Kan inte installera program ifrån nätet

[Martassen]

Jag har en dator bärbar hpdator med windows 8.1. Jag kan inte installera program ifrån internet verkar det som. När jag klicka download och Kör så ser jag att det ligger vid hämtade filer. Sedan när jag dubbelklickar händer ingenting.

 

Edit: Efter typ 2 minuter kom rutan upp så jag kan komma in i en installationsguide och välja språk på programmet.

 

Jag provade med att installera Malware bytes ifrån nätet bara för att ta något. Är det mitt norton som kollar av något?

Det verkar som jag kan installera program som inte är från nätet.

 

Tänkte nu även prova installera winzip. När jag klickar på kör så står den bara bara och snurrar och säger att den försöker ladda ner försök igen genom klicka bredvid om ej startar automatiskt.
Jag gör det och sedan trycker jag "kör". Inget händer.

 

Är det nån inställning i Windows eller i mitt norton som jag måste göra något med?

[Martassen]

När jag försökte installera Winzip i min dator jag har Windows8.1 så försvann nortonikonen nere till höger i aktivitetsfältet efter ett tag. Kommer ej in och installera och Nortonikonen försvann.

Jag startade om datorn och Norton är tebax där nere.

Försöker installera winzip ifrån internet och Norton jobbar för fullt med meddelanden.

Därefter kommer äntligen installationsrutan fram till slut och jag kan installera Winzip.

 

Är det någon inställning i Norton eller ska jag behöva avaktivera Norton när jag installerar program ifrån Internet om det inte funkar? Eller är det någon inställning i WIndows jag råkat vara på?

 

Jag har följande program i min dator:
Browse defender

Browse protect
Buzz dock
Springsmart 2013
Software updater
Snabdo
Lyrics boddy

 

Datorn är pigg i övrigt tycker jag.

 

[Cecilia]

Gäller detta en annan dator än den vi håller på och rensar?

För åtminstone Browsw defender, Browse protect och Snap.do räknas som olämpliga program/tillägg till webbläsare.

[Martassen]

nej detta är dator2 bäbar med windows 8,1.

Ska jag avinstallera det du säger?

[Cecilia]

Ja, det tycker jag och sen behövs nog en genomgång med FRST och AdwCleaner i denna dator också.

[Martassen]

Kört med frst nu. Se bifogade filer.

 

 

[Martassen]

Här är även rapport ifrån Adwcleaner. Våga ej köra clean förrän du säger det.

 

Jag antar scanningen är klar när det ser ut som bifogad bild.

 

 

 

 

[Martassen]

Körde ändå clean i adwcleaner. Se bifogad rapport

 

[Martassen]

Kört frst igen. Se bifogad fil.

 

[Cecilia]

1. Starta Anteckningar.

Kopiera alla rader i rutan:

Task: {0D739321-2F1E-4C85-A0C2-C0D65EE00E43} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION
Task: {B60002F5-D5D9-4161-858C-05CCD83937F5} - System32\Tasks\MySearchDial => C:\Users\magnus\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {BEEE0BFF-D639-4334-B47E-434F4DF78919} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert
Task: C:\WINDOWS\Tasks\MySearchDial.job => C:\Users\magnus\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Program Files (x86)\Desk 365
C:\Users\magnus\AppData\Roaming\mysearchdial
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
HKU\S-1-5-21-3483520326-1990137539-1373947984-1001\...\Run: [Yahoo! Search] => C:\Users\magnus\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe
C:\Users\magnus\AppData\Local\Pay-By-Ads
SearchScopes: HKCU - {17EB70FB-7134-4A4C-90E7-E36E67BA8C2B} URL = http://rts.dsrlte.com/?q={searchTerms}&r=556
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
FF NewTab: hxxp://rts.dsrlte.com/?m=tab
FF Homepage: hxxp://rts.dsrlte.com
FF Keyword.URL: hxxp://rts.dsrlte.com/?q=
FF SearchPlugin: C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\searchplugins\keepmysearch.xml
FF Extension: Snap.Do  - C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0} [2014-04-01]
CHR HKLM-x32\...\Chrome\Extension: [dijoojjdmkbmmmbobkingeecghfeciaj] - C:\Program Files (x86)\Spring Smart\dijoojjdmkbmmmbobkingeecghfeciaj.crx [2013-03-02]
C:\Program Files (x86)\Spring Smart

och klistra in i Anteckningar. Kontrollera att inga filer har delats upp på två rader.

Spara filen på skrivbordet med namnet fixlist.txt.

 

Starta FRST som finns på skrivbordet.

Klicka på knappen Fix.

Vänta tills programmet är klart.

 

Programmet skapar en logg Fixlog.txt på skrivbordet.

Klistra in innehållet i den i ditt svar.

 

 

2. Skanna datorn online på http://www.eset.com/onlinescan/

För att inte skannern ska ta för lång tid på sig stäng av ditt antivirusprogram under tiden.

 

Avbocka alternativet Remove found threats

Bocka för Scan Archives

 

Klicka på Advanced Settings

Bocka för:

Scan for potentially unwanted applications

Scan for potentially unsafe applications

Enable Anti-Stealth Technology

 

Klicka på Start

 

När skanningen är klar klicka på List of found threats, följt av Export to a text file. Spara till en fil på skrivbordet, öppna filen, kopiera resultatet och klistra sedan in det i ditt svar.

[Martassen]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-08-2014
Ran by magnus at 2014-08-04 00:40:37 Run:1
Running from C:\Users\magnus\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {0D739321-2F1E-4C85-A0C2-C0D65EE00E43} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION
Task: {B60002F5-D5D9-4161-858C-05CCD83937F5} - System32\Tasks\MySearchDial => C:\Users\magnus\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {BEEE0BFF-D639-4334-B47E-434F4DF78919} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert
Task: C:\WINDOWS\Tasks\MySearchDial.job => C:\Users\magnus\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Program Files (x86)\Desk 365
C:\Users\magnus\AppData\Roaming\mysearchdial
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
HKU\S-1-5-21-3483520326-1990137539-1373947984-1001\...\Run: [Yahoo! Search] => C:\Users\magnus\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe
C:\Users\magnus\AppData\Local\Pay-By-Ads
SearchScopes: HKCU - {17EB70FB-7134-4A4C-90E7-E36E67BA8C2B} URL = http://rts.dsrlte.com/?q={searchTerms}&r=556
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF NewTab: hxxp://rts.dsrlte.com/?m=tab
FF Homepage: hxxp://rts.dsrlte.com
FF Keyword.URL: hxxp://rts.dsrlte.com/?q=
FF SearchPlugin: C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\searchplugins\keepmysearch.xml
FF Extension: Snap.Do - C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0} [2014-04-01]
CHR HKLM-x32\...\Chrome\Extension: [dijoojjdmkbmmmbobkingeecghfeciaj] - C:\Program Files (x86)\Spring Smart\dijoojjdmkbmmmbobkingeecghfeciaj.crx [2013-03-02]
C:\Program Files (x86)\Spring Smart
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0D739321-2F1E-4C85-A0C2-C0D65EE00E43}" => Key not found.
C:\Windows\System32\Tasks\Desk 365 RunAsStdUser not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B60002F5-D5D9-4161-858C-05CCD83937F5}" => Key not found.
C:\Windows\System32\Tasks\MySearchDial not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MySearchDial" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEEE0BFF-D639-4334-B47E-434F4DF78919}" => Key not found.
C:\Windows\System32\Tasks\BrowserDefendert not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserDefendert" => Key not found.
C:\WINDOWS\Tasks\MySearchDial.job not found.
"C:\Program Files (x86)\Desk 365" => File/Directory not found.
"C:\Users\magnus\AppData\Roaming\mysearchdial" => File/Directory not found.
C:\ProgramData\Temp => ":373E1720" ADS removed successfully.
C:\ProgramData\Temp => ":AD022376" ADS removed successfully.
HKU\S-1-5-21-3483520326-1990137539-1373947984-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Yahoo! Search => value deleted successfully.
"C:\Users\magnus\AppData\Local\Pay-By-Ads" => File/Directory not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{17EB70FB-7134-4A4C-90E7-E36E67BA8C2B}" => Key deleted successfully.
"HKCR\CLSID\{17EB70FB-7134-4A4C-90E7-E36E67BA8C2B}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value deleted successfully.
"HKCR\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => Key not found.
Firefox newtab deleted successfully.
Firefox homepage deleted successfully.
Firefox Keyword.URL deleted successfully.

[Martassen]

osäker om jag fick med allt:
 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-08-2014
Ran by magnus at 2014-08-04 00:40:37 Run:1
Running from C:\Users\magnus\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {0D739321-2F1E-4C85-A0C2-C0D65EE00E43} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION
Task: {B60002F5-D5D9-4161-858C-05CCD83937F5} - System32\Tasks\MySearchDial => C:\Users\magnus\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {BEEE0BFF-D639-4334-B47E-434F4DF78919} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert
Task: C:\WINDOWS\Tasks\MySearchDial.job => C:\Users\magnus\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Program Files (x86)\Desk 365
C:\Users\magnus\AppData\Roaming\mysearchdial
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
HKU\S-1-5-21-3483520326-1990137539-1373947984-1001\...\Run: [Yahoo! Search] => C:\Users\magnus\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe
C:\Users\magnus\AppData\Local\Pay-By-Ads
SearchScopes: HKCU - {17EB70FB-7134-4A4C-90E7-E36E67BA8C2B} URL = http://rts.dsrlte.com/?q={searchTerms}&r=556
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF NewTab: hxxp://rts.dsrlte.com/?m=tab
FF Homepage: hxxp://rts.dsrlte.com
FF Keyword.URL: hxxp://rts.dsrlte.com/?q=
FF SearchPlugin: C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\searchplugins\keepmysearch.xml
FF Extension: Snap.Do - C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0} [2014-04-01]
CHR HKLM-x32\...\Chrome\Extension: [dijoojjdmkbmmmbobkingeecghfeciaj] - C:\Program Files (x86)\Spring Smart\dijoojjdmkbmmmbobkingeecghfeciaj.crx [2013-03-02]
C:\Program Files (x86)\Spring Smart
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0D739321-2F1E-4C85-A0C2-C0D65EE00E43}" => Key not found.
C:\Windows\System32\Tasks\Desk 365 RunAsStdUser not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B60002F5-D5D9-4161-858C-05CCD83937F5}" => Key not found.
C:\Windows\System32\Tasks\MySearchDial not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MySearchDial" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEEE0BFF-D639-4334-B47E-434F4DF78919}" => Key not found.
C:\Windows\System32\Tasks\BrowserDefendert not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserDefendert" => Key not found.
C:\WINDOWS\Tasks\MySearchDial.job not found.
"C:\Program Files (x86)\Desk 365" => File/Directory not found.
"C:\Users\magnus\AppData\Roaming\mysearchdial" => File/Directory not found.
C:\ProgramData\Temp => ":373E1720" ADS removed successfully.
C:\ProgramData\Temp => ":AD022376" ADS removed successfully.
HKU\S-1-5-21-3483520326-1990137539-1373947984-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Yahoo! Search => value deleted successfully.
"C:\Users\magnus\AppData\Local\Pay-By-Ads" => File/Directory not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{17EB70FB-7134-4A4C-90E7-E36E67BA8C2B}" => Key deleted successfully.
"HKCR\CLSID\{17EB70FB-7134-4A4C-90E7-E36E67BA8C2B}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value deleted successfully.
"HKCR\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => Key not found.
Firefox newtab deleted successfully.
Firefox homepage deleted successfully.
Firefox Keyword.URL deleted successfully.
C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\searchplugins\keepmysearch.xml => Moved successfully.
C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0} => Moved successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dijoojjdmkbmmmbobkingeecghfeciaj" => Key deleted successfully.
"C:\Program Files (x86)\Spring Smart\dijoojjdmkbmmmbobkingeecghfeciaj.crx" => File/Directory not found.
"C:\Program Files (x86)\Spring Smart" => File/Directory not found.

==== End of Fixlog ====

[Martassen]

Lägger in denna ifall:
Håller på väntar att Eset ska blir klar.

 

Task: {0D739321-2F1E-4C85-A0C2-C0D65EE00E43} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe <==== ATTENTION
Task: {B60002F5-D5D9-4161-858C-05CCD83937F5} - System32\Tasks\MySearchDial => C:\Users\magnus\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {BEEE0BFF-D639-4334-B47E-434F4DF78919} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert
Task: C:\WINDOWS\Tasks\MySearchDial.job => C:\Users\magnus\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Program Files (x86)\Desk 365
C:\Users\magnus\AppData\Roaming\mysearchdial
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:AD022376
HKU\S-1-5-21-3483520326-1990137539-1373947984-1001\...\Run: [Yahoo! Search] => C:\Users\magnus\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe
C:\Users\magnus\AppData\Local\Pay-By-Ads
SearchScopes: HKCU - {17EB70FB-7134-4A4C-90E7-E36E67BA8C2B} URL = http://rts.dsrlte.com/?q={searchTerms}&r=556
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF NewTab: hxxp://rts.dsrlte.com/?m=tab
FF Homepage: hxxp://rts.dsrlte.com
FF Keyword.URL: hxxp://rts.dsrlte.com/?q=
FF SearchPlugin: C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\searchplugins\keepmysearch.xml
FF Extension: Snap.Do - C:\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0} [2014-04-01]
CHR HKLM-x32\...\Chrome\Extension: [dijoojjdmkbmmmbobkingeecghfeciaj] - C:\Program Files (x86)\Spring Smart\dijoojjdmkbmmmbobkingeecghfeciaj.crx [2013-03-02]
C:\Program Files (x86)\Spring Smart

[Martassen]

eset har scannat i 11 timmar. Jag lät den stå på över natten.

Jag har högerklickat på nortonikonen och valt avaktivera norton autoprotect. Precis som jag gjorde med panda på förra datorn. Eset är på 47%.

[Martassen]

Här kommer Esetrapporten,

 

Jag tömde papperskorgen när den väl börjat men kanske inte gör något.
 

C:\$Recycle.Bin\S-1-5-21-3483520326-1990137539-1373947984-1001\$R2YB4Z3.exe a variant of Win32/InstallCore.PP potentially unwanted application
C:\$Recycle.Bin\S-1-5-21-3483520326-1990137539-1373947984-1001\$R3GTE60.exe a variant of Win32/InstallBrain.CF potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\sppsm.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\spusm.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srbs.dll.vir a variant of MSIL/Toolbar.Linkury.C potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srbu.dll.vir a variant of MSIL/Toolbar.Linkury.F potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srpt.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LyricsBuddy-1\41868.crx.vir JS/Toolbar.Crossrider.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LyricsBuddy-1\41868.xpi.vir JS/Toolbar.Crossrider.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\LyricsBuddy-1\utils.exe.vir Win32/Packed.ScrambleWrapper.C potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\AppsUpdater.exe.vir a variant of MSIL/Vittalia.C potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\KeyGen.dll.vir Win32/Vittalia.K potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\uninstall.exe.vir Win32/Vittalia.H potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SoftwareUpdater\UpdaterService.exe.vir a variant of MSIL/Vittalia.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\SpringSmartUninstall.exe.vir Win32/BrowseFox.C potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\updateSpringSmart.exe.vir a variant of Win32/BrowseFox.H potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\tmp7D1.tmp.vir a variant of Win32/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\utilSpringSmart.exe.vir a variant of Win32/BrowseFox.H potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\plugins\SpringSmart.16.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\plugins\SpringSmart.Bromon.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\plugins\SpringSmart.BroStats.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\plugins\SpringSmart.BrowserAdapterS.dll.vir probably a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\plugins\SpringSmart.BrowserFilter.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\plugins\SpringSmart.CompatibilityChecker.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\plugins\SpringSmart.PurBrowse.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Spring Smart\bin\plugins\SpringSmart.Repmon.dll.vir a variant of MSIL/BrowseFox.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Google\Chrome\User Data\Default\Extensions\feignjcdbggijogkdpeljgllgehempia\1.26.46_0\extensionData\plugins\91_monetizationLoader.js.js.vir JS/Toolbar.Crossrider.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgeapihpgbepllencafcpkfbjlkogfan\1.0.0_0\background.js.vir Win32/BrowseFox.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgeapihpgbepllencafcpkfbjlkogfan\1.0.0_0\content.js.vir Win32/BrowseFox.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\LPT\sppsm.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\LPT\spusm.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\LPT\srbs.dll.vir a variant of MSIL/Toolbar.Linkury.C potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\LPT\srbu.dll.vir a variant of MSIL/Toolbar.Linkury.F potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\LPT\srpt.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe.vir a variant of Win32/Toolbar.Montiera.K potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\BrowserHelper.exe.vir a variant of MSIL/Toolbar.Linkury.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll.vir a variant of Win32/Toolbar.Linkury.F potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO2.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll.vir a variant of MSIL/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll.vir a variant of MSIL/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\SnapDo.exe.vir a variant of Win32/Toolbar.Linkury.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\spbl.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\sppsm.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\spusm.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\srbs.dll.vir a variant of MSIL/Toolbar.Linkury.C potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\srbu.dll.vir a variant of MSIL/Toolbar.Linkury.F potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll.vir Win32/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_22.dll.vir a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_23.dll.vir a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll.vir a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_25.dll.vir a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_26.dll.vir a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_27.dll.vir a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll.vir a variant of MSIL/Toolbar.Linkury.E potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Local\WeatherAlerts\DesktopWeatherAlertsApp.exe.vir a variant of MSIL/Adware.StrongVault.A application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir Win32/Toolbar.Babylon.I potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\39ed7c16-185d-4f88-b976-666d4928ba01@fe4550c1-7a4f-4a62-ad1c-45e0afdf81a4.com\extensionData\plugins\91.js.vir JS/Toolbar.Crossrider.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\8af2e526-8c09-42dc-8d01-1001b936572c@5f890a75-ea43-44fa-9c15-0da08497ff9d.com\extensionData\plugins\91.js.vir JS/Toolbar.Crossrider.B potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Roaming\Mysearchdial\UpdateProc\UpdateTask.exe.vir a variant of Win32/DealPly.S potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\magnus\AppData\Roaming\OpenCandy\73B63F23728449D89E3136D60A656AD2\speedupmypcSCAN.exe.vir Win32/SpeedUpMyPC potentially unwanted application
C:\FRST\Quarantine\C\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0}\components\SmartbarFireFoxRemotePlugin_22.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\FRST\Quarantine\C\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0}\components\SmartbarFireFoxRemotePlugin_23.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\FRST\Quarantine\C\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0}\components\SmartbarFireFoxRemotePlugin_24.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\FRST\Quarantine\C\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0}\components\SmartbarFireFoxRemotePlugin_25.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\FRST\Quarantine\C\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0}\components\SmartbarFireFoxRemotePlugin_26.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\FRST\Quarantine\C\Users\magnus\AppData\Roaming\Mozilla\Firefox\Profiles\ekddpmpg.default\Extensions\{af9433c4-b2c2-4006-96c9-2031d35ab7c0}\components\SmartbarFireFoxRemotePlugin_27.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\Program Files (x86)\Apps Hat\48559.xpi JS/Toolbar.Crossrider.B potentially unwanted application
C:\Program Files (x86)\Apps Hat\Apps Hat-bho.dll a variant of Win32/Toolbar.CrossRider.AF potentially unwanted application
C:\Program Files (x86)\Apps Hat\Apps Hat-bho64.dll a variant of Win64/Toolbar.Crossrider.D potentially unwanted application
C:\Program Files (x86)\Apps Hat\Apps Hat-buttonutil64.dll a variant of Win64/Toolbar.Crossrider.G potentially unwanted application
C:\Program Files (x86)\Apps Hat\Apps Hat-buttonutil64.exe a variant of Win64/Toolbar.Crossrider.H potentially unwanted application
C:\Users\magnus\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001b a variant of Win32/InstallCore.PP potentially unwanted application
C:\Users\magnus\AppData\Local\Opera\Opera\temporary_downloads\SoftonicDownloader_for_winzip.exe a variant of Win32/SoftonicDownloader.G potentially unwanted application
C:\Users\magnus\AppData\Local\Temp\is838815544\716848_stp\PCSpeedMaximizer_AQML_AFD_PPI_SCANDI.exe a variant of Win32/SpeedingUpMyPC application
C:\Users\magnus\Desktop\winzip180.exe a variant of Win32/InstallCore.BY potentially unwanted application
C:\Users\magnus\Downloads\crproj2013.exe a variant of Win32/ExpressFiles.B potentially unwanted application
C:\Users\magnus\Downloads\MICROSOFT_PROJECT_PROFESSIONAL_2013_RTM_X86_VOLUME_ENGLISH_DVD_secure.exe Win32/TopMedia.B potentially unwanted application
C:\Users\magnus\Downloads\sistaproj2013.exe Win32/Adware.1ClickDownload.AM application
C:\Windows\Installer\500fbe.msi a variant of MSIL/Toolbar.Linkury.A potentially unwanted application
C:\Windows\Installer\500fc3.msi a variant of MSIL/Toolbar.Linkury.G potentially unwanted application

[Cecilia]

1. Om det finns något "Apps Hat" i Kontrollpanelens lista över program som går att avinstallera så avinstallera det.

 

2.

C:\Users\magnus\AppData\Local\Opera\Opera\temporary_downloads\SoftonicDownloader_for_winzip.exe a variant of Win32/SoftonicDownloader.G potentially unwanted application

Ladda inte ner program från Softonic eftersom de lägger till olämpliga tillägg etc. för att få in pengar till servrar mm. Laddar man ner t ex Opera direkt från Operas webbplats slipper man i alla fall tillägg från Softonic.

 

3.

C:\Users\magnus\Downloads\crproj2013.exe a variant of Win32/ExpressFiles.B potentially unwanted application

C:\Users\magnus\Downloads\MICROSOFT_PROJECT_PROFESSIONAL_2013_RTM_X86_VOLUME_ENGLISH_DVD_secure.exe Win32/TopMedia.B potentially unwanted application

C:\Users\magnus\Downloads\sistaproj2013.exe Win32/Adware.1ClickDownload.AM application

Det är tre program i mappen "Hämtade filer". Du får själv avgöra om du vill ha kvar dem.

 

4.

Starta Anteckningar.

Kopiera alla rader i rutan:

C:\Program Files (x86)\Apps Hat
C:\Users\magnus\AppData\Local\Temp\is838815544
C:\Users\magnus\AppData\Local\Opera\Opera\temporary_downloads\SoftonicDownloader_for_winzip.exe
C:\Users\magnus\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00001b

och klistra in i Anteckningar. Kontrollera att inga filer har delats upp på två rader.

Spara filen på skrivbordet med namnet fixlist.txt.

 

Starta FRST som finns på skrivbordet.

Klicka på knappen Fix.

Vänta tills programmet är klart.

 

Programmet skapar en logg Fixlog.txt på skrivbordet.

Klistra in innehållet i den i ditt svar.

 

5. Gör en fullständig genomsökning med Norton. Hittas något som inte ligger i AdwCleaners eller FRST:s karantän-mappar?

 

6. Hur fungerar datorn nu?

[Martassen]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-08-2014
Ran by magnus at 2014-08-04 14:08:30 Run:2
Running from C:\Users\magnus\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Program Files (x86)\Apps Hat
C:\Users\magnus\AppData\Local\Temp\is838815544
C:\Users\magnus\AppData\Local\Opera\Opera\temporary_downloads\SoftonicDownloader_for_winzip.exe
C:\Users\magnus\AppData\Local\Google\Chrome\User Data\Default\Cache
*****************

C:\Program Files (x86)\Apps Hat => Moved successfully.
C:\Users\magnus\AppData\Local\Temp\is838815544 => Moved successfully.
C:\Users\magnus\AppData\Local\Opera\Opera\temporary_downloads\SoftonicDownloader_for_winzip.exe => Moved successfully.
C:\Users\magnus\AppData\Local\Google\Chrome\User Data\Default\Cache => Moved successfully.

==== End of Fixlog ====

 

Jag hittar inget appshat i kontrollpanelen som jag kan avinstallera.

Datorn känns pigg tycker jag. Var väl innan just att jag inte kunde installera program ifrån nätet. Bör funka nu, Ska installera secunia sedan så ser man.

 

Håller på kör igenom med Norton nu

[Martassen]

Norton verkade hitta en del men verkar ha åtgärdat det.

 

Se bifogad nortonrapport

 

[Cecilia]

Det var bara cookies så det har inget med skadliga program att göra.

 

Mappen för Apps Hat är borta så nu kan den inte göra något i alla fall.

 

Om allt är bra är det dags att ta bort specialprogrammen.

 

1. Stäng alla program, inklusive webbläsare.

Dubbelklicka på AdwCleaner för att starta programmet.

Klicka på Uninstall-knappen.

 

2. Ladda ner avinstallationsprogrammet OTC till Skrivbordet: http://oldtimer.geekstogo.com/OTC.exe

Dubbelklicka på filen för att starta programmet.

Tryck på knappen CleanUp! och FRST kommer att avinstalleras efter en omstart av datorn. Ta bort eventuella loggar.

 

3. Förbättra skyddet i datorn, se mina Råd för en säkrare dator: http://ceciliasec.wordpress.com/rad/

Det är mycket viktigt att hålla alla småprogram i datorn uppdaterade, gamla versioner av t ex Flash, Java och Adobe Reader innehåller kända säkerhetshål, vilka kan användas av en webbsida för att infektera datorn. Jag tycker att Secunias program (länk på min webbsida) är en bra hjälp för att kontrollera hur det står till med säkerhetshål i datorn och ange vad som behöver åtgärdas.

[Martassen]

Fantastiskt. Du är kanon :-).

VIlken version ska man använda av Ccleaner?

 

JAg kör version V4. 10 4570 (64bit). Räcker detta?

 

 

Min sons dator behöver också rensas. Kommer ej in i Internet explorer. Se tråden Windows Vista. 

[Cecilia]

Tack så mycket

 

Den senaste versionen av CCleaner ska man använda.

 

Fungerar installationer nu?

[Martassen]

Ja det verkar så. Jag har ju installerat grejer som du bett mig så antar det fungerar :-).

Annars hojtar jag till. :-).

 

Denna version av ccleaner är väl inte kostnadsfri som de andra?

http://www.piriform.com/ccleaner/update?v=4.15.4725&l=1053&o=6.1W3

 

Vart hittar jag senaste gratisversionen? 

[Cecilia]

Vare sig AdwCleaner eller FRST är riktigt installerade program, de dyker t ex inte upp i Kontrollpanelen.

 

http://www.piriform.com/ccleaner/builds

Jag rekommenderar Portable eller Slim för att inte riskera att få med något annonstillägg.