38 replies to this topic

[Juliet]

Well, long story short, you can't be on the internet without protection.

Something that comes to my mind:
Stuck in an update loop, a bad update not working with your system well, or a Microsoft update,
Not enough space on the computer to run the whole application.....different things that can be contributing to the problem.

Below is the Kaspersky forums, what you can do is to join?, then post a topic with the issues your having, maybe an administrator there can help...
https://forum.kaspersky.com/

If all else fails, I can give you a list of antivirus that you can experiment with to see which one is most suited for you.

Note: The programs listed below are all free to use or they have some sort of trial. Some of them have a paid version that provides more features, while a lot of other good programs only have a paid version but aren't listed there (such as Kaspersky and ESET Antivirus products).

Anti-Virus

• Sophos Home
• Bitdefender Free Antivirus
• Emsisoft Anti-Malware - Free 30 day trial. Once it expires, EAM enters into a freeware mode where it is still considered an Antivirus program, but without real-time protection
• Avira Free Antivirus
• avast! Free Antivirus

Anti-Malware

• Malwarebytes - Has both a free and paid version. The Premium version of Malwarebytes also offers Exploit and Ransomware protection, for a complete package of: Malware, Web, Exploit and Ransomware protection
• HitmanPro 3 - Free 30 day trial
• Zemana AntiMalware - Free 30 day trial

[Mozimax]

All your suggestions are good. I will try the Kaspersky root first and progress from there. And once again, thank you very much for your time, trouble and wonderful fixes. Because of these I can now do the research. Thank you, Cari

[Juliet]

You are most welcome.

Let's remove the tools and quarantine folders we created.

• Please download DelFix or from Here and save the file to your Desktop.
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
• Activate UAC
• Remove disinfection tools
• Click the Run button.
• -- This will remove the specialized tools we used to disinfect your system.
  Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

************

[Mozimax]

All's well except for Kaspersky, which I am working on, when I can make time. This whole thing happened after I deleted Comodo, after a three year contract I had with them. Then I went to Kaspersky free, which I am working around switching it on and off when I need to work, like sending this report to you. Once again I can breath, thanks to your help. Keep well and thank you. Cari 

 

# DelFix v1.013 - Logfile created 21/03/2019 at 12:32:54
# Updated 17/04/2016 by Xplode
# Username : Moz - REDENJIN
# Operating System : Windows 8.1 Single Language (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\Moz\Desktop\AdwCleaner - Shortcut.lnk
Deleted : C:\Users\Moz\Desktop\aswMBR.txt
Deleted : C:\Users\Moz\Desktop\MBR.dat

########## - EOF - ##########

[Juliet]

Quote
This whole thing happened after I deleted Comodo

Looking back over your logs I see a few Comodo files/folders left over.
I have no idea if this is still causing a problem with Kaspersky but it's worth mentioning.

Task: {DCE98709-C88A-460E-AD8A-E7033D7FEFF4} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(COMODO) C:\ProgramData\cmdres.dll
S3 tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [36128 2015-11-30] (Comodo Security Solutions, Inc. -> The OpenVPN Project)
(COMODO) C:\ProgramData\cisF14A.exe
2019-01-07 12:58 - 2018-03-13 19:17 - 000440512 _____ (COMODO) C:\ProgramData\cmdres.dll


HKLM\...\StartupApproved\Run: => "COMODO PC TuneUp" <-this is in your startups list so something related to Comodo is still there.

~~

I did check the internet for a uninstall tool but I'm not sure if I trust that.
If you like we can download Farbar again and delete out these left overs?

[Mozimax]

Yes, I can only see that as a good thing. I will download Farbar in the meantime and await your instructions.

[Juliet]

https://www.tenforum...ndows-10-a.html
the above site has info on removing items from your startup list



Highlight the entire content of the quote box below and select Copy.

 

Start::
CloseProcesses:
CreateRestorePoint:
2017-04-08 08:45 - 2017-04-07 10:21 - 004797120 _____ (COMODO) C:\ProgramData\cisF14A.exe
2019-01-07 12:58 - 2018-03-13 19:17 - 000440512 _____ (COMODO) C:\ProgramData\cmdres.dll
Task: {DCE98709-C88A-460E-AD8A-E7033D7FEFF4} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
C:\Windows\Temp\*.*
Emptytemp:
End::

Start FRST (FRST64) with Administrator privileges
Press the Fix button. FRST will process the lines copied above from the clipboard.
When finished, a log file Fixlog.txt will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.

[Mozimax]

Still had to disable Kaspersky to scan Farbar and send this report.

 

 

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by Moz (22-03-2019 11:54:39) Run:1
Running from E:\Downloads
Loaded Profiles: Moz (Available Profiles: Moz)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
2017-04-08 08:45 - 2017-04-07 10:21 - 004797120 _____ (COMODO) C:\ProgramData\cisF14A.exe
2019-01-07 12:58 - 2018-03-13 19:17 - 000440512 _____ (COMODO) C:\ProgramData\cmdres.dll
Task: {DCE98709-C88A-460E-AD8A-E7033D7FEFF4} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
C:\Windows\Temp\*.*
Emptytemp:

*****************

Processes closed successfully.
Restore point was successfully created.
C:\ProgramData\cisF14A.exe => moved successfully
C:\ProgramData\cmdres.dll => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DCE98709-C88A-460E-AD8A-E7033D7FEFF4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DCE98709-C88A-460E-AD8A-E7033D7FEFF4}" => removed successfully
C:\Windows\System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{31DDBD37-5DB7-4030-8064-10B0CAA806C3}" => removed successfully

=========== "C:\Windows\Temp\*.*" ==========

C:\Windows\Temp\AdobeARM.log => moved successfully
C:\Windows\Temp\AdobeARM_NotLocked.log => moved successfully
C:\Windows\Temp\adobegc.log => moved successfully
C:\Windows\Temp\lpksetup-20190316-161123-0.log => moved successfully
C:\Windows\Temp\lpksetup-20190320-144012-0.log => moved successfully
C:\Windows\Temp\MSIc132f.LOG => moved successfully
C:\Windows\Temp\RedEnjin_Moz_LastScan.txt => moved successfully
C:\Windows\Temp\result.txt => moved successfully

========= End -> "C:\Windows\Temp\*.*" ========


=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14906199 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 1201397 B
Edge => 0 B
Chrome => 368145682 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 111506 B
NetworkService => 0 B
Moz => 65131093 B

RecycleBin => 0 B
EmptyTemp: => 428.7 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 11:57:10 ====

 

 

 

     >>>>>>>>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<

[Juliet]

OK, thats about all we can do in an attempt to help the system work better with Kaspersky that I can think of.

[Mozimax]

Fantastic. It looks like Kaspersky was not the problem. I am fairly sure it all stemmed from Comodo mainly. Thank you for all your time and help. Life has taken a turn for the better and business is picking up again. Best regards, Cari Mostert.

[Juliet]

Sounds good.

Let's download Delfix again and remove what we did last.

• Please download DelFix or from Here and save the file to your Desktop.
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
• Activate UAC
• Remove disinfection tools
• Click the Run button.
• -- This will remove the specialized tools we used to disinfect your system.
  Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

********

[Mozimax]

I think all that could go wrong, has gone wrong today. I am at my wits end with this 100% disk usage. It will not stop, no matter what I do. I uninstalled Kaspersky and that never helped either. There is a download icon in my download folder called [Kpassword Manager 9.0.1.44] that when I go to my download folder or right click to remove this icon, the PC freezes and that's it. I wait a half-hour to one-hour, until it goes away and I can go back to my File Explorer. When I click on the download file, it all starts to happen all over again. Between all this, I had to download DelFix four times, because every time I clicked on it, it disappeared. With nightmarish persistence, I finally got this report. I'm thinking, maybe I should sell this PC and get another one. I'll starve if I go on like this! 

 

 

 

  # DelFix v1.010 - Logfile created 25/03/2019 at 14:08:57

# Updated 26/04/2015 by Xplode
# Username : Moz - REDENJIN
# Operating System : Windows 8.1 Single Language (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...


########## - EOF - ##########

[Juliet]

Problem could be an incomplete uninstall and the password manager is trying to still work, which your not wanting.

below is a help toic relating to this from Kaspersky, read over it and see if any of the suggestions will work but, thinking since you tried an uninstall......well we'll see how it goes.
https://support.kaspersky.com/14868

If we need to we can search for Kaspersky files/folders using FRST.

[Mozimax]

I have been to that and many other Kaspersky sites, but no go. The activation code won't work. All I have to do is right click on the icon and life's over. It turns into a 100% disk usage and nothing happens anywhere - from a half to one hour and more - and then stops and nothing. I was wondering if we can't take it out of the registry?

[Mozimax]

I deleted the download folder and now all is running fine. But I still want to clean the registry, just in case. If you can help with that?