Just nu i M3-nätverket
Gå till innehåll

Kommer upp varning från Malwarebytes


lizzy_lini

Rekommendera Poster

Hejsan

 

Kommer upp varning från Malware antibytes

 

Malwarebytes Anti-Malware
www.malwarebytes.org


Update, 2014-12-16 11:19:17, SYSTEM, PETRA, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1,
Update, 2014-12-16 11:19:19, SYSTEM, PETRA, Manual, Rootkit Database, 2014.9.15.1, 2014.12.14.1,
Update, 2014-12-16 11:19:51, SYSTEM, PETRA, Manual, Malware Database, 2014.5.30.7, 2014.12.16.2,
Update, 2014-12-16 11:19:59, SYSTEM, PETRA, Manual, program, 2.0.2.1012, 2.0.4.1028,
Protection, 2014-12-16 11:20:35, SYSTEM, PETRA, Protection, Malware Protection, Starting,
Protection, 2014-12-16 11:20:35, SYSTEM, PETRA, Protection, Malware Protection, Started,
Protection, 2014-12-16 11:20:35, SYSTEM, PETRA, Protection, Malicious Website Protection, Starting,
Protection, 2014-12-16 11:20:36, SYSTEM, PETRA, Protection, Malicious Website Protection, Started,
Update, 2014-12-16 11:20:37, SYSTEM, PETRA, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1,
Update, 2014-12-16 11:20:37, SYSTEM, PETRA, Manual, Rootkit Database, 2014.11.18.1, 2014.12.14.1,
Update, 2014-12-16 11:20:49, SYSTEM, PETRA, Manual, Malware Database, 2014.11.20.6, 2014.12.16.2,
Protection, 2014-12-16 11:20:49, SYSTEM, PETRA, Protection, Refresh, Starting,
Protection, 2014-12-16 11:20:49, SYSTEM, PETRA, Protection, Malicious Website Protection, Stopping,
Protection, 2014-12-16 11:20:49, SYSTEM, PETRA, Protection, Malicious Website Protection, Stopped,
Protection, 2014-12-16 11:20:54, SYSTEM, PETRA, Protection, Refresh, Success,
Protection, 2014-12-16 11:20:54, SYSTEM, PETRA, Protection, Malicious Website Protection, Starting,
Protection, 2014-12-16 11:20:55, SYSTEM, PETRA, Protection, Malicious Website Protection, Started,
Protection, 2014-12-16 11:22:00, SYSTEM, PETRA, Protection, Malware Protection, Starting,
Protection, 2014-12-16 11:22:00, SYSTEM, PETRA, Protection, Malware Protection, Started,
Protection, 2014-12-16 11:22:00, SYSTEM, PETRA, Protection, Malicious Website Protection, Starting,
Protection, 2014-12-16 11:22:01, SYSTEM, PETRA, Protection, Malicious Website Protection, Started,
Detection, 2014-12-16 11:27:50, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:27:55, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:05, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:08, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:14, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:17, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:23, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:28, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:33, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:38, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:47, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:53, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:28:56, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:29:04, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:29:09, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:29:14, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:29:17, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:29:28, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:29:34, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:29:41, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:29:58, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 11:30:07, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 12:36:11, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 12:36:18, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Detection, 2014-12-16 12:36:24, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [740eb7acb8c4999d891001e4936ed32d]
Update, 2014-12-16 17:36:07, SYSTEM, PETRA, Scheduler, Malware Database, 2014.12.16.2, 2014.12.16.3,
Protection, 2014-12-16 17:36:07, SYSTEM, PETRA, Protection, Refresh, Starting,
Protection, 2014-12-16 17:36:07, SYSTEM, PETRA, Protection, Malicious Website Protection, Stopping,
Protection, 2014-12-16 17:36:07, SYSTEM, PETRA, Protection, Malicious Website Protection, Stopped,
Protection, 2014-12-16 17:36:18, SYSTEM, PETRA, Protection, Refresh, Success,
Protection, 2014-12-16 17:36:18, SYSTEM, PETRA, Protection, Malicious Website Protection, Starting,
Protection, 2014-12-16 17:36:18, SYSTEM, PETRA, Protection, Malicious Website Protection, Started,
Detection, 2014-12-16 17:37:41, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [592a1152f08c989ec6d9697c3ac72bd5]
Detection, 2014-12-16 17:37:54, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [592a1152f08c989ec6d9697c3ac72bd5]
Detection, 2014-12-16 17:37:58, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [592a1152f08c989ec6d9697c3ac72bd5]
Detection, 2014-12-16 17:38:06, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [592a1152f08c989ec6d9697c3ac72bd5]
Detection, 2014-12-16 17:38:10, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [592a1152f08c989ec6d9697c3ac72bd5]
Detection, 2014-12-16 17:38:13, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [592a1152f08c989ec6d9697c3ac72bd5]
Detection, 2014-12-16 17:38:20, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [592a1152f08c989ec6d9697c3ac72bd5]
Update, 2014-12-16 19:32:57, SYSTEM, PETRA, Scheduler, Malware Database, 2014.12.16.3, 2014.12.16.4,
Protection, 2014-12-16 19:32:57, SYSTEM, PETRA, Protection, Refresh, Starting,
Protection, 2014-12-16 19:32:57, SYSTEM, PETRA, Protection, Malicious Website Protection, Stopping,
Protection, 2014-12-16 19:32:57, SYSTEM, PETRA, Protection, Malicious Website Protection, Stopped,
Protection, 2014-12-16 19:33:03, SYSTEM, PETRA, Protection, Refresh, Success,
Protection, 2014-12-16 19:33:03, SYSTEM, PETRA, Protection, Malicious Website Protection, Starting,
Protection, 2014-12-16 19:33:03, SYSTEM, PETRA, Protection, Malicious Website Protection, Started,
Detection, 2014-12-16 19:33:23, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:31:40, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:31:43, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:31:50, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:31:56, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:32:03, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:32:07, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:32:13, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:32:41, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:32:47, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:32:53, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:07, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:10, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:15, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:18, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:22, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:25, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:29, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:33, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:36, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:39, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:43, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:47, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:51, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:54, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:33:58, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:34:01, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]
Detection, 2014-12-16 20:34:05, SYSTEM, PETRA, Protection, Malware Protection, File, PUP.Optional.ClickCaption.A, C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe, Quarantine Failed, 5, Ãtkomst nekad.  , [3c489ac96319d066e7bdfbea0ff247b9]

(end)

 

Här kommer loggen från FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2014 01
Ran by PetraL (administrator) on PETRA on 16-12-2014 20:45:17
Running from C:\Users\PetraL\Desktop
Loaded Profile: PetraL (Available profiles: PetraL)
Platform: Windows 8.1 (X64) OS Language: Svenska (Sverige)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ClickCaption) C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
() C:\ProgramData\DatacardService\DCService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
() C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Windows\Temp\irstrtsv\scrncap.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avanquest Software) C:\Program Files (x86)\PC Speed Maximizer\SPMSchedule.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Spotify Ltd) C:\Users\PetraL\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTsysTray8.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
() C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
() C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17499_x64__8wekyb3d8bbwe\glcnd.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_235.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [682840 2013-06-24] (Alps Electric Co., Ltd.)
HKLM\...\Run: [bTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-03-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-05-22] (CyberLink Corp.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-05-03] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-15] (AVAST Software)
HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-05] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\Run: [spotify] => C:\Users\PetraL\AppData\Roaming\Spotify\Spotify.exe [6737976 2014-12-15] (Spotify Ltd)
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\Run: [spotify Web Helper] => C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-15] (Spotify Ltd)
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\MountPoints2: {02bcdad4-2242-11e4-8250-0c8bfd240ebd} - "F:\AutoRun.exe"
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\MountPoints2: {02bcdb30-2242-11e4-8250-0c8bfd240ebd} - "F:\AutoRun.exe"
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\MountPoints2: {296be81f-2775-11e4-be98-0c8bfd240ebd} - "F:\AutoRun.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iSCTsysTray.lnk
ShortcutTarget: iSCTsysTray.lnk -> C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
BootExecute: autocheck autochk * aswBoot.exe /A:"* " /L:"1053" /heur:80 /RA:ask /pup /archives /IA:0 /KBD:1 /wow /dir:"C:\Program Files\AVAST Software\Avast"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://myhome.vi-view.com/?type=hp&ts=1418650465&from=cor&uid=3219913727_263761_902A225E
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://se.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://myhome.vi-view.com/web/?type=ds&ts=1418650465&from=cor&uid=3219913727_263761_902A225E&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://myhome.vi-view.com/?type=hp&ts=1418650465&from=cor&uid=3219913727_263761_902A225E
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://myhome.vi-view.com/web/?type=ds&ts=1418650465&from=cor&uid=3219913727_263761_902A225E&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1988245170-786186578-318433116-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://se.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-1988245170-786186578-318433116-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-1988245170-786186578-318433116-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://se.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://myhome.vi-view.com/web/?type=ds&ts=1418650465&from=cor&uid=3219913727_263761_902A225E&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://myhome.vi-view.com/web/?type=ds&ts=1418650465&from=cor&uid=3219913727_263761_902A225E&q={searchTerms}
SearchScopes: HKLM -> {A4784A78-86AA-410A-B275-A16A50D72315} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://myhome.vi-view.com/web/?type=ds&ts=1418650465&from=cor&uid=3219913727_263761_902A225E&q={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {A4784A78-86AA-410A-B275-A16A50D72315} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://myhome.vi-view.com/web/?type=ds&ts=1418650465&from=cor&uid=3219913727_263761_902A225E&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> {58F12B37-D3CB-4ECD-85B8-7B6C479B3994} URL = http://www.google.com/search?hl=sv&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> {A4784A78-86AA-410A-B275-A16A50D72315} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\PetraL\AppData\Roaming\Mozilla\Firefox\Profiles\z3xxmext.default
FF DefaultSearchEngine: Yahoo! (Avast)
FF DefaultSearchUrl: https://se.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF SelectedSearchEngine: Yahoo! (Avast)
FF Homepage: https://se.yahoo.com/?fr=hp-avast&type=avastbcl
FF Keyword.URL: https://se.search.yahoo.com/yhs/search
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=5.1.3.2 -> C:\Program Files (x86)\BankID\npBispBrowser.dll (Finansiell ID-Teknik BID AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\PetraL\AppData\Roaming\Mozilla\Firefox\Profiles\z3xxmext.default\searchplugins\yahoo-avast.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\allaannonser-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\prisjakt-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\tyda-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\vi-view.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-sv-SE.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-25]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\PetraL\AppData\Roaming\Mozilla\Firefox\Profiles\z3xxmext.default\extensions\faststartff@gmail.com
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-15]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-15] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-12-15] (AVAST Software)
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-05-28] (Intel)
R2 ccsvc_1.10.0.4; C:\Program Files (x86)\ClickCaption_1.10.0.4\Service\ccsvc.exe [277584 2014-12-04] (ClickCaption)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-06-26] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-06-26] (CyberLink)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-08-19] () [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-06-07] (Hewlett-Packard Company) [File not signed]
R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-05-03] (Hewlett-Packard Development Company, L.P.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)
R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel® Corporation) [File not signed]
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel® Corporation)
R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-08] (Intel Corporation)
R2 Intel® Wireless Bluetooth® 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156104 2013-06-04] (Intel Corporation)
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [758072 2013-04-19] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe [182760 2013-04-15] ()
S3 iumsvc; C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-05-08] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-16] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [245832 2013-05-17] (Realtek Semiconductor)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-30] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [485888 2014-12-15] (Fuyu LIMITED) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3379440 2013-04-16] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-15] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-12-15] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-15] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-12-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-15] ()
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1366328 2013-03-28] (Motorola Solutions, Inc.)
R1 ccnfd_1_10_0_4; C:\Windows\System32\drivers\ccnfd_1_10_0_4.sys [58232 2014-12-04] (ClickCaption)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [112584 2013-06-20] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-04-15] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-04-15] ()
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2013-03-29] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-04-15] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-16] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99800 2013-05-08] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [3597792 2013-05-14] (Intel Corporation)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [206744 2013-05-28] (Windows ® Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-12-16] ()

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-16 20:45 - 2014-12-16 20:45 - 00024917 _____ () C:\Users\PetraL\Desktop\FRST.txt
2014-12-16 20:44 - 2014-12-16 20:45 - 00000000 ____D () C:\FRST
2014-12-16 20:43 - 2014-12-16 20:43 - 02119168 _____ (Farbar) C:\Users\PetraL\Desktop\FRST64.exe
2014-12-16 11:21 - 2014-12-16 11:21 - 00094656 _____ (CACE Technologies) C:\WINDOWS\system32\WPRO_41_2001woem.tmp
2014-12-16 11:17 - 2014-12-16 11:17 - 00003252 _____ () C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-1988245170-786186578-318433116-1001
2014-12-15 23:28 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-15 23:28 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-15 14:40 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-12-15 14:39 - 2014-12-16 07:18 - 00003246 _____ () C:\WINDOWS\System32\Tasks\PC Speed Maximizer Schedule
2014-12-15 14:37 - 2014-12-15 14:37 - 00449936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2014-12-15 14:37 - 2014-12-15 14:37 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-15 14:37 - 2014-12-15 14:37 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-15 14:37 - 2014-12-15 14:37 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-12-15 14:37 - 2014-12-15 14:37 - 00002013 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2014-12-15 14:37 - 2014-12-15 14:37 - 00001953 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-12-15 14:37 - 2014-12-15 14:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-15 14:34 - 2014-12-15 14:34 - 00000000 ____D () C:\Users\PetraL\AppData\Roaming\vi-view
2014-12-15 14:34 - 2014-12-15 14:34 - 00000000 ____D () C:\Users\PetraL\AppData\Roaming\WebTest
2014-12-15 14:34 - 2014-12-15 14:34 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-12-15 14:34 - 2014-12-15 14:34 - 00000000 ____D () C:\Program Files (x86)\PC Speed Maximizer
2014-12-15 14:34 - 2014-12-15 14:34 - 00000000 ____D () C:\Program Files (x86)\ClickCaption_1.10.0.4
2014-12-15 14:33 - 2014-12-15 14:33 - 00777328 _____ ( ) C:\Users\PetraL\Downloads\details.exe
2014-12-15 14:20 - 2014-12-15 14:20 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2014-12-11 21:01 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2014-12-11 21:01 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-11 21:01 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-11 21:01 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-11 18:53 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-12-11 18:53 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-12-11 18:53 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-11 18:53 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-11 18:53 - 2014-10-13 03:43 - 00238912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-12-11 18:53 - 2014-10-13 03:43 - 00153920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-12-11 18:53 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-12-11 18:53 - 2014-10-13 03:43 - 00039744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-12-11 18:52 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-11 18:52 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-12-11 18:52 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-11 18:52 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-12-11 18:52 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-12-11 18:52 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-11 18:52 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-11 18:52 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-11 18:52 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-11 18:52 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-12-11 18:52 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-12-11 18:52 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-12-11 18:52 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-11 18:52 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-12-11 18:52 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-11 18:52 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-12-11 18:52 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-11 18:52 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-12-11 18:52 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-11 18:52 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-11 18:52 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-11 18:52 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-11 18:52 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-11 18:52 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-11 18:52 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-12-11 18:52 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-11 18:52 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-11 18:52 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-12-11 18:52 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-11 18:52 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-12-11 18:52 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-11 18:52 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-11 18:52 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-11 18:52 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-11 18:52 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-11 18:52 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-12-11 18:52 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-11 18:52 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-11 18:52 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-12-11 18:52 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-12-11 18:52 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-12-11 09:10 - 2014-12-11 09:10 - 00000000 ____D () C:\Users\PetraL\AppData\Local\Adobe
2014-12-10 12:27 - 2014-12-10 12:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-04 20:19 - 2014-12-04 20:19 - 00058232 _____ (ClickCaption) C:\WINDOWS\system32\Drivers\ccnfd_1_10_0_4.sys
2014-11-30 15:17 - 2014-11-30 15:17 - 00000000 __SHD () C:\Users\PetraL\AppData\Local\EmieBrowserModeList
2014-11-19 19:11 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-11-19 19:11 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-11-19 19:11 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-11-19 19:11 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-16 20:39 - 2014-07-30 13:40 - 01673954 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-16 20:39 - 2013-08-22 15:46 - 00306137 _____ () C:\WINDOWS\setupact.log
2014-12-16 20:35 - 2014-05-12 15:50 - 00000000 ____D () C:\Users\PetraL\AppData\Roaming\Spotify
2014-12-16 20:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-16 19:32 - 2014-05-28 20:55 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-12-16 17:38 - 2014-09-21 19:49 - 00003916 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B3B76A1C-8ECE-4183-9C01-16C1F77BF7C0}
2014-12-16 11:56 - 2014-03-26 12:56 - 00000868 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-12-16 11:36 - 2014-03-25 17:00 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1988245170-786186578-318433116-1001
2014-12-16 11:27 - 2014-07-30 14:31 - 00000000 ___DO () C:\Users\PetraL\OneDrive
2014-12-16 11:27 - 2014-03-25 16:55 - 00000000 ____D () C:\Users\PetraL\Documents\Youcam
2014-12-16 11:27 - 2013-10-06 17:58 - 00003300 _____ () C:\WINDOWS\System32\Tasks\Intel® Rapid Start Technology Manager
2014-12-16 11:26 - 2014-03-18 11:04 - 01933442 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-16 11:26 - 2014-03-18 10:32 - 00798886 _____ () C:\WINDOWS\system32\perfh01D.dat
2014-12-16 11:26 - 2014-03-18 10:32 - 00183530 _____ () C:\WINDOWS\system32\perfc01D.dat
2014-12-16 11:21 - 2014-03-18 02:54 - 00026642 _____ () C:\WINDOWS\PFRO.log
2014-12-16 11:21 - 2013-10-06 18:14 - 00034752 _____ () C:\WINDOWS\system32\Drivers\WPRO_41_2001.sys
2014-12-16 11:21 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-16 11:21 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-16 11:20 - 2014-05-28 20:54 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-16 11:20 - 2014-05-28 20:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-16 11:17 - 2014-03-29 07:57 - 00000000 ____D () C:\Users\PetraL\Documents\Medicin 1
2014-12-16 11:17 - 2014-03-25 20:22 - 00001142 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-16 11:17 - 2014-03-25 20:22 - 00001142 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-16 07:41 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-15 16:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-12-15 14:37 - 2014-05-28 21:12 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-15 14:37 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-15 14:20 - 2014-07-16 15:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-12-15 14:20 - 2014-03-25 20:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-15 14:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-15 14:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2014-12-15 14:08 - 2014-03-25 16:52 - 00000000 ____D () C:\Users\PetraL\AppData\Local\Packages
2014-12-15 14:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-12-12 13:07 - 2014-03-25 19:32 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-12 13:07 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-12-12 13:07 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-12-12 13:05 - 2014-03-25 19:32 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-11 09:10 - 2014-03-26 12:56 - 00003756 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-12-10 15:18 - 2014-05-12 15:51 - 00000000 ____D () C:\Users\PetraL\AppData\Local\Spotify
2014-11-26 22:10 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-26 22:10 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-26 08:56 - 2014-03-26 11:01 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-11-21 06:14 - 2014-05-28 20:54 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-11-21 06:14 - 2014-05-28 20:54 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-11-21 06:14 - 2014-05-28 20:54 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-11-19 19:28 - 2013-08-22 15:44 - 00511528 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-17 19:34 - 2014-03-26 13:02 - 00000000 ____D () C:\Users\PetraL\AppData\Roaming\BankID

Some content of TEMP:
====================
C:\Users\PetraL\AppData\Local\Temp\ICReinstall_Malavida_Download_Manager.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-16 11:36

==================== End Of Log ============================

 

Addition.txt

Länk till kommentar
Dela på andra webbplatser

Hej!

 

1. Har webbläsarna varit avstängda när du har låtit MBAM ta bort det den hittat?

Om det inte hjälper så avinstallera "Click Caption", "PC Speed Maximizer" och "vi-view uninstall" innan du söker med MBAM igen.

 

 

2. Spara AdwCleaner av Xplode på Skrivbordet: https://toolslib.net/downloads/viewdownload/1-adwcleaner/

 

Stäng alla program, inklusive webbläsare.

Dubbelklicka på AdwCleaner för att starta programmet.

 

Klicka på Scan-knappen.

Vänta tills sökningen är klar.

Klicka på Report-knappen.

En rapport kommer upp, kopiera innehållet och klistra in i ditt svar.

Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner\AdwCleaner[R0].txt

Länk till kommentar
Dela på andra webbplatser

Hade inte tagit bort med MBAM innan jag skickade logg. Nu är det fixat, och här kommer logg.

 

# AdwCleaner v4.105 - Report created 17/12/2014 at 13:29:09
# Updated 08/12/2014 by Xplode
# Database : 2014-12-16.1 [Live]
# Operating System : Windows 8.1  (64 bits)
# Username : PetraL - PETRA
# Running from : C:\Users\PetraL\Desktop\adwcleaner_4.105.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found : C:\ProgramData\b2c05059bc36ccba
Folder Found : C:\ProgramData\tOppdeal
Folder Found : C:\Users\PetraL\AppData\Roaming\vi-view

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\OpenOffice Packages
Key Found : HKCU\Software\SecuredDownload
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Key Found : [x64] HKCU\Software\SecuredDownload
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vi-view uninstall
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://myhome.vi-view.com/web/?type=ds&ts=1418650465&from=cor&uid=3219913727_263761_902A225E&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [search Page] - hxxp://myhome.vi-view.com/web/?type=ds&ts=1418650465&from=cor&uid=3219913727_263761_902A225E&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://myhome.vi-view.com/?type=hp&ts=1418650465&from=cor&uid=3219913727_263761_902A225E

-\\ Mozilla Firefox v34.0.5 (x86 sv-SE)

[z3xxmext.default] - Line Found : user_pref("extensions.irmysearch.aflt", "vit_14_13_ff");
[z3xxmext.default] - Line Found : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzutD0Czz0B0F0DtByEtD0E0B0DtBtByD0EtN0D0Tzu0SzztCyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByCyDzzyB0CzytAtG0CtCtByEt[...]
[z3xxmext.default] - Line Found : user_pref("extensions.irmysearch.cr", "453903572");
[z3xxmext.default] - Line Found : user_pref("extensions.irmysearch.instlRef", "140305_b");
[z3xxmext.default] - Line Found : user_pref("extensions.quick_start.enable_search1", false);
[z3xxmext.default] - Line Found : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", true);

*************************

AdwCleaner[R0].txt - [2734 octets] - [17/12/2014 13:29:09]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2794 octets] ##########
 

Länk till kommentar
Dela på andra webbplatser

1, Stäng alla program, inklusive webbläsare.

Dubbelklicka på AdwCleaner för att starta programmet.

 

Klicka på Scan-knappen.

Vänta tills sökningen är klar.

 

Klicka på Clean-knappen.

Tryck på OK.

Tryck på OK fler gånger om det kommer upp meddelanden.

 

Datorn kommer att startas om, om den inte gör det automatiskt får du göra det själv.

En rapport kommer upp, kopiera innehållet och klistra in i ditt svar.

Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner\AdwCleaner[s0].txt.

 

 

2. Skanna med FRST och klistra in den nya FRST.txt.

 

 

3. Skanna datorn online på http://www.eset.com/onlinescan/ och använd helst Internet Explorer till det.

För att inte skannern ska ta för lång tid på sig stäng av ditt antivirusprogram under tiden.

 

Välj alternativet Enable detection of potentially unwanted applications.

 

Klicka på Advanced Settings.

Ta bort bocken framför Remove found threats.

Bocka för:

Scan Archives

Scan for potentially unsafe applications

Enable Anti-Stealth Technology

 

Klicka på Start

 

När skanningen är klar klicka på List of found threats, följt av Export to a text file. Spara till en fil på skrivbordet, öppna filen, kopiera resultatet och klistra sedan in det i ditt svar.

Länk till kommentar
Dela på andra webbplatser

Hejsan

 

Har nu redigerat och lagt till sista loggen

 

Här kommer två av loggarna, bifogar den tredje senare. Den lär nog ta en längre stund att genomföra =)

 

´# AdwCleaner v4.105 - Report created 17/12/2014 at 17:01:44
# Updated 08/12/2014 by Xplode
# Database : 2014-12-16.1 [Live]
# Operating System : Windows 8.1  (64 bits)
# Username : PetraL - PETRA
# Running from : C:\Users\PetraL\Desktop\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\tOppdeal
Folder Deleted : C:\ProgramData\b2c05059bc36ccba
Folder Deleted : C:\Users\PetraL\AppData\Roaming\vi-view

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\SecuredDownload
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\OpenOffice Packages
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vi-view uninstall

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]

-\\ Mozilla Firefox v34.0.5 (x86 sv-SE)

[z3xxmext.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.aflt", "vit_14_13_ff");
[z3xxmext.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzutD0Czz0B0F0DtByEtD0E0B0DtBtByD0EtN0D0Tzu0SzztCyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StByCyDzzyB0CzytAtG0CtCtByEt[...]
[z3xxmext.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.cr", "453903572");
[z3xxmext.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.instlRef", "140305_b");
[z3xxmext.default\prefs.js] - Line Deleted : user_pref("extensions.quick_start.enable_search1", false);
[z3xxmext.default\prefs.js] - Line Deleted : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", true);

*************************

AdwCleaner[R0].txt - [2902 octets] - [17/12/2014 13:29:09]
AdwCleaner[R1].txt - [2962 octets] - [17/12/2014 16:59:59]
AdwCleaner[s0].txt - [2592 octets] - [17/12/2014 17:01:44]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [2652 octets] ##########
 

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2014
Ran by PetraL (administrator) on PETRA on 17-12-2014 17:05:25
Running from C:\Users\PetraL\Desktop
Loaded Profile: PetraL (Available profiles: PetraL)
Platform: Windows 8.1 (X64) OS Language: Svenska (Sverige)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
() C:\ProgramData\DatacardService\DCService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
() C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\Temp\irstrtsv\scrncap.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Spotify Ltd) C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTsysTray8.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17499_x64__8wekyb3d8bbwe\glcnd.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [682840 2013-06-24] (Alps Electric Co., Ltd.)
HKLM\...\Run: [bTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-03-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-05-22] (CyberLink Corp.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-05-03] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2014-12-15] (AVAST Software)
HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-05] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\Run: [spotify] => C:\Users\PetraL\AppData\Roaming\Spotify\Spotify.exe [6737976 2014-12-15] (Spotify Ltd)
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\Run: [spotify Web Helper] => C:\Users\PetraL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-15] (Spotify Ltd)
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\MountPoints2: {02bcdad4-2242-11e4-8250-0c8bfd240ebd} - "F:\AutoRun.exe"
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\MountPoints2: {02bcdb30-2242-11e4-8250-0c8bfd240ebd} - "F:\AutoRun.exe"
HKU\S-1-5-21-1988245170-786186578-318433116-1001\...\MountPoints2: {296be81f-2775-11e4-be98-0c8bfd240ebd} - "F:\AutoRun.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iSCTsysTray.lnk
ShortcutTarget: iSCTsysTray.lnk -> C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://se.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1988245170-786186578-318433116-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://se.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-1988245170-786186578-318433116-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-1988245170-786186578-318433116-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://se.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM -> {A4784A78-86AA-410A-B275-A16A50D72315} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://se.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {A4784A78-86AA-410A-B275-A16A50D72315} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> {58F12B37-D3CB-4ECD-85B8-7B6C479B3994} URL = http://www.google.com/search?hl=sv&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> {A4784A78-86AA-410A-B275-A16A50D72315} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\PetraL\AppData\Roaming\Mozilla\Firefox\Profiles\z3xxmext.default
FF DefaultSearchEngine: Yahoo! (Avast)
FF DefaultSearchUrl: https://se.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF SelectedSearchEngine: Yahoo! (Avast)
FF Homepage: https://se.yahoo.com/?fr=hp-avast&type=avastbcl
FF Keyword.URL: https://se.search.yahoo.com/yhs/search
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=5.1.3.2 -> C:\Program Files (x86)\BankID\npBispBrowser.dll (Finansiell ID-Teknik BID AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\PetraL\AppData\Roaming\Mozilla\Firefox\Profiles\z3xxmext.default\searchplugins\yahoo-avast.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\allaannonser-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\prisjakt-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\tyda-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-sv-SE.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-sv-SE.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-25]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-15]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-15] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-12-15] (AVAST Software)
R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-05-28] (Intel)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-06-26] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-06-26] (CyberLink)
R2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-08-19] () [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-06-07] (Hewlett-Packard Company) [File not signed]
R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-05-03] (Hewlett-Packard Development Company, L.P.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)
R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel® Corporation) [File not signed]
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel® Corporation)
R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-08] (Intel Corporation)
R2 Intel® Wireless Bluetooth® 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156104 2013-06-04] (Intel Corporation)
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [758072 2013-04-19] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel® Smart Connect Technology Agent\iSCTAgent.exe [182760 2013-04-15] ()
S3 iumsvc; C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [169432 2013-05-08] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-16] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [245832 2013-05-17] (Realtek Semiconductor)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [142960 2013-03-19] (Stardock Software, Inc)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-30] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3379440 2013-04-16] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-15] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-12-15] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-15] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-12-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-15] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-15] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-15] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-15] ()
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1366328 2013-03-28] (Motorola Solutions, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [256000 2010-08-31] (Huawei Technologies Co., Ltd.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [112584 2013-06-20] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-04-15] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-04-15] ()
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2013-03-29] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-04-15] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-17] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99800 2013-05-08] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [3597792 2013-05-14] (Intel Corporation)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [206744 2013-05-28] (Windows ® Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-12-17] ()

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-17 17:04 - 2014-12-17 17:04 - 00000000 ____D () C:\Users\PetraL\Desktop\FRST-OlderVersion
2014-12-17 13:29 - 2014-12-17 17:01 - 00000000 ____D () C:\AdwCleaner
2014-12-17 13:28 - 2014-12-17 13:28 - 02166272 _____ () C:\Users\PetraL\Desktop\adwcleaner_4.105.exe
2014-12-17 13:13 - 2014-12-17 17:02 - 00094656 _____ (CACE Technologies) C:\WINDOWS\system32\WPRO_41_2001woem.tmp
2014-12-16 20:45 - 2014-12-17 17:05 - 00021698 _____ () C:\Users\PetraL\Desktop\FRST.txt
2014-12-16 20:45 - 2014-12-16 20:46 - 00025973 _____ () C:\Users\PetraL\Desktop\Addition.txt
2014-12-16 20:44 - 2014-12-17 17:05 - 00000000 ____D () C:\FRST
2014-12-16 20:43 - 2014-12-17 17:04 - 02121216 _____ (Farbar) C:\Users\PetraL\Desktop\FRST64.exe
2014-12-16 11:17 - 2014-12-16 11:17 - 00003252 _____ () C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-1988245170-786186578-318433116-1001
2014-12-15 23:28 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-15 23:28 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-15 14:40 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-12-15 14:37 - 2014-12-15 14:37 - 00449936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2014-12-15 14:37 - 2014-12-15 14:37 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-15 14:37 - 2014-12-15 14:37 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-15 14:37 - 2014-12-15 14:37 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-12-15 14:37 - 2014-12-15 14:37 - 00002013 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2014-12-15 14:37 - 2014-12-15 14:37 - 00001953 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-12-15 14:37 - 2014-12-15 14:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-15 14:34 - 2014-12-15 14:34 - 00000000 ____D () C:\Users\PetraL\AppData\Roaming\WebTest
2014-12-15 14:33 - 2014-12-15 14:33 - 00777328 _____ ( ) C:\Users\PetraL\Downloads\details.exe
2014-12-15 14:20 - 2014-12-15 14:20 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2014-12-11 21:01 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2014-12-11 21:01 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-11 21:01 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-11 21:01 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-11 18:53 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-12-11 18:53 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-12-11 18:53 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-12-11 18:53 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-11 18:53 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-11 18:53 - 2014-10-13 03:43 - 00238912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-12-11 18:53 - 2014-10-13 03:43 - 00153920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-12-11 18:53 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-12-11 18:53 - 2014-10-13 03:43 - 00039744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-12-11 18:52 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-11 18:52 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-12-11 18:52 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-11 18:52 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-12-11 18:52 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-12-11 18:52 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-11 18:52 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-11 18:52 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-11 18:52 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-11 18:52 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-12-11 18:52 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-12-11 18:52 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-12-11 18:52 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-11 18:52 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-12-11 18:52 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-11 18:52 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-12-11 18:52 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-11 18:52 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-12-11 18:52 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-11 18:52 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-11 18:52 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-11 18:52 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-11 18:52 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-11 18:52 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-11 18:52 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-12-11 18:52 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-11 18:52 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-11 18:52 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-12-11 18:52 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-11 18:52 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-12-11 18:52 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-11 18:52 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-11 18:52 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-11 18:52 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-11 18:52 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-11 18:52 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-12-11 18:52 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-11 18:52 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-11 18:52 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-12-11 18:52 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-12-11 18:52 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-12-11 09:10 - 2014-12-11 09:10 - 00000000 ____D () C:\Users\PetraL\AppData\Local\Adobe
2014-12-10 12:27 - 2014-12-10 12:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-30 15:17 - 2014-11-30 15:17 - 00000000 __SHD () C:\Users\PetraL\AppData\Local\EmieBrowserModeList
2014-11-19 19:11 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-11-19 19:11 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-11-19 19:11 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-11-19 19:11 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-17 17:05 - 2014-03-25 16:55 - 00000000 ____D () C:\Users\PetraL\Documents\Youcam
2014-12-17 17:04 - 2014-07-30 14:31 - 00000000 ___DO () C:\Users\PetraL\OneDrive
2014-12-17 17:04 - 2014-05-28 20:55 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-12-17 17:04 - 2014-05-12 15:51 - 00000000 ____D () C:\Users\PetraL\AppData\Local\Spotify
2014-12-17 17:04 - 2014-05-12 15:50 - 00000000 ____D () C:\Users\PetraL\AppData\Roaming\Spotify
2014-12-17 17:04 - 2013-10-06 17:58 - 00003306 _____ () C:\WINDOWS\System32\Tasks\Intel® Rapid Start Technology Manager
2014-12-17 17:02 - 2014-07-30 13:40 - 01791137 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-17 17:02 - 2014-03-18 02:54 - 00035522 _____ () C:\WINDOWS\PFRO.log
2014-12-17 17:02 - 2013-10-06 18:14 - 00034752 _____ () C:\WINDOWS\system32\Drivers\WPRO_41_2001.sys
2014-12-17 17:02 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-17 17:02 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-17 17:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-17 13:27 - 2014-09-21 19:49 - 00003916 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B3B76A1C-8ECE-4183-9C01-16C1F77BF7C0}
2014-12-17 13:20 - 2014-03-18 11:04 - 01933442 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-17 13:20 - 2014-03-18 10:32 - 00798886 _____ () C:\WINDOWS\system32\perfh01D.dat
2014-12-17 13:20 - 2014-03-18 10:32 - 00183530 _____ () C:\WINDOWS\system32\perfc01D.dat
2014-12-16 23:56 - 2014-03-26 12:56 - 00000868 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-12-16 20:39 - 2013-08-22 15:46 - 00306137 _____ () C:\WINDOWS\setupact.log
2014-12-16 11:36 - 2014-03-25 17:00 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1988245170-786186578-318433116-1001
2014-12-16 11:20 - 2014-05-28 20:54 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-16 11:20 - 2014-05-28 20:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-16 11:17 - 2014-03-29 07:57 - 00000000 ____D () C:\Users\PetraL\Documents\Medicin 1
2014-12-16 11:17 - 2014-03-25 20:22 - 00001142 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-16 11:17 - 2014-03-25 20:22 - 00001142 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-16 07:41 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-15 16:40 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-12-15 14:37 - 2014-05-28 21:12 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-15 14:37 - 2014-03-25 17:18 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-15 14:37 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-15 14:20 - 2014-07-16 15:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-12-15 14:20 - 2014-03-25 20:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-15 14:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-15 14:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2014-12-15 14:08 - 2014-03-25 16:52 - 00000000 ____D () C:\Users\PetraL\AppData\Local\Packages
2014-12-15 14:01 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-12-12 13:07 - 2014-03-25 19:32 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-12 13:07 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-12-12 13:07 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-12-12 13:05 - 2014-03-25 19:32 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-11 09:10 - 2014-03-26 12:56 - 00003756 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-26 22:10 - 2013-08-22 16:38 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-26 22:10 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-26 08:56 - 2014-03-26 11:01 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-11-21 06:14 - 2014-05-28 20:54 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-11-21 06:14 - 2014-05-28 20:54 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-11-21 06:14 - 2014-05-28 20:54 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-11-19 19:28 - 2013-08-22 15:44 - 00511528 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-19 19:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-17 19:34 - 2014-03-26 13:02 - 00000000 ____D () C:\Users\PetraL\AppData\Roaming\BankID

Some content of TEMP:
====================
C:\Users\PetraL\AppData\Local\Temp\ICReinstall_Malavida_Download_Manager.exe
C:\Users\PetraL\AppData\Local\Temp\Quarantine.exe
C:\Users\PetraL\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-16 11:36

==================== End Of Log

 

Och med esetloggen

 

C:\$Recycle.Bin\S-1-5-21-1988245170-786186578-318433116-1001\$RUAI3F0.exe    a variant of Win32/InstallCore.UE potentially unwanted application
C:\Users\PetraL\AppData\Local\Temp\ICReinstall_Malavida_Download_Manager.exe    a variant of Win32/InstallCore.UE potentially unwanted application
C:\Users\PetraL\Downloads\bitcomet_setup.exe    a variant of Win32/InstallCore.UE potentially unwanted application
C:\Users\PetraL\Downloads\details.exe    a variant of Win32/InstallCore.TC potentially unwanted application
 

Länk till kommentar
Dela på andra webbplatser

Hej!

 

1. C:\$Recycle.Bin\S-1-5-21-1988245170-786186578-318433116-1001\$RUAI3F0.exe a variant of Win32/InstallCore.UE potentially unwanted application

Töm papperskorgen

 

2. C:\Users\PetraL\AppData\Local\Temp\ICReinstall_Malavida_Download_Manager.exe a variant of Win32/InstallCore.UE potentially unwanted application

Malavida är inte ett bra ställe att hämta program från, se kommentarerna på https://www.mywot.com/en/scorecard/en.malavida.com

 

 

3. Starta programmet Anteckningar.

Kopiera alla rader i rutan:

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> {A4784A78-86AA-410A-B275-A16A50D72315} URL =
FF Extension: No Name - wrc@avast.com [Not Found]
C:\Users\PetraL\AppData\Local\Temp\ICReinstall_Malavida_Download_Manager.exe
och klistra in i Anteckningar. Kontrollera att inga filer har delats upp på två rader.

Spara filen på skrivbordet med namnet fixlist.txt.

 

Stäng av alla program.

Starta FRST som finns på skrivbordet.

Klicka på knappen Fix.

Vänta tills programmet är klart.

Om datorn inte startas om automatiskt så gör det själv.

 

Programmet skapar en logg Fixlog.txt på skrivbordet.

Klistra in innehållet i den i ditt svar.

 

 

4. Hittar MBAM något nu?

Länk till kommentar
Dela på andra webbplatser

Hejsan

 

Har tömt inkorgen. Bifogar loggen från frst:

MBAM hittade inget.

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-12-2014
Ran by PetraL at 2014-12-18 09:52:36 Run:1
Running from C:\Users\PetraL\Desktop
Loaded Profiles: PetraL &  (Available profiles: PetraL)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1988245170-786186578-318433116-1001 -> {A4784A78-86AA-410A-B275-A16A50D72315} URL =
FF Extension: No Name - wrc@avast.com [Not Found]
C:\Users\PetraL\AppData\Local\Temp\ICReinstall_Malavida_Download_Manager.exe
*****************

HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-1988245170-786186578-318433116-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A4784A78-86AA-410A-B275-A16A50D72315}" => Key deleted successfully.
"HKCR\CLSID\{A4784A78-86AA-410A-B275-A16A50D72315}" => Key not found.
FF Extension: No Name - wrc@avast.com [Not Found] not found.
C:\Users\PetraL\AppData\Local\Temp\ICReinstall_Malavida_Download_Manager.exe => Moved successfully.

==== End of Fixlog ====

Länk till kommentar
Dela på andra webbplatser

Hej!

 

Är allt bra med datorn nu så att det är dags att avinstallera FRST och AdwCleaner?

 

1. Stäng alla program, inklusive webbläsare.

Dubbelklicka på AdwCleaner för att starta programmet.

Klicka på Uninstall-knappen.

 

2. Ladda ner avinstallationsprogrammet OTC till Skrivbordet: http://oldtimer.geekstogo.com/OTC.exe

Dubbelklicka på filen för att starta programmet.

Tryck på knappen CleanUp! och FRST kommer att avinstalleras efter en omstart av datorn. Ta bort eventuella loggar.

 

3. Förbättra skyddet i datorn, se mina Råd för en säkrare dator: http://ceciliasec.wordpress.com/rad/

Det är mycket viktigt att hålla alla småprogram i datorn uppdaterade, gamla versioner av t ex Flash, Java och Adobe Reader innehåller kända säkerhetshål, vilka kan användas av en webbsida för att infektera datorn. Jag tycker att Secunias program (länk på min webbsida) är en bra hjälp för att kontrollera hur det står till med säkerhetshål i datorn och ange vad som behöver åtgärdas.

Länk till kommentar
Dela på andra webbplatser

Arkiverat

Det här ämnet är nu arkiverat och är stängt för ytterligare svar.

×
×
  • Skapa nytt...