Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Registry Editor on startup


  • Please log in to reply
17 replies to this topic

#1 Godlover

Godlover

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:12:41 AM

Posted 10 September 2017 - 09:03 PM

I am having the Windows Registry Editor asking if I want it to make changes to my computer when it starts.  What would that be caused by?

 

http://speccy.piriform.com/results/LjvrM7IIivOijgpMmBnHzV7

 

 

MiniToolBox by Farbar  Version: 17-06-2016
Ran by David (administrator) on 10-09-2017 at 21:57:38
Running from "C:\Users\David\Downloads"
Microsoft Windows 10 Home  (X64)
Model: GC517AA-ABA a6057c Manufacturer: HP-Pavilion
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/10/2017 08:03:36 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: DESKTOP-M7CPVCS)
Description: Activation of app Microsoft.Windows.Photos_8wekyb3d8bbwe!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (09/10/2017 05:36:02 PM) (Source: Application Error) (User: )
Description: Faulting application name: Microsoft.Photos.exe, version: 2017.35071.13510.0, time stamp: 0x5988e006
Faulting module name: Windows.UI.Xaml.dll, version: 10.0.15063.540, time stamp: 0xd330c8c8
Exception code: 0xc000027b
Fault offset: 0x00000000004a9df4
Faulting process id: 0x231c
Faulting application start time: 0xMicrosoft.Photos.exe0
Faulting application path: Microsoft.Photos.exe1
Faulting module path: Microsoft.Photos.exe2
Report Id: Microsoft.Photos.exe3
Faulting package full name: Microsoft.Photos.exe4
Faulting package-relative application ID: Microsoft.Photos.exe5

Error: (09/10/2017 04:57:14 PM) (Source: Perflib) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (09/09/2017 01:32:19 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: DESKTOP-M7CPVCS)
Description: Activation of app Microsoft.Windows.Photos_8wekyb3d8bbwe!App failed with error: -2147023170 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (09/08/2017 10:23:34 PM) (Source: Application Error) (User: )
Description: Faulting application name: svchost.exe_stisvc, version: 10.0.15063.0, time stamp: 0x02799ef5
Faulting module name: esxw2ud.dll_unloaded, version: 1.0.1.1, time stamp: 0x4b1f0202
Exception code: 0xc0000005
Fault offset: 0x0000000000002e2b
Faulting process id: 0xa9c
Faulting application start time: 0xsvchost.exe_stisvc0
Faulting application path: svchost.exe_stisvc1
Faulting module path: svchost.exe_stisvc2
Report Id: svchost.exe_stisvc3
Faulting package full name: svchost.exe_stisvc4
Faulting package-relative application ID: svchost.exe_stisvc5

Error: (09/08/2017 10:21:38 PM) (Source: Application Hang) (User: )
Description: The program Sprint.exe version 9.0.0.1359 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 2fe0

Start Time: 01d32912315813d3

Termination Time: 114

Application Path: C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint\Sprint.exe

Report Id: 1df6deef-c8dd-4a3e-bf0d-3b93d95123bc

Faulting package full name:

Faulting package-relative application ID:

Error: (09/08/2017 07:47:36 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: DESKTOP-M7CPVCS)
Description: Activation of app Microsoft.Windows.Photos_8wekyb3d8bbwe!App failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (09/08/2017 05:03:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: DESKTOP-M7CPVCS)
Description: Activation of app Microsoft.Windows.Photos_8wekyb3d8bbwe!App failed with error: -2147023170 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (09/08/2017 12:01:01 PM) (Source: Perflib) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (09/08/2017 12:01:01 PM) (Source: Perflib) (User: )
Description: VMware


System errors:
=============
Error: (09/10/2017 08:03:35 PM) (Source: DCOM) (User: DESKTOP-M7CPVCS)
Description: Microsoft.Windows.Photos_2017.35071.13510.0_x64__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca

Error: (09/10/2017 01:28:06 PM) (Source: DCOM) (User: DESKTOP-M7CPVCS)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}

Error: (09/08/2017 10:23:47 PM) (Source: Service Control Manager) (User: )
Description: The Windows Image Acquisition (WIA) service terminated unexpectedly.  It has done this 1 time(s).

Error: (09/08/2017 10:18:43 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (09/08/2017 12:09:28 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: {E579AB5F-1CC4-44B4-BED9-DE0991FF0623}

Error: (09/08/2017 12:07:27 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: {E579AB5F-1CC4-44B4-BED9-DE0991FF0623}

Error: (09/08/2017 08:49:37 AM) (Source: Tcpip) (User: )
Description: The system detected an address conflict for IP address 10.0.0.64 with the system
having network hardware address EC-1F-72-06-52-4E. Network operations on this system may
be disrupted as a result.

Error: (09/02/2017 06:29:14 PM) (Source: Service Control Manager) (User: )
Description: The Downloaded Maps Manager service terminated unexpectedly.  It has done this 1 time(s).

Error: (08/29/2017 10:41:23 AM) (Source: Tcpip) (User: )
Description: The system detected an address conflict for IP address 10.0.0.64 with the system
having network hardware address EC-1F-72-06-52-4E. Network operations on this system may
be disrupted as a result.

Error: (08/25/2017 09:28:53 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable


Microsoft Office Sessions:
=========================
Error: (09/10/2017 08:03:36 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: DESKTOP-M7CPVCS)
Description: Microsoft.Windows.Photos_8wekyb3d8bbwe!App-2144927141

Error: (09/10/2017 05:36:02 PM) (Source: Application Error)(User: )
Description: Microsoft.Photos.exe2017.35071.13510.05988e006Windows.UI.Xaml.dll10.0.15063.540d330c8c8c000027b00000000004a9df4231c01d32a7cba9d3df1C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.13510.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exeC:\Windows\System32\Windows.UI.Xaml.dll8f081337-f59e-458f-a7ed-f1c43f7bbff4Microsoft.Windows.Photos_2017.35071.13510.0_x64__8wekyb3d8bbweApp

Error: (09/10/2017 04:57:14 PM) (Source: Perflib)(User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (09/09/2017 01:32:19 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: DESKTOP-M7CPVCS)
Description: Microsoft.Windows.Photos_8wekyb3d8bbwe!App-2147023170

Error: (09/08/2017 10:23:34 PM) (Source: Application Error)(User: )
Description: svchost.exe_stisvc10.0.15063.002799ef5esxw2ud.dll_unloaded1.0.1.14b1f0202c00000050000000000002e2ba9c01d31de36b60e074C:\WINDOWS\system32\svchost.exeesxw2ud.dll19f72bb4-11ef-491b-9095-d66a0048da5e

Error: (09/08/2017 10:21:38 PM) (Source: Application Hang)(User: )
Description: Sprint.exe9.0.0.13592fe001d32912315813d3114C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint\Sprint.exe1df6deef-c8dd-4a3e-bf0d-3b93d95123bc

Error: (09/08/2017 07:47:36 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: DESKTOP-M7CPVCS)
Description: Microsoft.Windows.Photos_8wekyb3d8bbwe!App-2144927142

Error: (09/08/2017 05:03:12 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: DESKTOP-M7CPVCS)
Description: Microsoft.Windows.Photos_8wekyb3d8bbwe!App-2147023170

Error: (09/08/2017 12:01:01 PM) (Source: Perflib)(User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (09/08/2017 12:01:01 PM) (Source: Perflib)(User: )
Description: VMware


CodeIntegrity Errors:
===================================
  Date: 2017-09-10 21:49:46.333
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 21:30:28.449
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 20:03:33.691
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 18:20:14.881
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 18:05:14.984
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 17:50:15.199
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 17:41:37.020
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 17:35:15.039
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 17:20:15.300
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Windows signing level requirements.

  Date: 2017-09-10 17:12:28.427
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Internet Security\a2hooks32.dll that did not meet the Microsoft signing level requirements.


=========================== Installed Programs ============================

64 Bit HP CIO Components Installer (HKLM\...\{30689060-43BD-46E9-8A54-E6CDB18AAB88}) (Version: 20.2.1 - HP Inc.) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.22)  MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.22 - Adobe Systems Incorporated)
Amazon Kindle (HKCU\...\Amazon Kindle) (Version: 1.20.1.47037 - Amazon)
APC PowerChute Personal Edition (HKLM-x32\...\{5A0C892E-FD1C-4203-941E-0956AED20A6A}) (Version: 2.1.1 - American Power Conversion Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.6 - Emsisoft Ltd.)
Epson Event Manager (HKLM-x32\...\{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}) (Version: 2.40.0001 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON WorkForce 630 Series Printer Uninstall (HKLM\...\EPSON WorkForce 630 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4i - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.3 (HKLM-x32\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.3b - SEIKO EPSON CORPORATION)
Evernote v. 6.5.4 (HKLM-x32\...\{D47E7D82-0D98-11E7-A6D6-005056951CAD}) (Version: 6.5.4.4720 - Evernote Corp.)
Everything 1.3.4.686 (x86) (HKLM-x32\...\Everything) (Version:  - )
GFI BackUp Freeware (HKLM-x32\...\GFI BackUp Freeware) (Version: 4.0 - GFI Software Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.17.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.77.0 - HTC)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Iris mini - Software for eye protection (HKCU\...\IrisTech Iris mini) (Version: "0.3.6" - "IrisTech")
Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
KeyOS Desktop Silverlight Player (HKCU\...\4226316762.stream13.lsmwebcast.com) (Version:  - stream13.lsmwebcast.com)
Macrium Reflect Free Edition (HKLM\...\{F05CC0B5-A93F-4BB8-9985-F7DE0BB76866}) (Version: 6.1.1196 - Paramount Software (UK) Ltd.) Hidden
Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 6.1 - Paramount Software (UK) Ltd.)
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.6966.0824 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 55.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 55.0.3 (x86 en-US)) (Version: 55.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.3 - Mozilla)
OpenOffice 4.1.3 (HKLM-x32\...\{EEA30AEB-8BA7-465B-85D4-098BB99733E7}) (Version: 4.13.9783 - Apache Software Foundation)
Oracle VM VirtualBox 5.1.20 (HKLM\...\{CD6E345E-ECBC-4F98-BB28-276ACBBCD4DE}) (Version: 5.1.20 - Oracle Corporation)
PagePlusX7ContentDeclaration (HKLM-x32\...\{DDD8D35B-EDEA-45FC-8930-C494B02E42FF}) (Version: 1.0.0.0 - Serif (Europe) Ltd) Hidden
Polaris Office 2017 (HKLM-x32\...\{888D578F-BCF2-4E0B-B51D-90AA6B24CA59}) (Version: 8.1.373.21165 - POLARIS OFFICE CORP.)
Quicken 2004 (HKLM-x32\...\{54DE0B75-6CD9-44C4-B10A-1F25DA9899D8}) (Version: 13.00.0000 - Intuit) Hidden
Quicken 2004 (HKLM-x32\...\InstallShield_{54DE0B75-6CD9-44C4-B10A-1F25DA9899D8}) (Version: 13.00.0000 - Intuit)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - )
Serif DrawPlus X5 (HKLM-x32\...\{2C10B17E-2043-4E7F-9021-A5B65CC4D387}) (Version: 12.0.4.027 - Serif (Europe) Ltd)
Serif PagePlus X8 (HKLM\...\{45FA4ED5-95DF-4BCC-9084-DC3D1DC61325}) (Version: 18.0.2.26 - Serif (Europe) Ltd)
Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1) (Version: 7.80.4.50 - Conexant Systems)
Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.80697 - TeamViewer)
UltraZip  (HKLM-x32\...\UltraZip) (Version:  - UltraZip)
VMware Player (HKLM\...\{E452E727-86B8-4233-8CC3-41FD817AFAFF}) (Version: 5.0.1 - VMware, Inc.) Hidden
VMware Player (HKLM-x32\...\VMware_Player) (Version: 5.0.1 - VMware, Inc)
WD Backup (HKLM-x32\...\{4AACAFC7-951A-4215-B430-3DFCFF2E6CED}) (Version: 1.5.5953.19614 - Western Digital Technologies, Inc) Hidden
WD Backup (HKLM-x32\...\{a8c9535a-ecd9-4172-a330-0cb5ff9dbed9}) (Version: 1.5.5953.19614 - Western Digital Technologies, Inc.)
WD Drive Utilities (HKLM-x32\...\{48996CDD-DD81-4197-93FE-0971E73C5CA7}) (Version: 1.3.2.2 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{eab1fb93-61fb-48de-b815-b4e9b68d2ef1}) (Version: 1.3.2.2 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{965D28B5-3C86-41FD-994E-D6376815C9B3}) (Version: 2.4.10.17 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{429a42d7-4c55-44d4-b38a-5872a0d70495}) (Version: 1.3.0.18 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{F1D5FC88-4EE0-4D0B-917B-60E930142FB9}) (Version: 1.3.0.18 - Western Digital Technologies, Inc.) Hidden
WhatsApp (HKCU\...\WhatsApp) (Version: 0.2.5863 - WhatsApp)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 75%
Total physical RAM: 3574.46 MB
Available physical RAM: 880.72 MB
Total Virtual: 6105.5 MB
Available Virtual: 2109.02 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:464.78 GB) (Free:153 GB) NTFS
2 Drive d: (New Volume) (Fixed) (Total:298.09 GB) (Free:66.16 GB) NTFS
3 Drive e: (My Passport) (Fixed) (Total:1862.98 GB) (Free:196.55 GB) NTFS

========================= Users: ========================================

User accounts for \\DESKTOP-M7CPVCS

Administrator            David                    DefaultAccount           
Guest                    

========================= Minidump Files ==================================

No minidump file found


**** End of log ****

Attached Files



BC AdBot (Login to Remove)

 


#2 Allan

Allan

  • BC Advisor
  • 8,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:41 AM

Posted 11 September 2017 - 08:11 AM

If it's just regedit loading at startup, that's easily corrected. If something is "asking" if you want to make changes, that's different. Please post a screenshot.



#3 Godlover

Godlover
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:12:41 AM

Posted 11 September 2017 - 11:18 AM

It's there.



#4 zainmax

zainmax

  • Banned
  • 344 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:41 AM

Posted 11 September 2017 - 11:36 AM

This is completely normal if you have UAC turned on and you run a program named Registry Editor (location: %Windir%\regedit.exe)
However, it is not understandable why you have to run this program with Windows.
Remove it from the Start/Programs list. It does not have to be there.
Location usually
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run

but may also be in the shortcut folder

%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup

or

%AppData%\Microsoft\Windows\Start Menu\Programs\Startup


#5 Allan

Allan

  • BC Advisor
  • 8,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:41 AM

Posted 11 September 2017 - 06:46 PM

Download and run autoruns (https://www.bleepingcomputer.com/download/autoruns/). If regedit is listed as a startup program, uncheck it.



#6 Godlover

Godlover
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:12:41 AM

Posted 12 September 2017 - 11:12 AM

Ok, I need some more direction to get into that.



#7 Allan

Allan

  • BC Advisor
  • 8,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:41 AM

Posted 12 September 2017 - 11:31 AM

Okay. Download and run Autoruns.

 

When it opens, click on the tab named "everything". In the "Filter" box at the top type: regedit

 

If any items show up, uncheck them. Then click on "save" at the top and close the app. Reboot. What happens?



#8 Godlover

Godlover
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:12:41 AM

Posted 14 September 2017 - 02:42 PM

Regedit does not appear upon search



#9 zainmax

zainmax

  • Banned
  • 344 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:41 AM

Posted 14 September 2017 - 03:12 PM

Regedit does not appear upon search

What it means "Regedit does not appear upon search", You don't know how to open regedit.exe or what it means?
Make regedit shortcut if needed
%windir%\regedit.exe

or open Run (Win Key + R) write into the window regedit or regedit.exe and click OK

Also see 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Edited by zainmax, 14 September 2017 - 03:17 PM.


#10 Allan

Allan

  • BC Advisor
  • 8,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:41 AM

Posted 14 September 2017 - 04:34 PM

Don't worry about the above post, I understand what you mean.

 

Please do a selective startup (Open msconfig and on the General tab choose "selective startup" (uncheck all three items) and reboot )and see if the message still appears.



#11 Godlover

Godlover
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:12:41 AM

Posted 15 September 2017 - 11:55 AM

I do not find how to get msconfig.  My start used to have a search available but not now.


Edited by Godlover, 15 September 2017 - 12:38 PM.


#12 zainmax

zainmax

  • Banned
  • 344 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:41 AM

Posted 15 September 2017 - 01:05 PM

msconfig.exe is system tool and located in %windir%\system32

Make shortcut:  %windir%\system32\msconfig.exe

Or open Administrative Tools folder and there is shortcut

or

open run.exe (Win Key + R), write in window msconfig.exe and click OK or Enter

 

But it seems to me that it would be better if you did not make changes to your computer's setup.
It would be better if could find someone who knows a bit of computers and helps You repair this.



#13 bwv848

bwv848

    Bleepin' Owl


  • BSOD Kernel Dump Expert
  • 3,027 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:92.96 million miles away from the sun
  • Local time:12:41 AM

Posted 15 September 2017 - 01:54 PM

@GodLover,
 
Please send me the output of AutoRuns:
 
:step1: Autoruns by Sysinternals

  • Download and save Autoruns from here.
  • Navigate to the directory in which you saved the file.
  • Right-click on Autoruns64.exe, select Run as administrator, and accept any User Account Control prompts.
  • Wait for a minute or so, then go to File, Save..., and save the file to your Desktop. Use the default name and ensure that the file extension while saving is .arn.
  • Zip and attach the .arn file in your next post.

Edited by bwv848, 15 September 2017 - 01:54 PM.

If I do not reply in three days, please message me.
 
BC BSOD Posting Instructions | Carrona BSOD Index | Driver Reference Table (DRT)


#14 Godlover

Godlover
  • Topic Starter

  • Members
  • 60 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:12:41 AM

Posted 15 September 2017 - 02:21 PM

I am lost at

Right-click on Autoruns64.exe,

I went in windows explorer to the file, but do not get the next step.

Thank you for your help.



#15 bwv848

bwv848

    Bleepin' Owl


  • BSOD Kernel Dump Expert
  • 3,027 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:92.96 million miles away from the sun
  • Local time:12:41 AM

Posted 15 September 2017 - 03:24 PM

Do you see Autoruns64.exe? Just right-click on that file with your mouse. There will be a menu that pops up giving you several options. Select Run as administrator and accept the security prompt.


If I do not reply in three days, please message me.
 
BC BSOD Posting Instructions | Carrona BSOD Index | Driver Reference Table (DRT)





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users