Har fått virus som inte går att få bort

19 juli, 2012

Hej,

Jag tänkte höra om det är någon som kan hjälpa mig med att få bort ett ev. virus i min dator. Har varit i kontakt med Nortonsupporten idag för att mitt Norton inte fungerade som det skulle. Efter en lång support med teknikern där så upptäckte hon att det förmodligen finns ett virus i datorn (hon såg det i listan för autostartprogrammen). Trots att hon körde Norton Power Eraser så gick det inte att få bort. Jag blev erbjuden att köpa en utökad tjänst för 999 kr för att få bort viruset, men jag tänkte inte ta erbjudandet innan jag vänt mig till forumet här för att be om hjälp. jag har fått väldigt bra hjälp och support här tidigare och hoppas på detsamma nu .

Mvh

Birgitta

Har kört DDS och här är loggen:

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 9.0.8112.16421

Run by Sanna at 17:00:48 on 2012-07-19

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.46.1053.18.2269.892 [GMT 2:00]

.

AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\system32\Ati2evxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\Ati2evxx.exe

C:\Windows\system32\taskeng.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPStart.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\DivX\DivX Update\DivXUpdate.exe

c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

C:\Program Files\Norton Internet Security\Engine\19.7.1.5\ccSvcHst.exe

C:\Windows\system32\IoctlSvc.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Program Files\Norton Internet Security\Engine\19.7.1.5\ccSvcHst.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\system32\DllHost.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\system32\rundll32.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uSearch Bar = Preserve

uStart Page = hxxp://www.google.se/

mStart Page = hxxp://home.sweetim.com

mLocal Page =

uURLSearchHooks: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBit0.dll

uURLSearchHooks: H - No File

mURLSearchHooks: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBit0.dll

mURLSearchHooks: H - No File

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\programdata\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll

BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll

BHO: Norton Identity Protection: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton internet security\engine\19.7.1.5\coIEPlg.dll

BHO: Norton Vulnerability Protection: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton internet security\engine\19.7.1.5\ips\IPSBHO.DLL

BHO: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBit0.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: SweetIM Toolbar Helper: {eee6c35c-6118-11dc-9c72-001320c79847} - c:\program files\sweetim\toolbars\internet explorer\mgToolbarIE.dll

BHO: Yontoo Layers: {fd72061e-9fde-484d-a58a-0bab4151cad8} - c:\program files\yontoo layers runtime\YontooIEClient.dll

TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBit0.dll

TB: SweetIM Toolbar for Internet Explorer: {eee6c35b-6118-11dc-9c72-001320c79847} - c:\program files\sweetim\toolbars\internet explorer\mgToolbarIE.dll

TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton internet security\engine\19.7.1.5\coIEPlg.dll

TB: {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No File

TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

TB: RadioBar Toolbar: {5b291e6c-9a74-4034-971b-a4b007a0b315} -

TB: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File

mRun: [startCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun

mRun: [synTPStart] c:\program files\synaptics\syntp\SynTPStart.exe

mRun: [FSCRecovery] c:\program files\fujitsu siemens computers\fujitsu siemens computers recovery\FSCRecoveryReminder.exe

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW

mRunOnce: [719_1449261484122] "c:\users\sanna\appdata\local\logmei~1\LMIR0002.tmp_r.bat"

mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: Search the Web - c:\program files\sweetim\toolbars\internet explorer\resources\menuext.html

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: DhcpNameServer = 192.168.1.1

TCP: Interfaces\{B90BB8C7-48E1-4FF1-A710-43A3752B5598} : DhcpNameServer = 192.168.1.1

AppInit_DLLs: c:\progra~1\google\google~2\GOEC62~1.DLL

.

============= SERVICES / DRIVERS ===============

.

R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-1-22 15672]

R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nis\1307010.005\symds.sys [2012-7-18 340088]

R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nis\1307010.005\symefa.sys [2012-7-18 905336]

R1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.5.0.145\definitions\bashdefs\20120711.002\BHDrvx86.sys [2012-7-11 821920]

R1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\nis\1307010.005\ccsetx86.sys [2012-7-18 132744]

R1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_19.5.0.145\definitions\ipsdefs\20120718.001\IDSvix86.sys [2012-7-19 382624]

R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nis\1307010.005\ironx86.sys [2012-7-18 149624]

R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\system32\drivers\nis\1307010.005\symtdiv.sys [2012-7-18 345208]

R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]

R2 NIS;Norton Internet Security;c:\program files\norton internet security\engine\19.7.1.5\ccsvchst.exe [2012-7-18 138232]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2012-7-19 106656]

R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2009-3-10 84240]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 gupdate;Tjänsten Google Update (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-7-7 135664]

S3 GoogleDesktopManager-110309-193829;Google Desktop-hanteraren 5.9.911.3589;c:\program files\google\google desktop search\GoogleDesktop.exe [2009-8-31 30192]

S3 gupdatem;Tjänsten Google Update (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-7-7 135664]

S3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\system32\drivers\Ph3xIB32.sys [2007-4-3 1131136]

S3 WisLMSvc;WisLMSvc;c:\program files\launch manager\WisLMSvc.exe [2009-3-10 118784]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2012-07-19 10:46:05 -------- d-----w- c:\users\sanna\appdata\local\NPE

2012-07-18 15:59:12 905336 ----a-w- c:\windows\system32\drivers\nis\1307010.005\symefa.sys

2012-07-18 15:59:12 574072 ----a-w- c:\windows\system32\drivers\nis\1307010.005\srtsp.sys

2012-07-18 15:59:12 345208 ----a-w- c:\windows\system32\drivers\nis\1307010.005\symtdiv.sys

2012-07-18 15:59:12 340088 ----a-r- c:\windows\system32\drivers\nis\1307010.005\symds.sys

2012-07-18 15:59:12 32888 ----a-w- c:\windows\system32\drivers\nis\1307010.005\srtspx.sys

2012-07-18 15:59:12 318584 ----a-w- c:\windows\system32\drivers\nis\1307010.005\symnets.sys

2012-07-18 15:59:11 149624 ----a-w- c:\windows\system32\drivers\nis\1307010.005\ironx86.sys

2012-07-18 15:59:11 132744 ----a-w- c:\windows\system32\drivers\nis\1307010.005\ccsetx86.sys

2012-07-18 15:58:52 -------- d-----w- c:\windows\system32\drivers\nis\1307010.005

2012-07-18 14:55:03 141944 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS

2012-07-18 14:55:03 -------- d-----w- c:\program files\Symantec

2012-07-18 14:55:03 -------- d-----w- c:\program files\common files\Symantec Shared

2012-07-18 14:54:16 -------- d-----w- c:\windows\system32\drivers\NIS

2012-07-18 14:54:13 -------- d-----w- c:\program files\Norton Internet Security

2012-07-16 11:43:09 -------- d-----w- c:\program files\NortonInstaller

2012-07-16 11:10:57 -------- d-----w- c:\users\sanna\appdata\local\LogMeIn Rescue Applet

2012-07-15 17:26:38 2047488 ----a-w- c:\windows\system32\win32k.sys

2012-07-15 17:16:07 5120 ----a-w- c:\windows\system32\wmi.dll

2012-07-15 17:16:07 172032 ----a-w- c:\windows\system32\wintrust.dll

2012-07-15 17:16:07 157696 ----a-w- c:\windows\system32\imagehlp.dll

2012-07-15 17:16:07 12800 ----a-w- c:\windows\system32\drivers\fs_rec.sys

2012-07-15 16:36:07 984064 ----a-w- c:\windows\system32\crypt32.dll

2012-07-15 16:36:07 98304 ----a-w- c:\windows\system32\cryptnet.dll

2012-07-15 16:36:07 133120 ----a-w- c:\windows\system32\cryptsvc.dll

2012-07-15 16:35:10 53120 ----a-w- c:\windows\system32\drivers\partmgr.sys

2012-07-15 16:35:09 905600 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-07-15 16:35:07 1218048 ----a-w- c:\program files\windows journal\NBDoc.DLL

2012-07-15 16:35:06 983040 ----a-w- c:\program files\windows journal\JNTFiltr.dll

2012-07-15 16:35:06 964608 ----a-w- c:\program files\windows journal\JNWDRV.dll

2012-07-15 16:35:06 936960 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll

2012-07-15 16:35:06 47104 ----a-w- c:\program files\windows journal\PDIALOG.exe

2012-07-15 16:35:06 1404928 ----a-w- c:\program files\common files\microsoft shared\ink\InkObj.dll

2012-07-15 16:35:00 219648 ----a-w- c:\windows\system32\d3d10_1core.dll

2012-07-15 16:35:00 1172480 ----a-w- c:\windows\system32\d3d10warp.dll

2012-07-15 16:35:00 1069056 ----a-w- c:\windows\system32\DWrite.dll

2012-07-15 16:34:59 683008 ----a-w- c:\windows\system32\d2d1.dll

2012-07-15 16:34:59 160768 ----a-w- c:\windows\system32\d3d10_1.dll

2012-07-15 16:34:57 708608 ----a-w- c:\program files\common files\system\ado\msado15.dll

2012-07-15 16:34:48 2409784 ----a-w- c:\program files\windows mail\OESpamFilter.dat

2012-07-15 16:34:38 1401856 ----a-w- c:\windows\system32\msxml6.dll

2012-07-15 16:34:37 1248768 ----a-w- c:\windows\system32\msxml3.dll

2012-07-15 16:34:16 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys

2012-07-15 16:34:14 3602816 ----a-w- c:\windows\system32\ntkrnlpa.exe

2012-07-15 16:34:14 3550080 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-07-15 16:34:11 440704 ----a-w- c:\windows\system32\drivers\ksecdd.sys

2012-07-15 16:34:10 278528 ----a-w- c:\windows\system32\schannel.dll

2012-07-15 16:34:10 204288 ----a-w- c:\windows\system32\ncrypt.dll

2012-07-15 16:22:08 6762896 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{89f7f554-c27f-4c11-8b8d-002db0b6a146}\mpengine.dll

2012-07-15 15:57:09 2422272 ----a-w- c:\windows\system32\wucltux.dll

2012-07-15 15:56:38 88576 ----a-w- c:\windows\system32\wudriver.dll

2012-07-15 15:56:30 33792 ----a-w- c:\windows\system32\wuapp.exe

2012-07-15 15:56:30 171904 ----a-w- c:\windows\system32\wuwebv.dll

.

==================== Find3M ====================

.

2012-06-02 08:33:25 1800192 ----a-w- c:\windows\system32\jscript9.dll

2012-06-02 08:25:08 1129472 ----a-w- c:\windows\system32\wininet.dll

2012-06-02 08:25:03 1427968 ----a-w- c:\windows\system32\inetcpl.cpl

2012-06-02 08:20:33 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2012-06-02 08:16:52 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2012-05-31 10:25:14 237072 ------w- c:\windows\system32\MpSigStub.exe

.

============= FINISH: 17:02:29,88 ===============

19 juli, 2012

Vad ger Norton för garantier för att deras Norton Power Eraser skulle lösa problemet?

Betala 999 kr när man får gratishjälp här, då är valet enkelt. Följ denna tråd:

//eforum.idg.se/topic/218337-till-dig-med-virus-eller-andra-skadliga-program-i-datorn/

19 juli, 2012

Vad ger Norton för garantier för att deras Norton Power Eraser skulle lösa problemet?

Betala 999 kr när man får gratishjälp här, då är valet enkelt. Följ denna tråd:

//eforum.idg.se/topic/218337-till-dig-med-virus-eller-andra-skadliga-program-i-datorn/

Håller med dig att valet är enkelt.

Jag har följt stegen i länken du angav.

/Birgitta

Det verkar som filen attach inte kom med i första inlägget. Gör ett nytt försök att bifoga den.

Attach.txt

19 juli, 2012

Ser i all hast att Java, OpenOffice, Adobe Reader, VLC media player samt Paint kan uppdateras EFTER att datorn har blivit genomgången av en moderator här på Eforum.

19 juli, 2012

Redigera inte inlägg långt efteråt för man får inga bevakningsmejl då och det är stor risk att jag missar det.

Avinstallera:

Yontoo Layers - orsak http://www.systemlookup.com/CLSID/56875-YontooIEClient_dll_YontooIEClient_2_dll.html

BitTorrentBar Toolbar - http://www.systemlookup.com/CLSID/71917-tbBitT_dll_tbBit0_dll_tbBit1_dll_tbBit2_dll_prxtbBitT_dll_prxtbBit0_dll_prxtbBit1_dll_prxtbBit2_dll.html

SweetIM Toolbar for Internet Explorer - http://www.systemlookup.com/CLSID/8159-mgToolbarIE_dll.html

Java 6 Update 26 - Gammal version med kända säkerhetshål som gör det lätt att infektera datorn från en webbsida.

Starta sedan om datorn.

Kör DDS igen och klistra in DDS.txt i ditt svar.

20 juli, 2012

Java går inte att avinstallera. får ett meddelande att "De gick inte att komma åt nätverksplatsen".

Yontoo Layers hittar jag inte i listan över program, varken i kontrollpanelen eller i startmenyn. Det programmet har jag avinstallerat förut, kanske är det därför det inte finns med i listan men ändå har lämnat rester efter sig?

Övriga program verkade gå bra att ta bort.

DDS-loggen kommer här:

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 9.0.8112.16421

Run by Sanna at 8:56:57 on 2012-07-20

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.46.1053.18.2269.1498 [GMT 2:00]

.

AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\system32\Ati2evxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\Ati2evxx.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\taskeng.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\System32\lpksetup.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Synaptics\SynTP\SynTPStart.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\DivX\DivX Update\DivXUpdate.exe

C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Norton Internet Security\Engine\19.7.1.5\ccSvcHst.exe

C:\Windows\system32\IoctlSvc.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files\Norton Internet Security\Engine\19.7.1.5\ccSvcHst.exe

C:\Windows\servicing\TrustedInstaller.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\msiexec.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\System32\svchost.exe -k swprv