This thread's last reply is from May 3, 2015, 2:36 AM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
If I do the last few the last few setp with doing them CLEAR ALL my RESTORE POINTS? I am not sure if I want all my restore points cleared or do I have to?
Exactly before CLEAR ALL RESTORE POINTS there is command CREATE RESTORE POINT. The questionable command deleted all restore points excluding most recent one - the last was created. So you will have one clean restore point after all!
All previous restore points were compromised by the fact that your computer was infected. It means that trying to restore by any older in time restore point is a good chance to restore some infections also...
Another question. On my windows task manager I have a bunch of things running like Csrss.exe and dwm.exe, explorer.exe, toaster.exe etc, etc, etc, taking up a lot of memory. I tried to end the processing of Csrss.exe but it won't let me and I have tried to do anything to the other ones. Do I need any of them running and if I don't how do I stop them and any other ones that I don't need as these may be making my videos choopy? Thanks for your help.
On my windows task manager I have a bunch of things running like Csrss.exe and dwm.exe, explorer.exe, toaster.exe etc, etc, etc, taking up a lot of memory. I tried to end the processing of Csrss.exe but it won't let me and I have tried to do anything to the other ones. Do I need any of them running and if I don't how do I stop them and any other ones that I don't need as these may be making my videos choopy?
In the task manager you can see a lot of processes. They may be divided to two different groups:
System processes such as csrss.exe or svchost.exe and many-many more.
All other are related to programs you installed and run
I strongly suggest you don't touch (kill, delete, remove, uninstall) anything unless you know exactly what you are doing! You can easily crash or even destroy you computer.
Many programs prefer to run automatically immediately after start of the operating system. Then when you would like to use them, they are ready to work. The problem is - most of the time you don't use many of them or even all, but they used a lot of system resources such as memory, CPU time, hard drive space, etc. Theoretically every user should analyze his system and manage such processes.
I can try to help you a little. Please run the following steps:
To Install CCleaner: Caution: Make sure to UNCHECK any other software install offers, before installing CCleaner.
Right-click on ccsetup505.exe icon on your desktop and select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
Press the "Next" button on Welcome to the CCleaner v5.05 Setup screen after selecting a language.
Click "I Agree"...(License Agreement) if prompted.
Click "Next" for default install location if prompted. The default is set to C:\Program Files\CCleaner. Unless you want it installed elsewhere, just leave it.
Check the "Install Options" you want or leave existed marks.
Click "Install".
Uncheck View Release notes and click "Finish" when prompted.
Step 2. To Run CCleaner:
Right-click on CCleaner desktop icon and select "Run As Administrator..." to run it. If prompted by UAC, please allow it..
Select and click Tools on the left Pane.
Select and click Startup. You will see the first tab Windows with all related startups.
Select and click Save to text file... button on the right bottom corner, add the name of opened tab to the name of suggested file startup.txt , and safe Windows-startup.txt on your Desktop.
Then repeat previous paragraph 4 for all other tabs after Windows one by one and change saved names accordingly.
Close CCleaner when finished.
Locate every saved file on the Desktop, open one by one by Notepad, copy the contents of every file, and post all of them in your next reply
Then I will analyze all Startup lists and give you recommendations which of them can be disabled altogether with instruction how to do it.
Also how do I uninstall Explorer? I don't see it in the uninstall folder?
If we are talking about browser Internet explorer, then I should note you that IE is a part of Windows as operating system and it is not listed on the common Uninstall place. I also don't recommend you to uninstall it even it is possible by different system tool. The existence of IE is important at least for proper work of Windows Updates. Of cause, nobody push you to use it!
Also my shock-wave keeps crashing? Why would that be?
This problem don't appear to be malware related, and that is what this forum specializes in. Probably the best idea for this type of problem - reinstall conflicted program.
Please post each log separately to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....
Please include in your next reply:
Do you have any problems executing the instructions?
Contents of all NNNN-startup.txt reports, saved after run of CCleaner.
Do you see any changes in computer behavior?
Thanks,
pgmigg
Failure to post replies within 72 hours will result in this thread being closed
No Extension Blog This Microsoft Corporation C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
No Helper Java(tm) Plug-In 2 SSV Helper Oracle Corporation C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
No Helper Java(tm) Plug-In SSV Helper Oracle Corporation C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
No Helper RealNetworks Download and Record Plugin for Internet Explorer RealDownloader C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
No Helper Windows Live ID Sign-in Helper Microsoft Corp. C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
No Helper Windows Live ID Sign-in Helper Microsoft Corp. C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
Yes Extension TLRemove 1.5.4 First user C:\Users\MARK\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hneieddeibpcngeljjkdpcajfcgelalk\1.5.4_0
Yes Plugin Chrome PDF Viewer First user chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/
Yes Plugin Chrome Remote Desktop Viewer First user internal-remoting-viewer
Yes Plugin Native Client First user C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\internal-nacl-plugin
Yes Plugin Shockwave Flash 17.0.0.169 First user C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll
Yes Plugin Widevine Content Decryption Module 1.4.7.796 First user C:\Users\MARK\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.796\_platform_specific\win_x86\widevinecdmadapter.dll
You posted 5 logs. Unfortunately you did not indicate which file is related to which tab. I need to be sure that log #1, for example, contains information from Windows tab, and so on.
I would like to have a small list indicates which post from which file was taken - now I probably can be sure about first file only - please continue:
Post 1 related to Windows-startup.txt
Post 2 related to ???-startup.txt
Post 3 related to ???-startup.txt
Post 4 related to ???-startup.txt
Post 5 related to ???-startup.txt
Please change all red question marks to real names!
Thanks,
pgmigg
Failure to post replies within 72 hours will result in this thread being closed
Post 2 related to Internet Explorer, Post 3 related to firefox, Post 4 related to Goggle Chrome, and Post 5 related to scheduled tasks. I am pretty sure that is how they are posted.
On the different computers with different set of installed Internet browsers appropriate set of reports may be different too! It was the reason why I asked you to do it...
Good! Lets continue...
To Run CCleaner:
Right-click on CCleaner desktop icon and select "Run As Administrator..." to run it. If prompted by UAC, please allow it..
Select and click Tools on the left Pane.
Select and click Startup. You will see the first tab Windows with all related startups.
Then please select entry by entry from tab to tab listed below, make a right-click on it, and then left-click on Disable at the pop-up menu. As the result, the "Yes" at the front of entry should be change to "No":
Windows tab:
Yes HKLM:Run HostManager AOL Inc. C:\Program Files (x86)\Common Files\AOL\1429832463\ee\AOLSoftware.exe
Yes HKLM:Run QuickTime Task Apple Inc. "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
Yes Extension TLRemove 1.5.4 First user C:\Users\MARK\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hneieddeibpcngeljjkdpcajfcgelalk\1.5.4_0
Yes Plugin Chrome Remote Desktop Viewer First user internal-remoting-viewer
Yes Plugin Native Client First user C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\internal-nacl-plugin
Yes Plugin Widevine Content Decryption Module 1.4.7.796 First user C:\Users\MARK\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.796\_platform_specific\win_x86\widevinecdmadapter.dll
Scheduled tasks
Yes Task PCDEventLauncher PC-Doctor, Inc. "C:\Program Files\Dell Support Center\sessionchecker.exe"
Yes Task {D5E8CB6B-319E-4F0E-917E-CBAC38E34677} AOL Inc. C:\Program Files (x86)\AOL Desktop 9.7\aol.exe
Close CCleaner when finished.
Restart your computer.
And one more thing. Somehow one startup tab was missed - I mean Context Menu tab - usually it is the last tab.
To Run CCleaner:
Right-click on CCleaner desktop icon and select "Run As Administrator..." to run it. If prompted by UAC, please allow it..
Select and click Tools on the left Pane.
Select and click Startup. Go to the last tab Context Menu with all related startups.
Select and click Save to text file... button on the right bottom corner, add the name of opened tab to the name of suggested file startup.txt , and safe Context-startup.txt on your Desktop.
Close CCleaner when finished.
Locate saved file on the Desktop, open it by Notepad, copy the contents and post it in your next reply
Thanks,
pgmigg
Failure to post replies within 72 hours will result in this thread being closed
✨ Ask AI about this thread
No ads, no affiliate links — generated on request from this thread's own
archived content, not written by forum staff. Never run a scan/removal tool
as a self-service step if the original thread describes it being done under
a helper's direct supervision, and don't include your name, email, or other
personal details in a follow-up question. See our privacy page
for details on how this works.
