Windows 10: HELP ME made changes and PC will not boot

First I found an option in the BIOS which said ultrafast boot, was set to normal..

thoughts thats a good idea si chose that...

then looking to improve the performance found an option to,unlock the cpu cores, which i did, now when Imreboot imget the mesage

" reboot and select proper boot device or insert boot media in selected boot device and press a key..

tried to,press DEL to get back imto the bios and undo the change i made, but it wont let me...

HELP please

:)

 

Help me at getting rid of changes made by a virus

Suggestion to either ask for free expert help at one of these sites:

• Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help - Virus, Trojan, Spyware, and Malware Removal Logs
• I'm infected - What do I do now?
• Malware Removal Assistance For Windows

or

to read/follow the advices in this wiki:
https://answers.microsoft.com/en-us/windows/wiki/windows_10-windows_install/clean-install-windows-10/1c426bdf-79b1-4d42-be93-17378d93e587

 

Help me at getting rid of changes made by a virus

Update: ESET just found a coin miner and another trojan on my PC

Hi!

I am a **** who opened a file after disabling antivirus (which notified me that file was infected btw), so I opened the program and nothing happened, atleast I thought it didn't. I tried to re-enable my antivirus and some UAC window opened saying that "Administrator
of this computer disabled launching this programme" or something like that. It was eeclnt.exe After restarting my PC the antivirus worked normally, so I scanned programs running right now and it didn't detect anything, so I thought it must have been deleted
already. Then I tried to scan my entire PC with Malwarebytes just in case but the setup won't launch unless i open it as admin and even then it won't proceed. I cannot open the setup because of system certificates, so I wasn't surprised when I found that the
virus fiddled with that:

Nazwa dziennika:Application

Źródło: Microsoft-Windows-User Profiles Service

Data: 06.06.2017 23:57:46

Identyfikator zdarzenia:1530

Kategoria zadania:Brak

Poziom: Informacje

Słowa kluczowe:

Użytkownik: SYSTEM

Komputer: DESKTOP-9ALBT62

Opis:

System Windows wykrył, że plik rejestru nadal jest używany przez inne aplikacje lub usługi. Plik zostanie teraz zwolniony. Aplikacje lub usługi, które używają pliku rejestru, mogą zacząć działać nieprawidłowo. Nie jest wymagana żadna akcja ze strony użytkownika.

SZCZEGÓŁY —

63 user registry handles leaked from \Registry\User\S-1-5-21-3268374840-1158211100-3827201329-1001:

Process 764 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\CA

Process 960 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\System\GameConfigStore\Parents

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\CommsAPHost\Test

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\CommsAPHost\Test

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\SystemCertificates

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\SystemCertificates

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\SystemCertificates

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\SystemCertificates

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\trust

Process 960 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\System\GameConfigStore

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CloudContent

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\PushNotifications

Process 6600 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Explorer

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Explorer

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Privacy

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\TrustedPeople

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\DataCollection

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\ActiveSync\JobDispatcher\JobRegistry\1.1

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\ActiveSync\Partners

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\Root

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\Disallowed

Process 652 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows NT\CurrentVersion\Fonts

Process 960 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\System\GameConfigStore\Children

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\PushNotifications\wpnidm

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 1260 (<Unknown>) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\SmartCardRoot

Kod XML zdarzenia:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />

<EventID>1530</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8000000000000000</Keywords>

<TimeCreated SystemTime="2017-06-06T21:57:46.912939200Z" />

<EventRecordID>5401</EventRecordID>

<Correlation />

<Execution ProcessID="1408" ThreadID="1128" />

<Channel>Application</Channel>

<Computer>DESKTOP-9ALBT62</Computer>

<Security UserID="S-1-5-18" />

</System>

<EventData Name="EVENT_HIVE_LEAK">

<Data Name="Detail">63 user registry handles leaked from \Registry\User\S-1-5-21-3268374840-1158211100-3827201329-1001:

Process 764 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\CA

Process 960 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\System\GameConfigStore\Parents

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\CommsAPHost\Test

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\CommsAPHost\Test

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\SystemCertificates

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\SystemCertificates

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\SystemCertificates

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\SystemCertificates

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\trust

Process 960 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\System\GameConfigStore

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CloudContent

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\PushNotifications

Process 6600 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Explorer

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Explorer

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Privacy

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\TrustedPeople

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\DataCollection

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Main

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\ActiveSync\JobDispatcher\JobRegistry\1.1

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\ActiveSync\Partners

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\Root

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\Disallowed

Process 652 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows NT\CurrentVersion\Fonts

Process 960 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\System\GameConfigStore\Children

Process 3792 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 2152 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 6816 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 3292 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Internet Explorer\Security

Process 6868 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\PushNotifications\wpnidm

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 6748 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 1260 (&lt;Unknown&gt has opened key \REGISTRY\USER\S-1-5-21-3268374840-1158211100-3827201329-1001\Software\Microsoft\SystemCertificates\SmartCardRoot

</Data>

</EventData>

</Event>

 

Do a 'hard' shutdown and reboot.

 

Hello
thanks is a HARD shutdown, simply powering off ?
not heard of that before
thanks

 

No, a hard shutdown, in most cases, is holding the physical power button down for more than 5 - 10 seconds til everything shuts off.
Everything comes to a screeching halt without programs closing down properly but, sometimes it's the only way.
Then you just power up again and hopefully meet with some success.

 

still nothing, pressing DEL doesnt even get me the bios screen, tried booting from windows dvd, same mesage...

need some help please

thanks

 

If you take out the battery and put it back in the motherboard should reset to default.

 

we are talking the bios battery yes ?
it was situated directly under my giant graphic card, ( would have been better somewhere else on the motherboard where it couldnt be obscured, thanks gigabyte ) just removed it and the bios battery is visible, held at one edge by a small spring clip, i was hoping moving the clip back, would releae the battery, but it didnt, dont want to use anything metal to encourage it out...

 

I usually just use my finger nail to pop it up ,opposite side from the clip

 

Hi
if If i cann find the bios reset jumper and move it to the other position then hold power button in for 20 secs or so will this do the same job, or is the battery out a better option ...
thanks

 

Shorting out the reset jumper pins will also work.

 

ok I cant find the jumper pins, removed the battery, held power button in for a minute ( everything still unplugged )
will reinsert battery and graphic acrd and cross my fingers..

PS would it have been setting boot up in the bios to ultra fast that caused this issue ?

thanks

 

UPDATE...
all fixed, thanks everyone....things aleays seem worse than they really are... luckily....lol
the Pc was set to boot from the wrong HDD but after resetting the bios I was able to change the boot order....took adavntage of the situation to give all the fans coolers etc a good clean with a can of compressed air, so,thats another good job done....the CPU was ' little' dusty...

PS would still like to know if setting the startup speed to ultrafast in the bios caused the issue

 

I think there is a lot of users with boot issues that were caused by fastboot being turned for sure,