ComboFix 13-06-12.02 - Terje 13.06.2013  14:59:27.1.8 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.47.1044.18.6135.4048 [GMT 2:00]
Kjører fra: c:\users\Terje\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Andre slettinger   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Terje\Desktop\Setup.exe
.
.
(((((((((((((((((((((((((((   Filer Opprettet Fra 2013-05-13 til 2013-06-13  )))))))))))))))))))))))))))))))))
.
.
2013-06-13 13:03 . 2013-06-13 13:03	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-06-13 13:03 . 2013-06-13 13:03	76232	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B3D2B9DE-F9E4-4C2E-8EEB-F94B0F3D8BC9}\offreg.dll
2013-06-13 12:53 . 2013-06-13 12:53	--------	d-----w-	c:\users\Terje\AppData\Roaming\Malwarebytes
2013-06-13 12:53 . 2013-06-13 12:53	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-13 12:53 . 2013-06-13 12:53	--------	d-----w-	c:\programdata\Malwarebytes
2013-06-13 12:53 . 2013-04-04 12:50	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-06-13 12:52 . 2013-06-13 12:52	--------	d-----w-	c:\users\Terje\AppData\Local\Programs
2013-06-12 21:58 . 2013-06-12 21:59	--------	d-----w-	c:\users\Terje\AppData\Roaming\dvdcss
2013-06-12 14:12 . 2013-05-08 06:39	1910632	----a-w-	c:\windows\system32\drivers\tcpip.sys
2013-06-12 14:12 . 2013-04-26 05:51	751104	----a-w-	c:\windows\system32\win32spl.dll
2013-06-12 14:12 . 2013-04-26 04:55	492544	----a-w-	c:\windows\SysWow64\win32spl.dll
2013-06-12 14:11 . 2013-05-10 05:49	30720	----a-w-	c:\windows\system32\cryptdlg.dll
2013-06-12 14:11 . 2013-05-10 03:20	24576	----a-w-	c:\windows\SysWow64\cryptdlg.dll
2013-06-12 14:10 . 2013-04-17 07:02	1230336	----a-w-	c:\windows\SysWow64\WindowsCodecs.dll
2013-06-12 14:10 . 2013-04-17 06:24	1424384	----a-w-	c:\windows\system32\WindowsCodecs.dll
2013-06-12 14:10 . 2013-05-13 03:43	1192448	----a-w-	c:\windows\system32\certutil.exe
2013-06-12 14:10 . 2013-05-13 03:08	903168	----a-w-	c:\windows\SysWow64\certutil.exe
2013-06-12 14:10 . 2013-05-13 05:51	1464320	----a-w-	c:\windows\system32\crypt32.dll
2013-06-12 14:10 . 2013-05-13 04:45	1160192	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-06-12 14:10 . 2013-05-13 05:51	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2013-06-12 14:10 . 2013-05-13 05:51	139776	----a-w-	c:\windows\system32\cryptnet.dll
2013-06-12 14:10 . 2013-05-13 04:45	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2013-06-12 14:10 . 2013-05-13 04:45	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2013-06-12 14:10 . 2013-05-13 05:50	52224	----a-w-	c:\windows\system32\certenc.dll
2013-06-12 14:10 . 2013-05-13 03:08	43008	----a-w-	c:\windows\SysWow64\certenc.dll
2013-06-12 13:50 . 2013-03-31 22:52	1887232	----a-w-	c:\windows\system32\d3d11.dll
2013-06-12 13:50 . 2013-04-25 23:30	1505280	----a-w-	c:\windows\SysWow64\d3d11.dll
2013-06-12 13:25 . 2013-05-13 06:37	9460464	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B3D2B9DE-F9E4-4C2E-8EEB-F94B0F3D8BC9}\mpengine.dll
2013-06-10 23:22 . 2013-06-10 23:22	--------	d-----w-	c:\users\Terje\AppData\Roaming\SUPERAntiSpyware.com
2013-06-10 23:22 . 2013-06-10 23:22	--------	d-----w-	c:\program files\SUPERAntiSpyware
2013-06-10 23:22 . 2013-06-10 23:22	--------	d-----w-	c:\programdata\SUPERAntiSpyware.com
2013-05-16 18:36 . 2013-04-10 03:30	3153920	----a-w-	c:\windows\system32\win32k.sys
2013-05-16 18:36 . 2013-04-10 06:01	265064	----a-w-	c:\windows\system32\drivers\dxgmms1.sys
2013-05-16 18:36 . 2013-04-10 06:01	983400	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2013-05-16 18:36 . 2011-02-03 11:25	144384	----a-w-	c:\windows\system32\cdd.dll
2013-05-16 18:35 . 2013-02-27 05:52	14172672	----a-w-	c:\windows\system32\shell32.dll
2013-05-16 18:35 . 2013-02-27 05:52	197120	----a-w-	c:\windows\system32\shdocvw.dll
2013-05-16 18:35 . 2013-02-27 05:48	1930752	----a-w-	c:\windows\system32\authui.dll
2013-05-16 18:35 . 2013-02-27 06:02	111448	----a-w-	c:\windows\system32\consent.exe
2013-05-16 18:35 . 2013-02-27 05:47	70144	----a-w-	c:\windows\system32\appinfo.dll
2013-05-16 18:35 . 2013-02-27 04:49	1796096	----a-w-	c:\windows\SysWow64\authui.dll
2013-05-16 18:35 . 2013-03-19 05:53	48640	----a-w-	c:\windows\system32\wwanprotdim.dll
2013-05-16 18:35 . 2013-03-19 05:53	230400	----a-w-	c:\windows\system32\wwansvc.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Rapport   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 22:05 . 2012-05-04 14:14	75825640	----a-w-	c:\windows\system32\MRT.exe
2013-06-11 22:35 . 2012-05-04 14:55	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-11 22:35 . 2012-05-04 14:55	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-09 08:59 . 2013-04-22 18:50	378432	----a-w-	c:\windows\system32\drivers\aswSP.sys
2013-05-09 08:59 . 2013-04-22 18:50	72016	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2013-05-09 08:59 . 2013-04-22 18:50	64288	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2013-05-09 08:59 . 2013-04-22 18:50	1025808	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2013-05-09 08:59 . 2013-04-22 18:50	189936	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-05-09 08:59 . 2013-04-22 18:50	65336	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2013-05-09 08:59 . 2013-04-22 18:50	33400	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2013-05-09 08:59 . 2013-04-22 18:50	80816	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2013-05-09 08:58 . 2013-04-22 18:49	41664	----a-w-	c:\windows\avastSS.scr
2013-05-09 08:58 . 2013-04-22 18:50	287840	----a-w-	c:\windows\system32\aswBoot.exe
2013-05-02 00:06 . 2012-04-27 11:14	278800	------w-	c:\windows\system32\MpSigStub.exe
2013-04-26 20:51 . 2013-04-26 20:51	95648	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-04-26 20:51 . 2012-07-31 13:44	866720	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2013-04-26 20:51 . 2012-07-31 13:44	788896	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-04-13 05:49 . 2013-05-16 18:36	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-16 18:36	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-16 18:36	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-16 18:36	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-16 18:36	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-16 18:36	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-05-02 18:31	1656680	----a-w-	c:\windows\system32\drivers\ntfs.sys
2013-03-22 23:18 . 2013-03-22 23:18	73728	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-03-22 23:18 . 2013-03-22 23:18	719360	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-03-22 23:18 . 2013-03-22 23:18	61952	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-03-22 23:18 . 2013-03-22 23:18	523264	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-03-22 23:18 . 2013-03-22 23:18	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-03-22 23:18 . 2013-03-22 23:18	38400	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-03-22 23:18 . 2013-03-22 23:18	361984	----a-w-	c:\windows\SysWow64\html.iec
2013-03-22 23:18 . 2013-03-22 23:18	23040	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-03-22 23:18 . 2013-03-22 23:18	226304	----a-w-	c:\windows\system32\elshyph.dll
2013-03-22 23:18 . 2013-03-22 23:18	197120	----a-w-	c:\windows\system32\msrating.dll
2013-03-22 23:18 . 2013-03-22 23:18	185344	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-03-22 23:18 . 2013-03-22 23:18	158720	----a-w-	c:\windows\SysWow64\msls31.dll
2013-03-22 23:18 . 2013-03-22 23:18	150528	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-03-22 23:18 . 2013-03-22 23:18	1441280	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-03-22 23:18 . 2013-03-22 23:18	138752	----a-w-	c:\windows\SysWow64\wextract.exe
2013-03-22 23:18 . 2013-03-22 23:18	137216	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-03-22 23:18 . 2013-03-22 23:18	12800	----a-w-	c:\windows\SysWow64\mshta.exe
2013-03-22 23:18 . 2013-03-22 23:18	110592	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-03-22 23:18 . 2013-03-22 23:18	1054720	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-03-22 23:18 . 2013-03-22 23:18	216064	----a-w-	c:\windows\system32\msls31.dll
2013-03-22 23:18 . 2013-03-22 23:18	97280	----a-w-	c:\windows\system32\mshtmled.dll
2013-03-22 23:18 . 2013-03-22 23:18	92160	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-03-22 23:18 . 2013-03-22 23:18	905728	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-03-22 23:18 . 2013-03-22 23:18	81408	----a-w-	c:\windows\system32\icardie.dll
2013-03-22 23:18 . 2013-03-22 23:18	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-03-22 23:18 . 2013-03-22 23:18	762368	----a-w-	c:\windows\system32\ieapfltr.dll
2013-03-22 23:18 . 2013-03-22 23:18	62976	----a-w-	c:\windows\system32\pngfilt.dll
2013-03-22 23:18 . 2013-03-22 23:18	599552	----a-w-	c:\windows\system32\vbscript.dll
2013-03-22 23:18 . 2013-03-22 23:18	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-03-22 23:18 . 2013-03-22 23:18	51200	----a-w-	c:\windows\system32\imgutil.dll
2013-03-22 23:18 . 2013-03-22 23:18	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-03-22 23:18 . 2013-03-22 23:18	452096	----a-w-	c:\windows\system32\dxtmsft.dll
2013-03-22 23:18 . 2013-03-22 23:18	441856	----a-w-	c:\windows\system32\html.iec
2013-03-22 23:18 . 2013-03-22 23:18	281600	----a-w-	c:\windows\system32\dxtrans.dll
2013-03-22 23:18 . 2013-03-22 23:18	27648	----a-w-	c:\windows\system32\licmgr10.dll
2013-03-22 23:18 . 2013-03-22 23:18	270848	----a-w-	c:\windows\system32\iedkcs32.dll
2013-03-22 23:18 . 2013-03-22 23:18	247296	----a-w-	c:\windows\system32\webcheck.dll
2013-03-22 23:18 . 2013-03-22 23:18	235008	----a-w-	c:\windows\system32\url.dll
2013-03-22 23:18 . 2013-03-22 23:18	173568	----a-w-	c:\windows\system32\ieUnatt.exe
2013-03-22 23:18 . 2013-03-22 23:18	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-03-22 23:18 . 2013-03-22 23:18	1509376	----a-w-	c:\windows\system32\inetcpl.cpl
2013-03-22 23:18 . 2013-03-22 23:18	149504	----a-w-	c:\windows\system32\occache.dll
2013-03-22 23:18 . 2013-03-22 23:18	144896	----a-w-	c:\windows\system32\wextract.exe
2013-03-22 23:18 . 2013-03-22 23:18	1400416	----a-w-	c:\windows\system32\ieapfltr.dat
2013-03-22 23:18 . 2013-03-22 23:18	13824	----a-w-	c:\windows\system32\mshta.exe
2013-03-22 23:18 . 2013-03-22 23:18	136192	----a-w-	c:\windows\system32\iepeers.dll
2013-03-22 23:18 . 2013-03-22 23:18	135680	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-03-22 23:18 . 2013-03-22 23:18	12800	----a-w-	c:\windows\system32\msfeedssync.exe
2013-03-22 23:18 . 2013-03-22 23:18	102912	----a-w-	c:\windows\system32\inseng.dll
2013-03-22 23:17 . 2013-03-22 23:17	9728	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	9728	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	5632	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	5632	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	5632	---ha-w-	c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	522752	----a-w-	c:\windows\system32\XpsGdiConverter.dll
2013-03-22 23:17 . 2013-03-22 23:17	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2013-03-22 23:17 . 2013-03-22 23:17	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-03-22 23:17 . 2013-03-22 23:17	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	4096	---ha-w-	c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	3928064	----a-w-	c:\windows\system32\d2d1.dll
2013-03-22 23:17 . 2013-03-22 23:17	364544	----a-w-	c:\windows\SysWow64\XpsGdiConverter.dll
2013-03-22 23:17 . 2013-03-22 23:17	363008	----a-w-	c:\windows\system32\dxgi.dll
2013-03-22 23:17 . 2013-03-22 23:17	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	3584	---ha-w-	c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	3072	---ha-w-	c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	2776576	----a-w-	c:\windows\system32\msmpeg2vdec.dll
2013-03-22 23:17 . 2013-03-22 23:17	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2013-03-22 23:17 . 2013-03-22 23:17	2560	---ha-w-	c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	2560	---ha-w-	c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-03-22 23:17 . 2013-03-22 23:17	249856	----a-w-	c:\windows\SysWow64\d3d10_1core.dll
2013-03-22 23:17 . 2013-03-22 23:17	2284544	----a-w-	c:\windows\SysWow64\msmpeg2vdec.dll
2013-03-22 23:17 . 2013-03-22 23:17	220160	----a-w-	c:\windows\SysWow64\d3d10core.dll
.
.
((((((((((((((((((((((((((((((((   Oppstartspunkter I Registeret   )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke  
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2012-07-04 13:03	1310040	----a-r-	c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2012-07-04 1310040]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Terje\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Terje\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	130736	----a-w-	c:\users\Terje\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"GoogleChromeAutoLaunch_6F35D6FF2737F390AE44233FA49B4692"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2013-05-29 825808]
"44EBDD243697F91ECBCA152103A5F4885AF9BCE0._service_run"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2013-05-29 825808]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2013-05-15 5622512]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SSBkgdUpdate"="c:\program files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-10-25 210472]
"OpwareSE4"="c:\program files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2008-05-27 413696]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Sweetpacks Communicator"="c:\program files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe" [2012-08-15 231768]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2013-04-04 532040]
.
c:\users\Terje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Terje\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]
Picture Motion Browser Media Check Tool.lnk - c:\program files (x86)\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe /noballoononstart [2012-5-5 385024]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Ralink Wireless Utility.lnk - c:\program files (x86)\Ralink\Common\RaUI.exe -s [2012-4-27 1560576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\DRIVERS\lgandbus64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandbus64.sys [x]
R3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\DRIVERS\lganddiag64.sys;c:\windows\SYSNATIVE\DRIVERS\lganddiag64.sys [x]
R3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgandgps64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandgps64.sys [x]
R3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\DRIVERS\lgandmodem64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandmodem64.sys [x]
R3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192cu.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 RalinkRegistryWriter64;Ralink Registry Writer 64;c:\program files (x86)\Ralink\Common\RaRegistry64.exe;c:\program files (x86)\Ralink\Common\RaRegistry64.exe [x]
S2 Realtek11nCU;Realtek11nCU;c:\program files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe;c:\program files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 rt61x64;RT61 Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr6164.sys;c:\windows\SYSNATIVE\DRIVERS\netr6164.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-08 18:24	1165776	----a-w-	c:\program files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver)
.
2013-06-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-04 22:35]
.
2013-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-29 18:10]
.
2013-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-29 18:10]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58	133840	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\Terje\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\Terje\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\Terje\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36	164016	----a-w-	c:\users\Terje\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-27 2184520]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312]
"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2006-09-20 20480]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2010-11-03 1580368]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-10-10 2041192]
.
------- Tilleggsskanning -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://home.sweetim.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.10.1
.
- - - - TOMME PEKERE FJERNET - - - -
.
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- LÅSTE REGISTERNØKLER ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Tidspunkt ferdig: 2013-06-13  15:05:46
ComboFix-quarantined-files.txt  2013-06-13 13:05
.
Pre-Run: 54 448 218 112 byte ledig
Post-Run: 54 423 293 952 byte ledig
.
- - End Of File - - D2C33B494BD68F7D8100A1DF2F1C69A4
A36C5E4F47E84449FF07ED3517B43A31