IE 10 tror det är nyinstallerat

17 augusti, 2014

1. Om det är problem med att ha Kies TrayAgent inaktiverad märker du nog när du startar Kies.

2. Pröva med att inaktivera allihop och se om det förändrar något.

3. Mindspark Toolbar verkar vara något mer eller mindre olämpligt tillägg till Internet Explorer.

Spara AdwCleaner av Xplode på Skrivbordet: https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Stäng alla program, inklusive webbläsare.
Dubbelklicka på AdwCleaner för att starta programmet.

Klicka på Scan-knappen.
Vänta tills sökningen är klar.
Klicka på Report-knappen.
En rapport kommer upp, kopiera innehållet och klistra in i ditt svar.
Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner[R0].txt

17 augusti, 2014

# AdwCleaner v3.307 - Report created 17/08/2014 at 21:57:50

# Updated 17/08/2014 by Xplode

# Operating System : Windows 8 (64 bits)

# Username : Lisbeth - DATOR

# Running from : C:\Users\Lisbeth\Downloads\adwcleaner_3.307 (1).exe

# Option : Scan

***** [ Services ] *****

Service Found : FromDocToPDF_65Service

Service Found : globalUpdate

Service Found : globalUpdatem

***** [ Files / Folders ] *****

File Found : C:\Users\Lisbeth\AppData\Roaming\Mozilla\Firefox\Profiles\gudrbb29.default\searchplugins\trovi-search.xml

File Found : C:\Windows\System32\roboot64.exe

Folder Found : C:\Program Files (x86)\FromDocToPDF_65

Folder Found : C:\Program Files (x86)\globalUpdate

Folder Found : C:\Program Files (x86)\SearchProtect

Folder Found : C:\ProgramData\apn

Folder Found : C:\Users\Lisbeth\AppData\Local\Conduit

Folder Found : C:\Users\Lisbeth\AppData\Local\FromDocToPDF_65

Folder Found : C:\Users\Lisbeth\AppData\Local\globalUpdate

Folder Found : C:\Users\Lisbeth\AppData\Local\SearchProtect

Folder Found : C:\Users\Lisbeth\AppData\Local\Temp\apn

Folder Found : C:\Users\Lisbeth\AppData\LocalLow\FromDocToPDF_65

Folder Found : C:\Users\Lisbeth\AppData\LocalLow\FromDocToPDF_65EI

Folder Found : C:\Users\Lisbeth\AppData\LocalLow\iac

Folder Found : C:\Users\Lisbeth\AppData\Roaming\Mozilla\Firefox\Profiles\gudrbb29.default\Extensions\65ffxtbr@FromDocToPDF_65.com

***** [ Scheduled Tasks ] *****

Task Found : globalUpdateUpdateTaskMachineCore

Task Found : globalUpdateUpdateTaskMachineUA

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-1

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-11

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-2

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-3

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-4

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-5

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-5_user

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-6

Task Found : c9d77c59-0ff5-4036-8806-71115fd01f45-7

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\APN PIP

Key Found : HKCU\Software\AppDataLow\Software\FromDocToPDF_65

Key Found : HKCU\Software\FromDocToPDF_65

Key Found : HKCU\Software\GlobalUpdate

Key Found : [x64] HKCU\Software\APN PIP

Key Found : [x64] HKCU\Software\FromDocToPDF_65

Key Found : [x64] HKCU\Software\GlobalUpdate

Key Found : HKLM\SOFTWARE\AVG Secure Search

Key Found : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}

Key Found : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL

Key Found : HKLM\SOFTWARE\Classes\CLSID\{017D68F2-19B3-41AE-9D8A-8B09DBD25479}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951170}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952270}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{2BD4465D-669A-42E6-B449-636B0B10EBB8}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{3700B685-D795-4E17-9B78-73BCEE5D4086}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{3E6260AC-BC6F-44B4-942B-1568C367543A}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{504B4AA9-9952-4490-B0E1-80A5321C35F7}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{72D05120-DF65-4C27-921E-899B5267FEF2}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE84501A-2CB6-41D6-B3A7-9679BDBDFA0B}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{AFA196F4-80E5-47AD-B7BC-C671487D36FB}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{B7FD68F7-D28B-431E-9EE8-E45D915B7F17}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{BC7E25D7-4681-46A3-AF5A-9A1B865783ED}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{C66A678D-5E6C-4AF9-8F57-C6192F42CF74}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{CBBEA4B9-B183-47AC-8B1F-FD526AC99A8D}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{CD1D181E-C654-4CA5-9D09-B3648537FD7D}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{E0C3A839-0E5E-4EBC-9F8F-E56F8FC732CE}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{E1C4699E-5E74-4F30-A4A2-378E45D44F07}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}

Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0059570.BHO

Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0059570.BHO.1

Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0059570.Sandbox

Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0059570.Sandbox.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.Radio

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.Radio.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.RadioSettings

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.RadioSettings.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ThirdPartyInstaller

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ThirdPartyInstaller.1

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector

Key Found : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector.1

Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10

Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine

Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc

Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0

Key Found : HKLM\SOFTWARE\Classes\Interface\{36B445BF-1B84-466A-A623-A360A8CFF8C3}

Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955570}

Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956670}

Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Key Found : HKLM\SOFTWARE\Classes\Interface\{6CBF5C01-C876-481B-867E-111CB1D2A7D6}

Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager

Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1747AE4D-0A83-4336-84D4-48500BF1554F}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2C9D27D8-C81E-4968-8026-E725E01650C1}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{3BB1BA04-1B88-4690-9AD3-0D38412F5FF1}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{3EFEC319-72E8-42AA-AC38-8CF8A0661CDD}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954470}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4D8AEB1D-4ED4-44AC-A039-4775B2575DB0}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6191571E-F7EE-47C3-B229-2DFAC70DB5D2}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74C02D12-FAEE-4834-80D2-5B7D2480AD61}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{840AE8AE-D547-433E-985C-6BF6C74F5084}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A85ACA7E-5CD2-461B-877A-994CCCCF491C}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{BF6FDBB8-7CD5-402D-AB4F-E4F13D3490C8}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E3CDDB72-3ADC-4920-B42B-68A8C29FA942}

Key Found : HKLM\SOFTWARE\FromDocToPDF_65

Key Found : HKLM\SOFTWARE\GlobalUpdate

Key Found : HKLM\SOFTWARE\InstalledBrowserExtensions

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0C3A839-0E5E-4EBC-9F8F-E56F8FC732CE}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9A216821-0EC5-49A3-85AC-FB72AE79A1E8}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2BD4465D-669A-42E6-B449-636B0B10EBB8}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BC7E25D7-4681-46A3-AF5A-9A1B865783ED}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CBBEA4B9-B183-47AC-8B1F-FD526AC99A8D}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E1C4699E-5E74-4F30-A4A2-378E45D44F07}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDF_65bar Uninstall Firefox

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect

Key Found : HKLM\SOFTWARE\MozillaPlugins\@FromDocToPDF_65.com/Plugin

Key Found : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10

Key Found : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4

Key Found : HKLM\SOFTWARE\Myfree Codec

Key Found : HKLM\SOFTWARE\PIP

Key Found : HKLM\SOFTWARE\SearchProtect

Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952270}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{36B445BF-1B84-466A-A623-A360A8CFF8C3}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955570}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956670}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{6CBF5C01-C876-481B-867E-111CB1D2A7D6}

Key Found : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [FromDocToPDF_65 Browser Plugin Loader 64]

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17054

-\\ Mozilla Firefox v24.0 (sv-SE)

[ File : C:\Users\Lisbeth\AppData\Roaming\Mozilla\Firefox\Profiles\gudrbb29.default\prefs.js ]

Line Found : user_pref("browser.startup.homepage", "hxxp://www.trovi.com/?gd=&ctid=CT3325578&octid=EB_ORIGINAL_CTID&ISID=MFCB8A66A-A1C3-4BDD-87F7-3CEF7C2101D4&SearchSource=55&CUI=&UM=2&UP=SP78E46EF8-2306-4AF7-B709[...]

Line Found : user_pref("browser.search.selectedEngine", "Trovi search");

Line Found : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3325578&octid=EB_ORIGINAL_CTID&ISID=MFCB8A66A-A1C3-4BDD-87F7-3CEF7C2101D4&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP78E46EF8-2306-4AF[...]

-\\ Google Chrome v36.0.1985.143

[ File : C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Found [startup_urls] : hxxp://www.trovi.com/?gd=&ctid=CT3325578&octid=EB_ORIGINAL_CTID&ISID=MFCB8A66A-A1C3-4BDD-87F7-3CEF7C2101D4&SearchSource=55&CUI=&UM=2&UP=SP78E46EF8-2306-4AF7-B709-4684F986D458&SSPV=

Found [Extension] : booedmolknjekdopkepjjeckmjkdpfgl

Found [Extension] : flpcjncodpafbgdpnkljologafpionhb

*************************

AdwCleaner[R0].txt - [15520 octets] - [17/08/2014 21:57:50]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [15581 octets] ##########

17 augusti, 2014

Oj Cecilia, det blir nattjobb för dig

17 augusti, 2014

Så är frågan om jag ska trycka på "Clean" --- då verkar den rensa bort massor

jag har valet att avbocka de element som jag inte vill ta bort.

Men det känns just nu som jag inte gör något med det. Bara stänger programmet så länge ;o)

17 augusti, 2014

Vad är det du vill behålla?

Jag ser inget jag skulle vilja ha i min dator.

Vad har du för version/årsmodell av AVG?

AVG Secure Search har jag för mig hör ihop med en äldre version och det är viktigt att ha den senaste versionen för bästa skydd.

Det ser ut som att det kan behövas en ordentligt genomgång av vad som finns i datorn för att få bort allt som är olämpligt.

Följ anvisningarna i tråden Till dig med virus eller andra skadliga program i datorn så gott det går.

17 augusti, 2014

AVG - där har jag AVG version 2014.0.4745

och Virus databas version 4007/8052 (den 17 augusti 2014, 12:06)

Ska jag göra en ny SCAN med AdwCleaner och sen trycka på CLEAN, utan att bocka ur något ????

--- och sedan följa råden i tråden du hänvisar till ????

17 augusti, 2014

Börja med tråden jag länkade till så får vi se om det är något som bör göras innan AdwCleaner rensar.

17 augusti, 2014

Börja med tråden jag länkade till så får vi se om det är något som bör göras innan AdwCleaner rensar.

OK

17 augusti, 2014

Jag har kört FRST nu och bifogar de båda filerna

Addition.txt

FRST.txt

17 augusti, 2014

Jag har kört FRST nu och bifogar de båda filerna

Jag har laddat hem och kört ERUNT

jag har försökt göra en ny återställningspunkt ... men misslyckas igen.

Det finns en återställningpunkt från 2014-08-13 .... den får duga

Så nu har jag nog betat av punkterna på tråden

18 augusti, 2014

Mozilla Firefox 24.0

Gammal version med många kända säkerhetshål, uppdatera eller avinstallera.

Avinstallera HDPlus-V1.9 pga resultatet på https://www.virustotal.com/sv/file/156bd49ab2a4478120a064b04cae202a9f1d9076245f1e5e79ad2a9d6f2e192b/analysis/ .

Har du själv installerat FileViewPro den 2 augusti eller har det bara följt med något annat program, t ex Foxit?

Nästa steg verkar vara att rensa med AdwCleaner. Vad är det du vill behålla av det programmet hittade?

18 augusti, 2014

Jag har avinstallerat Mozilla Firefox, laddades ner en gång när IE bråkade och jag inte kunde använda Chrome när jag släktforskar.

HDPlus-V1.9 vet jag inte vad det är och varför jag har, gick inte att avinstallera via Kontrollpanelen. Svar: fanns inte!

Men jag hittade mappen i Utforskare och raderade den, fanns ingen uninstall-fil

Kan ju hoppas att allt är borta men troligen ligger väl någon fil kvar i windows.

FileViewPro har jag själv installertat, var en fil som inte gick att öppna (kommer inte ihåg vilken) och fick tips på att FVP kunde användas. Tyvärr gick inte det heller.

Ska jag avinstallera FVP ??

Något mer innan rensning med AdwCleaner?

Om jag vill behålla något - nej -- jag begriper inte vad som visas --- såg bara att det var sida upp och sida ner med HKLM\SOFTWARE´

18 augusti, 2014

Nej, då behöver du inte avinstallera FVP.

1. Stäng alla program, inklusive webbläsare.
Dubbelklicka på AdwCleaner för att starta programmet.

Klicka på Scan-knappen.
Vänta tills sökningen är klar.

Klicka på Clean-knappen.
Tryck på OK.
Tryck på OK fler gånger om det kommer upp meddelanden.

Datorn kommer att startas om.
En rapport kommer upp, kopiera innehållet och klistra in i ditt svar.
Om rapporten inte kommer upp, så finns den även som C:\AdwCleaner[s0].txt

2. Kör FRST och klistra in den nya FRST.txt (men inte Addition.txt) så får vi se vad som är kvar.

3. Skanna datorn online på http://www.eset.com/onlinescan/
För att inte skannern ska ta för lång tid på sig stäng av ditt antivirusprogram under tiden.

Avbocka alternativet Remove found threats
Bocka för Scan Archives

Klicka på Advanced Settings
Bocka för:
Scan for potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth Technology

Klicka på Start

När skanningen är klar klicka på List of found threats, följt av Export to a text file. Spara till en fil på skrivbordet, öppna filen, kopiera resultatet och klistra sedan in det i ditt svar.

18 augusti, 2014

Nu Cecilia har jag gjort det hela.

1. AdwCleaner:

# AdwCleaner v3.307 - Report created 18/08/2014 at 18:37:08

# Updated 17/08/2014 by Xplode

# Operating System : Windows 8 (64 bits)

# Username : Lisbeth - DATOR

# Running from : C:\Users\Lisbeth\Desktop\adwcleaner_3.307.exe

# Option : Clean

***** [ Services ] *****

Service Deleted : FromDocToPDF_65Service

[#] Service Deleted : globalUpdate

[#] Service Deleted : globalUpdatem

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\FromDocToPDF_65

Folder Deleted : C:\Program Files (x86)\globalUpdate

Folder Deleted : C:\Program Files (x86)\SearchProtect

Folder Deleted : C:\Users\Lisbeth\AppData\Local\Conduit

Folder Deleted : C:\Users\Lisbeth\AppData\Local\FromDocToPDF_65

Folder Deleted : C:\Users\Lisbeth\AppData\Local\globalUpdate

Folder Deleted : C:\Users\Lisbeth\AppData\Local\Temp\apn

Folder Deleted : C:\Users\Lisbeth\AppData\LocalLow\FromDocToPDF_65

Folder Deleted : C:\Users\Lisbeth\AppData\LocalLow\FromDocToPDF_65EI

Folder Deleted : C:\Users\Lisbeth\AppData\LocalLow\iac

File Deleted : C:\Windows\System32\roboot64.exe

***** [ Scheduled Tasks ] *****

Task Deleted : globalUpdateUpdateTaskMachineCore

Task Deleted : globalUpdateUpdateTaskMachineUA

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-1

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-11

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-2

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-3

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-4

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-5

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-5_user

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-6

Task Deleted : c9d77c59-0ff5-4036-8806-71115fd01f45-7

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.Radio

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.Radio.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.RadioSettings

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.RadioSettings.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ThirdPartyInstaller

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ThirdPartyInstaller.1

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector

Key Deleted : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector.1

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0

Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager

Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@FromDocToPDF_65.com/Plugin

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059570.BHO

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059570.BHO.1

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059570.Sandbox

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059570.Sandbox.1

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [FromDocToPDF_65 Browser Plugin Loader 64]

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{017D68F2-19B3-41AE-9D8A-8B09DBD25479}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2BD4465D-669A-42E6-B449-636B0B10EBB8}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3700B685-D795-4E17-9B78-73BCEE5D4086}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3E6260AC-BC6F-44B4-942B-1568C367543A}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{504B4AA9-9952-4490-B0E1-80A5321C35F7}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{72D05120-DF65-4C27-921E-899B5267FEF2}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE84501A-2CB6-41D6-B3A7-9679BDBDFA0B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AFA196F4-80E5-47AD-B7BC-C671487D36FB}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B7FD68F7-D28B-431E-9EE8-E45D915B7F17}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC7E25D7-4681-46A3-AF5A-9A1B865783ED}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C66A678D-5E6C-4AF9-8F57-C6192F42CF74}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CBBEA4B9-B183-47AC-8B1F-FD526AC99A8D}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD1D181E-C654-4CA5-9D09-B3648537FD7D}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0C3A839-0E5E-4EBC-9F8F-E56F8FC732CE}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1C4699E-5E74-4F30-A4A2-378E45D44F07}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951170}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952270}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{36B445BF-1B84-466A-A623-A360A8CFF8C3}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6CBF5C01-C876-481B-867E-111CB1D2A7D6}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955570}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956670}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1747AE4D-0A83-4336-84D4-48500BF1554F}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2C9D27D8-C81E-4968-8026-E725E01650C1}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3BB1BA04-1B88-4690-9AD3-0D38412F5FF1}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3EFEC319-72E8-42AA-AC38-8CF8A0661CDD}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4D8AEB1D-4ED4-44AC-A039-4775B2575DB0}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6191571E-F7EE-47C3-B229-2DFAC70DB5D2}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74C02D12-FAEE-4834-80D2-5B7D2480AD61}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{840AE8AE-D547-433E-985C-6BF6C74F5084}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A85ACA7E-5CD2-461B-877A-994CCCCF491C}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BF6FDBB8-7CD5-402D-AB4F-E4F13D3490C8}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E3CDDB72-3ADC-4920-B42B-68A8C29FA942}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954470}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2BD4465D-669A-42E6-B449-636B0B10EBB8}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BC7E25D7-4681-46A3-AF5A-9A1B865783ED}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CBBEA4B9-B183-47AC-8B1F-FD526AC99A8D}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E1C4699E-5E74-4F30-A4A2-378E45D44F07}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0C3A839-0E5E-4EBC-9F8F-E56F8FC732CE}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9A216821-0EC5-49A3-85AC-FB72AE79A1E8}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952270}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{36B445BF-1B84-466A-A623-A360A8CFF8C3}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6CBF5C01-C876-481B-867E-111CB1D2A7D6}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955570}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956670}

Key Deleted : HKCU\Software\APN PIP

Key Deleted : HKCU\Software\GlobalUpdate

Key Deleted : HKLM\SOFTWARE\AVG Secure Search

Key Deleted : HKLM\SOFTWARE\FromDocToPDF_65

Key Deleted : HKLM\SOFTWARE\GlobalUpdate

Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions

Key Deleted : HKLM\SOFTWARE\Myfree Codec

Key Deleted : HKLM\SOFTWARE\PIP

Key Deleted : HKLM\SOFTWARE\SearchProtect

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDF_65bar Uninstall Firefox

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect

Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17054

-\\ Google Chrome v36.0.1985.143

[ File : C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [startup_urls] : hxxp://www.trovi.com/?gd=&ctid=CT3325578&octid=EB_ORIGINAL_CTID&ISID=MFCB8A66A-A1C3-4BDD-87F7-3CEF7C2101D4&SearchSource=55&CUI=&UM=2&UP=SP78E46EF8-2306-4AF7-B709-4684F986D458&SSPV=

Deleted [Extension] : booedmolknjekdopkepjjeckmjkdpfgl

Deleted [Extension] : flpcjncodpafbgdpnkljologafpionhb

*************************

AdwCleaner[R0].txt - [15706 octets] - [17/08/2014 21:57:50]

AdwCleaner[R1].txt - [14608 octets] - [18/08/2014 18:35:46]

AdwCleaner[s0].txt - [14697 octets] - [18/08/2014 18:37:08]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [14758 octets] ##########

18 augusti, 2014

2

FRST:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2014 01

Ran by Lisbeth (administrator) on DATOR on 18-08-2014 18:43:35

Running from C:\Users\Lisbeth\Downloads

Platform: Windows 8 (X64) OS Language: Svenska (Sverige)

Internet Explorer Version 10

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe

(Foxit Corporation) C:\Program Files (x86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe

() C:\Program Files (x86)\Photodex\ProShowGold\scsiaccess.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIFFE.EXE

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe

(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe

(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)

HKLM-x32\...\Run: [switchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)

HKLM-x32\...\Run: [FromDocToPDF EPM Support] => "C:\PROGRA~2\FROMDO~2\bar\1.bin\65medint.exe" T8EPMSUP.DLL,S

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5187088 2014-08-11] (AVG Technologies CZ, s.r.o.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [688984 2014-07-23] (Garmin Ltd or its subsidiaries)

HKU\S-1-5-21-2834550104-548988328-925754366-1001\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-2834550104-548988328-925754366-1001\...\Run: [sUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7762712 2014-08-13] (SUPERAntiSpyware)

HKU\S-1-5-21-2834550104-548988328-925754366-1001\...\Run: [swg] => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

HKU\S-1-5-21-2834550104-548988328-925754366-1001\...\Run: [Epson Stylus Photo P50] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFFE.EXE [223232 2008-10-09] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2834550104-548988328-925754366-1001\...\Run: [EPSON P50 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFFE.EXE [223232 2008-10-09] (SEIKO EPSON CORPORATION)

Startup: C:\Users\Lisbeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk

ShortcutTarget: ERUNT AutoBackup.lnk -> C:\Program Files (x86)\ERUNT\AUTOBACK.EXE ()

Startup: C:\Users\Lisbeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Skicka till OneNote.lnk

ShortcutTarget: Skicka till OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)

ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File

ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File

ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File

ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File

BootExecute: autocheck autochk /m /P \Device\HarddiskVolume4autocheck autochk /m /P \Device\HarddiskVolume6autocheck autochk *

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.liwa03.se/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.se.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4D94DEF36060CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sv-SE

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

DPF: HKLM-x32 {DC6FEBC5-0A2D-458A-A01B-5DB15EEC4305} http://webc.memmingsforskarna.se/auth/controls/IlosoftImageUpload.dll

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=5.1.3.2 -> C:\Program Files (x86)\BankID\npBispBrowser.dll (Finansiell ID-Teknik BID AB)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-06-05]

Chrome:

=======

CHR HomePage: hxxp://www.liwa03.se/

CHR StartupUrls: "hxxp://www.google.com/",

"hxxp://www.liwa03.se/"

CHR DefaultSearchKeyword: trovi.search

CHR DefaultSearchURL: http://www.trovi.com/Results.aspx?gd=&ctid=CT3325578&octid=EB_ORIGINAL_CTID&ISID=MFCB8A66A-A1C3-4BDD-87F7-3CEF7C2101D4&SearchSource=58&CUI=&UM=2&UP=SP78E46EF8-2306-4AF7-B709-4684F986D458&q={searchTerms}&SSPV=

CHR DefaultSuggestURL: http://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File

CHR Extension: (Google Dokument) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-03]

CHR Extension: (Google Drive) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-03]

CHR Extension: (YouTube) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-03]

CHR Extension: (Adblock Plus) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-08-23]

CHR Extension: (Sök på Google) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-03]

CHR Extension: (HDPlus-V1.9) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\dimpomefjdddhjmkjgjdokhidjkcmhhn [2014-07-20]

CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2013-08-28]

CHR Extension: (IP-adress) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjndloejlcbpkholmagjbddfkjmmploh [2013-08-28]

CHR Extension: (IP-adress) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpnjjlbngpejmmhgcaagljaomgnginml [2013-08-28]

CHR Extension: (Solitaire) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkbhppfbabandkdmgjmifahoabeodiep [2014-06-05]

CHR Extension: (WeatherBug) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\njkkjobcechefaoknodniidfjapgfoco [2014-06-22]

CHR Extension: (Google Wallet) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-03]

CHR Extension: (Cute Kitten Theme) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnpakemckpkcpilpphdmcfehofhefmoa [2013-09-03]

CHR Extension: (Gmail) - C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-03]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-08-13] (SUPERAntiSpyware.com)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3244048 2014-08-11] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-08-11] (AVG Technologies CZ, s.r.o.)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356912 2014-07-19] (Microsoft Corporation)

R2 FoxitCloudUpdateService; C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [242216 2014-06-17] (Foxit Corporation)

S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [438616 2014-07-23] (Garmin Ltd or its subsidiaries)

R2 ScsiAccess; C:\Program Files (x86)\Photodex\ProShowGold\ScsiAccess.exe [181312 2013-09-21] () [File not signed]

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek )

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [270104 2014-06-30] (AVG Technologies CZ, s.r.o.)

S3 RTL8192cu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1576080 2012-09-17] (Realtek Semiconductor Corporation )

R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1576080 2012-09-17] (Realtek Semiconductor Corporation )

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R3 Tdsshbecr; C:\Windows\system32\DRIVERS\shbecr.sys [50176 2008-09-28] (Todos Data System AB)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-18 18:42 - 2014-08-18 18:37 - 00014871 _____ () C:\Users\Lisbeth\Desktop\AdwCleaner[s0].txt

2014-08-18 11:31 - 2014-08-18 11:31 - 00000000 ____D () C:\SUPERDelete

2014-08-18 01:27 - 2014-08-18 01:27 - 00000000 ____D () C:\Windows\ERDNT

2014-08-18 01:25 - 2014-08-18 01:26 - 00000000 ____D () C:\Program Files (x86)\ERUNT

2014-08-18 01:25 - 2014-08-18 01:25 - 00791393 _____ (Lars Hederer ) C:\Users\Lisbeth\Downloads\erunt-setup.exe

2014-08-18 01:25 - 2014-08-18 01:25 - 00000924 _____ () C:\Users\Lisbeth\Desktop\NTREGOPT.lnk

2014-08-18 01:25 - 2014-08-18 01:25 - 00000905 _____ () C:\Users\Lisbeth\Desktop\ERUNT.lnk

2014-08-18 01:25 - 2014-08-18 01:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT

2014-08-18 01:17 - 2014-08-18 01:17 - 00031519 _____ () C:\Users\Lisbeth\Downloads\Addition.txt

2014-08-18 01:16 - 2014-08-18 18:43 - 00017185 _____ () C:\Users\Lisbeth\Downloads\FRST.txt

2014-08-18 01:16 - 2014-08-18 18:43 - 00000000 ____D () C:\FRST

2014-08-18 01:15 - 2014-08-18 01:15 - 02101760 _____ (Farbar) C:\Users\Lisbeth\Downloads\FRST64.exe

2014-08-17 21:58 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll

2014-08-17 21:55 - 2014-08-18 18:37 - 00000000 ____D () C:\AdwCleaner

2014-08-17 21:54 - 2014-08-17 21:54 - 01361671 _____ () C:\Users\Lisbeth\Downloads\adwcleaner_3.307 (1).exe

2014-08-17 21:52 - 2014-08-17 21:53 - 01361671 _____ () C:\Users\Lisbeth\Desktop\adwcleaner_3.307.exe

2014-08-15 13:19 - 2014-08-15 22:40 - 00000000 ____D () C:\Users\Lisbeth\Desktop\Ny mapp (2)

2014-08-14 19:05 - 2014-08-15 22:32 - 00000000 ____D () C:\Users\Lisbeth\Desktop\Ny mapp

2014-08-14 16:56 - 2014-08-14 16:57 - 00004178 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log

2014-08-14 12:22 - 2014-08-14 12:22 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software

2014-08-14 12:22 - 2014-08-14 12:22 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software

2014-08-14 12:14 - 2014-08-02 02:15 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-14 12:14 - 2014-08-02 02:15 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-08-13 23:43 - 2014-07-16 00:51 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2014-08-13 23:41 - 2014-08-13 23:41 - 00000520 _____ () C:\Users\Lisbeth\AppData\Local\TempPSTEMPFILEon0809017276_1.tmp

2014-08-13 23:39 - 2014-06-11 00:44 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-08-13 23:39 - 2014-06-11 00:43 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-08-13 23:10 - 2014-07-24 14:09 - 19279872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-08-13 23:10 - 2014-07-24 14:09 - 15399936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-08-13 23:10 - 2014-07-24 14:09 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-08-13 23:10 - 2014-07-24 12:51 - 14371328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-08-13 23:10 - 2014-07-24 12:51 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-08-13 23:10 - 2014-06-13 03:57 - 01453400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-08-13 23:10 - 2014-06-13 03:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2014-08-13 23:09 - 2014-07-24 14:11 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-08-13 23:09 - 2014-07-24 14:10 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-08-13 23:09 - 2014-07-24 14:10 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-08-13 23:09 - 2014-07-24 14:10 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

2014-08-13 23:09 - 2014-07-24 14:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-08-13 23:09 - 2014-07-24 14:09 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-08-13 23:09 - 2014-07-24 14:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-08-13 23:09 - 2014-07-24 12:52 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-08-13 23:09 - 2014-07-24 12:52 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-08-13 23:09 - 2014-07-24 12:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-08-13 23:09 - 2014-07-24 12:51 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-08-13 23:09 - 2014-07-24 12:51 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-08-13 23:09 - 2014-07-24 12:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-08-13 23:09 - 2014-07-24 12:29 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-08-13 23:09 - 2014-07-24 10:03 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

2014-08-13 23:09 - 2014-07-16 01:03 - 01300992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-08-13 23:09 - 2014-07-16 00:55 - 04035072 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-08-13 23:09 - 2014-07-12 04:36 - 01023488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-08-13 23:06 - 2014-08-07 08:33 - 00712192 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-08-13 23:06 - 2014-08-07 05:09 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-08-13 23:06 - 2014-06-20 01:35 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2014-08-13 23:06 - 2014-06-20 00:24 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2014-08-13 23:06 - 2014-06-05 19:56 - 00112984 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2014-08-13 23:06 - 2014-06-05 19:30 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-08-13 23:06 - 2014-06-05 19:29 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-08-13 23:06 - 2014-06-05 19:29 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2014-08-13 23:06 - 2014-06-05 19:28 - 02306560 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-08-13 23:06 - 2014-06-05 19:28 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-08-13 23:06 - 2014-06-05 15:12 - 08857600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-08-13 23:06 - 2014-06-05 15:11 - 02416128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-08-13 23:06 - 2014-06-05 15:11 - 00295424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2014-08-13 23:06 - 2014-06-05 15:10 - 02037760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-08-13 23:06 - 2014-06-05 15:10 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-08-13 23:06 - 2014-05-29 06:04 - 00094552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2014-08-13 23:06 - 2014-05-08 03:34 - 00328024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2014-08-02 15:50 - 2014-08-02 15:50 - 00940144 _____ () C:\Users\Lisbeth\Documents\program för att läsa _jif-filer _Solvusoft Corporation - Secure Checkout_php.mht

2014-08-02 15:40 - 2014-08-02 15:40 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\FileViewPro

2014-08-02 15:39 - 2014-08-02 15:48 - 00000000 ____D () C:\Program Files\FileViewPro

2014-08-02 15:39 - 2014-08-02 15:39 - 00000848 _____ () C:\Users\Public\Desktop\FileViewPro.lnk

2014-08-02 15:39 - 2014-08-02 15:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro

2014-08-02 15:37 - 2014-08-02 15:37 - 00000000 ____D () C:\Spacekace

2014-08-02 15:24 - 2014-08-02 15:24 - 00000000 ____D () C:\Users\Public\Foxit Software

2014-08-02 15:24 - 2014-08-02 15:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader

2014-08-02 15:24 - 2014-08-02 15:24 - 00000000 ____D () C:\Program Files (x86)\FOXIT SOFTWARE

2014-08-02 15:17 - 2014-08-18 12:15 - 00000000 ____D () C:\Users\Lisbeth\Documents\Dödsannonser

2014-08-02 01:22 - 2014-08-14 12:22 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2014.lnk

2014-08-02 01:22 - 2014-08-14 12:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2014-08-02 01:22 - 2014-08-02 01:22 - 00000000 ____D () C:\Users\Lisbeth\AppData\Roaming\TuneUp Software

2014-08-02 01:22 - 2014-08-02 01:22 - 00000000 ____D () C:\Users\Lisbeth\AppData\Roaming\AVG2014

2014-08-02 01:20 - 2014-08-02 14:54 - 00000000 ____D () C:\ProgramData\AVG2014

2014-08-02 01:20 - 2014-08-02 01:20 - 00000000 ___HD () C:\$AVG

2014-08-02 01:19 - 2014-08-02 01:19 - 00000000 ____D () C:\Program Files (x86)\AVG

2014-08-02 01:15 - 2014-08-18 18:06 - 00000000 ____D () C:\ProgramData\MFAData

2014-08-02 01:15 - 2014-08-02 01:34 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\Avg2014

2014-08-02 01:15 - 2014-08-02 01:15 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\MFAData

2014-07-27 12:43 - 2014-08-09 13:11 - 00000000 ____D () C:\Users\Lisbeth\Downloads\Love2

2014-07-27 12:41 - 2014-07-27 12:42 - 01310599 _____ () C:\Users\Lisbeth\Downloads\Love2.rar

2014-07-24 16:24 - 2014-07-24 16:24 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin

2014-07-24 16:24 - 2014-07-24 16:24 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin

2014-07-24 16:24 - 2014-07-24 16:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-18 18:44 - 2014-08-18 01:16 - 00017185 _____ () C:\Users\Lisbeth\Downloads\FRST.txt

2014-08-18 18:43 - 2014-08-18 01:16 - 00000000 ____D () C:\FRST

2014-08-18 18:42 - 2013-09-28 16:52 - 00005018 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Dator-Lisbeth Dator

2014-08-18 18:40 - 2013-06-03 16:55 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware

2014-08-18 18:39 - 2013-06-03 16:04 - 00001004 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-08-18 18:38 - 2013-05-31 09:14 - 00034758 _____ () C:\Windows\PFRO.log

2014-08-18 18:38 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-18 18:38 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-08-18 18:37 - 2014-08-18 18:42 - 00014871 _____ () C:\Users\Lisbeth\Desktop\AdwCleaner[s0].txt

2014-08-18 18:37 - 2014-08-17 21:55 - 00000000 ____D () C:\AdwCleaner

2014-08-18 18:14 - 2013-06-03 16:04 - 00001008 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-08-18 18:06 - 2014-08-02 01:15 - 00000000 ____D () C:\ProgramData\MFAData

2014-08-18 18:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru

2014-08-18 12:18 - 2013-05-31 10:02 - 00000000 ____D () C:\Users\Lisbeth\Documents\Mamma

2014-08-18 12:15 - 2014-08-02 15:17 - 00000000 ____D () C:\Users\Lisbeth\Documents\Dödsannonser

2014-08-18 12:08 - 2013-05-31 09:29 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2834550104-548988328-925754366-1001

2014-08-18 11:31 - 2014-08-18 11:31 - 00000000 ____D () C:\SUPERDelete

2014-08-18 11:29 - 2013-06-03 08:02 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\Adobe

2014-08-18 11:25 - 2014-07-12 14:31 - 04984040 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-08-18 01:52 - 2013-05-31 09:23 - 01067986 _____ () C:\Windows\WindowsUpdate.log

2014-08-18 01:27 - 2014-08-18 01:27 - 00000000 ____D () C:\Windows\ERDNT

2014-08-18 01:26 - 2014-08-18 01:25 - 00000000 ____D () C:\Program Files (x86)\ERUNT

2014-08-18 01:25 - 2014-08-18 01:25 - 00791393 _____ (Lars Hederer ) C:\Users\Lisbeth\Downloads\erunt-setup.exe

2014-08-18 01:25 - 2014-08-18 01:25 - 00000924 _____ () C:\Users\Lisbeth\Desktop\NTREGOPT.lnk

2014-08-18 01:25 - 2014-08-18 01:25 - 00000905 _____ () C:\Users\Lisbeth\Desktop\ERUNT.lnk

2014-08-18 01:25 - 2014-08-18 01:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT

2014-08-18 01:23 - 2013-06-13 23:49 - 02092032 ___SH () C:\Users\Lisbeth\Desktop\Thumbs.db

2014-08-18 01:17 - 2014-08-18 01:17 - 00031519 _____ () C:\Users\Lisbeth\Downloads\Addition.txt

2014-08-18 01:15 - 2014-08-18 01:15 - 02101760 _____ (Farbar) C:\Users\Lisbeth\Downloads\FRST64.exe

2014-08-18 01:10 - 2013-06-12 18:55 - 00000000 ____D () C:\Users\Lisbeth\Documents\Släkten

2014-08-18 01:08 - 2013-06-13 13:22 - 00000000 ____D () C:\Users\Lisbeth\Documents\Memming1

2014-08-18 01:07 - 2013-05-31 10:03 - 00000000 ____D () C:\Users\Lisbeth\Documents\Mina Excelfiler

2014-08-17 21:54 - 2014-08-17 21:54 - 01361671 _____ () C:\Users\Lisbeth\Downloads\adwcleaner_3.307 (1).exe

2014-08-17 21:53 - 2014-08-17 21:52 - 01361671 _____ () C:\Users\Lisbeth\Desktop\adwcleaner_3.307.exe

2014-08-16 18:56 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-08-15 22:40 - 2014-08-15 13:19 - 00000000 ____D () C:\Users\Lisbeth\Desktop\Ny mapp (2)

2014-08-15 22:32 - 2014-08-14 19:05 - 00000000 ____D () C:\Users\Lisbeth\Desktop\Ny mapp

2014-08-15 13:58 - 2014-02-12 00:45 - 00000000 ____D () C:\Users\Lisbeth\Documents\Släkten _div program

2014-08-14 17:02 - 2014-02-07 11:43 - 00000000 ____D () C:\ProgramData\Oracle

2014-08-14 16:57 - 2014-08-14 16:56 - 00004178 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log

2014-08-14 16:57 - 2013-06-29 18:19 - 00000000 ____D () C:\Program Files (x86)\Java

2014-08-14 15:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache

2014-08-14 14:20 - 2013-05-31 09:46 - 00000000 ____D () C:\Users\Lisbeth\Documents\Hemekonomi

2014-08-14 12:22 - 2014-08-14 12:22 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software

2014-08-14 12:22 - 2014-08-14 12:22 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software

2014-08-14 12:22 - 2014-08-02 01:22 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2014.lnk

2014-08-14 12:22 - 2014-08-02 01:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2014-08-14 00:23 - 2014-07-11 01:32 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-08-14 00:23 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData

2014-08-13 23:54 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp

2014-08-13 23:53 - 2013-07-16 00:35 - 00000000 ____D () C:\Windows\system32\MRT

2014-08-13 23:50 - 2013-05-31 09:43 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-08-13 23:46 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\FxsTmp

2014-08-13 23:41 - 2014-08-13 23:41 - 00000520 _____ () C:\Users\Lisbeth\AppData\Local\TempPSTEMPFILEon0809017276_1.tmp

2014-08-13 22:01 - 2013-05-31 09:23 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\Packages

2014-08-13 14:18 - 2013-06-03 16:09 - 00000000 ____D () C:\Program Files\Google

2014-08-13 14:18 - 2013-06-03 16:04 - 00000000 ____D () C:\Program Files (x86)\Google

2014-08-13 14:16 - 2013-06-03 16:04 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\Google

2014-08-09 13:11 - 2014-07-27 12:43 - 00000000 ____D () C:\Users\Lisbeth\Downloads\Love2

2014-08-09 13:06 - 2013-06-03 18:30 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-08-07 08:33 - 2014-08-13 23:06 - 00712192 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-08-07 05:09 - 2014-08-13 23:06 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-08-06 17:58 - 2013-05-31 09:46 - 00000000 ____D () C:\Users\Lisbeth\Documents\Calibre-bibliotek

2014-08-06 17:57 - 2013-06-04 00:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management

2014-08-06 17:57 - 2013-06-04 00:10 - 00000000 ____D () C:\Program Files (x86)\Calibre2

2014-08-02 15:50 - 2014-08-02 15:50 - 00940144 _____ () C:\Users\Lisbeth\Documents\program för att läsa _jif-filer _Solvusoft Corporation - Secure Checkout_php.mht

2014-08-02 15:48 - 2014-08-02 15:39 - 00000000 ____D () C:\Program Files\FileViewPro

2014-08-02 15:40 - 2014-08-02 15:40 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\FileViewPro

2014-08-02 15:39 - 2014-08-02 15:39 - 00000848 _____ () C:\Users\Public\Desktop\FileViewPro.lnk

2014-08-02 15:39 - 2014-08-02 15:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro

2014-08-02 15:37 - 2014-08-02 15:37 - 00000000 ____D () C:\Spacekace

2014-08-02 15:24 - 2014-08-02 15:24 - 00000000 ____D () C:\Users\Public\Foxit Software

2014-08-02 15:24 - 2014-08-02 15:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader

2014-08-02 15:24 - 2014-08-02 15:24 - 00000000 ____D () C:\Program Files (x86)\FOXIT SOFTWARE

2014-08-02 14:54 - 2014-08-02 01:20 - 00000000 ____D () C:\ProgramData\AVG2014

2014-08-02 02:15 - 2014-08-14 12:14 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-08-02 02:15 - 2014-08-14 12:14 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-08-02 01:34 - 2014-08-02 01:15 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\Avg2014

2014-08-02 01:22 - 2014-08-02 01:22 - 00000000 ____D () C:\Users\Lisbeth\AppData\Roaming\TuneUp Software

2014-08-02 01:22 - 2014-08-02 01:22 - 00000000 ____D () C:\Users\Lisbeth\AppData\Roaming\AVG2014

2014-08-02 01:22 - 2012-07-26 10:12 - 00000000 ___HD () C:\Windows\ELAMBKUP

2014-08-02 01:20 - 2014-08-02 01:20 - 00000000 ___HD () C:\$AVG

2014-08-02 01:19 - 2014-08-02 01:19 - 00000000 ____D () C:\Program Files (x86)\AVG

2014-08-02 01:15 - 2014-08-02 01:15 - 00000000 ____D () C:\Users\Lisbeth\AppData\Local\MFAData

2014-07-27 15:22 - 2012-07-26 09:21 - 00039587 _____ () C:\Windows\setupact.log

2014-07-27 12:42 - 2014-07-27 12:41 - 01310599 _____ () C:\Users\Lisbeth\Downloads\Love2.rar

2014-07-25 12:14 - 2014-07-11 00:44 - 00000000 ___RD () C:\Users\Lisbeth\Dropbox

2014-07-24 16:25 - 2014-02-08 12:54 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-24 16:24 - 2014-07-24 16:24 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin

2014-07-24 16:24 - 2014-07-24 16:24 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin

2014-07-24 16:24 - 2014-07-24 16:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin

2014-07-24 16:24 - 2014-06-25 17:04 - 00003556 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask

2014-07-24 16:24 - 2014-02-08 12:54 - 00000000 ____D () C:\ProgramData\Garmin

2014-07-24 16:24 - 2014-02-08 12:54 - 00000000 ____D () C:\Program Files (x86)\Garmin

2014-07-24 14:11 - 2014-08-13 23:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-24 14:10 - 2014-08-13 23:09 - 02240000 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-24 14:10 - 2014-08-13 23:09 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-24 14:10 - 2014-08-13 23:09 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll

2014-07-24 14:10 - 2014-08-13 23:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll

2014-07-24 14:09 - 2014-08-13 23:10 - 19279872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-24 14:09 - 2014-08-13 23:10 - 15399936 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-24 14:09 - 2014-08-13 23:10 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-24 14:09 - 2014-08-13 23:09 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-24 14:09 - 2014-08-13 23:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-24 12:52 - 2014-08-13 23:09 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-24 12:52 - 2014-08-13 23:09 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-24 12:52 - 2014-08-13 23:09 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll

2014-07-24 12:51 - 2014-08-13 23:10 - 14371328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-24 12:51 - 2014-08-13 23:10 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 02054656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-24 12:51 - 2014-08-13 23:09 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-24 12:51 - 2014-08-13 23:09 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-24 12:33 - 2014-08-13 23:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-24 12:29 - 2014-08-13 23:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-24 10:03 - 2014-08-13 23:09 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll

2014-07-23 18:46 - 2013-05-31 10:03 - 00000000 ____D () C:\Users\Lisbeth\Documents\My Digital Editions

Some content of TEMP:

====================

C:\Users\Lisbeth\AppData\Local\Temp\AskPIP_FF_.exe

C:\Users\Lisbeth\AppData\Local\Temp\AskSLib.dll

C:\Users\Lisbeth\AppData\Local\Temp\dlLogic.exe

C:\Users\Lisbeth\AppData\Local\Temp\dltr.exe

C:\Users\Lisbeth\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpzjdvmn.dll

C:\Users\Lisbeth\AppData\Local\Temp\Foxit Reader Updater.exe

C:\Users\Lisbeth\AppData\Local\Temp\Foxit Updater.exe

C:\Users\Lisbeth\AppData\Local\Temp\genteert.dll

C:\Users\Lisbeth\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

C:\Users\Lisbeth\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe

C:\Users\Lisbeth\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe

C:\Users\Lisbeth\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe

C:\Users\Lisbeth\AppData\Local\Temp\LMkRstPt.exe

C:\Users\Lisbeth\AppData\Local\Temp\MSETUP4.EXE

C:\Users\Lisbeth\AppData\Local\Temp\nsbF58B.exe

C:\Users\Lisbeth\AppData\Local\Temp\nsgB7B2.exe

C:\Users\Lisbeth\AppData\Local\Temp\nskB33C.exe

C:\Users\Lisbeth\AppData\Local\Temp\nsvB59E.exe

C:\Users\Lisbeth\AppData\Local\Temp\nswF82B.exe

C:\Users\Lisbeth\AppData\Local\Temp\nsxFA9D.exe

C:\Users\Lisbeth\AppData\Local\Temp\OfficeSetup.exe

C:\Users\Lisbeth\AppData\Local\Temp\photostudio_canon_6.0.1.94_6.0.1.161_update_all.exe

C:\Users\Lisbeth\AppData\Local\Temp\Quarantine.exe

C:\Users\Lisbeth\AppData\Local\Temp\spcon_1-2-2-0_row.exe

C:\Users\Lisbeth\AppData\Local\Temp\verifier.exe

C:\Users\Lisbeth\AppData\Local\Temp\_is166D.exe

C:\Users\Lisbeth\AppData\Local\Temp\_is19E3.exe

C:\Users\Lisbeth\AppData\Local\Temp\_is8014.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-08-18 01:34

==================== End Of Log ============================

18 augusti, 2014

3.

Onlinescanning med ESET:

C:\$Recycle.Bin\S-1-5-21-2834550104-548988328-925754366-1001\$RIYX21J.9\360-59570.crx JS/Toolbar.Crossrider.B potentially unwanted application

C:\$Recycle.Bin\S-1-5-21-2834550104-548988328-925754366-1001\$RIYX21J.9\59570.crx JS/Toolbar.Crossrider.B potentially unwanted application

C:\$Recycle.Bin\S-1-5-21-2834550104-548988328-925754366-1001\$RIYX21J.9\59570.xpi JS/Toolbar.Crossrider.B potentially unwanted application

C:\$Recycle.Bin\S-1-5-21-2834550104-548988328-925754366-1001\$RIYX21J.9\c9d77c59-0ff5-4036-8806-71115fd01f45.crx JS/Toolbar.Crossrider.B potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65auxstb.dll.vir a variant of Win32/Toolbar.MyWebSearch.AE potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65auxstb64.dll.vir a variant of Win64/Toolbar.MyWebSearch.B potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65bar.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65barsvc.exe.vir Win32/Toolbar.MyWebSearch.AE potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65bprtct.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65brmon.exe.vir Win32/Toolbar.MyWebSearch.AE potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65brmon64.exe.vir a variant of Win64/Toolbar.MyWebSearch.B potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65brstub.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65brstub64.dll.vir a variant of Win64/Toolbar.MyWebSearch.B potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65datact.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65dlghk.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65dlghk64.dll.vir a variant of Win64/Toolbar.MyWebSearch.B potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65feedmg.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65hkstub.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65htmlmu.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65httpct.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65idle.dll.vir a variant of Win32/Toolbar.MyWebSearch.AE potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65ieovr.dll.vir a variant of Win32/Toolbar.MyWebSearch.AG potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65mlbtn.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65Plugin.dll.vir Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65radio.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65regfft.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65reghk.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65regiet.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65script.dll.vir a variant of Win32/Toolbar.MyWebSearch.AE potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65skin.dll.vir probably a variant of Win32/Toolbar.MyWebSearch.P potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65SrcAs.dll.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65srchmr.dll.vir a variant of Win32/Toolbar.MyWebSearch.AE potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\65tpinst.dll.vir a variant of Win32/Toolbar.MyWebSearch.AA potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\AppIntegrator64.exe.vir a variant of Win64/Toolbar.MyWebSearch.A potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\AppIntegratorStub64.dll.vir a variant of Win64/Toolbar.MyWebSearch.A potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\CREXT.DLL.vir Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\CrExtP65.exe.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\Hpg64.dll.vir a variant of Win64/Toolbar.MyWebSearch.A potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\T8EPMSUP.DLL.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\T8EXTEX.DLL.vir a variant of Win32/Toolbar.MyWebSearch.AC potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\T8EXTPEX.DLL.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\T8HTML.DLL.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\T8TICKER.DLL.vir a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\FromDocToPDF_65\bar\1.bin\VERIFY.DLL.vir a variant of Win32/Toolbar.MyWebSearch.AC potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll.vir probably a variant of Win32/Conduit.SearchProtect.H potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\SPtool.dll_1407173731309.vir probably a variant of Win32/Conduit.SearchProtect.H potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll.vir a variant of Win32/Conduit.SearchProtect.H potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll.vir a variant of Win32/ClientConnect.A potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll.vir a variant of Win32/ClientConnect.A potentially unwanted application

C:\AdwCleaner\Quarantine\C\Users\Lisbeth\AppData\Local\Conduit\spcon\1.2.2.0\embededstub.exe.vir a variant of Win32/ClientConnect.A potentially unwanted application

C:\AdwCleaner\Quarantine\C\Users\Lisbeth\AppData\LocalLow\FromDocToPDF_65EI\Installr\Cache\02ACC5B2.exe.vir a variant of Win32/Toolbar.MyWebSearch.V potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Google\Chrome\User Data\Default\Extensions\dimpomefjdddhjmkjgjdokhidjkcmhhn\13973.528.6282_0\extensionData\plugins\91.js JS/Toolbar.Crossrider.B potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CV3D8SBM\91[1].js JS/Toolbar.Crossrider.B potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CV3D8SBM\91[2].js JS/Toolbar.Crossrider.B potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N8BCWLSZ\91[1].js JS/Toolbar.Crossrider.B potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Temp\AskPIP_FF_.exe a variant of Win32/Bundled.Toolbar.Ask.D potentially unsafe application

C:\Users\Lisbeth\AppData\Local\Temp\AskSLib.dll a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application

C:\Users\Lisbeth\AppData\Local\Temp\nsbF58B.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Temp\nsgB7B2.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Temp\nskB33C.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Temp\nsvB59E.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Temp\nswF82B.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Temp\nsxC7C2.tmp a variant of Win32/ClientConnect.A potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Temp\nsxFA9D.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Users\Lisbeth\AppData\Local\Temp\spcon_1-2-2-0_row.exe Win32/Toolbar.Montiera.B potentially unwanted application

C:\Users\Lisbeth\Downloads\FoxitReader603.0524_enu_Setup.exe a variant of Win32/Bundled.Toolbar.Ask.D potentially unsafe application

C:\Windows\Installer\MSICFC9.tmp a variant of Win32/Bundled.Toolbar.Ask.F potentially unsafe application

C:\Windows\Temp\nsaF257.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Windows\Temp\nsc9F82.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Windows\Temp\nsdB31E.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Windows\Temp\nss7D58.exe Win32/Conduit.SearchProtect.R potentially unwanted application

C:\Windows\Temp\nsbE3B1.tmp\SPtool.dll probably a variant of Win32/Conduit.SearchProtect.H potentially unwanted application

18 augusti, 2014

1.

Esets skanner hittade några filer i C:\$Recycle.Bin och eftersom det är papperskorgen så ta och töm den.

2.

Återställ inställningarna i Chrome till standard för att få bort olämpliga söksidor, tillägg mm: https://support.google.com/chrome/answer/3296214?hl=sv

Sen kan du gå igenom och aktivera de tillägg som du verkligen använder samt ta bort HDPlus-V1.9:

https://support.google.com/chrome/answer/187443?hl=sv

https://support.google.com/chrome/answer/113907?hl=sv

Samt ställ in den sida du vill ha som startsida och hemsida:

https://support.google.com/chrome/answer/95421?hl=sv

https://support.google.com/chrome/answer/95314?hl=sv

3.

Starta Anteckningar.

Kopiera alla rader i rutan:

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Task: {269F20BF-5A73-4364-B813-4F4C37809FB0} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-novainstaller.exe
C:\Program Files (x86)\HDPlus-V1.9
Task: {2BA38CF5-8FEE-470E-9774-DA2FC69869D9} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-codedownloader.exe
Task: {4776DB6A-7F0C-4069-B9F2-C72EF1FE2E52} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe
Task: {56D8E613-3EFF-40F3-9283-EE6C39E43919} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-nova.exe
Task: {63563E28-90D1-460E-B335-92654462C935} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-07-12] (globalUpdate)
Task: {9881055D-A02F-4679-9A25-03B436E3B010} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-4.exe
Task: {AC809E3B-0D6E-4AF8-8C35-C5747385210F} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-2 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-2.exe
Task: {C9DD57D3-DE09-4C89-A83F-264502022FB8} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe
Task: {CD61B856-1BAA-4E8B-98FB-56EF420E2588} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-11.exe
Task: {D9FD2CBB-776F-491A-8442-5225EC575B33} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-3.exe
Task: {E944ACC8-B161-4DB4-9ACC-067AC84B0C3C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-07-12] (globalUpdate)
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-codedownloader.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-11.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-2.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-2.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-3.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-4.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-novainstaller.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-nova.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION

och klistra in i Anteckningar. Kontrollera att inga filer har delats upp på två rader.

Spara filen på skrivbordet med namnet fixlist.txt.

Starta FRST som finns på skrivbordet.

Klicka på knappen Fix.

Vänta tills programmet är klart.

Programmet skapar en logg Fixlog.txt på skrivbordet.

Klistra in innehållet i den i ditt svar.

4.

Spara TFC (Temporary File Cleaner) av OldTimer på Skrivbordet.

http://oldtimer.geekstogo.com/TFC.exe

Stäng alla program och fönster.

Kör TFC (om du har Vista eller Windows 7 så högerklicka på filen och välj "Kör som administratör").

Klicka på Start-knappen för att starta städningen.

Det kan ta några minuter och låt datorn vara ifred under tiden.

När det är klart är det meningen att datorn ska startas om automatiskt. Om den inte gör det så startar du om datorn själv. Ta bort TFC-filen.

18 augusti, 2014

1. Papperskorgen är tömd

2. Crome har nu standardinställningar, jag har inte gjort några tillägg eller nya startsidor

HDPlus-V1.9 måste jag ha avinstallerat tidigare - hittar det inte vare sig i Kontrollpanelen-Program eller i C/Program

3. FRST - Fix är kört Fixlog.txt följer här:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01

Ran by Lisbeth at 2014-08-19 00:24:24 Run:1

Running from C:\Users\Lisbeth\Desktop

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Task: {269F20BF-5A73-4364-B813-4F4C37809FB0} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-novainstaller.exe C:\Program Files (x86)\HDPlus-V1.9 Task: {2BA38CF5-8FEE-470E-9774-DA2FC69869D9} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-codedownloader.exe Task: {4776DB6A-7F0C-4069-B9F2-C72EF1FE2E52} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe Task: {56D8E613-3EFF-40F3-9283-EE6C39E43919} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-nova.exe Task: {63563E28-90D1-460E-B335-92654462C935} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-07-12] (globalUpdate) Task: {9881055D-A02F-4679-9A25-03B436E3B010} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-4.exe Task: {AC809E3B-0D6E-4AF8-8C35-C5747385210F} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-2 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-2.exe Task: {C9DD57D3-DE09-4C89-A83F-264502022FB8} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe Task: {CD61B856-1BAA-4E8B-98FB-56EF420E2588} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-11.exe Task: {D9FD2CBB-776F-491A-8442-5225EC575B33} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-3.exe Task: {E944ACC8-B161-4DB4-9ACC-067AC84B0C3C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-07-12] (globalUpdate) Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-codedownloader.exe Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-11.exe Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-2.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-2.exe Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-3.exe Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-4.exe Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-novainstaller.exe Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-nova.exe Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION

*****************

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully.

"HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => Key not found.

==== End of Fixlog ====

4. Städning med TFC är gjort --- och jag fick starta om datorn själv.

Jag hittar ingen TFC-fil --- men jag tar bort programmet (kanske var den filen du menade )

5 . Men när jag startar datorn nu får jag upp en liten ruta från "ERU for Window NT"

Jag bifogar bild.

Ska jag spara programmet ERDNT som orsakar det eller ???

18 augusti, 2014

2. Crome har nu standardinställningar, jag har inte gjort några tillägg eller nya startsidor

HDPlus-V1.9 måste jag ha avinstallerat tidigare - hittar det inte vare sig i Kontrollpanelen-Program eller i C/Program

Det gällde alltså HDPlus-V1.9 som Chrome-tillägg, se länkarna i mitt förra inlägg.

3. När du kopierade rutan i mitt förra inlägg och klistrade in i Anteckningar så gick något fel och radbrytningarna försvann. Försök en gång till.

5. Du installerade ERUNT när du följde anvisningarna i tråden Till dig med virus eller andra skadliga program i datorn. Jag vet inte varför du fick felmeddelandet men det är inte väsentligt.

19 augusti, 2014

1. Nu fattar jag om HDPlus-V1.9 ... så det är fixat nu, borttaget tillägg i Chrome

2. Fixlog.txt nya filen:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-08-2014 01
Ran by Lisbeth at 2014-08-19 10:56:06 Run:2
Running from C:\Users\Lisbeth\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Task: {269F20BF-5A73-4364-B813-4F4C37809FB0} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-novainstaller.exe
C:\Program Files (x86)\HDPlus-V1.9
Task: {2BA38CF5-8FEE-470E-9774-DA2FC69869D9} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-codedownloader.exe
Task: {4776DB6A-7F0C-4069-B9F2-C72EF1FE2E52} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe
Task: {56D8E613-3EFF-40F3-9283-EE6C39E43919} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7 => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-nova.exe
Task: {63563E28-90D1-460E-B335-92654462C935} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-07-12] (globalUpdate)
Task: {9881055D-A02F-4679-9A25-03B436E3B010} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-4.exe
Task: {AC809E3B-0D6E-4AF8-8C35-C5747385210F} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-2 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-2.exe
Task: {C9DD57D3-DE09-4C89-A83F-264502022FB8} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe
Task: {CD61B856-1BAA-4E8B-98FB-56EF420E2588} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-11.exe
Task: {D9FD2CBB-776F-491A-8442-5225EC575B33} - System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3 => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-3.exe
Task: {E944ACC8-B161-4DB4-9ACC-067AC84B0C3C} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-07-12] (globalUpdate)
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-codedownloader.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-11.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-2.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-2.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-3.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-4.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-novainstaller.exe
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-nova.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files
*****************

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully.
"HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{269F20BF-5A73-4364-B813-4F4C37809FB0}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-6" => Key not found.
"C:\Program Files (x86)\HDPlus-V1.9" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2BA38CF5-8FEE-470E-9774-DA2FC69869D9}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-1" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4776DB6A-7F0C-4069-B9F2-C72EF1FE2E52}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56D8E613-3EFF-40F3-9283-EE6C39E43919}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-7" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63563E28-90D1-460E-B335-92654462C935}" => Key not found.
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9881055D-A02F-4679-9A25-03B436E3B010}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-4" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC809E3B-0D6E-4AF8-8C35-C5747385210F}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-2 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-2" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C9DD57D3-DE09-4C89-A83F-264502022FB8}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-5" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD61B856-1BAA-4E8B-98FB-56EF420E2588}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-11" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D9FD2CBB-776F-491A-8442-5225EC575B33}" => Key not found.
C:\Windows\System32\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3 not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c9d77c59-0ff5-4036-8806-71115fd01f45-3" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E944ACC8-B161-4DB4-9ACC-067AC84B0C3C}" => Key not found.
C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore" => Key not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1.job not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11.job not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-2.job not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3.job not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4.job not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5.job not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user.job not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6.job not found.
C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7.job not found.
C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job not found.
C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job not found.

==== End of Fixlog ====

3. Då vet jag om ERUNT, bortser från det eller avinstallerar när vi är klara

19 augusti, 2014

Jag tror inte att det finns något mer skadligt eller olämpligt i datorn. Har det påverkat IE 10 något när det gäller registerposterna som försvinner?

19 augusti, 2014

Det har inte förändrats något vad gäller IE, sidan "Din webbläsare har uppgraderats" kommer fortfarande upp vid nystart.

Men i övrigt verkar datorn gå snabbare att starta, alltid något ;o)

19 augusti, 2014

Gör en selektiv start genom att inaktivera alla Autostart-objekt och alla tjänster som inte kommer från Microsoft, se http://windows.microsoft.com/sv-se/windows/using-system-configuration för en beskrivning och se om raderna försvinner från registret då.

19 augusti, 2014

Ursäkta Cecilia jag var nog inte riktigt med när jag svarade förut....

jag har varit inne i regedit nu och före och efter start av IE och har är bilderna på det.

Det verkar vara exakt lika nu.

19 augusti, 2014

Det där är inte samma ställe i registret som i inlägg 15: //eforum.idg.se/topic/346267-ie-10-tror-det-%C3%A4r-nyinstallerat/?do=findComment&comment=1636616

Kolla i CURRENT_USER i stället.

IE 10 tror det är nyinstallerat

Rekommendera Poster

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

liwabettan

Länk till kommentar

Dela på andra webbplatser

Cecilia

Länk till kommentar

Dela på andra webbplatser

Arkiverat

Vem är online 0 Medlemmar, 0 anonym, 39 gäster (Visa hela listan)

Populära medlemmar