Browsers Keep Crashing & Can't Remove Screenrec

Greetings.

Though your issue may be browser specific, multiple browser crashes tend to point to a wider issue.

Please do this.

===================================================

Farbar Recovery Scan Tool (FRST)

--------------------

• Right click on FRST64, select Save Link As..., and save the file on your Desktop
• If your computer language is other than English right click on the FRST64 icon and rename it to FRST64english
• Right click on the icon and select Run as administrator
• Note: If you receive any warning about the download it is a false positive and you can ignore it. Click on More info to get the Run anyway option
• Click Yes to the disclaimer
• Click Scan and allow the program to run
• When completed, FRST.txt and Addition.txt reports will be saved on the Desktop
• Please attach the reports to your reply

===================================================

Things I would like to see in your next reply.

• Attached reports

 

Thanks, I wasn't receiving notifications of postings.

 

Sounds like you finally got there, nice work. Could you attach both reports to your reply?

 

Thank you for the reports.

If you did not intend to install Nielsen Online I am providing instructions below to remove it. If you want to keep it that is perfectly fine.

Please do this.

===================================================

Uninstalling Programs Using Revo Uninstaller Free Portable

--------------------

• Download Revo Uninstaller Free Portable and save it to your Desktop
• Right click on the folder and select Extract All..., then click Extract
• Double click on the RevoUninstaller-Portable folder
• Right click on RevoUPort and select Run as administrator
• Click OK on the License Agreement
• From the list of programs double click on the listed program(s), or anything similar, to remove it (if it exists)

Code:

Nielsen Online

• If the program's uninstaller appears work through the steps to remove the program(s)
• Be sure the Advanced option is selected then click Scan
• For each window that may appear identifying leftover items click Select All, Delete, then confirm the deletion
• Once done click Finish
• Reboot your computer

===================================================

Farbar Recovery Scan Tool Fix

--------------------

• Right click on the FRST64 icon and select Run as administrator
• Highlight the below information then hit the Ctrl + C keys at the same time and the text will be copied
• There is no need to paste the information anywhere, FRST64 will do it for you

Code:

Start::
SystemRestore: On
CreateRestorePoint:
CloseProcesses:
C:\Program Files (x86)\IObit
GroupPolicy: Restriction - Chrome <==== ATTENTION 
GroupPolicy-Firefox-x32: Restriction <==== ATTENTION 
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION 
Task: {0B3A95E0-7FC0-4E08-B559-AEA0DFF70F04} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION 
Task: {19E911A1-8A2F-45CD-A1A7-83AB8037B85D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION 
Task: {20CEBEB3-BAD1-4FFA-A2C5-FCAC0426F375} - \EOSv3 Scheduler onTime -> No File <==== ATTENTION 
Task: {2AC3A5F0-7177-44B8-A81E-9E0A5DF4A1E2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION 
Task: {44318825-01EA-43E9-A5AE-AA9D8FD698D0} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION 
Task: {58D33A07-C445-4BFB-9455-3C416DAB0587} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION 
Task: {6B445BA3-3DB4-4E3F-98AF-E63D2863F39F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION 
Task: {72C16E7B-A236-487F-A824-65BB16796AE7} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION 
Task: {81271A8D-D6A6-43DA-A71D-2257D8917AC3} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION 
Task: {8F6A9F02-3842-4A1F-AB68-1446785B8708} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION 
Task: {B5F05BDA-61E5-4A10-84AF-2648E518A143} - \EOSv3 Scheduler onLogOn -> No File <==== ATTENTION 
Task: {CA8BE04D-2005-4C07-8BC6-22D07775EFC2} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION 
Task: {DA406E0F-8E0B-447B-9C85-D29ABBF47535} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION 
Task: {DD23C679-A2FF-4338-9785-FF02DEB69DF6} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION 
Task: {F853FBE6-2096-4E47-B314-6CC54B219A8D} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION 
Task: {F50DBA55-2A06-44F7-AF84-CCD414912E1C} - System32\Tasks\{E7C9620D-5DAF-493E-BE45-5C51857FEDF6} => E:\Drive_E\Picture Editor Programs\PhotoshopCS4Portable\PhotoshopPortable (2).exe  (No File) 
Task: {2691B81A-1EF0-4EBC-A4C3-D44C9ABACCC5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  (No File) 
Task: {BFB0DE71-2813-4C44-B04A-E33C711F42EE} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  (No File) 
Task: {3CBE0884-24C8-4C49-B18E-AFF9ACFBB87F} - System32\Tasks\Adobe Update => "C:\Program Files (x86)\Adobe\Adobe.exe"  (No File) 
Task: {2FCB7861-3590-4E2B-BA89-C590CB58A78B} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ExecuteWithUAC.exe  /e (No File) 
Task: {D3D454B2-DFDE-49BF-BFCA-D4C72EE2AE0E} - System32\Tasks\EPSON WF-3640 Series Invitation {8A0E38FF-E92E-4A2D-824B-D1C555AB1D00} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKDE.EXE  /EXE:"{8A0E38FF-E92E-4A2D-824B-D1C555AB1D00}" /F:"Invitation" (No File) 
Task: {F1CC62EF-F899-43F0-B4E2-31A62EC58ADC} - System32\Tasks\EPSON WF-3640 Series Update {8A0E38FF-E92E-4A2D-824B-D1C555AB1D00} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSKDE.EXE  /EXE:"{8A0E38FF-E92E-4A2D-824B-D1C555AB1D00}" /F:"Update" (No File) 
Task: {81C2D47F-962F-4FFF-9966-F5DAED6C5A58} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [220816 2019-09-30] (Tweaking LLC -> Tweaking.com)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found] 
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found] 
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found] 
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found] 
SearchScopes: HKLM-x32 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL =
SearchScopes: HKU\S-1-5-21-1808842216-810075555-4126617097-1000 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL =
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-04-10] (Nero AG -> Nero AG)
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [143] 
S2 !SASCORE; "E:\SuperAntiSpyware\SASCORE64.EXE" [X] 
S2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [X] 
S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\122.1.63.174\elevation_service.exe" [X] 
S3 netprotection_network_filter2; System32\drivers\netprotection_network_filter2.sys [X] 
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2934048 2015-11-10] (IObit Information Technology -> IObit)
U3 idsvc; no ImagePath 
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION 
HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION 
HKLM\...\Run: [] => [X] 
HKLM-x32\...\Run: [] => [X] 
HKU\S-1-5-21-1808842216-810075555-4126617097-1000\...\Run: [] => [X]
HKLM\...\Run: [notebookAutoLaunch] => explorer.exe notebook-windows://background (No File) 
HKLM-x32\...\Run: [CHotkey] => mHotkey.exe (No File) 
HKU\S-1-5-21-1808842216-810075555-4126617097-1000\...\Run: [Surfshark] => C:\Program Files (x86)\Surfshark\Surfshark.exe (No File) 
HKU\S-1-5-21-1808842216-810075555-4126617097-1000\...\Run: [Steam] => "E:\Steam\steam.exe" -silent (No File) 
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File) 
HKU\S-1-5-21-1808842216-810075555-4126617097-1000\...\Policies\system: [shell] explorer.exe <==== ATTENTION 
HKLM\...\RunOnce: [!BCILauncher] => C:\WINDOWS\Temp\MUBSTemp\BCILauncher.EXE [18464 2024-03-12] (Microsoft Corporation -> ) <==== ATTENTION 
HKU\S-1-5-21-1808842216-810075555-4126617097-1000\...\Run: [ScreenRec] => C:\Users\End-User\AppData\Local\StreamingVideoProvider\ScreenRec_app\screenrec.exe [8401728 2023-10-04] (TEDDYSOFT OOD -> StreamingVideoProvider)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION 
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION 
cmd: netsh winsock reset catalog
cmd: netsh int ip reset resetlog.txt
Reg: reg export HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules C:\Firewall.reg
C:\Firewall.reg
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state ON
cmd: bitsadmin /reset /allusers
cmd: ipconfig /flushdns
Removeproxy:
hosts:
cmd: sfc /scannow
cmd: DISM /Online /Cleanup-Image /CheckHealth
Emptytemp:
End::

• Click Fix
• When completed the tool will create a log on the desktop called Fixlog.txt. Please attach it to your reply.
• Note: This step resets your Firewall settings and you may be asked later to grant permission for legitimate programs to pass through the Firewall. If you recognize the program agree to the request.
• Note: The Emptytemp: command will remove cookies and may result in some websites (like banking) indicating they do not recognize your computer. It may be necessary to receive and apply a verification code.

===================================================

Things I would like to see in your next reply.

• Nielsen Online uninstalled?
• Fixlog

 

Thank you for the update and report.

Let me know if you continue to experience browser issues.

Please do this.

===================================================

SFCFix Scan

--------------------

• Download SFCFix and save it to your Desktop
• Right click on the icon and select Run as administrator
• When prompted Press any key to continue . . . 3 times
• Allow the process to complete, which can take as long as 15 minutes
• When completed press Enter and a report will appear on your Desktop
• Copy and paste the contents of the report in your reply
• If the tool fails to run or errors are present in the report zip and upload the entire C:\Windows\Logs\CBS folder to Gofile or the file hosting site of your choice and post the download link in your reply

===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.

• SFCFix report
• Download link, if applicable

 

Thank you for the information. Sorry about the hiccup you are experiencing.

Press ctrl + alt + del keys at the same time
Select Task Manager
Under Processes scroll down to Windows Explorer
Right click on the entry and select Restart

If that does not work press the Windows Key + R at the same time. Type rstrui then hit Enter. You should be presented with a System Restore screen. Work your way through it and select the System Restore Point created by FRST yesterday. Let me know if that works.

Let me know the results

 

Yes, you are at the right place. The listed Restore Point was created after you experienced the new symptoms, correct?

Did you attempt this? If so, can you explained what happened?

 

Thank you for clarifying. I want to make sure we are in sync since your current situation was unexpected.

Did you happen to notice a Windows Update after applying the Fix and before you noticed the symptoms?

Please do this.

===================================================

Get-AppXPackage Using Powershell

--------------------

• Press ctrl + alt + del keys at the same time
• Select Task Manager
• Click File, then Run new task
• Type Powershell then place a check mark in Create this task with administrative privileges.
• Click OK
• Copy and paste PowerShell -ExecutionPolicy Unrestricted after the Command Prompt then press Enter
  
• If given the option, press A then hit Enter
  
• When completed you should see PS C:\WINDOWS\system32>
  
• Copy and paste Get-AppXPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"} after the Command Prompt press Enter
  
• Allow the lengthy process to complete and do not be concerned about error entries identified in red
  
• When the process is completed you will be presented with the PS C:\WINDOWS\system32 prompt
  
• Copy and paste PowerShell -ExecutionPolicy Restricted after the Command Prompt
  
• If given the option, press A then hit Enter
  
• Close all open windows, reboot your compter, and check the performance

===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.

• Windows Update?
• Results?

 

Thanks for the information.

I just modified my previous post to run Powershell another way. Let me know if it still doesn't work.

 

Great, let's continue to monitor things for a day or two. While we wait, please do this.

===================================================

ESET Online Scanner

--------------------

Note: You can expect this process to take a long time, up to several hours or more.

• Download ESET Free Online Scanner and save it to your Desktop
• Right click on esetonlinescanner_enu.exe and select Run as administrator
• NOTE: If the program immediately crashes rename esetonlinescanner_enu.exe to ESET.exe and attempt it again
• Click Computer Scan
• Click Full scan
• Select Enable ESET to detect and quarantine potentially unwanted applications
• Click Start scan
• Once completed click View detailed results
• Review the list of detected items for things you don't want to remove (sometimes Potentially Unwanted Applications)
• If there entries you would like to keep click Restore cleaned files
• Place a check mark in each entry you would like to restore then click Restore files then confirm the action
• Click Finish
• Save scan log and save it to your Desktop as ESETScan.txt
• Click Continue then finally click Close
• Copy and paste the ESETScan.txt file contents in your reply

===================================================

Things I would like to see in your next reply.

• ESET report

 

Thank you for the update.

Is this still accurate?

 

Great. Which browser froze yesterday?

 

Thanks, please keep me updated.

 

I apologize for the delay, I was not notified of your reply.

• Launch Chrome
• Copy and paste chrome://crashes in the address bar then press Enter
• Let me know if crash information exists or if it indicates (0)

 

Thank you for understanding.

Please do this.

===================================================

Chrome Crash and Diagnostics Report

--------------------

• Launch Chrome
  
• Copy and paste chrome://support-tool in the address bar then press Enter
  
• Enter or confirm your email address
  
• Under Describe the issue, type Random Crashes
  
• Click Continue
  
• Select all options except for Performance and Battery State and Sign In State
  
• Click Continue
  
• Select Automatically remove most personal information
  
• Click Export
  
• Save the file onto your Desktop or note which folder it is being saved to
  
• Click Save
  
• Click the support packet zip file link which should open the Windows Explorer screen highlighting the saved zip file
  
• Upload the file to GoFile or the file hosting site of your choice and send me the download link via Personal Message

===================================================

Things I would like to see in your next reply.

• Download link via PM

 

I received it, thank you.

Unfortunately the reports did not contain any crash/freeze information.

Please do these things.

===================================================

Launching Chrome Without Extensions

--------------------

• Hit the Windows Key + R at the same time
• In the Run box type or copy/paste chrome --disable-extensions and hit Enter
• Monitor Chrome for crashes

===================================================

Event Viewer Critical/Warning Information

--------------------

• Press Windows Key + R at the same time
• Type eventvwr.msc and press Enter
• Click on the arrow to the left of Windows Logs to expand the category
• Left click on System
• On the right hand side of the screen click Filter Current Log...
• Select Critical and Warning, then click OK
• Select Save Filtered Log File As...
• Under File Name: please type System then save it to your desktop
• Left click on Application and repeat the above steps saving the file as Application
• Zip the files and upload them here

===================================================

Things I would like to see in your next reply.

• Chrome crashes if/when it occurs
• Uploaded zip files

 

I received the System zip file. Were you able to complete the same thing for the Application category?

 

My apologies, I didn't realize both were zipped under System.

I have located the issue. Chrome itself is not the problem and that is why there was no crash information in the Chrome report you previously provided. The issue involves the amount of available memory on your system.

Chrome can consume a lot of resources but your computer specs should be able to handle it. Something is eating memory so that when Chrome tries to gobble up the memory it needs to continue to run the computer detects a Resource Exhaustion condition causing the system (Chrome) to freeze. That would explain the Brave browser freeze as well.

As a side note, I may want to completely uninstall Avira then reinstall if you'd like because it needs to be streamlined.

Please do this.

===================================================

Reviewing Resource Monitor Memory Information

--------------------

• Press the Windows Key + R at the same time
• Type resmon and press Enter
• Click on the Memory tab
• Click Commit (KB) so that the highest number is at the top
• Take and save a Screenshot of the window
• Attach the screenshot to your reply

===================================================

Things I would like to see in your next reply.

• Attached screenshot

 

Well now I might be walking that back....

I am not sure you ran the Chrome without extensions step. Please launch Chrome that way then run the Resource Monitor step again.