Author Topic: CCleaner start-up programs  (Read 13259 times)

0 Members and 1 Guest are viewing this topic.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: CCleaner start-up programs
« Reply #15 on: June 18, 2015, 08:16:48 AM »
Desktop is what you see when you turn on your computer

i assume malwarebytes is downloaded in your download folder? .... just double click the file and install it and run as instructed and attach log
same way you did when downloading and installing avast


when you have downloaded frst (in your download folder) right click on the file and select cut then go to your desktop, right click somwhere on the screen and select paste
farabar should now be on your desktop....run as instructed and attach the two diagnostic logs


REDACTED

  • Guest
Re: CCleaner start-up programs
« Reply #16 on: June 18, 2015, 10:43:11 AM »
I have run both programs (mbam in program files (x86))
See attachments.

Kind regards, Herman

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: CCleaner start-up programs
« Reply #17 on: June 18, 2015, 10:50:54 AM »
there should be one more log, farbar produce two logs ... frst.txt is missing, you should find it same place as you found additional.txt



REDACTED

  • Guest
Re: CCleaner start-up programs
« Reply #18 on: June 18, 2015, 11:16:07 AM »
FRST see attachment

Best regards, Herman

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: CCleaner start-up programs
« Reply #19 on: June 18, 2015, 11:43:28 AM »
OK 

essexboy is notified and will check your logs when he is home from work


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: CCleaner start-up programs
« Reply #20 on: June 18, 2015, 03:57:17 PM »
Quote
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13550152 2013-05-30] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1308232 2013-05-20] (Realtek Semiconductor)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [540672 2015-04-19] (Greenshot)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [124256 2010-01-18] (CANON INC.)
HKLM-x32\...\Run: [BrStsWnd] => C:\Program Files (x86)\Brownie\BrstsW64.exe [3697776 2012-06-21] (brother)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1284680 2014-01-17] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [438888 2014-01-15] (CANON INC.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-931285502-2098357838-514918857-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [72FE543E55C56A623C5B190740454A8A8B79F232._service_run] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-05] (Google Inc.)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-07-17] ()
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-07-17] (ZONER software)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [GoogleChromeAutoLaunch_5FEA36A39174F28C3634662B2D565CAA] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-05] (Google Inc.)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [Dropbox Update] => C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)
Startup: C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-09-04]
ShortcutTarget: Dropbox.lnk -> C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Out of all the above there is just one keeper ... Avast.  The others should only start when you want them to

Below is my windows 8 startup, I have flux to dim the screen and a wallpaper changer to go with Avast and that is it


Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: CCleaner start-up programs
« Reply #21 on: June 18, 2015, 04:12:49 PM »
Quote
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13550152 2013-05-30] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1308232 2013-05-20] (Realtek Semiconductor)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [540672 2015-04-19] (Greenshot)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [124256 2010-01-18] (CANON INC.)
HKLM-x32\...\Run: [BrStsWnd] => C:\Program Files (x86)\Brownie\BrstsW64.exe [3697776 2012-06-21] (brother)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1284680 2014-01-17] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [438888 2014-01-15] (CANON INC.)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-931285502-2098357838-514918857-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [72FE543E55C56A623C5B190740454A8A8B79F232._service_run] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-05] (Google Inc.)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-07-17] ()
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-07-17] (ZONER software)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-05-08] (Piriform Ltd)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [GoogleChromeAutoLaunch_5FEA36A39174F28C3634662B2D565CAA] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-05] (Google Inc.)
HKU\S-1-5-21-931285502-2098357838-514918857-1002\...\Run: [Dropbox Update] => C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)
Startup: C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-09-04]
ShortcutTarget: Dropbox.lnk -> C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Out of all the above there is just one keeper ... Avast.  The others should only start when you want them to
I'd leave the Realtek start ups alone otherwise audio wont work.

Online bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: CCleaner start-up programs
« Reply #22 on: June 18, 2015, 04:25:33 PM »
Users Choice !  :o

Do you want to start whats needs to run manually or, do you want the system to do it for you.
Certain items hardly ever get used and should probably only be started manually.
Those items that you always use like Dropbox to back up certain files, are much more useful when started by the system.
If you start programs at system boot, you simply need to realize that it will take some extra seconds to boot your system.
If you want a quick system boot, then don't start programs (mostly utilities) at system start and waste your time starting them manually
after the computer boots.
Your computer your choice. IMHO, there isn't a right or wrong way of doing this. It's up to the user for how legitimate programs are started.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: CCleaner start-up programs
« Reply #23 on: June 19, 2015, 10:15:31 AM »
Thanks for your replies.

I have disabled ALL startup programs via CCleaner, see attachment.

Still the pc is (too) slow, ScanCircle detects unusual folder startup process (recommendation to fix), see attachment.

What to do next to fix it?

Kind regards, Herman (Netherlands)


Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: CCleaner start-up programs
« Reply #24 on: June 19, 2015, 01:37:39 PM »
If you don't use the Asus web storage you can even delete it from the programs and features, then delete scan circles as that is not required either :)

REDACTED

  • Guest
Re: CCleaner start-up programs
« Reply #25 on: June 19, 2015, 03:22:15 PM »
How to stop process at "C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c

This may cause slow pc issue.

Best regards. Herman

Online bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: CCleaner start-up programs
« Reply #26 on: June 19, 2015, 04:23:20 PM »
How to stop process at "C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c

This may cause slow pc issue.

Best regards. Herman
If you use it, it will have to be started. Either at boot or manually.
https://forum.avast.com/index.php?topic=172356.msg1224496#msg1224496
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet