[SOLVED] 05-02-23 ran Windows Defender and Threat Found & Fixed - PUA:Win32/AskToolbar, pls help permanently remove this

[Jarod Knowles]

Hello,
I am using a PC with Wins 10 Pro 64 bit

Last week 05-02-23 ran Windows Defender and Threat Found & Fixed - PUA:Win32/AskToolbar

I then ran a McAfee Total Protection full scan and McAfee found nothing

I then ran a Malwarebytes full scan and Malwarebytes found nothing

So I felt it was gone but today 05-09-23 ran my weekly Windows Defender scan and same thing happened like last week -

05-02-23 Windows Defender Threat Found & Fixed - PUA:Win32/AskToolbar


Can you pls verify if this PUA:Win32/AskToolbar is still there and if yes pls help me permanently remove this.

It's a just a precaution.

Thanks

 

[DR M]

Hello, Jarod.

To check the computer for malware you must run the following tool and attach the 2 files created.

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

 

[Jarod Knowles]

Heloo,
Thanks for such a quick reply
I am just taking precautions over this as unclear if it is an issue or not.

I downloaded your scan program and was hard as Edge kept blocking it, even when i turned off real scanning. But then tried it on Chrome browser and was let thru. I then did the scan and am sending the 2 texts as instructed.
Thanks.

 

[DR M]

Thanks, Jarod.

Now the logs are ready, we can begin. Since we are in the Security Arena now, there are some guidelines you need to follow, so the procedure will run efficiently and effectively. Here are they:


1. Always ask before acting. Do not continue if you are not sure, or if something unexpected happens!

2. Do not run any tools unless instructed to do so. Also, do not uninstall or install any software during the procedure, unless I ask you to do so.

3. Cracked or pirated programs are not only illegal, but also can make your computer a malware target. Having such programs installed, is the easiest way to get infected. Thus, no need to clean the computer, since, soon or later, it will get infected again. If you have such programs, please uninstall them now, before we start the cleaning procedure.

4. If your computer seems to start working normally, don't abandon the topic. Even if your system is behaving normally, there may still be some malware remnants left over. Additionally, malware can re-infect the computer if some remnants are left. Therefore, please complete all requested steps to make sure any malware is successfully eradicated from your PC.

5. You have to reply to my posts within 3 days. If you need some additional time, just let me know. Otherwise, I will leave the topic due to lack of feedback. If you are able, I would request you to check this thread at least once per day so that we can resolve your issues effectively and efficiently.

6. Logs from malware diagnostic or removal programs can take some time to get analyzed. Also, have in mind that all the experts here are volunteers and may not be available to assist when you post. Please, be patient, while I analyze your logs.


====================

I'll need a considerable amount of time to review your logs. Since here it is already late (my time zone is CEST + 1), I'll most possibly be back to you tomorrow afternoon my time.

 

[Jarod Knowles]

Hello,
This used PC works fine. I run 3 weekly full scans on this old PC (McAfee Total Protection, Malwarebytes, Windows Defender)

I just have this thing PUA:Win32/AskToolbar that appeared last week after the weekly Windows Defender scan. Windows Defender got rid of it. I maybe got this after downloading a Tinnitus file from TinnitusTalk but McAfee scan of that download stated it was clean.

Now this week when ran the weekly Windows Defender scan it found it again and removed it again.

I just need to know if that thing PUA:Win32/AskToolbar is there or removed.

Thanks

 

[DR M]

Hi.

Are you a musician? A lot of "music related files" in the computer.

It seems that the item detected by Defender has to do with PandoraRecovery installation file.

E:\My Documents\PC, Laptop Maintenance\Security\PandoraRecovery\PandoraRecovery2.1.1Setup.exe

I'll include it in the fix to be removed, and please check if the program runs fine after the removal.

I also would like to ask you to check if McAfee products you have installed run without issues. There are a few lines indicating a missing file related to it.

After the above, let's do some maintenance:

FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
CreateRestorePoint:
CloseProcesses:
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> No File
AlternateDataStreams: C:\ProgramData:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\Users\All Users:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\ProgramData\Application Data:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\ProgramData\PACE:03CB59C75DC9A521 [217]
BHO: No Name -> {3334284B-6273-43D9-9F3E-8129022B61D9}' -> No File
FirewallRules: [{EA727338-5D33-4CB1-A4BC-AA9C78B9B7A3}] => (Allow) C:\Program Files\MetaTrader 5 IC Markets (SC)\metatester64.exe => No File
HKLM-x32\...\Run: [AsioThk32Reg] => REGSVR32.EXE /S CTASIO.DLL (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {1b6a879a-0185-11ed-ba47-f04da22329f6} - "F:\StormF1.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {1b926c6e-a6b6-11ea-b907-f04da22329f6} - "F:\StormF1.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {46823ef2-3973-11ed-ba56-f04da22329f6} - "F:\StormF1.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {47db487c-d6b5-11ed-baa4-f04da22329f6} - "F:\StormF1.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {4a8f22ba-93ff-11ea-b88e-f04da22329f6} - "F:\StormF1.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {51629fd9-a347-11ec-ba10-f04da22329f6} - "F:\StormF1.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {a1aaddb6-1bdd-11e8-a350-f04da22329f6} - "J:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {ba14fffc-644b-11ec-b9ee-f04da22329f6} - "F:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {e9a6b5cd-10cb-11eb-b939-f04da22329f6} - "F:\StormF1.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-500\...\Run: [Lexar_Echo_Backup_Manager.exe] => C:\Users\Administrator\AppData\Roaming\Lexar\Lexar_Echo_Backup_Manager.exe (No File)
HKU\S-1-5-21-4019536780-700838178-3571210305-500\...\Run: [DevconDefaultDB] => C:\WINDOWS\system32\readreg /PSCONV={NO} /FAIL=1 (No File)
HKU\S-1-5-21-4019536780-700838178-3571210305-500\...\RunOnce: [CTPostBootSequencer] => "C:\Users\DELL\AppData\Local\Temp\CTPBSeq.exe" /reglaunch /self_destruct (No File) <==== ATTENTION
HKU\S-1-5-21-4019536780-700838178-3571210305-500\...\MountPoints2: D - "D:\Setup.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-500\...\MountPoints2: {4a8f22ba-93ff-11ea-b88e-f04da22329f6} - "F:\StormF1.exe" 
HKU\S-1-5-21-4019536780-700838178-3571210305-500\...\MountPoints2: {90793c60-c358-11e7-9ef4-806e6f6e6963} - "D:\Setup.exe" 
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {C02229BC-5F8C-4F8D-8B41-7784D01C5663} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-11-14] (Adobe Inc. -> Adobe)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-11-14] (Adobe Inc. -> Adobe)
U3 idsvc; no ImagePath
S3 MFE_RR; \??\C:\Users\DELL\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
C:\Windows\SysWOW64\Macromed
E:\My Documents\PC, Laptop Maintenance\Security\PandoraRecovery\PandoraRecovery2.1.1Setup.exe
DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
EmptyTemp:
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

In your next reply please post:

1. The fixlog.txt
2. A reply about Pandora program
3. A reply about the McAfee programs you have installed

 

[Jarod Knowles]

Hello,
I will try to answer as best as I can.
1) You mention - Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.
So what I did is exactly what you wrote, I highlighted the entire code from start to end and then right clicked on mouse and hit Copy, nothing happened so since you write No need to paste anything to anywhere. I assumed what I did was correct

2) I did the FRST64 Fix step and attached is The fixlog.txt

3) I went to look for E:\My Documents\PC, Laptop Maintenance\Security\PandoraRecovery\PandoraRecovery2.1.1Setup.exe and the PandoraRecovery2.1.1Setup.exe is no longer there or maybe was already missing as forget if I deleted it in the past since have not used that since when I had this PC with Win 7 Pro, it's just a free software I used many years ago

4) The McAfee Total Protection seems to work fine but when do the weekly full scan it grabs all the PC resources and at times have to pause it while I try to do something else since the scan goes long. You mention - There are a few lines indicating a missing file related to it.- I hope I don't have to uninstall and reinstall that as it's a big job. I think McAfee has a repair tool I can run, have to find it, update then run it

5) Reason why I answered this late is because I ran the Windows Defender full scan and it found nothing!

6) Also it's unclear but I think this PC is running faster

 

[DR M]

Hi, Jarod.

You did everything as you should.

Yes, Defender didn't find it again, because we removed it.

Since you don't need the specific program, we can remove it with the following fix. At the same time we can do some maintenance. As to the McAfee products, yes, it would be a good idea to use the Repair tool, to ensure that it is running without issues.



1. FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
CreateRestorePoint:
CloseProcesses:
UninstallKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PandoraRecovery
CMD: DISM /Online /Cleanup-Image /RestoreHealth
CMD: SFC /scannow
EmptyTemp:
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

2. Eset Online Scan

Just to ensure that everything is clean, please do the following:

Download ESET Online Scanner and save it to your desktop.

• Right-click on esetonlinescanner_enu.exe and select Run as Administrator.
• When the tool opens, click Get Started.
• Read and accept the license agreement.
• At the Welcome to ESET Online Scanner window, click Get Started.
• Select whether you would like to send anonymous data to ESET.
• Note: if you see the "Welcome Back to ESET Online Scanner" screen, click Computer Scan > Full Scan.
• Click on the Full Scan option.
• Select Enable ESET to detect and remove potentially unwanted applications, then click Start scan.
• ESET will now begin scanning your computer. This may take some time.
• When the scan is finished and if threats have been detected, select Save scan log. Save it to your desktop as eset.txt. Click on Continue.
• ESET Online Scanner may ask if you'd like to turn on the Periodic Scan feature. Click on Continue.
• On the next screen, you can leave feedback about the program if you wish. Check the box for Delete application data on closing. If you left feedback, click Submit and continue. If not, Close without feedback.
• Open the scan log on your desktop (eset.txt) and copy and paste its contents into your next reply.

In your next reply please post:

1. The fixlog.txt
2. The eset.txt

 

[Jarod Knowles]

Hello,
Sorry for delay as that eSet scan was 8 hrs. I used to have eSet on an old PC so am familiar how good that is, techs seem to like that.

Ok so included are the

1. The fixlog.txt
2. The eset.txt (that toolbar creeped up again and eSet removed it)

 

[DR M]

Hi!

Eset detected the item inside the FRST's Quarantine area, so all is good.

But I had a mistake in the previous fix and I would like to correct it now.


FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
CreateRestorePoint:
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PandoraRecovery
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

In your next reply please post:

1. The fixlog.txt
2. Feedback: how is the computer running now? Any remaining issues/questions/concerns?

 

[Jarod Knowles]

Hello,

1. The fixlog.txt

I have included the file

1. Feedback: how is the computer running now? Any remaining issues/questions/concerns?

- McAfee used to have a repair tool they since discontinued called Virtual Technician, they now say that to repair their software you simply update. Is that correct or should I do the dreaded uninstall, then reinstall long process (since you mentioned you found a few missing lines)

- I have included 3 pics of a festering issue RAID Volumes that I am too afraid to touch. Can you pls tell me what option to press to get rid of this page each time the PC starts up.

- Also every week when I do the back up the Western Digital Passport tells me that could not back up a file named Dumpstack but I always ignore it as have no idea what that even means.

 

[DR M]

Hi.

Are you getting those screens before the sign in screen?

Before I'll ask you to do anything else, I would like to check fresh FRST logs, Addition and FRST.

 

[Jarod Knowles]

We have an emergency the mcafee I uninstalled but now when try to uninstall it, it will not install!

 

[Jarod Knowles]

Mcafee tech went to PC remote and corrected it so all good-but you were right there were lines corrupted etc

 

[Jarod Knowles]

take your time, thanks for all help

so only issues left are:
- I have included 3 pics of a festering issue RAID Volumes that I am too afraid to touch. Can you pls tell me what option to press to get rid of this page each time the PC starts up.

- Also every week when I do the back up the Western Digital Passport tells me that could not back up a file named Dumpstack but I always ignore it as have no idea what that even means.

 

[DR M]

I would prefer no one else to have access to the computer until we completely finish from here.

I think you missed my previous post:

Hi.

Are you getting those screens before the sign in screen?

Before I'll ask you to do anything else, I would like to check fresh FRST logs, Addition and FRST.

 

[DR M]

I will add this:

What do you do to sign in to Windows, after the above screens?

 

[Jarod Knowles]

Hello,
I ran that FRST again and here are the Addition and FRST logs

Now that you review the fresh new logs I guess you can see that McAfee was removed and reinstalled successfully (hopefully without the missing lines you mentioned many emails ago)

You ask - What do you do to sign in to Windows, after the above screens?
Off of memory - When I open the computer I get that DOS page showing RAID Volumes and then after a few secs it disappears, and then I get the routine with the Windows wallpaper, then get out of that page and enter my password to login, and then Windows desktop appears

The RAID Volumes DOS page has been like this for a while and is not affecting anything but when you look at the pics I sent you it clearly is showing that I would need to select 1 of 4 answers to remove that page BUT I am too afraid to touch it as do not feel like messing up the PC and then have to spend min 2 days reloading everything and so I prefer not to touch it unless you have the answer. And if we select the wrong answer we are basically deleting hard drive data and we don't want that. BTW I have the standard C drive (464 GB) and I had to add a 2nd HD (1 TB) as E Drive since ran out of room on C mainly due to audio recordings.

 

[DR M]

Hi, Jared.

Although the following article by Intel explains how the Intel Matrix Storage Manager works, I would also feel more comfortable if someone else with more experience into this area advised you what to do. So, opening a new topic in the Windows 10 Forum asking your question about this, would be the best.

Set Up a System with Intel® Matrix RAID Technology

As to DumpStack, from here:

Rest assured the DumpStack is a legitimate file created by Windows, it is part of the Windows troubleshooting process, that is created when Windows detects a crash, it is absolutely nothing to worry about, you may also find another file named DumpStack.Log.tmp and that is also a legitimate file that cannot be deleted, because Windows will be writing to that temp file.

So, if it's a file in use while backup, then it's normal not to be saved as a normal file. That's my opinion.


===============================

For now, let's finish the cleaning procedure:

FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
CreateRestorePoint:
CloseProcesses:
BHO: No Name -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> No File
BHO-x32: No Name -> {3334284B-6273-43D9-9F3E-8129022B61D9}' -> No File
BHO-x32: No Name -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> No File
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {a1aaddb6-1bdd-11e8-a350-f04da22329f6} - "J:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-4019536780-700838178-3571210305-1000\...\MountPoints2: {ba14fffc-644b-11ec-b9ee-f04da22329f6} - "F:\WD Drive Unlock.exe" autoplay=true
Task: {0E685C21-073A-43E6-8F7A-FEF817EDCECE} - \McAfee\WPS\odsscheduledtask -> No File <==== ATTENTION
Task: {243FB079-F596-46D8-904C-12E9B4FF82CE} - \McAfee\WPS\datupdatetask -> No File <==== ATTENTION
Task: {2FDA28D8-F930-4CC0-838C-DC197439AE4A} - \McAfee\DAD.WPS.Execute.Updates -> No File <==== ATTENTION
Task: {36A04445-FC24-4C00-8A32-33FB7C9E6CCD} - \McAfee\McPcoScanner -> No File <==== ATTENTION
Task: {432A795C-19CD-4FAF-8E7A-93FD1F82013D} - System32\Tasks\{F9ED3161-7EC7-45B6-9917-2954718D4A18} => C:\Program Files\McAfee\MAT\McPvTray.exe (No File)
Task: {547B2072-D2A8-4FD3-809C-EE3E4B2704C6} - System32\Tasks\{243518C2-07D4-415A-A519-7E03B223FE10} => C:\Program Files\McAfee\MAT\McPvTray.exe (No File)
Task: {569602E7-50B1-45FE-941F-030DB6797996} - System32\Tasks\McAfee Sustainability => C:\Program Files\McAfee\WPS\1.8.256.1\sustainability\mc-sustainability.exe (No File)
Task: {5C9966D4-A6C3-430B-911Task: {E10DC292-583A-41C0-99CA-BC8F85B7FB63} - System32\Tasks\{83443DE7-9C84-449F-ADE0-904AA688F819} => C:\Program Files\McAfee\MAT\McPvTray.exe (No File)
Task: {E95F2DC5-ED32-4880-B789-F32458BD4559} - System32\Tasks\{90436DC7-59C2-4629-99AD-8D13FBB1681B} => C:\Program Files\McAfee\MAT\McPvTray.exe (No File)
47712E0EFA19} - \McAfee\WPS\amwebapitriggertask -> No File <==== ATTENTION
Task: {BBC52FCF-C5FD-40B2-84B8-B3D55F5E4CB1} - System32\Tasks\{E53F880F-30CF-4D02-BB0D-B2FD39816322} => C:\Program Files\McAfee\MAT\McPvTray.exe (No File)
Task: {C0CEAE42-E777-48CE-8DEA-4C3FD9421588} - System32\Tasks\{57AB8DD7-B9F9-4292-AB37-460DCED18FDB} => C:\Program Files\McAfee\MAT\McPvTray.exe (No File)
Task: {D9F37E53-6D35-4789-85E9-0C0B26EE528B} - \McAfee\WPS\systemrebootedtask -> No File <==== ATTENTION
Task: {DC97C280-05C0-42F6-A2CB-096C53E8C89E} - \McAfee\WPS\Update -> No File <==== ATTENTION
S3 mc-wps-secdashboardservice; "C:\Program Files\McAfee\WPS\mok\mc-wps-secdashboardservice.exe" [X]
DeleteKey: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\mountpoints2
EmptyTemp:
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

 

[Jarod Knowles]

Hello,

1) RAID Volumes
Regarding RAID Volumes, I forgot to mention regarding that RAID Volume issue:

Circa time line of 4/4/2022 had Flashing Green 1, 3 - RAM issue so after some research I did the following:

For this Dell Optiplex 780 Disconnect all cables and power plug, disconnect the PSU (with reset), connect the PSU (similar PSU taken out of my other PC the Dell Optiplex 755 but without reset feature), replug all cables and power plug, boot PC, and presto it works!
And when boot PC no more solid green 3 (no more occasional faint/flashing green 1, 3).
BUT when start PC get that RAID Volumes page meaning it is asking to set something but what? Maybe because this PC has a PSU reset we need to reset something, who knows!
As you mentioned I will either leave it as is as harmless or start a thread but in the past did start a thread here and tech was unable to resolve, so maybe will try again with another tech for a 2nd opinion but again it's a page that we see for a sec or so then it moves along to the regular start up process so appears to be harmless.

2) Dumsptack
Regarding the Dumpstack, thanks for the insight as I could never figure out why when I do the weekly backups to Western Digital, why it always tells me "We were unable to backup some files, then I go check and it is always only something called Dumpstack, and online you never get the dif9nitve answer as to what that is.

3) Cleaning PC
Regarding the current Cleaning PC, Tonight I will try to do your steps and send reply but did get home late (Montreal now it's 12:50am and will try to find some time later)