[DR M]

It seems that the fix didn't run the first time.

 

As you see, some system files were corrupted and got fixed now.

 

Is there any remaining issue/question/concern regarding this computer?

[Advertisements]

Dr M, No remaining issues.  I appreciate your courtesy and help with this matter.

[JPowell]

Dr M, No remaining issues.  I appreciate your courtesy and help with this matter.

[DR M]

You are very welcome.
 
Since no other issues...

The following tool will remove the tools we used as well as reset system restore points:

Download KpRm by kernel-panik and save it to your desktop.

• Right-click kprm_(version).exe and select Run as Administrator.
• Read and accept the disclaimer.
• When the tool opens, ensure all boxes under Actions are checked.
• Under Delete Quarantines select Delete Now, then click Run.
• Once complete, click OK.
• A log will open in Notepad titled kprm-(date).txt.
• Please copy and paste its contents in your next reply.

[JPowell]

Dr M, Thanks again.  Have pasted the kprm text file below.

 

# Run at 11/5/2022 5:15:02 PM

# KpRm (Kernel-panik) version 2.9.3

# Website https://kernel-panik.me/tool/kprm/

# Run by jcpow from C:\Users\jcpow.DESKTOP-M8HV5LP\Desktop

# Computer Name: DESKTOP-M8HV5LP

# OS: Windows 10 X64 (22000) 

# Number of passes: 1

 

- Checked options -

 

    ~ Registry Backup

    ~ Delete Tools

    ~ Restore System Settings

    ~ UAC Restore

    ~ Delete Restore Points

    ~ Create Restore Point

    ~ Delete Quarantines

 

- Create Registry Backup -

 

   ~ [OK] Hive C:\WINDOWS\System32\config\SOFTWARE backed up

   ~ [OK] Hive C:\Users\jcpow.DESKTOP-M8HV5LP\NTUSER.dat backed up

 

     [OK] Registry Backup: C:\KPRM\backup\2022-11-05-17-15-02

 

- Delete Tools -

 

 

  ## FRST

     [OK] C:\Users\jcpow.DESKTOP-M8HV5LP\Desktop\Addition.txt deleted

     [OK] C:\Users\jcpow.DESKTOP-M8HV5LP\Desktop\Fixlog.txt deleted

     [OK] C:\Users\jcpow.DESKTOP-M8HV5LP\Desktop\FRST-OlderVersion deleted

     [OK] C:\Users\jcpow.DESKTOP-M8HV5LP\Desktop\FRST.txt deleted

     [OK] C:\Users\jcpow.DESKTOP-M8HV5LP\Desktop\FRST64.exe deleted

     [OK] C:\FRST deleted

 

- Restore System Settings -

 

     [OK] Reset WinSock

     [OK] FLUSHDNS

     [OK] Hide Hidden file.

     [OK] Show Extensions for known file types

     [OK] Hide protected operating system files

 

- Restore UAC -

 

     [OK] Set EnableLUA with default (1) value

     [OK] Set ConsentPromptBehaviorAdmin with default (5) value

     [OK] Set ConsentPromptBehaviorUser with default (3) value

     [OK] Set EnableInstallerDetection with default (0) value

     [OK] Set EnableSecureUIAPaths with default (1) value

     [OK] Set EnableUIADesktopToggle with default (0) value

     [OK] Set EnableVirtualization with default (1) value

     [OK] Set FilterAdministratorToken with default (0) value

     [OK] Set PromptOnSecureDesktop with default (1) value

     [OK] Set ValidateAdminCodeSignatures with default (0) value

 

- Clear Restore Points -

 

   ~ [OK] RP named Restore Point Created by FRST created at 11/02/2022 22:32:40 deleted

   ~ [OK] RP named Startup Restore Point created at 11/02/2022 22:33:48 deleted

   ~ [OK] RP named Restore Point Created by FRST created at 11/03/2022 21:31:59 deleted

   ~ [OK] RP named Startup Restore Point created at 11/03/2022 21:42:16 deleted

   ~ [OK] RP named Windows Modules Installer created at 11/04/2022 14:23:16 deleted

   ~ [OK] RP named Startup Restore Point created at 11/04/2022 14:27:00 deleted

     [OK] All system restore points have been successfully deleted

 

- Create Restore Point -

 

     [OK] System Restore Point created

 

- Display System Restore Point -

 

   ~ [I] RP named KpRm created at 11/05/2022 22:15:15

 

-- KPRM finished in 23.16s --

[DR M]

You are very welcome, JPowel.

[JPowell]

Dr M,

Not sure if a reply after 4 days goes back to you but I'm trying.  The arrow in the box is back and it only dances when the mouse is moved.  Using a dongle mouse but tried a bluetooth mouse with no change.  Have attached photos.  Please comment if you get this and have time.

JPowell

Attached Thumbnails

• 
• 

[DR M]

Hi, JPowel.

 

I recommend you to open a new topic at the Hardware Forum, letting them know that the computer was tested for malware and corruptions here. Hopefully, you will get the issue resolved. 

[JPowell]

Dr M,

Thank you.  Will try the Hardware Forum.

[DR M]

I'll have an eye on it. Good luck.