2DC7A63E-51DE-4C5B-973D-F6E49FA22FEA} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1627067754-1582462140-715050360-1001 => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3777FAE5-F96D-433F-B357-4270F88A9812} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3777FAE5-F96D-433F-B357-4270F88A9812} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{42CBAF75-0D15-4AD1-889E-F82F9A46616A} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42CBAF75-0D15-4AD1-889E-F82F9A46616A} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5917F2D7-DBEA-465D-94D0-6AFC17E82FD5} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5917F2D7-DBEA-465D-94D0-6AFC17E82FD5} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{70A4C000-D4D5-41E9-8547-86E2EC4EF3E8} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70A4C000-D4D5-41E9-8547-86E2EC4EF3E8} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{71AD5E7B-51DD-4F85-88CA-5349F4EA78CF} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{71AD5E7B-51DD-4F85-88CA-5349F4EA78CF} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{790760A9-0686-4CB5-8853-B11439834237} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{790760A9-0686-4CB5-8853-B11439834237} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7F58BF6D-D42B-41E7-9420-245D648097D0} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F58BF6D-D42B-41E7-9420-245D648097D0} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{89289A2B-8FC9-43F7-B2BB-4384A7FCA3AB} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89289A2B-8FC9-43F7-B2BB-4384A7FCA3AB} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1627067754-1582462140-715050360-1002 => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8DEEC051-2742-43A9-86A9-7F577374FE90} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8DEEC051-2742-43A9-86A9-7F577374FE90} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9956FD0E-53E1-41BD-A24D-AEB7FC6E4C19} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9956FD0E-53E1-41BD-A24D-AEB7FC6E4C19} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9AD24182-C04E-4288-90E4-598E45D2E7B9} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9AD24182-C04E-4288-90E4-598E45D2E7B9} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E6395F5A-984F-4420-A0E7-6DD491B27660} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6395F5A-984F-4420-A0E7-6DD491B27660} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FE77323A-39B0-47C3-AB03-340382877B62} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FE77323A-39B0-47C3-AB03-340382877B62} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => key removed successfully C:\ProgramData\Temp => ":05113FB9" ADS removed successfully. C:\ProgramData\Temp => ":2CB9631F" ADS removed successfully. C:\ProgramData\Temp => ":4B6A9FDA" ADS removed successfully. C:\ProgramData\Temp => ":4BEE39B0" ADS removed successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\TrackaPackage AppIntegrator 64-bit => value removed successfully HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\TrackaPackage AppIntegrator 64-bit => value not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\TrackaPackage AppIntegrator 32-bit => value removed successfully HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\TrackaPackage AppIntegrator 32-bit => value not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\TrackaPackage EPM Support => value removed successfully HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\TrackaPackage EPM Support => value not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\PackageTracer AppIntegrator 64-bit => value removed successfully HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\PackageTracer AppIntegrator 64-bit => value not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\PackageTracer AppIntegrator 32-bit => value removed successfully HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\PackageTracer AppIntegrator 32-bit => value not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\PackageTracer EPM Support => value removed successfully HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\PackageTracer EPM Support => value not found. ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= C:\Windows\System32\Drivers\etc\hosts => moved successfully Hosts restored successfully. =========== EmptyTemp: ========== BITS transfer queue => 32768 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 67120279 B Java, Flash, Steam htmlcache => 506 B Windows/system/drivers => 229076256 B Edge => 234523112 B Chrome => 0 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 8016000 B systemprofile32 => 128 B LocalService => 614654 B NetworkService => 10359598 B owner => 322362640 B George => 22884 B RecycleBin => 0 B EmptyTemp: => 831.7 MB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 22:05:59 ====