cpctech

At this point, the client wants their machine back. I am going to wipe and reload it. Thanks for trying.

I ran FSRT64.exe from a fresh download on to a USB I am failrly certain is clean. I booted into repair on a media creation tool created windows 10 installer usb I created earlier. Here is what I got. FRST.txt

Not to mention now you have me worried, as I have been using a usb stick to nike network files from that machine to my work PC to make these posts.

What if I don't have a USB stick that is fresh. Should I wait until I can travel the 150 miles round trip (this friday) to staples and buy a new one? (We live out in the sticks)

In trying to review your instructions I recived this on clicking the link for step 3. craftedflash.com uses an invalid security certificate. The security certificate for craftedflash.com is not trustworthy because the issuing organization failed to follow security practices. Certificates issued by Symantec, including the Thawte, GeoTrust, and RapidSSL brands, are not considered safe. Error code: MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED I find it odd that Symantec is on the "not trusted" list.

Ok. Sorry it was so long to reply... I had to figure out how to run that w/o having it clean up stuff. It did detect screenconnect.exe which is the software I am using to remote control the machine so that is safe. here is the log RogueKiller_portable64.log

Something is interfering with Roguekiller also. see attached screenshot

Tried running FRST and it crashed in the same place (just after pushing scan) I ran Roguekiller from within Techsuite, then ran FRST, and still have the same result. I suspect I need the Rogue killer download from you next.

AdwCleaner[C00].txt

HP EnVY TS 17 Notbook PC Has an I7 4700 processor and 16 GB ram. This machine should be running real fast. However it seems to be really slow. After running a full clean up using Techsuite (which includes EMSI soft removal tools) I was ready to give it back to the client..AFter a reboot it started running real slow again. I ran the techsuite software again and removed 17 new items. The only thing the machine had done was site idle on the internet. Attached is the EEK report. The FRST 64 bit would run until I pressed scan, then it would crash. (I verified the machine is running 64 bit windows 10 home) Thanks, scan_181029-172340.txt

Ok here are the files. Program1 Program_from_other_pc

On both the machines on the day that I ran emsisoft. When I get to the office where one of the machines are I'll attach the log. I will have to remote into the machine that this thread is about. I'll get it's log as well and I will title them accordingly.

So I had this problem show up on another computer I am working on. I looked at the file C😕(that is supposed to be C and : and \) Program with notepad and found it to be a Emsisoft Log file.

I am not sure what is causing it, but something keeps writing a file named Program (no ext) to the root of C:\ It seems as though something is still trying to infect this machine. I'll run new EEK and FRST again and post in a little while. (probably tomorrow)

So everything should be good to go now?