pilfinken Postad 23 mars, 2014 Share Postad 23 mars, 2014 Hej, Jag måste ha svarat OK på någon fråga. Sen ca 10 dagar tillbaka har jag fått annonser i browsern som jag inte vill ha där. Först var det bara i Firefox, jag bytte då till IE men det dök upp även där och då bytte jag till Chrome. Det funkade i 4 dagar, sen dök det upp även där... :-( Jag laddade ner DDS och bifogar loggen (från igår) om någon kan förbarma sig och titta på vad som är problemet. Tack på förhand DDS (Ver_2012-11-20.01) - NTFS_x86 Internet Explorer: 11.0.9600.16521 BrowserJavaVersion: 10.51.2 Run by Lasse at 16:43:04 on 2014-03-22 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.46.1053.18.2047.765 [GMT 1:00] . AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} . ============== Running Processes ================ . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\nvvsvc.exe C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe c:\Program Files\Microsoft Security Client\MsMpEng.exe C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\WLANExt.exe C:\Windows\system32\conhost.exe C:\Windows\System32\spoolsv.exe C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe C:\Windows\system32\taskhost.exe C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe C:\Windows\system32\Dwm.exe C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe C:\Windows\Explorer.EXE C:\Program Files\qualitink\updatequalitink.exe C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe C:\Windows\system32\conhost.exe C:\Program Files\qualitink\bin\utilqualitink.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe C:\Program Files\NETGEAR\WNA3100\WNA3100.exe C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe C:\Program Files\NETGEAR\WNA3100\WifiSvc.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\System32\WUDFHost.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe c:\Program Files\Microsoft Security Client\NisSrv.exe C:\Windows\system32\conhost.exe C:\Program Files\Memeo\AutoBackup\InstantBackup.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE C:\Program Files\qualitink\bin\FilterApp_C.exe C:\Windows\system32\conhost.exe C:\Program Files\qualitink\bin\XTLSApp.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\conhost.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k LocalServicePeerNet . ============== Pseudo HJT Report =============== . uStart Page = hxxps://www.google.se/ mStart Page = hxxp://mysearch.sweetpacks.com/?src=10&st=12&crg=3.5000006.10068&did=10703&barid=226928100795808485332201655090867698971 BHO: FTdownloader V4.0: {11111111-1111-1111-1111-110311551174} - c:\program files\ftdownloader v4.0\FTdownloader V4.0-bho.dll BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll BHO: LastPass Vault: {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - c:\program files\lastpass\LPToolbar.dll BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll BHO: mysearchdial Helper Object: {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - c:\program files\mysearchdial\bh\mysearchdial.dll TB: mysearchdial Toolbar: {3004627E-F8E9-4E8B-909D-316753CBA923} - c:\program files\mysearchdial\mysearchdialTlbr.dll TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - c:\program files\lastpass\LPToolbar.dll uRun: [sony PC Companion] "c:\program files\sony\sony pc companion\PCCompanion.exe" /Background mRun: [bCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe" mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey mRun: [WinampAgent] "c:\program files\winamp\winampa.exe" mRun: [Memeo Instant Backup] c:\program files\memeo\autobackup\MemeoLauncher2.exe --silent --no_ui mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop elements 6.0\apdproxy.exe" mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [NvBackend] "c:\program files\nvidia corporation\update core\NvBackend.exe" mRun: [shadowPlay] c:\windows\system32\rundll32.exe c:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\instal~2.lnk - c:\program files\common files\lpuninstall.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\instal~1.lnk - c:\program files\common files\lpuninstall.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\netgea~1.lnk - c:\program files\netgear\wna3100\WNA3100.exe mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: E&xportera till Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000 IE: LastPass - c:\users\lasse\appdata\locallow\lastpass\context.html?cmd=lastpass IE: LastPass-formulärifyllning - c:\users\lasse\appdata\locallow\lastpass\context.html?cmd=fillforms IE: Ski&cka till OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - c:\program files\lastpass\LPToolbar.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab TCP: NameServer = 192.168.1.1 TCP: Interfaces\{2C030099-DA7B-4F09-A6E6-2CA6F4D9917B} : DHCPNameServer = 192.168.1.1 TCP: Interfaces\{864F3368-8913-4841-B428-1D04315ECC2D} : DHCPNameServer = 192.168.1.1 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL SSODL: WebCheck - <orphaned> SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.154\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome . ================= FIREFOX =================== . FF - ProfilePath - c:\users\lasse\appdata\roaming\mozilla\firefox\profiles\9vfm78cw.default-1395431209993\ FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll FF - plugin: c:\program files\bankid\npBispBrowser.dll FF - plugin: c:\program files\canon\zoombrowser ex\program\NPCIG.dll FF - plugin: c:\program files\google\update\1.3.22.5\npGoogleUpdate3.dll FF - plugin: c:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll FF - plugin: c:\program files\microsoft silverlight\5.1.30214.0\npctrlui.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll FF - plugin: c:\program files\sony\media go\npMediaGoDetector.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_12_0_0_77.dll . ============= SERVICES / DRIVERS =============== . R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-9-27 214696] R0 SCMNdisP;General NDIS Protocol Driver;c:\windows\system32\drivers\SCMNdisP.sys [2014-2-15 21472] R1 wStLib;wStLib;c:\windows\system32\drivers\wStLib.sys [2014-3-18 52920] R2 MemeoBackgroundService;MemeoBackgroundService;c:\program files\memeo\autobackup\MemeoBackgroundService.exe [2010-7-26 25824] R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2012-8-30 104768] R2 NvNetworkService;NVIDIA Network Service;c:\program files\nvidia corporation\netservice\NvNetworkService.exe [2014-2-19 1593632] R2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe [2014-2-19 15904544] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2014-3-11 411936] R2 Update qualitink;Update qualitink;c:\program files\qualitink\updatequalitink.exe [2013-10-5 348448] R2 Util qualitink;Util qualitink;c:\program files\qualitink\bin\utilqualitink.exe [2013-10-21 348448] R2 WSWNA3100;WSWNA3100;c:\program files\netgear\wna3100\WifiSvc.exe [2014-2-15 303360] R3 BCMH43XX;Broadcom 802.11 USB Network Adapter Driver;c:\windows\system32\drivers\bcmwlhigh6.sys [2014-2-15 1093888] R3 NisSrv;Microsoft Nätverkskontroll;c:\program files\microsoft security client\NisSrv.exe [2013-10-23 280288] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-2-19 34080] R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2013-1-16 215936] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888] S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2014-3-13 108032] S3 paeusbaudio;paeusbaudio;c:\windows\system32\drivers\paeusbaudio.sys [2013-1-16 195448] S3 paeusbaudiodsp;paeusbaudiodsp;c:\windows\system32\drivers\paeusbaudiodsp.sys [2013-1-16 60280] S3 paeusbaudioks;paeusbaudioks;c:\windows\system32\drivers\paeusbaudioks.sys [2013-1-16 42872] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2014-2-7 14848] S3 Sony PC Companion;Sony PC Companion;c:\program files\sony\sony pc companion\PCCService.exe [2013-10-24 155824] S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2014-2-7 49664] S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2014-2-7 27136] S3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;c:\windows\system32\wat\WatAdminSvc.exe [2013-1-18 1343400] . =============== Created Last 30 ================ . 2014-03-21 19:59:20 -------- d-----w- c:\users\lasse\appdata\local\Apps 2014-03-21 19:59:19 -------- d-----w- c:\users\lasse\appdata\local\Deployment 2014-03-21 19:34:50 7969936 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a25824ab-fe48-4de6-8139-1f5ba1ab381b}\mpengine.dll 2014-03-20 13:58:05 765968 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{d8cc0509-8100-4c27-ad97-06f0721bf83e}\gapaengine.dll 2014-03-20 13:57:42 7969936 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll 2014-03-18 17:07:29 52920 ----a-w- c:\windows\system32\drivers\wStLib.sys 2014-03-13 18:46:02 509440 ----a-w- c:\windows\system32\qedit.dll 2014-03-13 18:46:00 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll 2014-03-13 18:46:00 184320 ----a-w- c:\program files\internet explorer\F12Tools.dll 2014-03-13 18:46:00 1389568 ----a-w- c:\program files\internet explorer\MemoryAnalyzer.dll 2014-03-13 18:46:00 108032 ----a-w- c:\windows\system32\ieetwcollector.exe 2014-03-13 18:43:50 185344 ----a-w- c:\windows\system32\wwansvc.dll 2014-03-13 18:43:48 2349056 ----a-w- c:\windows\system32\win32k.sys 2014-03-13 18:42:51 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll 2014-03-13 18:42:49 381440 ----a-w- c:\windows\system32\wer.dll 2014-03-11 18:39:03 599840 ----a-w- c:\windows\system32\nvStreaming.exe 2014-03-11 18:14:39 9690424 ----a-w- c:\windows\system32\nvopencl.dll 2014-03-11 18:14:38 23716640 ----a-w- c:\windows\system32\nvoglv32.dll 2014-03-11 18:14:37 865224 ----a-w- c:\windows\system32\NvIFR.dll 2014-03-11 18:14:37 10523480 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2014-03-11 18:14:36 894296 ----a-w- c:\windows\system32\nvdispgenco3233523.dll 2014-03-11 18:14:36 847136 ----a-w- c:\windows\system32\NvFBC.dll 2014-03-11 18:14:36 14709720 ----a-w- c:\windows\system32\nvd3dum.dll 2014-03-11 18:14:36 1049888 ----a-w- c:\windows\system32\nvdispco3233523.dll 2014-03-11 18:14:35 9728064 ----a-w- c:\windows\system32\nvcuda.dll 2014-03-11 18:14:35 2956632 ----a-w- c:\windows\system32\nvcuvid.dll 2014-03-11 18:14:35 2411976 ----a-w- c:\windows\system32\nvcuvenc.dll 2014-03-11 18:14:33 17559384 ----a-w- c:\windows\system32\nvcompiler.dll 2014-03-10 17:20:12 -------- d-----w- c:\program files\iPod 2014-03-10 17:20:08 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1 2014-03-10 17:20:08 -------- d-----w- c:\program files\iTunes 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll . ==================== Find3M ==================== . 2014-03-21 22:52:18 11149312 ----a-w- c:\program files\common files\lpuninstall.exe 2014-03-11 18:27:25 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2014-03-11 18:27:25 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2014-03-04 14:29:02 53024 ----a-w- c:\windows\system32\OpenCL.dll 2014-03-04 14:29:02 2715264 ----a-w- c:\windows\system32\nvapi.dll 2014-03-04 14:29:02 15783992 ----a-w- c:\windows\system32\nvwgf2um.dll 2014-03-04 12:34:44 4348704 ----a-w- c:\windows\system32\nvcpl.dll 2014-03-04 12:34:44 3044696 ----a-w- c:\windows\system32\nvsvc.dll 2014-03-04 12:34:42 663896 ----a-w- c:\windows\system32\nvvsvc.exe 2014-03-04 12:34:42 62752 ----a-w- c:\windows\system32\nvshext.dll 2014-03-04 12:34:42 2556360 ----a-w- c:\windows\system32\nvsvcr.dll 2014-03-04 12:34:41 375128 ----a-w- c:\windows\system32\nvmctray.dll 2014-03-01 04:11:20 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2014-03-01 04:10:48 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll 2014-03-01 03:52:43 61952 ----a-w- c:\windows\system32\iesetup.dll 2014-03-01 03:38:26 112128 ----a-w- c:\windows\system32\ieUnatt.exe 2014-03-01 03:37:35 553472 ----a-w- c:\windows\system32\jscript9diag.dll 2014-03-01 03:31:30 646144 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2014-03-01 03:14:15 4244480 ----a-w- c:\windows\system32\jscript9.dll 2014-03-01 03:00:08 1964032 ----a-w- c:\windows\system32\inetcpl.cpl 2014-03-01 02:32:16 1820160 ----a-w- c:\windows\system32\wininet.dll 2014-02-08 18:27:20 895264 ----a-w- c:\windows\system32\nvdispgenco3233489.dll 2014-02-08 18:27:20 1049888 ----a-w- c:\windows\system32\nvdispco3233489.dll 2014-02-05 09:31:00 1048152 ----a-w- c:\windows\system32\nvspcap.dll 2014-01-19 07:32:23 231584 ------w- c:\windows\system32\MpSigStub.exe 2014-01-17 15:24:12 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx 2014-01-17 15:24:12 69632 ----a-w- c:\windows\system32\QuickTime.qts 2013-12-27 18:42:24 34080 ----a-w- c:\windows\system32\drivers\nvvad32v.sys 2013-12-27 18:42:16 33056 ----a-w- c:\windows\system32\nvaudcap32v.dll 2013-12-24 23:09:41 1987584 ----a-w- c:\windows\system32\d3d10warp.dll . ============= FINISH: 16:44:32,33 =============== Länk till kommentar Dela på andra webbplatser More sharing options...
Cecilia Postad 23 mars, 2014 Share Postad 23 mars, 2014 Hej! 1. Om möjligt avinstallera följande i Kontrollpanelen: mysearchdial Toolbar pga http://www.systemlookup.com/CLSID/75192-mysearchdialTlbr_dll.html FTdownloader http://www.systemlookup.com/CLSID/78045-FTdownloader_V4_0_bho_dll.html 2. Spara AdwCleaner av Xplode på Skrivbordet: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleanerStäng alla program, inklusive webbläsare.Dubbelklicka på AdwCleaner för att starta programmet.Klicka på Scan-knappen.Vänta tills sökningen är klar.Klicka på Report-knappen.En rapport kommer upp, kopiera innehållet och klistra in i ditt svar.Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner[R0].txt Länk till kommentar Dela på andra webbplatser More sharing options...
pilfinken Postad 24 mars, 2014 Trådskapare Share Postad 24 mars, 2014 Hej, Tack! Jag kunde plocka bort Myserachdial via kontrollpanelen men inte FTdownloader (kan inte hitta den heller om jag gör search i datorn). Har startat om och kört AdwCleaner Scan. Här kommer rapporten: # AdwCleaner v3.022 - Report created 24/03/2014 at 20:57:00 # Updated 13/03/2014 by Xplode # Operating System : Windows 7 Home Premium Service Pack 1 (32 bits) # Username : Lasse - HEMDATOR # Running from : C:\Users\Lasse\Desktop\adwcleaner.exe # Option : Scan ***** [ Services ] ***** ***** [ Files / Folders ] ***** File Found : C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage File Found : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\searchplugins\Mysearchdial.xml File Found : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\user.js File Found : C:\Windows\System32\Tasks\FTdownloader V4.0-codedownloader File Found : C:\Windows\System32\Tasks\FTdownloader V4.0-enabler File Found : C:\Windows\System32\Tasks\FTdownloader V4.0-updater File Found : C:\Windows\Tasks\FTdownloader V4.0-codedownloader.job File Found : C:\Windows\Tasks\FTdownloader V4.0-enabler.job File Found : C:\Windows\Tasks\FTdownloader V4.0-updater.job Folder Found : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} Folder Found : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\Extensions\ffxtlbr@mysearchdial.com Folder Found C:\Program Files\File Type Assistant Folder Found C:\Program Files\FTdownloader V4.0 Folder Found C:\Program Files\FTdownloader V4.0 Folder Found C:\Program Files\FTDownloader.com Folder Found C:\ProgramData\apn Folder Found C:\ProgramData\boost_interprocess Folder Found C:\Users\Ellen\AppData\Local\FileTypeAssistant Folder Found C:\Users\Lasse\AppData\Local\cool_mirage Folder Found C:\Users\Lasse\AppData\Local\FileTypeAssistant Folder Found C:\Users\Lasse\AppData\Roaming\Mysearchdial Folder Found C:\Users\Lotta\AppData\Local\FileTypeAssistant Folder Found C:\Users\Mathilda\AppData\LocalLow\Mysearchdial ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Found : HKCU\Software\1ClickDownload Key Found : HKCU\Software\AppDataLow\Software\Crossrider Key Found : HKCU\Software\AppDataLow\Software\FTdownloader V4.0 Key Found : HKCU\Software\AppDataLow\Software\FTdownloader V4.0 Key Found : HKCU\Software\ilivid Key Found : HKCU\Software\IM Key Found : HKCU\Software\ImInstaller Key Found : HKCU\Software\InstallCore Key Found : HKCU\Software\installedbrowserextensions Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311551174} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3004627E-F8E9-4E8B-909D-316753CBA923} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} Key Found : HKCU\Software\mysearchdial Key Found : HKCU\Software\mysearchdial.com Key Found : HKCU\Software\Softonic Key Found : HKCU\Software\wnlt Key Found : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} Key Found : HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311551174} Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322552274} Key Found : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} Key Found : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0035574.BHO Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0035574.BHO.1 Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0035574.Sandbox Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0035574.Sandbox.1 Key Found : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc Key Found : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc.1 Key Found : HKLM\SOFTWARE\Classes\FTDownloader Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355555574} Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366556674} Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344554474} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0} Key Found : HKLM\Software\FTdownloader V4.0 Key Found : HKLM\Software\FTdownloader V4.0 Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\lgnbhdnimikkoodkogjlcllngimhlapp Key Found : HKLM\Software\InstallCore Key Found : HKLM\Software\InstallIQ Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37230f23-eecb-450e-85ff-22da2a19152d} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a386382e-0559-4a78-8fb3-e07303590ae0} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eb59b107-35ea-4e8e-bb7a-35c18644db46} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\FTdownloader V4.0-codedownloader Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\FTdownloader V4.0-enabler Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\FTdownloader V4.0-updater Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29321551-D307-4F66-AAE9-EE3F871CC3D6} Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B5F7270-3179-418C-AE91-2F6B861A5D4B} Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F654849-04AE-48B8-96CD-EF6655A8F076} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551174} Key Found : HKLM\Software\Updater By Sweetpacks Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{8E9E3331-D360-4f87-8803-52DE43566502}] ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.16521 Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [start Page] - hxxp://mysearch.sweetpacks.com/?src=10&st=12&crg=3.5000006.10068&did=10703&barid=226928100795808485332201655090867698971 Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://start.mysearchdial.com/?f=2&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H1B1QyCyE&cr=1226223710&ir= -\\ Mozilla Firefox v28.0 (en-US) [ File : C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\9vfm78cw.default-1395431209993\prefs.js ] [ File : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\prefs.js ] Line Found : user_pref("browser.search.order.1", "Mysearchdial"); Line Found : user_pref("extensions.mysearchdial.aflt", "irmsd64"); Line Found : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); Line Found : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H1B1QyCyE"); Line Found : user_pref("extensions.mysearchdial.cntry", "SE"); Line Found : user_pref("extensions.mysearchdial.cr", "1226223710"); Line Found : user_pref("extensions.mysearchdial.dfltLng", ""); Line Found : user_pref("extensions.mysearchdial.dfltSrch", true); Line Found : user_pref("extensions.mysearchdial.dnsErr", true); Line Found : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...] Line Found : user_pref("extensions.mysearchdial.excTlbr", false); Line Found : user_pref("extensions.mysearchdial.hdrMd5", "3C3959CA7A90A0A7171C8270260E2EA6"); Line Found : user_pref("extensions.mysearchdial.hmpg", true); Line Found : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H1B[...] Line Found : user_pref("extensions.mysearchdial.id", "204E7FD9E14528CA"); Line Found : user_pref("extensions.mysearchdial.instlDay", "15886"); Line Found : user_pref("extensions.mysearchdial.instlRef", ""); Line Found : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H1B1Q[...] Line Found : user_pref("extensions.mysearchdial.lastVrsnTs", "12:43:36"); Line Found : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H[...] Line Found : user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"37\",\"lastVrsn\":\"37\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\":\"0\"}"); Line Found : user_pref("extensions.mysearchdial.prdct", "mysearchdial"); Line Found : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); Line Found : user_pref("extensions.mysearchdial.sg", "none"); Line Found : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); Line Found : user_pref("extensions.mysearchdial.tlbrId", "base"); Line Found : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C[...] Line Found : user_pref("extensions.mysearchdial.vrsn", ""); Line Found : user_pref("extensions.mysearchdial.vrsni", ""); Line Found : user_pref("extensions.mysearchdial_i.hmpg", true); Line Found : user_pref("extensions.mysearchdial_i.newTab", false); Line Found : user_pref("extensions.mysearchdial_i.smplGrp", "none"); Line Found : user_pref("extensions.mysearchdial_i.vrsnTs", "12:43:36"); [ File : C:\Users\Ellen\AppData\Roaming\Mozilla\Firefox\Profiles\9brimv8y.default\prefs.js ] [ File : C:\Users\Mathilda\AppData\Roaming\Mozilla\Firefox\Profiles\m9fe85yh.default\prefs.js ] -\\ Google Chrome v33.0.1750.154 [ File : C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [11135 octets] - [24/03/2014 20:57:00] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [11196 octets] ########## Länk till kommentar Dela på andra webbplatser More sharing options...
Cecilia Postad 24 mars, 2014 Share Postad 24 mars, 2014 Hej! 1. Stäng alla program, inklusive webbläsare. Dubbelklicka på AdwCleaner för att starta programmet. Klicka på Scan-knappen. Vänta tills sökningen är klar. Klicka på Clean-knappen. Tryck på OK. Tryck på OK fler gånger om det kommer upp meddelanden. Datorn kommer att startas om. En rapport kommer upp, kopiera innehållet och klistra in i ditt svar. Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner[s0].txt 2. Kör DDS igen och klistra in den nya DDS.txt så får vi se om det syns något mer där. 3. Skanna datorn online på http://www.eset.com/onlinescan/ För att inte skannern ska ta för lång tid på sig stäng av ditt antivirusprogram under tiden. Avbocka alternativet Remove found threats Bocka för Scan Archives Klicka på Advanced Settings Bocka för: Scan for potentially unwanted applications Scan for potentially unsafe applications Enable Anti-Stealth Technology Klicka på Scan När skanningen är klar klicka på List of threats found, följt av Export to a text file. Spara till en fil på skrivbordet, öppna filen, kopiera resultatet och klistra sedan in det i ditt svar. Länk till kommentar Dela på andra webbplatser More sharing options...
pilfinken Postad 27 mars, 2014 Trådskapare Share Postad 27 mars, 2014 Hej! Då har vi lite loggar här: AdwCleaner # AdwCleaner v3.022 - Report created 25/03/2014 at 22:26:24 # Updated 13/03/2014 by Xplode # Operating System : Windows 7 Home Premium Service Pack 1 (32 bits) # Username : Lasse - HEMDATOR # Running from : C:\Users\Lasse\Desktop\adwcleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\apn Folder Deleted : C:\ProgramData\boost_interprocess Folder Deleted : C:\Program Files\File Type Assistant Folder Deleted : C:\Program Files\FTdownloader V4.0 Folder Deleted : C:\Program Files\FTDownloader.com Folder Deleted : C:\Users\Lasse\AppData\Local\cool_mirage Folder Deleted : C:\Users\Lasse\AppData\Local\FileTypeAssistant Folder Deleted : C:\Users\Lasse\AppData\Roaming\Mysearchdial Folder Deleted : C:\Users\Lotta\AppData\Local\FileTypeAssistant Folder Deleted : C:\Users\Ellen\AppData\Local\FileTypeAssistant Folder Deleted : C:\Users\Mathilda\AppData\LocalLow\Mysearchdial Folder Deleted : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8} Folder Deleted : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\Extensions\ffxtlbr@mysearchdial.com File Deleted : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\searchplugins\Mysearchdial.xml File Deleted : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\user.js File Deleted : C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage File Deleted : C:\Windows\Tasks\FTdownloader V4.0-codedownloader.job File Deleted : C:\Windows\System32\Tasks\FTdownloader V4.0-codedownloader File Deleted : C:\Windows\Tasks\FTdownloader V4.0-enabler.job File Deleted : C:\Windows\System32\Tasks\FTdownloader V4.0-enabler File Deleted : C:\Windows\Tasks\FTdownloader V4.0-updater.job File Deleted : C:\Windows\System32\Tasks\FTdownloader V4.0-updater ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{8E9E3331-D360-4f87-8803-52DE43566502}] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lgnbhdnimikkoodkogjlcllngimhlapp [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4B5F7270-3179-418C-AE91-2F6B861A5D4B} [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B5F7270-3179-418C-AE91-2F6B861A5D4B} [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{29321551-D307-4F66-AAE9-EE3F871CC3D6} [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29321551-D307-4F66-AAE9-EE3F871CC3D6} [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7F654849-04AE-48B8-96CD-EF6655A8F076} [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F654849-04AE-48B8-96CD-EF6655A8F076} Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE Key Deleted : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc Key Deleted : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc.1 Key Deleted : HKLM\SOFTWARE\Classes\FTDownloader Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0035574.BHO Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0035574.BHO.1 Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0035574.Sandbox Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0035574.Sandbox.1 Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311551174} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322552274} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355555574} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366556674} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344554474} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551174} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3004627E-F8E9-4E8B-909D-316753CBA923} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311551174} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551174} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37230f23-eecb-450e-85ff-22da2a19152d} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a386382e-0559-4a78-8fb3-e07303590ae0} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eb59b107-35ea-4e8e-bb7a-35c18644db46} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Key Deleted : HKCU\Software\1ClickDownload Key Deleted : HKCU\Software\ilivid Key Deleted : HKCU\Software\IM Key Deleted : HKCU\Software\ImInstaller Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\installedbrowserextensions Key Deleted : HKCU\Software\mysearchdial Key Deleted : HKCU\Software\mysearchdial.com Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\wnlt Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider Key Deleted : HKCU\Software\AppDataLow\Software\FTdownloader V4.0 Key Deleted : HKLM\Software\FTdownloader V4.0 Key Deleted : HKLM\Software\InstallCore Key Deleted : HKLM\Software\InstallIQ Key Deleted : HKLM\Software\Updater By Sweetpacks ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.16521 Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [start Page] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] -\\ Mozilla Firefox v28.0 (en-US) [ File : C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\9vfm78cw.default-1395431209993\prefs.js ] [ File : C:\Users\Lotta\AppData\Roaming\Mozilla\Firefox\Profiles\02w4edl3.default\prefs.js ] Line Deleted : user_pref("browser.search.order.1", "Mysearchdial"); Line Deleted : user_pref("extensions.mysearchdial.aflt", "irmsd64"); Line Deleted : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); Line Deleted : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H1B1QyCyE"); Line Deleted : user_pref("extensions.mysearchdial.cntry", "SE"); Line Deleted : user_pref("extensions.mysearchdial.cr", "1226223710"); Line Deleted : user_pref("extensions.mysearchdial.dfltLng", ""); Line Deleted : user_pref("extensions.mysearchdial.dfltSrch", true); Line Deleted : user_pref("extensions.mysearchdial.dnsErr", true); Line Deleted : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...] Line Deleted : user_pref("extensions.mysearchdial.excTlbr", false); Line Deleted : user_pref("extensions.mysearchdial.hdrMd5", "3C3959CA7A90A0A7171C8270260E2EA6"); Line Deleted : user_pref("extensions.mysearchdial.hmpg", true); Line Deleted : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H1B[...] Line Deleted : user_pref("extensions.mysearchdial.id", "204E7FD9E14528CA"); Line Deleted : user_pref("extensions.mysearchdial.instlDay", "15886"); Line Deleted : user_pref("extensions.mysearchdial.instlRef", ""); Line Deleted : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H1B1Q[...] Line Deleted : user_pref("extensions.mysearchdial.lastVrsnTs", "12:43:36"); Line Deleted : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1H[...] Line Deleted : user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"37\",\"lastVrsn\":\"37\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\":\"0\"}"); Line Deleted : user_pref("extensions.mysearchdial.prdct", "mysearchdial"); Line Deleted : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); Line Deleted : user_pref("extensions.mysearchdial.sg", "none"); Line Deleted : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); Line Deleted : user_pref("extensions.mysearchdial.tlbrId", "base"); Line Deleted : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=irmsd64&cd=2XzuyEtN2Y1L1QzutBtDyE0EyB0F0Dzy0EtCyEyDtBzz0C0AtN0D0Tzu0SyDyEyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C[...] Line Deleted : user_pref("extensions.mysearchdial.vrsn", ""); Line Deleted : user_pref("extensions.mysearchdial.vrsni", ""); Line Deleted : user_pref("extensions.mysearchdial_i.hmpg", true); Line Deleted : user_pref("extensions.mysearchdial_i.newTab", false); Line Deleted : user_pref("extensions.mysearchdial_i.smplGrp", "none"); Line Deleted : user_pref("extensions.mysearchdial_i.vrsnTs", "12:43:36"); [ File : C:\Users\Ellen\AppData\Roaming\Mozilla\Firefox\Profiles\9brimv8y.default\prefs.js ] [ File : C:\Users\Mathilda\AppData\Roaming\Mozilla\Firefox\Profiles\m9fe85yh.default\prefs.js ] -\\ Google Chrome v33.0.1750.154 [ File : C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [11277 octets] - [24/03/2014 20:57:00] AdwCleaner[R1].txt - [11338 octets] - [25/03/2014 22:24:19] AdwCleaner[s0].txt - [11103 octets] - [25/03/2014 22:26:24] ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [11164 octets] ########## DDS: DDS (Ver_2012-11-20.01) - NTFS_x86 Internet Explorer: 11.0.9600.16521 BrowserJavaVersion: 10.51.2 Run by Lasse at 22:32:38 on 2014-03-25 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.46.1053.18.2047.1178 [GMT 1:00] . AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2} . ============== Running Processes ================ . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\nvvsvc.exe C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe c:\Program Files\Microsoft Security Client\MsMpEng.exe C:\Windows\system32\WLANExt.exe C:\Windows\system32\conhost.exe C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe C:\Windows\system32\nvvsvc.exe C:\Windows\System32\spoolsv.exe C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe C:\Program Files\qualitink\updatequalitink.exe C:\Program Files\qualitink\bin\utilqualitink.exe C:\Program Files\NETGEAR\WNA3100\WifiSvc.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\System32\WUDFHost.exe c:\Program Files\Microsoft Security Client\NisSrv.exe C:\Windows\system32\taskhost.exe C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\conhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe C:\Program Files\NETGEAR\WNA3100\WNA3100.exe C:\Windows\system32\taskeng.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\conhost.exe C:\Program Files\Memeo\AutoBackup\InstantBackup.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\Sony\Sony PC Companion\PCCService.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\sppsvc.exe C:\Windows\system32\conhost.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\System32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k LocalServicePeerNet . ============== Pseudo HJT Report =============== . uStart Page = hxxps://www.google.se/ mStart Page = hxxp://www.google.com BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll BHO: LastPass Vault: {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - c:\program files\lastpass\LPToolbar.dll BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - c:\program files\lastpass\LPToolbar.dll uRun: [sony PC Companion] "c:\program files\sony\sony pc companion\PCCompanion.exe" /Background mRun: [bCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe" mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey mRun: [WinampAgent] "c:\program files\winamp\winampa.exe" mRun: [Memeo Instant Backup] c:\program files\memeo\autobackup\MemeoLauncher2.exe --silent --no_ui mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop elements 6.0\apdproxy.exe" mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [NvBackend] "c:\program files\nvidia corporation\update core\NvBackend.exe" mRun: [shadowPlay] c:\windows\system32\rundll32.exe c:\windows\system32\nvspcap.dll,ShadowPlayOnSystemStart mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\instal~2.lnk - c:\program files\common files\lpuninstall.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\instal~1.lnk - c:\program files\common files\lpuninstall.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\netgea~1.lnk - c:\program files\netgear\wna3100\WNA3100.exe mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: E&xportera till Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000 IE: LastPass - c:\users\lasse\appdata\locallow\lastpass\context.html?cmd=lastpass IE: LastPass-formulärifyllning - c:\users\lasse\appdata\locallow\lastpass\context.html?cmd=fillforms IE: Ski&cka till OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - c:\program files\lastpass\LPToolbar.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab TCP: NameServer = 192.168.1.1 TCP: Interfaces\{2C030099-DA7B-4F09-A6E6-2CA6F4D9917B} : DHCPNameServer = 192.168.1.1 TCP: Interfaces\{864F3368-8913-4841-B428-1D04315ECC2D} : DHCPNameServer = 192.168.1.1 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL SSODL: WebCheck - <orphaned> SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.154\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome . ================= FIREFOX =================== . FF - ProfilePath - c:\users\lasse\appdata\roaming\mozilla\firefox\profiles\9vfm78cw.default-1395431209993\ FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll FF - plugin: c:\program files\bankid\npBispBrowser.dll FF - plugin: c:\program files\canon\zoombrowser ex\program\NPCIG.dll FF - plugin: c:\program files\google\update\1.3.22.5\npGoogleUpdate3.dll FF - plugin: c:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll FF - plugin: c:\program files\microsoft silverlight\5.1.30214.0\npctrlui.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll FF - plugin: c:\program files\sony\media go\npMediaGoDetector.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_12_0_0_77.dll . ============= SERVICES / DRIVERS =============== . R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-9-27 214696] R0 SCMNdisP;General NDIS Protocol Driver;c:\windows\system32\drivers\SCMNdisP.sys [2014-2-15 21472] R1 wStLib;wStLib;c:\windows\system32\drivers\wStLib.sys [2014-3-18 52920] R2 MemeoBackgroundService;MemeoBackgroundService;c:\program files\memeo\autobackup\MemeoBackgroundService.exe [2010-7-26 25824] R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2012-8-30 104768] R2 NvNetworkService;NVIDIA Network Service;c:\program files\nvidia corporation\netservice\NvNetworkService.exe [2014-2-19 1593632] R2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe [2014-2-19 15904544] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2014-3-11 411936] R2 Update qualitink;Update qualitink;c:\program files\qualitink\updatequalitink.exe [2013-10-5 348448] R2 Util qualitink;Util qualitink;c:\program files\qualitink\bin\utilqualitink.exe [2013-10-21 348448] R2 WSWNA3100;WSWNA3100;c:\program files\netgear\wna3100\WifiSvc.exe [2014-2-15 303360] R3 BCMH43XX;Broadcom 802.11 USB Network Adapter Driver;c:\windows\system32\drivers\bcmwlhigh6.sys [2014-2-15 1093888] R3 NisSrv;Microsoft Nätverkskontroll;c:\program files\microsoft security client\NisSrv.exe [2013-10-23 280288] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-2-19 34080] R3 Sony PC Companion;Sony PC Companion;c:\program files\sony\sony pc companion\PCCService.exe [2013-10-24 155824] R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2013-1-16 215936] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888] S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2014-3-13 108032] S3 paeusbaudio;paeusbaudio;c:\windows\system32\drivers\paeusbaudio.sys [2013-1-16 195448] S3 paeusbaudiodsp;paeusbaudiodsp;c:\windows\system32\drivers\paeusbaudiodsp.sys [2013-1-16 60280] S3 paeusbaudioks;paeusbaudioks;c:\windows\system32\drivers\paeusbaudioks.sys [2013-1-16 42872] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2014-2-7 14848] S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2014-2-7 49664] S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2014-2-7 27136] S3 WatAdminSvc;Aktiveringsteknologier för Windows-tjänst;c:\windows\system32\wat\WatAdminSvc.exe [2013-1-18 1343400] . =============== Created Last 30 ================ . 2014-03-25 21:24:20 765968 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{2a1233f8-f14d-4fc7-86f1-66ae0989ff67}\gapaengine.dll 2014-03-25 21:22:59 7969936 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{e3acd3fb-597e-4aaf-918f-66e6d5de62f3}\mpengine.dll 2014-03-24 19:56:37 -------- d-----w- C:\AdwCleaner 2014-03-24 19:28:04 7969936 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll 2014-03-21 19:59:20 -------- d-----w- c:\users\lasse\appdata\local\Apps 2014-03-21 19:59:19 -------- d-----w- c:\users\lasse\appdata\local\Deployment 2014-03-18 17:07:29 52920 ----a-w- c:\windows\system32\drivers\wStLib.sys 2014-03-13 18:46:02 509440 ----a-w- c:\windows\system32\qedit.dll 2014-03-13 18:46:00 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll 2014-03-13 18:46:00 184320 ----a-w- c:\program files\internet explorer\F12Tools.dll 2014-03-13 18:46:00 1389568 ----a-w- c:\program files\internet explorer\MemoryAnalyzer.dll 2014-03-13 18:46:00 108032 ----a-w- c:\windows\system32\ieetwcollector.exe 2014-03-13 18:43:50 185344 ----a-w- c:\windows\system32\wwansvc.dll 2014-03-13 18:43:48 2349056 ----a-w- c:\windows\system32\win32k.sys 2014-03-13 18:42:51 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll 2014-03-13 18:42:49 381440 ----a-w- c:\windows\system32\wer.dll 2014-03-11 18:39:03 599840 ----a-w- c:\windows\system32\nvStreaming.exe 2014-03-11 18:14:39 9690424 ----a-w- c:\windows\system32\nvopencl.dll 2014-03-11 18:14:38 23716640 ----a-w- c:\windows\system32\nvoglv32.dll 2014-03-11 18:14:37 865224 ----a-w- c:\windows\system32\NvIFR.dll 2014-03-11 18:14:37 10523480 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2014-03-11 18:14:36 894296 ----a-w- c:\windows\system32\nvdispgenco3233523.dll 2014-03-11 18:14:36 847136 ----a-w- c:\windows\system32\NvFBC.dll 2014-03-11 18:14:36 14709720 ----a-w- c:\windows\system32\nvd3dum.dll 2014-03-11 18:14:36 1049888 ----a-w- c:\windows\system32\nvdispco3233523.dll 2014-03-11 18:14:35 9728064 ----a-w- c:\windows\system32\nvcuda.dll 2014-03-11 18:14:35 2956632 ----a-w- c:\windows\system32\nvcuvid.dll 2014-03-11 18:14:35 2411976 ----a-w- c:\windows\system32\nvcuvenc.dll 2014-03-11 18:14:33 17559384 ----a-w- c:\windows\system32\nvcompiler.dll 2014-03-10 17:20:12 -------- d-----w- c:\program files\iPod 2014-03-10 17:20:08 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1 2014-03-10 17:20:08 -------- d-----w- c:\program files\iTunes 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll 2014-03-10 17:12:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll . ==================== Find3M ==================== . 2014-03-21 22:52:18 11149312 ----a-w- c:\program files\common files\lpuninstall.exe 2014-03-11 18:27:25 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2014-03-11 18:27:25 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2014-03-04 14:29:02 53024 ----a-w- c:\windows\system32\OpenCL.dll 2014-03-04 14:29:02 2715264 ----a-w- c:\windows\system32\nvapi.dll 2014-03-04 14:29:02 15783992 ----a-w- c:\windows\system32\nvwgf2um.dll 2014-03-04 12:34:44 4348704 ----a-w- c:\windows\system32\nvcpl.dll 2014-03-04 12:34:44 3044696 ----a-w- c:\windows\system32\nvsvc.dll 2014-03-04 12:34:42 663896 ----a-w- c:\windows\system32\nvvsvc.exe 2014-03-04 12:34:42 62752 ----a-w- c:\windows\system32\nvshext.dll 2014-03-04 12:34:42 2556360 ----a-w- c:\windows\system32\nvsvcr.dll 2014-03-04 12:34:41 375128 ----a-w- c:\windows\system32\nvmctray.dll 2014-03-01 04:11:20 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2014-03-01 04:10:48 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll 2014-03-01 03:52:43 61952 ----a-w- c:\windows\system32\iesetup.dll 2014-03-01 03:38:26 112128 ----a-w- c:\windows\system32\ieUnatt.exe 2014-03-01 03:37:35 553472 ----a-w- c:\windows\system32\jscript9diag.dll 2014-03-01 03:31:30 646144 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2014-03-01 03:14:15 4244480 ----a-w- c:\windows\system32\jscript9.dll 2014-03-01 03:00:08 1964032 ----a-w- c:\windows\system32\inetcpl.cpl 2014-03-01 02:32:16 1820160 ----a-w- c:\windows\system32\wininet.dll 2014-02-08 18:27:20 895264 ----a-w- c:\windows\system32\nvdispgenco3233489.dll 2014-02-08 18:27:20 1049888 ----a-w- c:\windows\system32\nvdispco3233489.dll 2014-02-05 09:31:00 1048152 ----a-w- c:\windows\system32\nvspcap.dll 2014-01-19 07:32:23 231584 ------w- c:\windows\system32\MpSigStub.exe 2014-01-17 15:24:12 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx 2014-01-17 15:24:12 69632 ----a-w- c:\windows\system32\QuickTime.qts 2013-12-27 18:42:24 34080 ----a-w- c:\windows\system32\drivers\nvvad32v.sys 2013-12-27 18:42:16 33056 ----a-w- c:\windows\system32\nvaudcap32v.dll . ============= FINISH: 22:34:21,09 =============== eset online scanner: C:\AdwCleaner\Quarantine\C\Program Files\File Type Assistant\ftacfg.exe.vir Win32/FileTypeAssistant.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\File Type Assistant\TSASetup.exe.vir Win32/FileTypeAssistant.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\File Type Assistant\tsassist.exe.vir Win32/FileTypeAssistant.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\File Type Assistant\temp\~tmp.exe.vir Win32/FileTypeAssistant.A potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\FTdownloader V4.0\FTdownloader V4.0-bg.exe.vir Win32/Toolbar.CrossRider.P potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\FTdownloader V4.0\FTdownloader V4.0-bho.dll.vir Win32/Toolbar.CrossRider.O potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\FTdownloader V4.0\FTdownloader V4.0-buttonutil.dll.vir Win32/Toolbar.CrossRider.M potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\FTdownloader V4.0\FTdownloader V4.0-buttonutil.exe.vir Win32/Toolbar.CrossRider.N potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\FTdownloader V4.0\FTdownloader V4.0-enabler.exe.vir a variant of Win32/Toolbar.CrossRider.J potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\FTdownloader V4.0\FTdownloader V4.0-helper.exe.vir Win32/Toolbar.CrossRider.L potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\FTdownloader V4.0\FTdownloader V4.0-updater.exe.vir a variant of Win32/Toolbar.CrossRider.K potentially unwanted application C:\AdwCleaner\Quarantine\C\Program Files\FTDownloader.com\FTDownloaderIE.exe.vir Win32/Packed.ScrambleWrapper.G potentially unwanted application C:\AdwCleaner\Quarantine\C\ProgramData\apn\APN-Stub\W3IV6-G\APNIC.7z.vir Win32/Bundled.Toolbar.Ask.B potentially unsafe application C:\AdwCleaner\Quarantine\C\ProgramData\apn\APN-Stub\W3IV6-G\APNIC.dll.vir Win32/Bundled.Toolbar.Ask.B potentially unsafe application C:\Program Files\qualitink\qualitinkUninstall.exe Win32/BrowseFox.C potentially unwanted application C:\Program Files\qualitink\updatequalitink.exe a variant of Win32/BrowseFox.H potentially unwanted application C:\Program Files\qualitink\bin\FilterApp_C.exe Win32/BrowseFox.J potentially unwanted application C:\Program Files\qualitink\bin\utilqualitink.exe a variant of Win32/BrowseFox.H potentially unwanted application C:\Program Files\qualitink\bin\XTLS.dll Win32/BrowseFox.K potentially unwanted application C:\Program Files\qualitink\bin\XTLSApp.dll Win32/BrowseFox.I potentially unwanted application C:\Program Files\qualitink\bin\XTLSApp.exe Win32/BrowseFox.I potentially unwanted application C:\Program Files\qualitink\bin\plugins\qualitink.FFUpdate.dll a variant of MSIL/BrowseFox.E potentially unwanted application C:\Program Files\qualitink\bin\plugins\qualitink.GCUpdate.dll a variant of MSIL/BrowseFox.E potentially unwanted application C:\Program Files\Sweetpacks Removal Tool\SweetpacksRemovalTool.exe a variant of Win32/SecurityStronghold.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2MF0M047\50onred_ads_only_no_fb_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2MF0M047\arcadi2_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2MF0M047\cortica_rollover_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2MF0M047\coupish_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2MF0M047\ibario_pops_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2MF0M047\monetizationLoader[1].js JS/Toolbar.Crossrider.B potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2MF0M047\revizer_ws_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2MF0M047\superfish_m[1].js JS/Toolbar.Crossrider.B potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLWQ5V2\arcadi3_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLWQ5V2\cortica_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLWQ5V2\coupons_intext_ads_5_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLWQ5V2\dealply_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLWQ5V2\getdeal_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLWQ5V2\luck_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3MLWQ5V2\similar_web_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MRODB73I\ads_only_5_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MRODB73I\icm_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MRODB73I\revizer_p_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MRODB73I\superfish_no_coupons_m[1].js JS/Toolbar.Crossrider.B potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MRODB73I\superfish_pricora_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MRODB73I\widdit_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W72ADYO8\corticas_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W72ADYO8\corticas_ru_m[1].js JS/Toolbar.Crossrider.B potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W72ADYO8\intext_5_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W72ADYO8\intext_adv_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W72ADYO8\intext_fa_m[1].js JS/Toolbar.Crossrider.B potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W72ADYO8\jollywallet_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W72ADYO8\superfish_no_search_no_coupons_m[1].js JS/Toolbar.Crossrider.A potentially unwanted application C:\Users\Lasse\AppData\Local\Temp\Installer.exe a variant of Win32/Toolbar.Linkury.E potentially unwanted application C:\Users\Lasse\AppData\Roaming\1O1L1I1PtF1F1C1N\Firefox Free Download Packages\uninstaller.exe Win32/InstallCore.AZ potentially unwanted application C:\Users\Lasse\Downloads\FinalMediaPlayer2012Setup.exe a variant of Win32/InstallIQ.A potentially unwanted application C:\Users\Lasse\Downloads\iLividSetup-r390-n-bf(1).exe Win32/Toolbar.SearchSuite potentially unwanted application C:\Users\Lasse\Downloads\iLividSetup-r390-n-bf.exe Win32/Toolbar.SearchSuite potentially unwanted application C:\Users\Lasse\Downloads\im_yours_instrumental_300.exe Win32/AdWare.1ClickDownload.AR application C:\Users\Lasse\Downloads\musicnotesSuite.exe Win32/OpenCandy potentially unsafe application C:\Users\Lasse\Downloads\SoftonicDownloader_for_vlc-media-player.exe Win32/SoftonicDownloader.E potentially unwanted application C:\Users\Lasse\Downloads\SweetpacksRemovalTool.exe a variant of Win32/SecurityStronghold.A potentially unwanted application C:\Users\Lasse\Downloads\winamp563_full_emusic-7plus_sv-se.exe Win32/OpenCandy potentially unsafe application K:\Lasse_Backup\2013-06-02_20-19-06\Memeo\2013-06-02_20-19-06\C_\Users\Lasse\Downloads\FinalMediaPlayer2012Setup.exe a variant of Win32/InstallIQ.A potentially unwanted application K:\Lasse_Backup\2013-06-02_20-19-06\Memeo\2013-06-02_20-19-06\C_\Users\Lasse\Downloads\iLividSetup-r390-n-bf(1).exe Win32/Toolbar.SearchSuite potentially unwanted application K:\Lasse_Backup\2013-06-02_20-19-06\Memeo\2013-06-02_20-19-06\C_\Users\Lasse\Downloads\iLividSetup-r390-n-bf.exe Win32/Toolbar.SearchSuite potentially unwanted application K:\Lasse_Backup\2013-06-02_20-19-06\Memeo\2013-06-02_20-19-06\C_\Users\Lasse\Downloads\im_yours_instrumental_300.exe Win32/AdWare.1ClickDownload.AR application K:\Lasse_Backup\2013-06-02_20-19-06\Memeo\2013-06-02_20-19-06\C_\Users\Lasse\Downloads\musicnotesSuite.exe Win32/OpenCandy potentially unsafe application K:\Lasse_Backup\2013-06-02_20-19-06\Memeo\2013-06-02_20-19-06\C_\Users\Lasse\Downloads\SoftonicDownloader_for_vlc-media-player.exe Win32/SoftonicDownloader.E potentially unwanted application K:\Lasse_Backup\2013-06-02_20-19-06\Memeo\2013-06-02_20-19-06\C_\Users\Lasse\Downloads\SweetpacksRemovalTool.exe a variant of Win32/SecurityStronghold.A potentially unwanted application K:\Lasse_Backup\2013-06-02_20-19-06\Memeo\2013-06-02_20-19-06\C_\Users\Lasse\Downloads\winamp563_full_emusic-7plus_sv-se.exe Win32/OpenCandy potentially unsafe application K:\Lasse_Backup\Memeo\2013-02-16_12-37-02\C_\Users\Lasse\Downloads\FinalMediaPlayer2012Setup.exe a variant of Win32/InstallIQ.A potentially unwanted application K:\Lasse_Backup\Memeo\2013-02-16_12-37-02\C_\Users\Lasse\Downloads\iLividSetup-r390-n-bf(1).exe Win32/Toolbar.SearchSuite potentially unwanted application K:\Lasse_Backup\Memeo\2013-02-16_12-37-02\C_\Users\Lasse\Downloads\iLividSetup-r390-n-bf.exe Win32/Toolbar.SearchSuite potentially unwanted application K:\Lasse_Backup\Memeo\2013-02-16_12-37-02\C_\Users\Lasse\Downloads\musicnotesSuite.exe Win32/OpenCandy potentially unsafe application K:\Lasse_Backup\Memeo\2013-02-16_12-37-02\C_\Users\Lasse\Downloads\SoftonicDownloader_for_vlc-media-player.exe Win32/SoftonicDownloader.E potentially unwanted application K:\Lasse_Backup\Memeo\2013-02-16_12-37-02\C_\Users\Lasse\Downloads\winamp563_full_emusic-7plus_sv-se.exe Win32/OpenCandy potentially unsafe application K:\Lasse_Säkerhetskopiera\2012-04-10_21-38-36\Memeo\2012-04-10_21-38-36\C_\Documents and Settings\Lasse\Hämtade filer\musicnotesSuite.exe Win32/OpenCandy potentially unsafe application Jag har inte tryckt Finish på eset online scanner än... Länk till kommentar Dela på andra webbplatser More sharing options...
Cecilia Postad 27 mars, 2014 Share Postad 27 mars, 2014 Jag har inte tryckt Finish på eset online scanner än.Förhoppningsvis har du följt mina anvisningar och gjorde så här:Avbocka alternativet Remove found threats. Och då händer inget när du trycker på Finish. 1. Finns det något "qualitink" som går att avinstallera? I så fall gör det. 2. C:\Users\Lasse\Downloads\FinalMediaPlayer2012Setup.exe a variant of Win32/InstallIQ.A potentially unwanted application C:\Users\Lasse\Downloads\iLividSetup-r390-n-bf(1).exe Win32/Toolbar.SearchSuite potentially unwanted application C:\Users\Lasse\Downloads\iLividSetup-r390-n-bf.exe Win32/Toolbar.SearchSuite potentially unwanted application C:\Users\Lasse\Downloads\im_yours_instrumental_300.exe Win32/AdWare.1ClickDownload.AR application C:\Users\Lasse\Downloads\musicnotesSuite.exe Win32/OpenCandy potentially unsafe application C:\Users\Lasse\Downloads\SoftonicDownloader_for_vlc-media-player.exe Win32/SoftonicDownloader.E potentially unwanted application C:\Users\Lasse\Downloads\SweetpacksRemovalTool.exe a variant of Win32/SecurityStronghold.A potentially unwanted application C:\Users\Lasse\Downloads\winamp563_full_emusic-7plus_sv-se.exe Win32/OpenCandy potentially unsafe application Ovanstående installationsfiler ligger i mappen "Hämtade filer". När du installerar programmen kommer de att vilja installera onödiga/olämpliga tillägg. Avgör själv om du vill ta bort dem. 3. Starta Anteckningar. Kopiera alla rader i rutan: R2 Update qualitink;Update qualitink;c:\program files\qualitink\updatequalitink.exe [2013-10-5 348448] R2 Util qualitink;Util qualitink;c:\program files\qualitink\bin\utilqualitink.exe [2013-10-21 348448] C:\Program Files\qualitink och klistra in i Anteckningar. Kontrollera att inga filer har delats upp på två rader.Spara filen på skrivbordet med namnet fixlist.txt. Starta FRST som finns på skrivbordet. Klicka på knappen Fix. Vänta tills programmet är klart. Programmet skapar en logg Fixlog.txt på skrivbordet. Klistra in innehållet i den i ditt svar. 4. Hur fungerar webbläsarna nu? Länk till kommentar Dela på andra webbplatser More sharing options...
pilfinken Postad 27 mars, 2014 Trådskapare Share Postad 27 mars, 2014 Hej! Stort tack för hjälpen hitills! 1. OK- Avinstallerat 2. OK- Rensat 3. Not OK- skapat txt-filen men kan inte hitta FRST på skivbordet... 4. Jag har inga annonser som dyker upp, i alla fall inte i Chrome som jag kör för tillfället! Ska pröva de andra straxt! :-). Länk till kommentar Dela på andra webbplatser More sharing options...
Cecilia Postad 27 mars, 2014 Share Postad 27 mars, 2014 Förlåt Ladda ner Farbar Recovery Scan Tool (FRST) och spara på skrivbordet. För 64-bitars Windows: http://download.bleepingcomputer.com/farbar/FRST64.exe För 32-bitars Windows: http://download.bleepingcomputer.com/farbar/FRST.exe Länk till kommentar Dela på andra webbplatser More sharing options...
pilfinken Postad 27 mars, 2014 Trådskapare Share Postad 27 mars, 2014 Hej! Inga problem :-) Så här blev fixlog.txt Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01 Ran by Lasse at 2014-03-27 18:36:07 Run:1 Running from C:\Users\Lasse\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** R2 Update qualitink;Update qualitink;c:\program files\qualitink\updatequalitink.exe [2013-10-5 348448] R2 Util qualitink;Util qualitink;c:\program files\qualitink\bin\utilqualitink.exe [2013-10-21 348448] C:\Program Files\qualitink ***************** Update qualitink => Service not found. Util qualitink => Service not found. "C:\Program Files\qualitink" => File/Directory not found. ==== End of Fixlog ==== Länk till kommentar Dela på andra webbplatser More sharing options...
Cecilia Postad 28 mars, 2014 Share Postad 28 mars, 2014 Bra att avinstallationen tog bort allt. Nu återstår bara avinstallera specialprogrammen: 1. Stäng alla program, inklusive webbläsare. Dubbelklicka på AdwCleaner för att starta programmet. Klicka på Uninstall-knappen. 2. Ladda ner avinstallationsprogrammet OTC till Skrivbordet: http://oldtimer.geekstogo.com/OTC.exe Dubbelklicka på filen för att starta programmet. Tryck på knappen CleanUp! och DDS m.fl. rensningsprogram kommer att avinstalleras efter en omstart av datorn. Ta bort eventuella loggar. 3. Förbättra skyddet i datorn, se mina Råd för en säkrare dator: http://ceciliasec.wordpress.com/rad/ Det är mycket viktigt att hålla alla småprogram i datorn uppdaterade, gamla versioner av t ex Flash, Java och Adobe Reader innehåller kända säkerhetshål, vilka kan användas av en webbsida för att infektera datorn. Jag tycker att Secunias program (länk på min webbsida) är en bra hjälp för att kontrollera hur det står till med säkerhetshål i datorn och ange vad som behöver åtgärdas. Länk till kommentar Dela på andra webbplatser More sharing options...
pilfinken Postad 28 mars, 2014 Trådskapare Share Postad 28 mars, 2014 Hej! Tusen tack för all hjälp! Nu funkar allt som det ska tack vare din hjälp och dina tydliga instruktioner. Jag ska titta på dina råd och ta till mig Länk till kommentar Dela på andra webbplatser More sharing options...
Cecilia Postad 28 mars, 2014 Share Postad 28 mars, 2014 Bara trevligt att kunna hjälpa till Länk till kommentar Dela på andra webbplatser More sharing options...
Rekommendera Poster
Arkiverat
Det här ämnet är nu arkiverat och är stängt för ytterligare svar.