Just nu i M3-nätverket
Gå till innehåll

searchinterneat-a.akamaihd.net PUP?


Malen

Rekommendera Poster

Fix result of Farbar Recovery Scan Tool (x64) Version:29-10-2015
Ran by Ellinor (2015-11-03 21:48:11) Run:3
Running from C:\Users\Ellinor.Familje-HP\Desktop
Loaded Profiles: Ellinor (Available Profiles: Martin & Lukas & Ellinor & Annelie & DefaultAppPool)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
URLSearchHook: [s-1-5-21-2950963471-1327350633-3252255542-1005] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1004 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdBQlDRAdFbQFaWF1cFQBBdRQBA1tFDAYXIgkBVwxIQwUQch9aFQQTSEcFME0FCFwEURNNfXRZBlASQFllKVdc&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1004 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdBQlDRAdFbQFaWF1cFQBBdRQBA1tFDAYXIgkBVwxIQwUQch9aFQQTSEcFME0FCFwEURNNfXRZBlASQFllKVdc&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1004 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1004 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://se.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
Toolbar: HKU\S-1-5-21-2950963471-1327350633-3252255542-1004 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
CHR RestoreOnStartup: Default -> "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggbJV0IU1xDRxgbIgBcTA1EQwAOeVtaVRRCFVcTeQ8NWFtBEgcFIk0FA1oDB0VXfV5bFElXTwhuIV5RAlgdZ1xNJA=="
CHR StartupUrls: Default -> "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggbJV0IU1xDRxgbIgBcTA1EQwAOeVtaVRRCFVcTeQ8NWFtBEgcFIk0FA1oDB0VXfV5bFElXTwhuIV5RAlgdZ1xNJA=="
CHR DefaultSearchURL: Default -> hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdBQlDRAdFbQFaWF1cFQBBdRQBA1tFDAYXIgkBVwxIQwUQch9aFQQTQkcFME0FBloEURNNfXRZBlASQFllKVdc&q={searchTerms}
CHR DefaultSearchKeyword: Default -> searchinterneat-a.akamaihd.net
CHR DefaultNewTabURL: Default -> hxxp://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHA1GJAkKBAsXDA1BeV0VVQwTFBgaIlsMTApFQwUadgwBAwlCExNBNARaAktXUUEeJ1pNER8fHHhCJ1BbAFU3SFtH
Reboot:
*****************
 
Error: (0) Failed to create a restore point.
Processes closed successfully.
Could not restore Default URLSearchHook.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Error setting value.
HKU\S-1-5-21-2950963471-1327350633-3252255542-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-21-2950963471-1327350633-3252255542-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key could not remove. Access Denied.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKU\S-1-5-21-2950963471-1327350633-3252255542-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} => key could not remove. Access Denied.
HKCR\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827} => key not found.
HKU\S-1-5-21-2950963471-1327350633-3252255542-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} => key could not remove. Access Denied.
HKCR\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} => key not found.
HKU\S-1-5-21-2950963471-1327350633-3252255542-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found.
Chrome RestoreOnStartup => removed successfully
Chrome StartupUrls => removed successfully
Chrome DefaultSearchURL => removed successfully
Chrome DefaultSearchKeyword => removed successfully
Chrome DefaultNewTabURL => removed successfully
 

The system needed a reboot.
 
==== End of Fixlog 21:48:12 ====
Länk till kommentar
Dela på andra webbplatser

Fix result of Farbar Recovery Scan Tool (x64) Version:31-10-2015
Ran by Lukas (2015-11-03 22:04:22) Run:4
Running from C:\Users\Lukas\Desktop
Loaded Profiles: Lukas (Available Profiles: Martin & Lukas & Ellinor & Annelie & DefaultAppPool)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
URLSearchHook: [s-1-5-21-2950963471-1327350633-3252255542-1005] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1003 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://se.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
Toolbar: HKU\S-1-5-21-2950963471-1327350633-3252255542-1003 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
CHR RestoreOnStartup: Default -> "hxxp://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggbJV0IU1xDRxgbIgBcTA1EQwAOeVtaVRRCFVcTeQ8NWFtBEgcFIk0FA1oDB0VXfV5bFElXTwhuIV5RAlgdZ1xNJA=="
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll => No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\gcswf32.dll => No File
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\pdf.dll => No File
CHR Plugin: (Simple Pass 2012) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\debkinhcgejcbfgjiaalomcmkedjmiaa\1.0_0\npwebsitelogon.dll => No File
CHR Plugin: (Norton Confidential) - C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.5.11_0\npcoplgn.dll => No File
CHR Plugin: (Java™ Platform SE 7 U7) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.70.10) - C:\Windows\SysWOW64\npDeployJava1.dll => No File
Reboot:
*****************
 
Error: (0) Failed to create a restore point.
Processes closed successfully.
Could not restore Default URLSearchHook.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Error setting value.
HKU\S-1-5-21-2950963471-1327350633-3252255542-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} => key could not remove. Access Denied.
HKCR\CLSID\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} => key not found.
HKU\S-1-5-21-2950963471-1327350633-3252255542-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found.
Chrome RestoreOnStartup => removed successfully
C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\gcswf32.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\ppGoogleNaClPluginChrome.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\pdf.dll => not found.
C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\debkinhcgejcbfgjiaalomcmkedjmiaa\1.0_0\npwebsitelogon.dll => not found.
C:\Users\Lukas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.5.11_0\npcoplgn.dll => not found.
C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => moved successfully
C:\Windows\SysWOW64\npDeployJava1.dll => not found.
 

The system needed a reboot.
 
==== End of Fixlog 22:04:23 ====
Länk till kommentar
Dela på andra webbplatser

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
Ran by Annelie (administrator) on FAMILJE-HP (03-11-2015 22:13:23)
Running from C:\Users\Annelie\Desktop
Loaded Profiles: Annelie (Available Profiles: Martin & Lukas & Ellinor & Annelie & DefaultAppPool)
Platform: Windows 10 Home (X64) Language: Svenska (Sverige)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(HP) C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Lavasoft Limited                                                  ) C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Rsupport Co., Ltd.) C:\Program Files (x86)\Samsung\Remote PC\rvagent.exe
(Memeo) C:\Program Files (x86)\Seagate\Seagate Dashboard\SeagateDashboardService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(AMD) C:\Windows\System32\atieclxx.exe
(HP) C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(HP) C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
(Rsupport Co., Ltd.) C:\Program Files (x86)\Samsung\Remote PC\rvagtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Dropbox, Inc.) C:\Users\Annelie\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc.) C:\Users\Annelie\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
 

==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [sysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2013-05-30] (IDT, Inc.)
HKLM\...\Run: [synTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-07-17] (Synaptics Incorporated)
HKLM\...\Run: [bTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM-x32\...\Run: [iAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284440 2011-05-20] (Intel Corporation)
HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-10-27] (AVAST Software)
HKLM-x32\...\Run: [RemoteView5 Tray] => C:\Program Files (x86)\Samsung\Remote PC\rvagtray.exe [2615704 2014-05-08] (Rsupport Co., Ltd.)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-07-27] (Raptr, Inc)
HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-03] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-10-06] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-2950963471-1327350633-3252255542-1005\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-2950963471-1327350633-3252255542-1005\...\Run: [Dropbox Update] => C:\Users\Annelie\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-27] (Dropbox, Inc.)
HKU\S-1-5-21-2950963471-1327350633-3252255542-1005\...\RunOnce: [uninstall C:\Users\Annelie\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Annelie\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-2950963471-1327350633-3252255542-1005\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-2950963471-1327350633-3252255542-1005\...\Policies\system: [DisableChangePassword] 0
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-11-17] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-12] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-12] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-10-12] (Google)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-27] (AVAST Software)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} =>  No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Annelie\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
Startup: C:\Users\Annelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-28]
ShortcutTarget: Dropbox.lnk -> C:\Users\Annelie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Annelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2012-11-25]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Ellinor.Familje-HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2014-02-17]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-27]
ShortcutTarget: Dropbox.lnk -> C:\Users\Annelie\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * lsdelete
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9048c5bd-5431-4b00-8c14-4926d1d009db}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{e470d873-7d00-4c59-b057-c34fac84f939}: [DhcpNameServer] 192.168.2.1
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\S-1-5-21-2950963471-1327350633-3252255542-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCON/11
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> OldSearch URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {3B0130EF-8809-4388-9071-A7968584F662} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://sv.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {3B0130EF-8809-4388-9071-A7968584F662} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://sv.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1005 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1005 -> OldSearch URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1005 -> {3B0130EF-8809-4388-9071-A7968584F662} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-2950963471-1327350633-3252255542-1005 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://sv.wikipedia.org/wiki/Special:Search?search={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2012\x64\IEBHO.dll [2011-08-26] (HP)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-11] (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-10-29] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-11] (AVAST Software)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-28] (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-10-29] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
 
FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1221171.dll [2015-10-19] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=5.1.3.2 -> C:\Program Files (x86)\BankID\npBispBrowser.dll [No File]
FF Plugin-x32: @canon.com/MycameraPlugin -> C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll [2008-10-15] (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @innoplus.de/ino3DViewer -> C:\Program Files (x86)\innoplus\3D-Viewer-innoPlus\npIno3DViewer.dll [2014-05-14] (INNOVA-engineering GmbH Dresden)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-10-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-10-29] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-16] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-03-08] (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-19] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2950963471-1327350633-3252255542-1005: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-03-08] (Pando Networks)
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-27] [not signed]
 
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Profile: C:\Users\Annelie\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Annelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-28]
CHR Extension: (Google Search) - C:\Users\Annelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Avast Online Security) - C:\Users\Annelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-15]
CHR Extension: (Plants vs. Zombies) - C:\Users\Annelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jafcgfmicblebkjglnnjmhelbfpgimbb [2013-04-14]
CHR Extension: (Betalning via Chrome Web Store) - C:\Users\Annelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-04]
CHR Extension: (Gmail) - C:\Users\Annelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-09]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-23] (Adobe Systems Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-27] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2012-05-14] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2012-05-14] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2009-11-16] (Creative Technology Ltd) [File not signed]
R2 FPLService; C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe [260424 2011-08-26] (HP)
R2 HPSLPSVC; C:\Users\Martin\AppData\Local\Temp\7zS1E65\hpslpsvc64.dll [1039360 2015-07-22] (Hewlett-Packard Co.) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2413056 2011-06-29] (Realsil Microelectronics Inc.) [File not signed]
R2 Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [1737728 2015-10-27] (Lavasoft Limited                                                  ) [File not signed]
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-12] (Microsoft Corporation)
U2 OneSyncSvc_Session13; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U2 OneSyncSvc_Session13; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_Session13; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 PimIndexMaintenanceSvc_Session13; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [487960 2015-02-05] (Sony Corporation)
R2 RemotePC Agent; C:\Program Files (x86)\Samsung\Remote PC\rvagent.exe [813448 2014-05-07] (Rsupport Co., Ltd.)
R2 SeagateDashboardService; C:\Program Files (x86)\Seagate\Seagate Dashboard\SeagateDashboardService.exe [8704 2011-11-03] (Memeo) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-17] (Synaptics Incorporated)
U3 UnistoreSvc_Session13; C:\Windows\System32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 UnistoreSvc_Session13; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
U3 UserDataSvc_Session13; C:\Windows\system32\svchost.exe [39856 2015-07-10] (Microsoft Corporation)
U3 UserDataSvc_Session13; C:\Windows\SysWOW64\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-12] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-12] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-27] (AVAST Software)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [28504 2012-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-27] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1049880 2015-10-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [448968 2015-10-27] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-27] (AVAST Software)
R3 bbcap; C:\Windows\system32\DRIVERS\bbcap.sys [4608 2013-12-22] (Windows ® Codename Longhorn DDK provider)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
R3 Lavasoft Kernexplorer; C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [17152 2015-10-27] ()
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-12] (Microsoft Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-17] (Synaptics Incorporated)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
R1 vrvd5; C:\Windows\system32\DRIVERS\vrvd5.sys [13344 2015-08-12] (Rsupport Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-03 22:12 - 2015-11-03 22:12 - 00016148 _____ C:\Windows\system32\FAMILJE-HP_Lukas_HistoryPrediction.bin
2015-11-03 22:12 - 2015-11-03 22:12 - 00016148 _____ C:\Windows\system32\FAMILJE-HP_Annelie_HistoryPrediction.bin
2015-11-03 21:59 - 2015-11-03 21:59 - 00016148 _____ C:\Windows\system32\FAMILJE-HP_Ellinor_HistoryPrediction.bin
2015-11-03 21:02 - 2015-11-03 21:02 - 00016148 _____ C:\Windows\system32\FAMILJE-HP_Martin_HistoryPrediction.bin
2015-11-03 21:02 - 2015-11-03 20:50 - 01708032 _____ C:\Users\Public\adwcleaner_5.017.exe
2015-11-03 20:59 - 2015-11-03 20:50 - 01708032 _____ C:\Users\Martin\Downloads\adwcleaner_5.017.exe
2015-11-03 20:49 - 2015-11-03 20:50 - 01708032 _____ C:\Users\Ellinor.Familje-HP\Downloads\adwcleaner_5.017.exe
2015-11-03 18:57 - 2015-11-03 18:57 - 00081089 _____ C:\Users\Lukas\Desktop\FRST.txt
2015-11-03 18:56 - 2015-11-03 18:56 - 02198016 _____ (Farbar) C:\Users\Lukas\Desktop\FRST64.exe
2015-11-03 18:56 - 2015-11-03 18:56 - 00000000 ____D C:\Users\Lukas\Desktop\FRST-OlderVersion
2015-11-03 18:54 - 2015-11-03 18:54 - 00011776 ___SH C:\Users\Lukas\Downloads\Thumbs.db
2015-11-03 18:45 - 2015-11-03 18:46 - 00084542 _____ C:\Users\Ellinor.Familje-HP\Desktop\FRST.txt
2015-11-03 18:44 - 2015-10-29 20:36 - 02198016 _____ (Farbar) C:\Users\Ellinor.Familje-HP\Desktop\FRST64 (1).exe
2015-11-03 18:37 - 2015-11-03 18:37 - 00030720 ___SH C:\Users\Ellinor.Familje-HP\Downloads\Thumbs.db
2015-11-03 18:37 - 2015-11-03 18:37 - 00019456 ___SH C:\Users\Ellinor.Familje-HP\Documents\Thumbs.db
2015-11-03 18:29 - 2015-11-03 18:31 - 01708032 _____ C:\Users\Annelie\Downloads\adwcleaner_5.017.exe
2015-11-03 01:44 - 2015-11-03 00:56 - 00145396 _____ C:\Users\Public\Shortcut.txt
2015-11-03 01:44 - 2015-11-03 00:56 - 00096685 _____ C:\Users\Public\FRST.txt
2015-11-03 01:44 - 2015-11-03 00:56 - 00083940 _____ C:\Users\Public\Addition.txt
2015-11-03 00:56 - 2015-11-03 00:56 - 00145396 _____ C:\Users\Annelie\Desktop\Shortcut.txt
2015-11-03 00:54 - 2015-11-03 22:13 - 00031843 _____ C:\Users\Annelie\Desktop\FRST.txt
2015-11-03 00:54 - 2015-11-03 00:56 - 00083940 _____ C:\Users\Annelie\Desktop\Addition.txt
2015-11-03 00:53 - 2015-11-03 00:53 - 02198016 _____ (Farbar) C:\Users\Annelie\Desktop\FRST64.exe
2015-11-03 00:53 - 2015-11-03 00:53 - 00000000 ____D C:\Users\Annelie\Desktop\FRST-OlderVersion
2015-11-03 00:52 - 2015-10-29 13:06 - 02197504 _____ (Farbar) C:\Users\Public\Downloads\FRST64.exe
2015-11-03 00:47 - 2015-11-03 00:47 - 00000000 ____D C:\Users\Ellinor.Familje-HP\AppData\Local\NetworkTiles
2015-11-02 19:52 - 2015-11-02 19:52 - 00000000 ____D C:\Users\Ellinor.Familje-HP\Tracing
2015-11-02 19:49 - 2015-11-03 22:09 - 00004156 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{5A0CBE13-FCCA-4672-BE9E-63433FD93804}
2015-11-02 19:46 - 2015-11-02 19:47 - 00000000 ____D C:\Users\Lukas\AppData\Local\MicrosoftEdge
2015-11-02 18:05 - 2015-11-02 18:14 - 00145387 _____ C:\Users\Martin\Desktop\Shortcut.txt
2015-11-01 18:33 - 2015-11-02 18:05 - 00081643 _____ C:\Users\Martin\Desktop\FRST.txt
2015-11-01 18:33 - 2015-11-01 18:34 - 00079776 _____ C:\Users\Martin\Desktop\Addition.txt
2015-11-01 12:42 - 2015-11-01 12:42 - 00000000 ____D C:\Users\Lukas\AppData\Local\CEF
2015-10-31 09:10 - 2015-10-31 09:10 - 00007892 _____ C:\Users\Martin\Desktop\eset_res.txt
2015-10-30 09:18 - 2015-10-30 09:18 - 00000000 ____D C:\Program Files (x86)\ESET
2015-10-30 09:17 - 2015-10-30 09:18 - 02870984 _____ (ESET) C:\Users\Martin\Downloads\esetsmartinstaller_enu.exe
2015-10-30 08:27 - 2015-10-28 00:38 - 21871616 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2015-10-30 08:27 - 2015-10-28 00:16 - 18801664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2015-10-30 08:27 - 2015-10-21 13:45 - 00541024 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-10-30 08:27 - 2015-10-21 13:44 - 00459104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-10-30 08:27 - 2015-10-21 13:43 - 01392480 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2015-10-30 08:27 - 2015-10-21 13:39 - 03621248 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-30 08:27 - 2015-10-21 13:00 - 24595968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-30 08:27 - 2015-10-21 13:00 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-10-30 08:27 - 2015-10-21 12:59 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2015-10-30 08:27 - 2015-10-21 12:57 - 02418688 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-10-30 08:27 - 2015-10-21 12:52 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-10-30 08:27 - 2015-10-21 12:50 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2015-10-30 08:27 - 2015-10-21 12:48 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-10-30 08:27 - 2015-10-21 12:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2015-10-30 08:27 - 2015-10-21 12:46 - 02179584 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2015-10-30 08:27 - 2015-10-21 12:46 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-30 08:27 - 2015-10-21 12:44 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2015-10-30 08:27 - 2015-10-21 12:44 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-10-30 08:27 - 2015-10-21 12:43 - 02675200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2015-10-30 08:27 - 2015-10-21 12:42 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2015-10-30 08:27 - 2015-10-21 12:41 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2015-10-30 08:27 - 2015-10-21 12:40 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2015-10-30 08:27 - 2015-10-21 12:38 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2015-10-30 08:27 - 2015-10-21 06:53 - 00961376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2015-10-30 08:27 - 2015-10-21 06:49 - 02878512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-30 08:27 - 2015-10-21 06:13 - 19326464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-30 08:27 - 2015-10-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-10-30 08:27 - 2015-10-21 06:08 - 01918976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-10-30 08:27 - 2015-10-21 06:05 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-10-30 08:27 - 2015-10-21 06:03 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-30 08:27 - 2015-10-21 06:03 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2015-10-30 08:27 - 2015-10-21 05:58 - 02049536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2015-10-30 08:27 - 2015-10-21 05:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2015-10-30 08:27 - 2015-10-21 05:55 - 00441344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2015-10-30 08:23 - 2015-11-03 21:58 - 00000275 _____ C:\Windows\WindowsUpdate.log
2015-10-29 20:36 - 2015-10-29 20:36 - 02198016 _____ (Farbar) C:\Users\Martin\Desktop\FRST64 (1).exe
2015-10-29 14:31 - 2015-11-03 21:34 - 00000000 ____D C:\AdwCleaner
2015-10-29 14:03 - 2015-10-29 14:03 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-10-29 14:03 - 2015-10-29 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-10-29 14:03 - 2015-10-29 14:03 - 00000000 ____D C:\Program Files\iTunes
2015-10-29 14:03 - 2015-10-29 14:03 - 00000000 ____D C:\Program Files\iPod
2015-10-29 14:03 - 2015-10-29 14:03 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-10-29 14:02 - 2015-10-29 14:02 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2015-10-29 14:02 - 2015-10-29 14:02 - 00000000 ____D C:\Program Files\Bonjour
2015-10-29 14:02 - 2015-10-29 14:02 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-10-29 14:02 - 2015-10-29 14:02 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-10-29 14:00 - 2015-10-29 14:00 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk
2015-10-29 14:00 - 2015-10-29 14:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-29 14:00 - 2015-10-29 14:00 - 00000000 ____D C:\Users\Martin\Tracing
2015-10-29 14:00 - 2015-10-29 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-10-29 13:08 - 2015-10-29 20:38 - 00080669 _____ C:\Users\Martin\Downloads\Addition.txt
2015-10-29 13:07 - 2015-11-03 22:13 - 00000000 ____D C:\FRST
2015-10-29 13:07 - 2015-10-29 20:38 - 00082827 _____ C:\Users\Martin\Downloads\FRST.txt
2015-10-29 13:06 - 2015-10-29 13:06 - 02197504 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2015-10-28 21:35 - 2015-10-28 21:35 - 00000000 ____D C:\Users\Lukas\AppData\Local\NetworkTiles
2015-10-28 20:42 - 2015-10-28 20:42 - 00000252 _____ C:\Users\Lukas\Desktop\Internet .url
2015-10-28 20:42 - 2015-10-28 20:42 - 00000252 _____ C:\Users\Ellinor.Familje-HP\Desktop\Internet .url
2015-10-28 20:42 - 2015-10-28 20:42 - 00000252 _____ C:\Users\Annelie\Desktop\Internet .url
2015-10-28 20:32 - 2015-10-28 20:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
2015-10-28 19:14 - 2015-10-28 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-28 19:12 - 2015-10-28 19:12 - 00000000 ____D C:\Users\Ellinor.Familje-HP\AppData\Roaming\Sun
2015-10-28 19:12 - 2015-10-28 19:12 - 00000000 ____D C:\Users\Ellinor.Familje-HP\.oracle_jre_usage
2015-10-28 19:08 - 2015-10-28 19:08 - 00007602 _____ C:\Users\Public\bookmarks_2015-10-28e.html
2015-10-28 19:07 - 2015-10-28 19:07 - 00021504 ___SH C:\Users\Ellinor.Familje-HP\Desktop\Thumbs.db
2015-10-28 19:07 - 2015-10-28 19:07 - 00000000 ____D C:\Users\Lukas\AppData\Roaming\Sun
2015-10-28 19:06 - 2015-10-28 19:06 - 00000000 ____D C:\Users\Lukas\.oracle_jre_usage
2015-10-28 19:02 - 2015-11-01 12:42 - 00002378 _____ C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-28 19:02 - 2015-11-01 12:42 - 00000000 ___RD C:\Users\Lukas\OneDrive
2015-10-28 19:01 - 2015-10-28 19:01 - 00000000 ____D C:\Users\Lukas\AppData\Local\Publishers
2015-10-28 19:00 - 2015-10-28 19:18 - 00000000 ____D C:\Users\Lukas\AppData\Local\Packages
2015-10-28 19:00 - 2015-10-28 19:00 - 00000020 ___SH C:\Users\Lukas\ntuser.ini
2015-10-28 19:00 - 2015-10-28 19:00 - 00000000 ____D C:\Users\Lukas\AppData\Local\TileDataLayer
2015-10-28 18:57 - 2015-10-28 18:57 - 00000000 ____D C:\Users\Annelie\AppData\Roaming\Sun
2015-10-28 18:57 - 2015-10-28 18:57 - 00000000 ____D C:\Users\Annelie\.oracle_jre_usage
2015-10-28 18:53 - 2015-10-28 18:53 - 00005198 _____ C:\Users\Public\bookmarks_2015-10-28a.html
2015-10-28 18:53 - 2015-10-28 18:53 - 00000000 ____D C:\Users\Annelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-28 18:51 - 2015-10-28 18:51 - 00066048 ___SH C:\Users\Annelie\Desktop\Thumbs.db
2015-10-28 18:48 - 2015-10-28 18:48 - 00025664 _____ C:\Users\Public\bookmarks_2015-10-28m.html
2015-10-28 18:39 - 2015-10-28 19:14 - 00929872 _____ (Google Inc.) C:\Users\Martin\Downloads\ChromeSetup.exe
2015-10-27 19:31 - 2015-10-27 19:31 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-27 18:49 - 2015-11-03 21:34 - 00000064 _____ C:\Windows\SysWOW64\rp_stats.dat
2015-10-27 18:49 - 2015-11-03 21:34 - 00000044 _____ C:\Windows\SysWOW64\rp_rules.dat
2015-10-27 18:33 - 2015-10-10 08:12 - 00078528 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-27 18:33 - 2015-10-06 04:03 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-10-27 18:33 - 2015-10-06 03:46 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-10-27 18:33 - 2015-10-01 05:01 - 01294352 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-27 18:33 - 2015-10-01 05:01 - 01123400 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-10-27 18:33 - 2015-10-01 05:01 - 01018568 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-27 18:33 - 2015-10-01 05:01 - 00858408 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-10-27 18:33 - 2015-10-01 05:00 - 08020320 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-27 18:33 - 2015-10-01 04:03 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2015-10-27 18:33 - 2015-09-25 05:01 - 02573768 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-10-27 18:33 - 2015-09-25 05:01 - 00498016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-10-27 18:33 - 2015-09-25 04:56 - 22322624 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-27 18:33 - 2015-09-25 04:52 - 00980832 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2015-10-27 18:33 - 2015-09-25 04:33 - 01997336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-10-27 18:33 - 2015-09-25 04:26 - 20858360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-27 18:33 - 2015-09-25 04:11 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2015-10-27 18:33 - 2015-09-25 04:11 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2015-10-27 18:33 - 2015-09-25 04:09 - 12504064 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-27 18:33 - 2015-09-25 04:07 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2015-10-27 18:33 - 2015-09-25 04:04 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-27 18:33 - 2015-09-25 04:04 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2015-10-27 18:33 - 2015-09-25 04:03 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2015-10-27 18:33 - 2015-09-25 04:03 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-27 18:33 - 2015-09-25 04:02 - 07523840 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2015-10-27 18:33 - 2015-09-25 04:02 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-27 18:33 - 2015-09-25 04:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-27 18:33 - 2015-09-25 04:01 - 04792320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-27 18:33 - 2015-09-25 04:01 - 03586560 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2015-10-27 18:33 - 2015-09-25 04:00 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2015-10-27 18:33 - 2015-09-25 04:00 - 01382400 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2015-10-27 18:33 - 2015-09-25 04:00 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2015-10-27 18:33 - 2015-09-25 04:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2015-10-27 18:33 - 2015-09-25 03:59 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2015-10-27 18:33 - 2015-09-25 03:59 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2015-10-27 18:33 - 2015-09-25 03:59 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2015-10-27 18:33 - 2015-09-25 03:59 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2015-10-27 18:33 - 2015-09-25 03:59 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
2015-10-27 18:33 - 2015-09-25 03:59 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
2015-10-27 18:33 - 2015-09-25 03:58 - 01871360 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-10-27 18:33 - 2015-09-25 03:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2015-10-27 18:33 - 2015-09-25 03:47 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2015-10-27 18:33 - 2015-09-25 03:38 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-27 18:33 - 2015-09-25 03:38 - 00650240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-27 18:33 - 2015-09-25 03:38 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2015-10-27 18:33 - 2015-09-25 03:38 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-27 18:33 - 2015-09-25 03:37 - 00766976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-27 18:33 - 2015-09-25 03:37 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2015-10-27 18:33 - 2015-09-25 03:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-27 18:33 - 2015-09-25 03:36 - 11262976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-27 18:33 - 2015-09-25 03:36 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2015-10-27 18:33 - 2015-09-25 03:34 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2015-10-27 18:33 - 2015-09-25 03:34 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2015-10-27 18:33 - 2015-09-25 03:34 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2015-10-27 18:33 - 2015-09-25 03:34 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2015-10-27 18:33 - 2015-09-25 03:34 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2015-10-27 18:33 - 2015-09-25 03:33 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
2015-10-27 18:33 - 2015-09-25 03:32 - 01594368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-10-27 18:33 - 2015-09-25 03:32 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2015-10-27 18:33 - 2015-09-19 06:14 - 00102304 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
2015-10-27 18:33 - 2015-09-17 07:50 - 02464216 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2015-10-27 18:33 - 2015-09-17 07:50 - 01563392 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2015-10-27 18:33 - 2015-09-17 07:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-10-27 18:33 - 2015-09-17 07:50 - 00088384 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2015-10-27 18:33 - 2015-09-17 07:49 - 06487248 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2015-10-27 18:33 - 2015-09-17 07:49 - 01563472 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2015-10-27 18:33 - 2015-09-17 07:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-10-27 18:33 - 2015-09-17 07:49 - 00553808 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2015-10-27 18:33 - 2015-09-17 07:49 - 00501008 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 02494712 _____ C:\Windows\system32\CoreUIComponents.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-10-27 18:33 - 2015-09-17 07:48 - 02156400 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-10-27 18:33 - 2015-09-17 07:48 - 00809352 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 00555768 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 00537080 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-10-27 18:33 - 2015-09-17 07:48 - 00505696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2015-10-27 18:33 - 2015-09-17 07:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2015-10-27 18:33 - 2015-09-17 07:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-10-27 18:33 - 2015-09-17 07:48 - 00395088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2015-10-27 18:33 - 2015-09-17 07:48 - 00332624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2015-10-27 18:33 - 2015-09-17 07:48 - 00278352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-10-27 18:33 - 2015-09-17 07:48 - 00243760 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-10-27 18:33 - 2015-09-17 07:44 - 00781976 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2015-10-27 18:33 - 2015-09-17 07:43 - 00966416 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2015-10-27 18:33 - 2015-09-17 07:37 - 01295712 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2015-10-27 18:33 - 2015-09-17 07:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-10-27 18:33 - 2015-09-17 07:28 - 05120056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2015-10-27 18:33 - 2015-09-17 07:28 - 02154808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2015-10-27 18:33 - 2015-09-17 07:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2015-10-27 18:33 - 2015-09-17 07:28 - 00441168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2015-10-27 18:33 - 2015-09-17 07:28 - 00407608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-10-27 18:33 - 2015-09-17 07:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2015-10-27 18:33 - 2015-09-17 07:27 - 01766952 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2015-10-27 18:33 - 2015-09-17 07:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
2015-10-27 18:33 - 2015-09-17 07:26 - 02446648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-10-27 18:33 - 2015-09-17 07:26 - 01895568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2015-10-27 18:33 - 2015-09-17 07:26 - 00646672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2015-10-27 18:33 - 2015-09-17 07:26 - 00508248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-10-27 18:33 - 2015-09-17 07:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2015-10-27 18:33 - 2015-09-17 07:26 - 00428128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
2015-10-27 18:33 - 2015-09-17 07:21 - 00658528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2015-10-27 18:33 - 2015-09-17 07:20 - 00764416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2015-10-27 18:33 - 2015-09-17 07:11 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2015-10-27 18:33 - 2015-09-17 07:10 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2015-10-27 18:33 - 2015-09-17 07:09 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2015-10-27 18:33 - 2015-09-17 07:09 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2015-10-27 18:33 - 2015-09-17 07:08 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2015-10-27 18:33 - 2015-09-17 07:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Speech.Pal.dll
2015-10-27 18:33 - 2015-09-17 07:08 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
2015-10-27 18:33 - 2015-09-17 07:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
2015-10-27 18:33 - 2015-09-17 07:06 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
2015-10-27 18:33 - 2015-09-17 07:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
2015-10-27 18:33 - 2015-09-17 07:05 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2015-10-27 18:33 - 2015-09-17 07:05 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2015-10-27 18:33 - 2015-09-17 07:04 - 07569408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2015-10-27 18:33 - 2015-09-17 07:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2015-10-27 18:33 - 2015-09-17 07:04 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2015-10-27 18:33 - 2015-09-17 07:03 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2015-10-27 18:33 - 2015-09-17 07:03 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2015-10-27 18:33 - 2015-09-17 07:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2015-10-27 18:33 - 2015-09-17 07:03 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
2015-10-27 18:33 - 2015-09-17 07:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
2015-10-27 18:33 - 2015-09-17 07:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
2015-10-27 18:33 - 2015-09-17 07:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
2015-10-27 18:33 - 2015-09-17 07:00 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2015-10-27 18:33 - 2015-09-17 07:00 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll
2015-10-27 18:33 - 2015-09-17 06:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2015-10-27 18:33 - 2015-09-17 06:57 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2015-10-27 18:33 - 2015-09-17 06:57 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
2015-10-27 18:33 - 2015-09-17 06:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2015-10-27 18:33 - 2015-09-17 06:57 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2015-10-27 18:33 - 2015-09-17 06:56 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2015-10-27 18:33 - 2015-09-17 06:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2015-10-27 18:33 - 2015-09-17 06:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll
2015-10-27 18:33 - 2015-09-17 06:55 - 02236416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-27 18:33 - 2015-09-17 06:55 - 01601536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2015-10-27 18:33 - 2015-09-17 06:55 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx02000.dll
2015-10-27 18:33 - 2015-09-17 06:55 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2015-10-27 18:33 - 2015-09-17 06:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
2015-10-27 18:33 - 2015-09-17 06:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
2015-10-27 18:33 - 2015-09-17 06:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
2015-10-27 18:33 - 2015-09-17 06:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2015-10-27 18:33 - 2015-09-17 06:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll
2015-10-27 18:33 - 2015-09-17 06:54 - 03781120 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2015-10-27 18:33 - 2015-09-17 06:54 - 00780288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-10-27 18:33 - 2015-09-17 06:54 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-27 18:33 - 2015-09-17 06:53 - 07055872 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 06572032 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2015-10-27 18:33 - 2015-09-17 06:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
2015-10-27 18:33 - 2015-09-17 06:51 - 02660864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2015-10-27 18:33 - 2015-09-17 06:51 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2015-10-27 18:33 - 2015-09-17 06:51 - 01203712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-10-27 18:33 - 2015-09-17 06:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-10-27 18:33 - 2015-09-17 06:51 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2015-10-27 18:33 - 2015-09-17 06:50 - 00929280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-10-27 18:33 - 2015-09-17 06:50 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2015-10-27 18:33 - 2015-09-17 06:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2015-10-27 18:33 - 2015-09-17 06:50 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2015-10-27 18:33 - 2015-09-17 06:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeWiFi.dll
2015-10-27 18:33 - 2015-09-17 06:50 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeCell.dll
2015-10-27 18:33 - 2015-09-17 06:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys
2015-10-27 18:33 - 2015-09-17 06:49 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\LocationWebproxy.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\LocationGeofences.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\LocationCrowdsource.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeIP.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\LocationWiFiAdapter.dll
2015-10-27 18:33 - 2015-09-17 06:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Speech.Pal.dll
2015-10-27 18:33 - 2015-09-17 06:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2015-10-27 18:33 - 2015-09-17 06:48 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2015-10-27 18:33 - 2015-09-17 06:48 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2015-10-27 18:33 - 2015-09-17 06:48 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2015-10-27 18:33 - 2015-09-17 06:48 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll
2015-10-27 18:33 - 2015-09-17 06:48 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2015-10-27 18:33 - 2015-09-17 06:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2015-10-27 18:33 - 2015-09-17 06:47 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2015-10-27 18:33 - 2015-09-17 06:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2015-10-27 18:33 - 2015-09-17 06:46 - 00928256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2015-10-27 18:33 - 2015-09-17 06:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2015-10-27 18:33 - 2015-09-17 06:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2015-10-27 18:33 - 2015-09-17 06:46 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2015-10-27 18:33 - 2015-09-17 06:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2015-10-27 18:33 - 2015-09-17 06:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2015-10-27 18:33 - 2015-09-17 06:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2015-10-27 18:33 - 2015-09-17 06:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll
2015-10-27 18:33 - 2015-09-17 06:45 - 01331200 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2015-10-27 18:33 - 2015-09-17 06:45 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2015-10-27 18:33 - 2015-09-17 06:45 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2015-10-27 18:33 - 2015-09-17 06:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2015-10-27 18:33 - 2015-09-17 06:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2015-10-27 18:33 - 2015-09-17 06:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2015-10-27 18:33 - 2015-09-17 06:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2015-10-27 18:33 - 2015-09-17 06:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll
2015-10-27 18:33 - 2015-09-17 06:43 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2015-10-27 18:33 - 2015-09-17 06:43 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-10-27 18:33 - 2015-09-17 06:43 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2015-10-27 18:33 - 2015-09-17 06:43 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2015-10-27 18:33 - 2015-09-17 06:41 - 00217088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2015-10-27 18:33 - 2015-09-17 06:40 - 06101504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2015-10-27 18:33 - 2015-09-17 06:40 - 01162240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2015-10-27 18:33 - 2015-09-17 06:39 - 00587264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-10-27 18:33 - 2015-09-17 06:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-10-27 18:33 - 2015-09-17 06:38 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2015-10-27 18:33 - 2015-09-17 06:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
2015-10-27 18:33 - 2015-09-17 06:36 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll
2015-10-27 18:33 - 2015-09-17 06:35 - 05079552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2015-10-27 18:33 - 2015-09-17 06:35 - 02207232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-27 18:33 - 2015-09-17 06:35 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2015-10-27 18:33 - 2015-09-17 06:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-10-27 18:33 - 2015-09-17 06:34 - 00253440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2015-10-27 18:33 - 2015-09-17 06:32 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2015-10-27 18:33 - 2015-09-17 06:32 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2015-10-27 18:33 - 2015-09-17 06:32 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2015-10-27 18:33 - 2015-09-17 06:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll
2015-10-27 18:33 - 2015-09-17 06:30 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2015-10-27 18:33 - 2015-09-17 06:29 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2015-10-27 18:33 - 2015-09-17 06:29 - 00701952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2015-10-27 18:33 - 2015-09-17 06:29 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2015-10-27 18:33 - 2015-09-17 06:28 - 00473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2015-10-27 18:33 - 2015-09-17 06:26 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2015-10-27 18:33 - 2015-09-17 06:16 - 00512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2015-10-27 18:24 - 2015-10-27 18:24 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-10-27 18:24 - 2015-10-27 18:24 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-03 22:13 - 2015-08-12 01:44 - 02027882 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-03 22:13 - 2015-07-10 16:48 - 00839090 _____ C:\Windows\system32\perfh01D.dat
2015-11-03 22:13 - 2015-07-10 16:48 - 00190108 _____ C:\Windows\system32\perfc01D.dat
2015-11-03 22:13 - 2015-01-19 10:18 - 00000000 ___RD C:\Users\Annelie\Dropbox
2015-11-03 22:13 - 2015-01-19 10:16 - 00000000 ____D C:\Users\Annelie\AppData\Roaming\Dropbox
2015-11-03 22:12 - 2015-08-12 01:39 - 00000031 _____ C:\Windows\system32\bbcap.err
2015-11-03 22:12 - 2012-09-01 13:56 - 00000000 ____D C:\Users\Annelie\AppData\LocalLow\AuthenTec
2015-11-03 22:07 - 2012-05-10 14:46 - 00000000 ____D C:\Users\Lukas\AppData\Roaming\Spotify
2015-11-03 22:07 - 2012-05-09 20:19 - 00000000 ____D C:\Users\Lukas\AppData\Roaming\Skype
2015-11-03 22:07 - 2012-05-09 19:35 - 00000000 ____D C:\Program Files (x86)\Steam
2015-11-03 22:07 - 2012-05-09 19:29 - 00000000 ____D C:\Users\Lukas\AppData\LocalLow\AuthenTec
2015-11-03 22:06 - 2015-09-26 14:34 - 00003748 _____ C:\Windows\System32\Tasks\Ad-Aware Update (Weekly)
2015-11-03 22:06 - 2015-07-10 13:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-03 22:06 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\sru
2015-11-03 22:04 - 2015-09-26 17:54 - 00004682 _____ C:\aaw7boot.log
2015-11-03 22:04 - 2015-07-10 10:05 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-11-03 22:01 - 2012-09-05 22:13 - 00000258 _____ C:\Windows\Tasks\HP Photo Creations Messager.job
2015-11-03 21:58 - 2012-05-13 08:24 - 00004160 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{35392147-17BB-4D66-B88A-7DD824A14427}
2015-11-03 21:52 - 2012-05-13 09:39 - 00000000 ____D C:\Users\Ellinor.Familje-HP\AppData\Local\Spotify
2015-11-03 21:52 - 2012-05-13 09:38 - 00000000 ____D C:\Users\Ellinor.Familje-HP\AppData\Roaming\Spotify
2015-11-03 21:52 - 2012-05-13 08:24 - 00000000 ____D C:\Users\Ellinor.Familje-HP\AppData\LocalLow\AuthenTec
2015-11-03 21:31 - 2012-09-05 21:39 - 00000868 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-03 21:23 - 2015-06-27 08:07 - 00001022 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2950963471-1327350633-3252255542-1005UA.job
2015-11-03 21:02 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\AppReadiness
2015-11-03 20:57 - 2012-09-16 10:55 - 00000000 ___RD C:\Users\Martin\Dropbox
2015-11-03 20:57 - 2012-09-16 10:49 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Dropbox
2015-11-03 20:57 - 2012-05-09 18:45 - 00000000 ____D C:\Users\Martin\AppData\LocalLow\AuthenTec
2015-11-03 18:40 - 2012-07-06 21:41 - 00000000 ____D C:\Users\Ellinor.Familje-HP\AppData\Roaming\Skype
2015-11-03 18:11 - 2012-09-01 13:56 - 00004160 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7846CBD2-A75F-4A4D-A110-58D6A5503EBE}
2015-11-03 17:53 - 2012-05-09 18:51 - 00004158 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{36FB0039-B514-40AA-97E5-8B9E43955C2A}
2015-11-03 02:08 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\appraiser
2015-11-02 20:00 - 2014-07-14 15:43 - 00000000 __SHD C:\Users\Annelie\AppData\LocalLow\EmieUserList
2015-11-02 20:00 - 2014-04-28 19:07 - 00000000 __SHD C:\Users\Annelie\AppData\LocalLow\EmieSiteList
2015-11-02 19:59 - 2015-08-16 11:07 - 00002384 _____ C:\Users\Annelie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-02 19:59 - 2015-08-16 11:07 - 00000000 ___RD C:\Users\Annelie\OneDrive
2015-11-02 19:53 - 2015-08-20 20:21 - 00002417 _____ C:\Users\Ellinor.Familje-HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-02 19:53 - 2015-08-20 20:21 - 00000000 ___RD C:\Users\Ellinor.Familje-HP\OneDrive
2015-11-02 19:52 - 2015-08-12 01:45 - 00000000 ____D C:\Users\Ellinor.Familje-HP
2015-11-02 19:52 - 2014-07-01 18:50 - 00000000 __SHD C:\Users\Ellinor.Familje-HP\AppData\LocalLow\EmieUserList
2015-11-02 19:52 - 2014-06-16 16:30 - 00000000 __SHD C:\Users\Ellinor.Familje-HP\AppData\LocalLow\EmieSiteList
2015-11-01 12:48 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\rescache
2015-11-01 12:47 - 2015-07-10 11:55 - 00000000 ____D C:\Windows\CbsTemp
2015-10-31 09:44 - 2015-08-12 02:59 - 00000000 ____D C:\Users\Martin\AppData\Local\Packages
2015-10-31 09:09 - 2014-12-29 19:43 - 00003972 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-10-30 19:19 - 2015-08-12 03:04 - 00002381 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-10-30 19:19 - 2015-08-12 03:04 - 00000000 ___RD C:\Users\Martin\OneDrive
2015-10-30 14:23 - 2015-06-27 08:07 - 00000970 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2950963471-1327350633-3252255542-1005Core.job
2015-10-30 14:13 - 2013-09-19 12:25 - 00002332 _____ C:\Users\Annelie\Desktop\Google Chrome.lnk
2015-10-30 01:00 - 2012-05-09 21:05 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Spotify
2015-10-29 19:58 - 2013-05-30 12:12 - 00000000 ____D C:\Users\Public\loggar o säkerhetskopiering ccleaner_mm
2015-10-29 19:30 - 2015-08-12 01:45 - 00000000 ____D C:\Users\Martin
2015-10-29 19:29 - 2013-01-29 17:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-29 19:18 - 2012-06-21 13:22 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2015-10-29 14:03 - 2015-05-31 10:33 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-10-29 14:03 - 2015-05-31 10:31 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-10-29 14:02 - 2013-12-10 19:41 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-10-29 14:00 - 2011-11-17 07:48 - 00000000 ____D C:\ProgramData\Skype
2015-10-29 13:58 - 2015-09-26 13:46 - 00000000 ____D C:\Users\Martin\.oracle_jre_usage
2015-10-29 13:58 - 2015-09-17 21:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-10-29 13:58 - 2014-08-14 16:53 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-29 13:58 - 2013-10-30 11:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-29 13:58 - 2013-01-29 17:47 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-10-29 13:58 - 2013-01-29 17:47 - 00001270 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2015-10-29 13:58 - 2011-11-17 07:48 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2015-10-29 13:57 - 2013-06-25 12:08 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-29 13:06 - 2013-10-30 11:46 - 00000000 ____D C:\ProgramData\Oracle
2015-10-29 12:49 - 2012-09-06 15:48 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2015-10-29 12:41 - 2015-08-12 01:45 - 00000000 ____D C:\Users\Lukas
2015-10-29 12:40 - 2012-09-05 21:39 - 00000000 ____D C:\Program Files\Google
2015-10-29 12:40 - 2012-09-05 21:39 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-29 00:57 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\SysWOW64\F12
2015-10-29 00:57 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\system32\F12
2015-10-29 00:57 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\PurchaseDialog
2015-10-29 00:57 - 2015-07-10 12:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-29 00:57 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-10-29 00:57 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-10-29 00:57 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\Provisioning
2015-10-29 00:57 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\L2Schemas
2015-10-28 20:32 - 2015-03-08 19:40 - 00000424 _____ C:\Users\Annelie\AppData\Local\UserProducts.xml
2015-10-28 19:52 - 2013-08-08 13:37 - 00000000 ____D C:\Windows\system32\MRT
2015-10-28 19:44 - 2012-05-12 11:10 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-28 19:06 - 2015-08-20 20:13 - 00000000 ____D C:\Users\Ellinor.Familje-HP\AppData\Local\Packages
2015-10-28 19:00 - 2015-08-12 01:45 - 00000000 ___RD C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-28 18:57 - 2015-08-12 01:45 - 00000000 ____D C:\Users\Annelie
2015-10-28 18:51 - 2015-08-13 08:41 - 00000000 ____D C:\Users\Annelie\AppData\Local\Packages
2015-10-28 18:44 - 2014-11-16 11:27 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-10-28 18:32 - 2012-09-05 21:39 - 00000000 ____D C:\Users\Martin\AppData\Local\Google
2015-10-28 18:28 - 2015-06-20 11:32 - 00001018 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2950963471-1327350633-3252255542-1000UA.job
2015-10-28 18:28 - 2015-06-20 11:32 - 00000966 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2950963471-1327350633-3252255542-1000Core.job
2015-10-28 18:28 - 2012-09-05 21:39 - 00001024 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-28 18:28 - 2012-09-05 21:39 - 00001020 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-28 00:08 - 2015-06-20 11:32 - 00003784 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2950963471-1327350633-3252255542-1000UA
2015-10-28 00:08 - 2015-06-20 11:32 - 00003512 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2950963471-1327350633-3252255542-1000Core
2015-10-28 00:06 - 2012-09-05 21:39 - 00003596 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-10-28 00:05 - 2012-09-05 21:39 - 00003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-10-28 00:04 - 2013-06-02 18:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-10-27 20:48 - 2013-12-05 19:35 - 00003254 _____ C:\Windows\System32\Tasks\HPCeeScheduleForMartin
2015-10-27 20:48 - 2013-12-05 19:35 - 00000358 _____ C:\Windows\Tasks\HPCeeScheduleForMartin.job
2015-10-27 18:48 - 2015-09-26 17:27 - 00016432 _____ C:\Windows\system32\lsdelete.exe
2015-10-27 18:48 - 2015-09-26 14:13 - 00055384 _____ (Sunbelt Software) C:\Windows\system32\Drivers\SBREDrv.sys
2015-10-27 18:45 - 2014-02-17 23:47 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-10-27 18:35 - 2015-08-12 03:12 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Raptr
2015-10-27 18:24 - 2014-06-26 14:51 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-10-27 18:24 - 2013-12-21 17:08 - 00153744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-10-27 18:24 - 2013-12-21 17:08 - 00004006 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-10-27 18:24 - 2013-03-21 22:04 - 00274808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-10-27 18:24 - 2013-03-21 22:04 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-10-27 18:24 - 2012-05-09 19:03 - 01049880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-10-27 18:24 - 2012-05-09 19:03 - 00448968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-10-27 18:24 - 2012-05-09 19:03 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-10-27 18:24 - 2012-05-09 19:03 - 00090968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-10-16 04:10 - 2015-07-10 12:06 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 04:10 - 2015-07-10 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
 
==================== Files in the root of some directories =======
 
2012-12-28 17:09 - 2012-12-27 05:09 - 0000044 ____H () C:\Program Files (x86)\5d655b68.tmp
2013-12-15 20:27 - 2013-12-15 20:47 - 0001456 _____ () C:\Users\Annelie\AppData\Local\Adobe Spara för webben 12.0 Prefs
2015-03-08 19:39 - 2014-11-18 12:32 - 0145792 _____ () C:\Users\Annelie\AppData\Local\downloader.exe
2015-03-08 19:39 - 2015-03-08 19:39 - 0000003 _____ () C:\Users\Annelie\AppData\Local\updater.log
2015-03-08 19:40 - 2015-10-28 20:32 - 0000424 _____ () C:\Users\Annelie\AppData\Local\UserProducts.xml
2015-03-30 18:20 - 2015-03-30 18:20 - 0000000 _____ () C:\Users\Annelie\AppData\Local\{00238CA2-7A60-44AA-A2E2-858E34D8F966}
2012-09-05 22:11 - 2012-09-05 22:11 - 0000057 _____ () C:\ProgramData\Ament.ini
 
Files to move or delete:
====================
C:\Users\Public\adwcleaner_5.017.exe
 

Some files in TEMP:
====================
C:\Users\Annelie\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpx3lqxo.dll
C:\Users\Annelie\AppData\Local\Temp\sqlite3.dll
C:\Users\Annelie\AppData\Local\Temp\{6B0D6073-CD93-4D74-A8AC-5CA1323DB155}.dll
C:\Users\Annelie\AppData\Local\Temp\{81903D8B-1BA3-472C-A1F2-21B185272C11}.dll
C:\Users\Annelie\AppData\Local\Temp\{E555BECE-C8D3-4B47-9A9B-627A000D19DB}.dll
C:\Users\Ellinor.Familje-HP\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Ellinor.Familje-HP\AppData\Local\Temp\{53EEE974-A4AA-4ADC-9889-30D3CD7763DB}.dll
C:\Users\Ellinor.Familje-HP\AppData\Local\Temp\{9C23D460-9EE2-4493-9B1F-8281B493CCE5}.dll
C:\Users\Ellinor.Familje-HP\AppData\Local\Temp\{BFD1B150-A1CF-40C1-94AC-8DDC01777217}.dll
C:\Users\Lukas\AppData\Local\Temp\{170446B3-AEA7-4DAA-B9D9-364FD0E7D7C6}.dll
C:\Users\Lukas\AppData\Local\Temp\{1E3A4753-541A-4439-AC9B-DAC9750B9166}.dll
C:\Users\Lukas\AppData\Local\Temp\{9526D768-63B3-4710-A506-D21C278A26BF}.dll
C:\Users\Lukas\AppData\Local\Temp\{B4F4F996-DE37-45E9-A15D-5420BE9E2FE4}.dll
C:\Users\Martin\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpy78_ll.dll
C:\Users\Martin\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\Martin\AppData\Local\Temp\{163CECB4-F211-4EAB-9A5F-241F067B15C7}.dll
C:\Users\Martin\AppData\Local\Temp\{9320FE24-89E2-4F57-9C4C-69ABA323FD0F}.dll
C:\Users\Martin\AppData\Local\Temp\{95EEB4AF-7B3A-4F94-A1F1-C0BF611468F3}.dll
C:\Users\Martin\AppData\Local\Temp\{B1148DDE-6342-4180-8EAA-541AA707DA13}.dll
C:\Users\Martin\AppData\Local\Temp\{C3D0BD08-330A-423E-8D41-16EB4D4FCB0F}.dll
C:\Users\Martin\AppData\Local\Temp\{CEE4F513-5D40-41C5-8815-B4AD607F67F4}.dll
 

==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 

LastRegBack: 2015-11-03 18:14
 
==================== End of FRST.txt ============================
Länk till kommentar
Dela på andra webbplatser

Resultaten och Annelies FRST.txt tycker jag ser bra ut nu. Är det fortfarande problem med Chrome i alla konton?

Länk till kommentar
Dela på andra webbplatser

Ja det är fortfarande kvar.

Men de här raderna då som stod i Annelies fixlog?

 

1-5-21-2950963471-1327350633-3252255542-1004 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdBQlDRAdFbQFaWF1cFQBBdRQBA1tFDAYXIgkBVwxIQwUQch9aFQQTSEcFME0FCFwEURNNfXRZBlASQFllKVdc&q={searchTerms} => Error: No automatic fix found for this entry.
1-5-21-2950963471-1327350633-3252255542-1004 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQFdBQlDRAdFbQFaWF1cFQBBdRQBA1tFDAYXIgkBVwxIQwUQch9aFQQTSEcFME0FCFwEURNNfXRZBlASQFllKVdc&q={searchTerms} => Error: No automatic fix found for this entry.

Länk till kommentar
Dela på andra webbplatser

Så vitt jag kunde se fanns de inte längre kvar i Annelies FRST.txt för de har nog tagits bort av fixarna i de andra kontona. Felmeddelandena beror på att jag missade början av raderna när jag kopierade från en tidigare FRST.txt.

 

Hur ser FRST-loggen ut i ditt konto numera?

Bifoga gärna filen nu i stället för att klistra in innehållet.

Länk till kommentar
Dela på andra webbplatser

1. Nedanstående skript kommer att tömma alla papperskorgar och mappar för tillfälliga filer för alla konton, se till att där inte finns något som någon vill ha kvar.

 

Starta programmet Anteckningar.
Kopiera alla rader i rutan:

CreateRestorePoint:
CloseProcesses:
CHR HKU\S-1-5-21-2950963471-1327350633-3252255542-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
EmptyTemp:
och klistra in i Anteckningar. Kontrollera att inga filer har delats upp på två rader.
Spara filen på skrivbordet med namnet fixlist.txt.

Stäng av alla program.
Starta FRST som finns på skrivbordet.
Klicka på knappen Fix.
Vänta tills programmet är klart.
Om datorn inte startas om automatiskt så gör det själv.

Programmet skapar en logg Fixlog.txt på skrivbordet.
Klistra in innehållet i den i ditt svar.

 

 

2. När började problemet?

(Du startade den här tråden för en vecka sen, den 29 okt.)

 

3. Återställning av Chrome: https://support.google.com/chrome/answer/3296214?hl=sv

Länk till kommentar
Dela på andra webbplatser

Fix result of Farbar Recovery Scan Tool (x64) Version:05-11-2015
Ran by Martin (2015-11-06 01:27:01) Run:5
Running from C:\Users\Martin\Desktop
Loaded Profiles: Martin (Available Profiles: Martin & Lukas & Ellinor & Annelie & DefaultAppPool)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
CHR HKU\S-1-5-21-2950963471-1327350633-3252255542-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
EmptyTemp:
*****************
 
Restore point was successfully created.
Processes closed successfully.
"HKU\S-1-5-21-2950963471-1327350633-3252255542-1000\SOFTWARE\Policies\Google" => key removed successfully
 
=========  ipconfig /flushdns =========
 

Windows IP Configuration
 
Successfully flushed the DNS Resolver Cache.
 
========= End of CMD: =========
 

=========  netsh winsock reset catalog =========
 

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.
 

========= End of CMD: =========
 

=========  netsh int ip reset c:\resetlog.txt =========
 
Resetting Global, OK!
Resetting Interface, OK!
Resetting Neighbor, OK!
Resetting Path, OK!
Resetting , failed.
�tkomst nekad.
 
Resetting , OK!
Restart the computer to complete this action.
 

========= End of CMD: =========
 
EmptyTemp: => 947.6 MB temporary data Removed.
 

The system needed a reboot.
 
==== End of Fixlog 01:28:17 ====
 
Tror att problemet kom ca 2 veckor innan den 29/10 men jag vet inte säkert. Hade mycket på jobbet och lät bara datorn stå.
Med vänlig hälsning///Martin

Länk till kommentar
Dela på andra webbplatser

Hej!

Fortfarande kvar i Chrome... ska jag kanske avinstallera Chrome och rensa register med CCleaner? Eller försöka köra en ren w10 installation om det går (har bytt till SSD efter uppgradering)? Eller orkar du söka mer, känner att jag kanske tar allt för mycket av din tid?

Länk till kommentar
Dela på andra webbplatser

Chrome använder sig inte av registret för inställningar så inget behov av att köra CCleaner för att rensa registret. Pröva med att avinstallera Crome med valet om att ta bort profilerna och ta sen bort alla Chrome-mappar.

https://support.google.com/chrome/answer/95319?hl=sv

Mappar t ex C:\Users\Martin\AppData\Local\Google\Chrome

 

Enligt första loggen så hände just ingenting i datorn under oktober innan Avast installerades eller uppdaterades och Windows uppdaterades den 25:e.

Länk till kommentar
Dela på andra webbplatser

Hej!

Jag har varit borta ett tag.

Innan dess gjorde jag som du sa och avinstallerade Chrome.

Jag letade efter mappar men jag hittade inte mycket och den adressen du skrev: C:/Users/... Chrome. hittade jag inte någon mapp på.

Har använt Edge och provat lite och där verkar det inte hända något.

 

Tror du jag vågar installera Google igen?

Tror du att det kan finnas annat skadligt som smugit sig in med detta förutom allt som är rensat?

 

Med vänlig hälsning och tack!

///M

Länk till kommentar
Dela på andra webbplatser

Hej!

 

Hittar du mappen C:\Users\Martin\AppData\Local eller om det syns på svenska C:\Användare\Martin\AppData\Local?

Länk till kommentar
Dela på andra webbplatser

Arkiverat

Det här ämnet är nu arkiverat och är stängt för ytterligare svar.



×
×
  • Skapa nytt...