Beskbrownie Skrevet 8. november 2013 Del Skrevet 8. november 2013 Har en 1 år gammel windows bærbar PC som på tirsdag fungerte helt som den skulle, men når jeg skrudde den av og på igjen en time senere var den plutselig helt enormt treg. Bakgrunnen blir grå, og alle ikoner jeg har musepekeren over fryser fast. Klarte så vidt å åpne nettleseren, det tok omtrent 1 time, og da nektet den å ta imot noen form for input, eller å forsvinne.Åpnet PCen deretter i sikkerhetsmodus, da var den en god del raskere, men fortsatt litt treg( vet ikke om det er normalt for sikkerhetsmodus ), og fikk lastet ned avast.Avast fikk gjort en full sikkerhetssjekk og sa at det ikke var noe virus. Så enten er det noe feil med selve PCen, eller så har jeg et i overkant sneaky virus. Gjorde også en systemgjenopprettning til noen dager før problemet startet, men problemet var der fortsatt.Hva burde jeg gjøre? Lenke til kommentar
sveinsel Skrevet 8. november 2013 Del Skrevet 8. november 2013 (endret) Du får høyre -klikke oppgavelinjen, velge oppgavebehandling og ytelse, for å se hva maskinen driver med. Kanskje den bare skal få arbeide en stund til prosessorbruken går ned. Lagt til: Så det vanlige med enhetsbehandling, programmer og funksjoner for o se etter unormale ting der. Så har du garanti du ikke må ødelegge for (garantivilkårene). Endret 8. november 2013 av sveinsel Lenke til kommentar
Beskbrownie Skrevet 8. november 2013 Forfatter Del Skrevet 8. november 2013 Du får høyre -klikke oppgavelinjen, velge oppgavebehandling og ytelse, for å se hva maskinen driver med. Kanskje den bare skal få arbeide en stund til prosessorbruken går ned. Lagt til: Så det vanlige med enhetsbehandling, programmer og funksjoner for o se etter unormale ting der. Så har du garanti du ikke må ødelegge for (garantivilkårene). Fikk det til nå, etter å ha ventet på den i 40 minutter, prosessorbruk er på rundt 5%, og fysisk minne er 35%. Den har vært på nå i rundt to timer, men er fortsatt vanvittig treg:/ Lenke til kommentar
mobile999 Skrevet 8. november 2013 Del Skrevet 8. november 2013 Sneaky virus kan kanskje avdekkes ved å gjøre følgende skan av pc'en. Du må poste loggene for manuell kontroll. Jeg forslår at du gjør følgenede. Du trenger en minnepenn. Du må bruke 64-bit versjonen av FRST dersom du har 64-bit Windows. Bruk 32-bit versjonen dersom du har 32-bit Windows. Instruksjoner på engelsk følger: Download FRST to a USB flash drive. Plug the USB drive into the infected machine. Boot your computer into Recovery Environment Restart the computer and press F8 repeatedly until the Advanced Options Menu appears. Select Repair your computer. Select Language and click Next Enter password (if necessary) and click OK, you should now see the screen below ... Select the Command Prompt option. A command window will open. Type notepad then hit Enter. Notepad will open. Click File > Open then select Computer. Note down the drive letter for your USB Drive. Close Notepad. Back in the command window .... For the 64-bit version: Type e:/frst64.exe and hit Enter (replace e: with the drive letter for your USB drive). For the 32-bit version: Type e:/frst.exe and hit Enter (replace e: with the drive letter for your USB drive). FRST will start to run. When the tool opens click Yes to disclaimer. Add all checkmarks under "Optional scan". Press Scan button. When finished scanning it will make a log FRST.txt on the flash drive. Please post me the log. Lenke til kommentar
Beskbrownie Skrevet 8. november 2013 Forfatter Del Skrevet 8. november 2013 Sneaky virus kan kanskje avdekkes ved å gjøre følgende skan av pc'en. Du må poste loggene for manuell kontroll. Jeg forslår at du gjør følgenede. Du trenger en minnepenn. Du må bruke 64-bit versjonen av FRST dersom du har 64-bit Windows. Bruk 32-bit versjonen dersom du har 32-bit Windows. Instruksjoner på engelsk følger: Download FRST to a USB flash drive. Plug the USB drive into the infected machine. Boot your computer into Recovery Environment Restart the computer and press F8 repeatedly until the Advanced Options Menu appears. Select Repair your computer. Select Language and click Next Enter password (if necessary) and click OK, you should now see the screen below ... Select the Command Prompt option. A command window will open. Type notepad then hit Enter. Notepad will open. Click File > Open then select Computer. Note down the drive letter for your USB Drive. Close Notepad. Back in the command window .... For the 64-bit version: Type e:/frst64.exe and hit Enter (replace e: with the drive letter for your USB drive). For the 32-bit version: Type e:/frst.exe and hit Enter (replace e: with the drive letter for your USB drive). FRST will start to run. When the tool opens click Yes to disclaimer. Add all checkmarks under "Optional scan". Press Scan button. When finished scanning it will make a log FRST.txt on the flash drive. Please post me the log. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by SYSTEM on MININT-13OCMBP on 08-11-2013 17:37:24 Running from G:\ Windows 7 Home Premium (X64) OS Language: Norwegian Bokmal Internet Explorer Version 10 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log. ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11619432 2010-11-26] (Realtek Semiconductor) HKLM\...\Run: [synTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2392360 2010-10-08] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [860040 2010-10-29] (Acer Incorporated) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [backupManagerTray] - C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe [295232 2010-11-11] (NTI Corporation) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1078352 2011-02-24] (Dritek System Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1648264 2013-04-25] (Ask) HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-01] (Oracle Corporation) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-18] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-07] (AVAST Software) HKU\Bruker\...\Run: [spotify Web Helper] - C:\Users\Bruker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-13] (Spotify Ltd) HKU\Default\...\RunOnce: [scrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-07-29] () HKU\Default User\...\RunOnce: [scrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-07-29] () AppInit_DLLs: C:\Windows\system32\nvinitx.dll [226920 2010-12-12] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [192616 2010-12-12] (NVIDIA Corporation) Startup: C:\Users\Bruker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> (No File) Startup: C:\Users\Bruker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Services (Whitelisted) ================= S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-07] (AVAST Software) S2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [868224 2010-10-29] (Acer Incorporated) S2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated) S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation) S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [257344 2010-11-11] (NTI Corporation) S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [244904 2010-10-28] () S2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-28] (Acer Group) S2 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2012-10-05] (Wajam) ==================== Drivers (Whitelisted) ==================== S2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-07] (AVAST Software) S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-07] (AVAST Software) S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-07] (AVAST Software) S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-07] () S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-07] (AVAST Software) S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-07] (AVAST Software) S1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-07] (AVAST Software) S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-07] () S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20100522.001\BHDrvx64.sys [942640 2010-05-18] (Symantec Corporation) S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [475696 2010-11-03] (Symantec Corporation) S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [132656 2010-11-03] (Symantec Corporation) S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20100518.002\IDSVia64.sys [463408 2010-05-17] (Symantec Corporation) S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20101103.002\ENG64.SYS [117808 2010-11-03] (Symantec Corporation) S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20101103.002\EX64.SYS [1804336 2010-11-03] (Symantec Corporation) S2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2013-08-11] (CACE Technologies, Inc.) S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1207020.003\SRTSP64.SYS [744568 2011-03-30] (Symantec Corporation) S1 SRTSPX; C:\Windows\system32\drivers\NISx64\1207020.003\SRTSPX64.SYS [40568 2011-03-30] (Symantec Corporation) S0 SymDS; C:\Windows\System32\drivers\NISx64\1207020.003\SYMDS64.SYS [450680 2011-01-26] (Symantec Corporation) S0 SymEFA; C:\Windows\System32\drivers\NISx64\1207020.003\SYMEFA64.SYS [912504 2011-03-14] (Symantec Corporation) S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2013-01-11] (Symantec Corporation) S1 SymIRON; C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [171128 2011-01-26] (Symantec Corporation) S1 SymNetS; C:\Windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [386168 2011-04-20] (Symantec Corporation) ========================== Drivers MD5 ======================= C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit C:\Windows\system32\drivers\afd.sys 314C17917AC8523EC77A710215012A65 C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\amdk8.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49 C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048 C:\Windows\system32\drivers\appid.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit C:\Windows\system32\drivers\aswFsBlk.sys 1EC6777695564CA7EB3ADB36C78322E5 C:\Windows\system32\drivers\aswMonFlt.sys FAF7B0B0C44A2FBD6FBC54E3E0F38545 C:\Windows\system32\drivers\aswRdr2.sys 679712B7A353EE665B9301592164A172 C:\Windows\System32\Drivers\aswRvrt.sys C04F7B373881009D7994D9BF55D24AB4 C:\Windows\system32\drivers\aswSnx.sys 3E07C93A2CB67840E4CD56C00959A402 C:\Windows\system32\drivers\aswSP.sys 511595FFE2E06D6E1947E0A0C8C7AD27 C:\Windows\system32\drivers\aswTdi.sys 81C42096CE90B45C03DCFF017A8A49C7 C:\Windows\System32\Drivers\aswVmm.sys 59787B95DD9CA44CB139D96863438587 C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\athrx.sys 931884F5F2D7E6973366782690BF1754 C:\Windows\system32\DRIVERS\bxvbda.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\b57xdbd.sys 2618E15514736FB469B105CE729B6D9D C:\Windows\System32\DRIVERS\b57xdmp.sys BABA4F0E2978B69B4E0B260EF7150DD6 C:\Windows\System32\DRIVERS\bcmwl664.sys 9E84A931DBEE0292E38ED672F6293A99 C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20100522.001\BHDrvx64.sys D307ABB31F69D92998BA32109C90EAE3 C:\Windows\system32\DRIVERS\blbdrive.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bScsiMSa.sys FF7AA31BFFDC6C6870F64EAF8DEFE930 C:\Windows\System32\DRIVERS\bScsiSDa.sys E6CC56662F6C6B787A1FBEA4CD247AE0 C:\Windows\system32\DRIVERS\bthmodem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit C:\Windows\system32\drivers\cdrom.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit C:\Windows\System32\CLFS.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 is legit C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit C:\Windows\System32\Drivers\cng.sys 9AC4F97C2D3E93367E2148EA940CD2CD C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit C:\Windows\System32\drivers\discache.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit C:\Windows\System32\drivers\drmkaud.sys ==> MD5 is legit C:\Windows\System32\drivers\dxgkrnl.sys 88612F1CE3BF42256913BF6E61C70D52 C:\Windows\system32\DRIVERS\evbda.sys ==> MD5 is legit C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 066108AE4C35835081598827A1A7D08D C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 12866876E3851F1E5D462B2A83E25578 C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\fdc.sys ==> MD5 is legit C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\flpydisk.sys ==> MD5 is legit C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0 C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\GEARAspiWDM.sys 8E98D21EE06192492A5671A6144D092F C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit C:\Windows\system32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\iaStor.sys D7921D5A870B11CC1ADAB198A519D50A C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20100518.002\IDSVia64.sys F94920131789E8BB515095D40B0C652E C:\Windows\System32\DRIVERS\igdkmd64.sys 78527E6A4D78B1153925914C55872BEB C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit C:\Windows\System32\drivers\RTKVHD64.sys F4C031439501F6C1D336A36D7CB58F4F C:\Windows\System32\DRIVERS\IntcDAud.sys FC727061C0F47C8059E88E05D5C8E381 C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\k57nd60a.sys BD63E1904D19B624291C9F313A7B0ABB C:\Windows\system32\drivers\kbdclass.sys ==> MD5 is legit C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit C:\Windows\System32\Drivers\ksecdd.sys 97A7070AEA4C058B6418519E869A63B4 C:\Windows\System32\Drivers\ksecpkg.sys 26C43A7C2862447EC59DEDA188D1DA07 C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\L1E62x64.sys 2AC603C3188C704CFCE353659AA7AD71 C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\HECIx64.sys 1C6E73FC46B509EFF9D0086AA37132DF C:\Windows\System32\drivers\modem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit C:\Windows\system32\drivers\mouclass.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\mouhid.sys ==> MD5 is legit C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\mrxdav.sys 1A4F75E63C9FB84B85DFFC6B63FD5404 C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163 C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20101103.002\ENG64.SYS 956F589C6A7DDE71DC6B03BE633EBF23 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20101103.002\EX64.SYS EE7A0E2478E7CD1A199D1B82E3A69B3E C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88 C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit C:\Windows\system32\drivers\npf.sys ==> MD5 is legit C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0 C:\Windows\system32\drivers\NTIDrvr.sys 64DDD0DEE976302F4BD93E5EFCC2F013 C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\nusb3hub.sys A7127E86F9FFE2A53E271B56B2C4CEDF C:\Windows\System32\DRIVERS\nusb3xhc.sys 49BBEC6F48D5F9284B03ABF3A959B19B C:\Windows\System32\DRIVERS\nvlddmkm.sys 3F3B01E39736E2E9E044B169AAEFB485 C:\Windows\System32\DRIVERS\nvpciflt.sys 714B50444D72E26739ED624F848FF36B C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\parport.sys ==> MD5 is legit C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C C:\Windows\System32\drivers\pci.sys ==> MD5 is legit C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit C:\Windows\System32\Drivers\PxHlpa64.sys FBF4DB6D53585437E41A113300002A2B C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\rdpbus.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit C:\Windows\system32\drivers\sdbus.sys 111E0EBC0AD79CB0FA014B907B231CF0 C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\serenum.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\serial.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\Sftfslh.sys 2046AA7491DE7EFA4D70E615D9BC9D09 C:\Windows\System32\DRIVERS\Sftplaylh.sys 0E0446BC4D51BE4263ACB7E33491191C C:\Windows\System32\DRIVERS\Sftredirlh.sys C5FB982CD266E604ED3142102C26D62C C:\Windows\System32\DRIVERS\Sftvollh.sys 2575511AF67AA1FA068CCC4918E2C2A3 C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit C:\Windows\System32\Drivers\NISx64\1207020.003\SRTSP64.SYS 90EF30C3867BCDE4579C01A6D6E75A7A C:\Windows\system32\drivers\NISx64\1207020.003\SRTSPX64.SYS C513E8A5E7978DA49077F5484344EE1B C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28 C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3 C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit C:\Windows\System32\drivers\NISx64\1207020.003\SYMDS64.SYS 6160145C7A87FC7672E8E3B886888176 C:\Windows\System32\drivers\NISx64\1207020.003\SYMEFA64.SYS 96AEED40D4D3521568B42027687E69E0 C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 21A1C2D694C3CF962D31F5E873AB3D6F C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS BD0D711D8CBFCAA19CA123306EAF53A5 C:\Windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS A6ADB3D83023F8DAA0F7B6FDA785D83B C:\Windows\System32\DRIVERS\SynTP.sys BC642D540AEDF9A253C74D10C848EBD2 C:\Windows\System32\drivers\tcpip.sys 40AF23633D197905F03AB5628C558C51 C:\Windows\System32\DRIVERS\tcpip.sys 40AF23633D197905F03AB5628C558C51 C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8 C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09 C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit C:\Windows\system32\drivers\UBHelper.sys 2E22C1FD397A5A9FFEF55E9D1FC96C00 C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit C:\Windows\system32\drivers\umbus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\umpass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\usbccgp.sys 6F1A3157A1C89435352CEB543CDB359C C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31 C:\Windows\system32\drivers\usbehci.sys C025055FE7B87701EB042095DF1A2D7B C:\Windows\System32\DRIVERS\usbhub.sys 287C6C9410B111B68B52CA298F7B8C24 C:\Windows\system32\drivers\usbohci.sys 9840FC418B4CBD632D3D0A667A725C31 C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6 C:\Windows\system32\drivers\usbuhci.sys 62069A34518BCF9C1FD9E74B3F6DB7CD C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7 C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit C:\Windows\System32\drivers\vga.sys ==> MD5 is legit C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vwififlt.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8 C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit C:\Windows\SysWow64\drivers\wimmount.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659 ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-08 17:36 - 2013-11-08 17:36 - 00000000 ____D C:\FRST 2013-11-08 06:35 - 2013-11-08 06:35 - 00002673 _____ C:\Windows\WindowsUpdate.log 2013-11-08 06:03 - 2013-11-08 08:31 - 00000112 _____ C:\Windows\setupact.log 2013-11-08 06:03 - 2013-11-08 06:03 - 00000000 _____ C:\Windows\setuperr.log 2013-11-08 06:00 - 2013-11-08 06:00 - 00106428 _____ C:\Users\Bruker\Documents\cc_20131108_150027.reg 2013-11-08 05:53 - 2013-11-08 05:53 - 00000000 ____D C:\Program Files\CCleaner 2013-11-07 07:44 - 2013-11-07 07:44 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\AVAST Software 2013-11-07 07:43 - 2013-11-07 07:43 - 01032416 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00334648 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe 2013-11-07 07:43 - 2013-11-07 07:43 - 00205320 _____ C:\Windows\System32\Drivers\aswVmm.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00092544 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00084328 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00065776 _____ C:\Windows\System32\Drivers\aswRvrt.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00065264 _____ (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-07 07:43 - 2013-11-07 07:43 - 00038984 _____ (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00001978 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-07 07:43 - 2013-11-07 07:43 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job 2013-11-07 07:43 - 2013-11-07 07:43 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-07 07:41 - 2013-11-07 07:41 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\gkiecwzg.sys 2013-11-07 07:41 - 2013-11-07 07:41 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-04 08:18 - 2013-11-04 08:19 - 00043097 _____ C:\Users\Bruker\Downloads\HSphere-Slice.qt 2013-11-04 08:18 - 2013-11-04 08:18 - 00237058 _____ C:\Users\Bruker\Downloads\Sphere-Slice.mpg 2013-11-04 08:18 - 2013-11-04 08:18 - 00091097 _____ C:\Users\Bruker\Downloads\HSphere-Slice.mpg 2013-10-25 14:29 - 2013-11-05 11:31 - 00022508 _____ C:\Users\Bruker\Documents\JPIYVGUBif.odt 2013-10-23 12:33 - 2013-10-23 12:33 - 00000022 _____ C:\Users\Bruker\Downloads\iTunes Sleep Timer.zip 2013-10-23 09:26 - 2013-10-23 09:26 - 00001755 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-10-23 09:25 - 2013-10-23 09:26 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-10-23 09:25 - 2013-10-23 09:26 - 00000000 ____D C:\Program Files\iTunes 2013-10-23 09:25 - 2013-10-23 09:26 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-10-23 09:25 - 2013-10-23 09:25 - 00000000 ____D C:\Program Files\iPod 2013-10-20 11:36 - 2013-10-20 11:36 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 11:33 - 2013-10-07 21:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-20 11:33 - 2013-10-07 21:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-20 11:33 - 2013-10-07 21:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-10-20 11:33 - 2013-10-07 21:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-10-20 11:32 - 2013-10-20 11:33 - 00004717 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-20 11:22 - 2013-10-20 11:23 - 00915368 _____ (Oracle Corporation) C:\Users\Bruker\Downloads\chromeinstall-7u45.exe 2013-10-16 03:03 - 2013-10-16 03:03 - 00136390 _____ C:\Windows\Signert_Samtykkeerklæring_16_10_13_1303.sdo 2013-10-11 15:08 - 2013-09-22 15:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-11 15:08 - 2013-09-22 15:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-11 15:08 - 2013-09-22 14:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-10-11 15:08 - 2013-09-22 14:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-10-11 15:08 - 2013-09-22 14:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-10-11 15:08 - 2013-09-22 14:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-10-11 15:08 - 2013-09-20 19:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-10-11 15:08 - 2013-09-20 19:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 15:08 - 2013-09-20 18:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-10-11 15:08 - 2013-09-20 18:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-09 23:37 - 2013-10-09 23:37 - 00000000 ____D C:\21f5d407bb44c1dfac47 2013-10-09 23:33 - 2013-09-13 17:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys 2013-10-09 23:33 - 2013-09-07 18:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-10-09 23:33 - 2013-09-07 18:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\System32\mswsock.dll 2013-10-09 23:33 - 2013-09-07 18:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-09 23:33 - 2013-07-12 02:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys 2013-10-09 23:33 - 2013-07-12 02:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys 2013-10-09 23:33 - 2013-07-04 04:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll 2013-10-09 23:33 - 2013-07-04 04:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll 2013-10-09 23:33 - 2013-07-04 04:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll 2013-10-09 23:33 - 2013-07-04 03:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-09 23:33 - 2013-07-04 03:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-09 23:33 - 2013-07-04 03:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-09 23:33 - 2013-07-04 02:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys 2013-10-09 23:33 - 2013-07-02 20:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys 2013-10-09 23:33 - 2013-07-02 20:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys 2013-10-09 23:33 - 2013-06-25 14:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys 2013-10-09 23:33 - 2013-06-05 21:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll 2013-10-09 23:33 - 2013-06-05 21:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll 2013-10-09 23:33 - 2013-06-05 21:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll 2013-10-09 23:33 - 2013-06-05 21:47 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll 2013-10-09 23:33 - 2013-06-05 20:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-09 23:33 - 2013-06-05 20:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-09 23:33 - 2013-06-05 20:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-09 23:33 - 2013-06-05 19:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll 2013-10-09 23:33 - 2013-06-05 19:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-09 23:33 - 2013-06-05 19:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-09 23:32 - 2013-08-28 18:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2013-10-09 23:32 - 2013-08-28 18:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll 2013-10-09 23:32 - 2013-08-28 18:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\System32\tdh.dll 2013-10-09 23:32 - 2013-08-28 18:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll 2013-10-09 23:32 - 2013-08-28 18:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll 2013-10-09 23:32 - 2013-08-28 17:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-09 23:32 - 2013-08-28 17:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-09 23:32 - 2013-08-28 17:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-09 23:32 - 2013-08-28 17:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-09 23:32 - 2013-08-28 17:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-09 23:32 - 2013-08-28 17:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-09 23:32 - 2013-08-28 16:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-09 23:32 - 2013-08-28 16:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-09 23:32 - 2013-08-28 16:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-09 23:32 - 2013-08-28 16:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-09 23:32 - 2013-08-27 17:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-10-09 23:32 - 2013-08-27 17:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\System32\scavengeui.dll 2013-10-09 23:32 - 2013-08-01 04:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys 2013-10-09 23:32 - 2013-07-20 02:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 23:32 - 2013-07-20 02:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ==================== One Month Modified Files and Folders ======= 2013-11-08 17:36 - 2013-11-08 17:36 - 00000000 ____D C:\FRST 2013-11-08 08:31 - 2013-11-08 06:03 - 00000112 _____ C:\Windows\setupact.log 2013-11-08 07:26 - 2013-11-08 06:35 - 00002673 _____ C:\Windows\WindowsUpdate.log 2013-11-08 07:23 - 2013-01-11 13:09 - 00000992 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-08 06:16 - 2013-01-11 13:56 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\Dropbox 2013-11-08 06:14 - 2013-08-30 03:26 - 00000572 _____ C:\Windows\Tasks\MATLAB R2013a Startup Accelerator.job 2013-11-08 06:08 - 2013-01-11 14:04 - 00000000 ___RD C:\Users\Bruker\Dropbox 2013-11-08 06:06 - 2013-01-11 13:09 - 00000988 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-08 06:04 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-08 06:03 - 2013-11-08 06:03 - 00000000 _____ C:\Windows\setuperr.log 2013-11-08 06:00 - 2013-11-08 06:00 - 00106428 _____ C:\Users\Bruker\Documents\cc_20131108_150027.reg 2013-11-08 05:57 - 2013-09-19 03:14 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\uTorrent 2013-11-08 05:57 - 2013-04-08 07:06 - 00000000 ____D C:\Users\Bruker\AppData\Local\CrashDumps 2013-11-08 05:57 - 2009-07-27 12:41 - 00000000 ____D C:\Windows\Panther 2013-11-08 05:54 - 2011-03-19 23:43 - 00077404 _____ C:\Windows\System32\perfc014.dat 2013-11-08 05:54 - 2011-03-19 23:43 - 00012442 _____ C:\Windows\System32\perfh014.dat 2013-11-08 05:54 - 2009-07-13 21:13 - 00802866 _____ C:\Windows\System32\PerfStringBackup.INI 2013-11-08 05:53 - 2013-11-08 05:53 - 00000000 ____D C:\Program Files\CCleaner 2013-11-08 05:18 - 2009-07-13 20:45 - 00017600 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-08 05:17 - 2009-07-13 20:45 - 00017600 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-08 04:23 - 2011-05-24 09:41 - 00000000 ____D C:\ProgramData\boost_interprocess 2013-11-07 07:44 - 2013-11-07 07:44 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\AVAST Software 2013-11-07 07:43 - 2013-11-07 07:43 - 01032416 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00334648 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe 2013-11-07 07:43 - 2013-11-07 07:43 - 00205320 _____ C:\Windows\System32\Drivers\aswVmm.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00092544 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00084328 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00065776 _____ C:\Windows\System32\Drivers\aswRvrt.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00065264 _____ (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-07 07:43 - 2013-11-07 07:43 - 00038984 _____ (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00001978 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-07 07:43 - 2013-11-07 07:43 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job 2013-11-07 07:43 - 2013-11-07 07:43 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-07 07:41 - 2013-11-07 07:41 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\gkiecwzg.sys 2013-11-07 07:41 - 2013-11-07 07:41 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-07 06:43 - 2011-05-24 09:31 - 00000000 ____D C:\users\Bruker 2013-11-07 06:42 - 2013-01-21 10:15 - 00000000 ____D C:\users\Christian 2013-11-07 06:42 - 2010-11-26 20:27 - 00000000 ____D C:\ProgramData\Norton 2013-11-07 06:42 - 2010-11-26 19:22 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-11-07 06:42 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration 2013-11-07 06:42 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\AppCompat 2013-11-07 06:41 - 2013-03-05 13:00 - 00000000 __RHD C:\MSOCache 2013-11-07 06:41 - 2013-03-05 12:53 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\SoftGrid Client 2013-11-06 13:34 - 2013-08-30 03:35 - 00000000 ____D C:\Users\Bruker\Documents\MATLAB 2013-11-06 13:24 - 2013-08-14 11:23 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\Skype 2013-11-06 11:36 - 2013-08-14 11:22 - 00000000 ____D C:\ProgramData\Skype 2013-11-06 11:35 - 2013-08-14 11:23 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-05 11:31 - 2013-10-25 14:29 - 00022508 _____ C:\Users\Bruker\Documents\JPIYVGUBif.odt 2013-11-04 08:19 - 2013-11-04 08:18 - 00043097 _____ C:\Users\Bruker\Downloads\HSphere-Slice.qt 2013-11-04 08:19 - 2011-05-24 09:44 - 00000000 ____D C:\Users\Bruker\AppData\Local\Windows Live 2013-11-04 08:18 - 2013-11-04 08:18 - 00237058 _____ C:\Users\Bruker\Downloads\Sphere-Slice.mpg 2013-11-04 08:18 - 2013-11-04 08:18 - 00091097 _____ C:\Users\Bruker\Downloads\HSphere-Slice.mpg 2013-11-03 09:48 - 2013-01-25 02:57 - 00001142 _____ C:\Windows\wininit.ini 2013-11-03 09:47 - 2013-01-11 14:04 - 00001033 _____ C:\Users\Bruker\Desktop\Dropbox.lnk 2013-10-25 14:23 - 2013-01-21 10:49 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\Spotify 2013-10-23 12:33 - 2013-10-23 12:33 - 00000022 _____ C:\Users\Bruker\Downloads\iTunes Sleep Timer.zip 2013-10-23 09:26 - 2013-10-23 09:26 - 00001755 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-10-23 09:26 - 2013-10-23 09:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-10-23 09:26 - 2013-10-23 09:25 - 00000000 ____D C:\Program Files\iTunes 2013-10-23 09:26 - 2013-10-23 09:25 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-10-23 09:25 - 2013-10-23 09:25 - 00000000 ____D C:\Program Files\iPod 2013-10-22 05:30 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\NDF 2013-10-21 13:01 - 2013-08-11 09:42 - 00000000 ____D C:\Users\Bruker\AppData\Local\NETGEARGenie 2013-10-21 13:01 - 2013-01-21 11:02 - 00000000 ____D C:\Users\Bruker\AppData\Local\Spotify 2013-10-20 11:36 - 2013-10-20 11:36 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 11:33 - 2013-10-20 11:32 - 00004717 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-20 11:33 - 2013-08-19 08:00 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-20 11:23 - 2013-10-20 11:22 - 00915368 _____ (Oracle Corporation) C:\Users\Bruker\Downloads\chromeinstall-7u45.exe 2013-10-18 03:16 - 2013-01-11 13:09 - 00003988 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-18 03:16 - 2013-01-11 13:09 - 00003736 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-16 07:11 - 2013-05-27 09:19 - 00000000 _____ C:\END 2013-10-16 03:03 - 2013-10-16 03:03 - 00136390 _____ C:\Windows\Signert_Samtykkeerklæring_16_10_13_1303.sdo 2013-10-15 21:19 - 2013-01-11 13:30 - 00002155 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-10-12 01:58 - 2009-07-13 20:45 - 00315424 _____ C:\Windows\System32\FNTCACHE.DAT 2013-10-12 01:54 - 2013-03-14 15:39 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-12 01:54 - 2013-03-14 15:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-10 10:58 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache 2013-10-09 23:37 - 2013-10-09 23:37 - 00000000 ____D C:\21f5d407bb44c1dfac47 ==================== Known DLLs (Whitelisted) ================ ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= 6 Restore point made on: 2013-10-05 09:50:59 Restore point made on: 2013-10-09 23:34:12 Restore point made on: 2013-10-11 15:06:10 Restore point made on: 2013-10-20 11:32:30 Restore point made on: 2013-10-28 04:06:35 Restore point made on: 2013-11-05 07:13:28 ==================== BCD ================================ Windows oppstartsbehandling --------------------------- identifikator {bootmgr} device partition=Y: description Windows Boot Manager locale nb-NO inherit {globalsettings} default {default} resumeobject {5d47f672-52c7-11e0-9004-944dc9b5dda4} displayorder {default} toolsdisplayorder {memdiag} timeout 30 Windows oppstartslasting ------------------------ identifikator {default} device partition=C: path \Windows\system32\winload.exe description Windows 7 locale nb-NO inherit {bootloadersettings} recoverysequence {current} recoveryenabled Yes osdevice partition=C: systemroot \Windows resumeobject {5d47f672-52c7-11e0-9004-944dc9b5dda4} nx OptIn Windows oppstartslasting ------------------------ identifikator {current} device ramdisk=[C:]\Recovery\5d47f674-52c7-11e0-9004-944dc9b5dda4\Winre.wim,{5d47f675-52c7-11e0-9004-944dc9b5dda4} path \windows\system32\winload.exe description Windows Recovery Environment inherit {bootloadersettings} osdevice ramdisk=[C:]\Recovery\5d47f674-52c7-11e0-9004-944dc9b5dda4\Winre.wim,{5d47f675-52c7-11e0-9004-944dc9b5dda4} systemroot \windows nx OptIn winpe Yes Gjenoppta etter dvalemodus -------------------------- identifikator {5d47f672-52c7-11e0-9004-944dc9b5dda4} device partition=C: path \Windows\system32\winresume.exe description Windows Resume Application locale nb-NO inherit {resumeloadersettings} filedevice partition=C: filepath \hiberfil.sys debugoptionenabled No Windows minnetester ------------------- identifikator {memdiag} device partition=Y: path \boot\memtest.exe description Windows Memory Diagnostic locale nb-NO inherit {globalsettings} badmemoryaccess Yes EMS-innstillinger ----------------- identifikator {emssettings} bootems Yes Feils›kingsinnstillinger ------------------------ identifikator {dbgsettings} debugtype Serial debugport 1 baudrate 115200 RAM-defekter ------------ identifikator {badmemory} Globale innstillinger --------------------- identifikator {globalsettings} inherit {dbgsettings} {emssettings} {badmemory} Innstillinger for oppstartslasting ---------------------------------- identifikator {bootloadersettings} inherit {globalsettings} {hypervisorsettings} Hypervisor-innstillinger ------------------------ identifikator {hypervisorsettings} hypervisordebugtype Serial hypervisordebugport 1 hypervisorbaudrate 115200 Innstillinger for gjenopptakelse -------------------------------- identifikator {resumeloadersettings} inherit {globalsettings} Enhetsalternativer ------------------ identifikator {5d47f675-52c7-11e0-9004-944dc9b5dda4} description Ramdisk Options ramdisksdidevice partition=C: ramdisksdipath \Recovery\5d47f674-52c7-11e0-9004-944dc9b5dda4\boot.sdi ==================== Memory info =========================== Percentage of memory in use: 18% Total physical RAM: 3946.17 MB Available physical RAM: 3211.91 MB Total Pagefile: 3944.32 MB Available Pagefile: 3199.5 MB Total Virtual: 8192 MB Available Virtual: 8191.87 MB ==================== Drives ================================ Drive c: (Packard Bell) (Fixed) (Total:451.01 GB) (Free:370.75 GB) NTFS Drive e: (PQSERVICE) (Fixed) (Total:14.65 GB) (Free:1.14 GB) NTFS Drive g: (STORE N GO) (Removable) (Total:3.63 GB) (Free:3.45 GB) FAT32 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Drive y: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: ADE70019) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=4 GB) - (Type=0C) LastRegBack: 2013-10-31 09:59 ==================== End Of Log ============================ Lenke til kommentar
mobile999 Skrevet 8. november 2013 Del Skrevet 8. november 2013 Frst laget også Addition.txt. Post denne. Lenke til kommentar
Beskbrownie Skrevet 8. november 2013 Forfatter Del Skrevet 8. november 2013 Frst laget også Addition.txt. Post denne. hmm, ser den ikke på minnepinnen, prøver en gang til. Lenke til kommentar
mobile999 Skrevet 8. november 2013 Del Skrevet 8. november 2013 Da kan du huke vekk alt unntatt additions i FRST. Lenke til kommentar
Beskbrownie Skrevet 8. november 2013 Forfatter Del Skrevet 8. november 2013 Da kan du huke vekk alt unntatt additions i FRST. Okei, her er den når jeg bare hadde huket av addition.txt: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by SYSTEM on MININT-NFC6NKC on 08-11-2013 18:34:02 Running from G:\ Windows 7 Home Premium (X64) OS Language: Norwegian Bokmal Internet Explorer Version 10 Boot Mode: Recovery The current controlset is ControlSet001 ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log. ==================== Registry (All) =========================== HKLM\...\Run: [igfxTray] - C:\Windows\System32\igfxtray.exe [167960 2011-01-20] (Intel Corporation) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [Persistence] - C:\Windows\System32\igfxpers.exe [418328 2011-01-20] (Intel Corporation) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11619432 2010-11-26] (Realtek Semiconductor) HKLM\...\Run: [synTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2392360 2010-10-08] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [860040 2010-10-29] (Acer Incorporated) HKLM\...\Winlogon: [userinit] C:\Windows\system32\userinit.exe, [30720 2010-11-20] (Microsoft Corporation) HKLM-x32\...\Winlogon: [userinit] userinit.exe [26624 2010-11-20] (Microsoft Corporation) HKLM\...\Winlogon: [shell] explorer.exe [2871808 2011-02-24] (Microsoft Corporation) HKLM-x32\...\Winlogon: [shell] explorer.exe [2616320 2011-02-24] (Microsoft Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoActiveDesktop] 1 HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1 HKLM\...\Policies\Explorer: [ForceActiveDesktopOn] 0 HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [backupManagerTray] - C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe [295232 2010-11-11] (NTI Corporation) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1078352 2011-02-24] (Dritek System Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1648264 2013-04-25] (Ask) HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-01] (Oracle Corporation) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-18] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-07] (AVAST Software) HKU\Bruker\...\Run: [spotify Web Helper] - C:\Users\Bruker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-13] (Spotify Ltd) HKU\Default\...\Run: [sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-20] (Microsoft Corporation) HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation) HKU\Default\...\RunOnce: [scrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-07-29] () HKU\Default User\...\Run: [sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-20] (Microsoft Corporation) HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation) HKU\Default User\...\RunOnce: [scrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [154144 2010-07-29] () HKU\UpdatusUser\...\Run: [sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-20] (Microsoft Corporation) HKU\UpdatusUser\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [97280 2009-07-13] (Microsoft Corporation) AppInit_DLLs: C:\Windows\system32\nvinitx.dll [226920 2010-12-12] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [192616 2010-12-12] (NVIDIA Corporation) Lsa: [Authentication Packages] msv1_0 Lsa: [Notification Packages] scecli Startup: C:\Users\Bruker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> (No File) Startup: C:\Users\Bruker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No File SSODL-x32: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No File BootExecute: autocheck autochk * AlternateShell: cmd.exe ==================== Services (All) ======================== S2 AdobeActiveFileMonitor8.0; c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [169312 2009-10-08] (Adobe Systems Incorporated) S3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2009-07-13] (Microsoft Corporation) S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-13] (Microsoft Corporation) S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [32256 2009-07-13] (Microsoft Corporation) S3 Appinfo; C:\Windows\System32\appinfo.dll [70144 2013-02-26] (Microsoft Corporation) S2 Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624 2013-09-06] (Apple Inc.) S2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [679424 2010-11-20] (Microsoft Corporation) S2 AudioSrv; C:\Windows\System32\Audiosrv.dll [679424 2010-11-20] (Microsoft Corporation) S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-07] (AVAST Software) S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-20] (Microsoft Corporation) S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-13] (Microsoft Corporation) S2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-20] (Microsoft Corporation) S2 BITS; C:\Windows\System32\qmgr.dll [849920 2010-11-20] (Microsoft Corporation) S2 Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [462184 2011-08-30] (Apple Inc.) S3 Browser; C:\Windows\System32\browser.dll [136704 2012-07-04] (Microsoft Corporation) S3 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-13] (Microsoft Corporation) S3 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-20] (Microsoft Corporation) S4 clr_optimization_v2.0.50727_32; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [66384 2009-06-10] (Microsoft Corporation) S4 clr_optimization_v2.0.50727_64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [89920 2009-06-10] (Microsoft Corporation) S2 clr_optimization_v4.0.30319_32; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [130384 2010-03-18] (Microsoft Corporation) S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [138576 2010-03-18] (Microsoft Corporation) S3 COMSysApp; C:\Windows\system32\dllhost.exe [9728 2009-07-13] (Microsoft Corporation) S3 COMSysApp; C:\Windows\SysWow64\dllhost.exe [7168 2009-07-13] (Microsoft Corporation) S2 CryptSvc; C:\Windows\system32\cryptsvc.dll [184320 2013-07-08] (Microsoft Corporation) S2 cvhsvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [822504 2013-04-22] (Microsoft Corporation) S2 DcomLaunch; C:\Windows\system32\rpcss.dll [512000 2010-11-20] (Microsoft Corporation) S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-13] (Microsoft Corporation) S2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-20] (Microsoft Corporation) S2 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2011-03-02] (Microsoft Corporation) S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-20] (Microsoft Corporation) S2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-20] (Microsoft Corporation) S2 DsiWMIService; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [347216 2011-02-24] (Dritek System Inc.) S3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-13] (Microsoft Corporation) S2 EFS; C:\Windows\System32\lsass.exe [31232 2011-11-16] (Microsoft Corporation) S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-20] (Microsoft Corporation) S3 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-13] (Microsoft Corporation) S2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [868224 2010-10-29] (Acer Incorporated) S2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-20] (Microsoft Corporation) S2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-13] (Microsoft Corporation) S3 Fax; C:\Windows\system32\fxssvc.exe [689152 2010-11-20] (Microsoft Corporation) S3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-13] (Microsoft Corporation) S3 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-13] (Microsoft Corporation) S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [867080 2011-05-24] (Acresso Software Inc.) S2 FontCache; C:\Windows\system32\FntCache.dll [1175552 2013-06-23] (Microsoft Corporation) S3 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [42856 2010-11-04] (Microsoft Corporation) S3 GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [206072 2010-10-12] (WildTangent, Inc.) S2 gpsvc; C:\Windows\System32\gpsvc.dll [777728 2010-11-20] (Microsoft Corporation) S2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated) S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648 2013-01-11] (Google Inc.) S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648 2013-01-11] (Google Inc.) S3 hidserv; C:\Windows\system32\hidserv.dll [38912 2009-07-13] (Microsoft Corporation) S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-20] (Microsoft Corporation) S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-11-20] (Microsoft Corporation) S3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-11-20] (Microsoft Corporation) S3 idsvc; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe [856400 2010-11-04] (Microsoft Corporation) S2 IKEEXT; C:\Windows\System32\ikeext.dll [853504 2010-11-20] (Microsoft Corporation) S3 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-13] (Microsoft Corporation) S2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2012-10-03] (Microsoft Corporation) S3 iPod Service; C:\Program Files\iPod\bin\iPodService.exe [641352 2013-10-18] (Apple Inc.) S3 KeyIso; C:\Windows\system32\lsass.exe [31232 2011-11-16] (Microsoft Corporation) S3 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-13] (Microsoft Corporation) S2 LanmanServer; C:\Windows\system32\srvsvc.dll [236032 2010-11-20] (Microsoft Corporation) S2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-11-20] (Microsoft Corporation) S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-13] (Microsoft Corporation) S2 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-13] (Microsoft Corporation) S2 LMS; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [325656 2010-10-05] (Intel Corporation) S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-20] (Microsoft Corporation) S2 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-13] (Microsoft Corporation) S2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-20] (Microsoft Corporation) S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-13] (Microsoft Corporation) S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-13] (Microsoft Corporation) S3 msiserver; C:\Windows\System32\msiexec.exe [128000 2010-11-20] (Microsoft Corporation) S3 msiserver; C:\Windows\SysWow64\msiexec.exe [73216 2010-11-20] (Microsoft Corporation) S3 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-20] (Microsoft Corporation) S3 Nero BackItUp Scheduler 4.0; c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [935208 2010-01-15] (Nero AG) S3 Netlogon; C:\Windows\system32\lsass.exe [31232 2011-11-16] (Microsoft Corporation) S3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-13] (Microsoft Corporation) S3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-13] (Microsoft Corporation) S4 NetTcpPortSharing; C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe [116560 2009-06-10] (Microsoft Corporation) S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation) S2 NlaSvc; C:\Windows\System32\nlasvc.dll [303104 2012-10-03] (Microsoft Corporation) S2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) S2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-13] (Microsoft Corporation) S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [257344 2010-11-11] (NTI Corporation) S2 NVSvc; C:\Windows\system32\nvvsvc.exe [993896 2010-12-12] (NVIDIA Corporation) S2 nvUpdatusService; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [1997416 2010-12-12] (NVIDIA Corporation) S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [149352 2010-01-09] (Microsoft Corporation) S3 osppsvc; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [4925184 2010-01-09] (Microsoft Corporation) S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-13] (Microsoft Corporation) S3 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-13] (Microsoft Corporation) S2 PcaSvc; C:\Windows\System32\pcasvc.dll [186368 2009-07-13] (Microsoft Corporation) S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-13] (Microsoft Corporation) S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-20] (Microsoft Corporation) S2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2011-05-24] (Microsoft Corporation) S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-13] (Microsoft Corporation) S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-13] (Microsoft Corporation) S3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [501248 2010-11-20] (Microsoft Corporation) S2 Power; C:\Windows\system32\umpo.dll [163840 2009-07-13] (Microsoft Corporation) S2 ProfSvc; C:\Windows\system32\profsvc.dll [209920 2012-04-30] (Microsoft Corporation) S3 ProtectedStorage; C:\Windows\system32\lsass.exe [31232 2011-11-16] (Microsoft Corporation) S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-13] (Microsoft Corporation) S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-13] (Microsoft Corporation) S3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-20] (Microsoft Corporation) S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-13] (Microsoft Corporation) S4 RemoteAccess; C:\Windows\SysWow64\mprdim.dll [75264 2009-07-13] (Microsoft Corporation) S3 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-13] (Microsoft Corporation) S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [244904 2010-10-28] () S2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-13] (Microsoft Corporation) S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-13] (Microsoft Corporation) S2 RpcSs; C:\Windows\system32\rpcss.dll [512000 2010-11-20] (Microsoft Corporation) S2 SamSs; C:\Windows\system32\lsass.exe [31232 2011-11-16] (Microsoft Corporation) S3 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-13] (Microsoft Corporation) S2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2010-11-20] (Microsoft Corporation) S3 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-20] (Microsoft Corporation) S3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-20] (Microsoft Corporation) S3 seclogon; C:\Windows\system32\seclogon.dll [30720 2010-11-20] (Microsoft Corporation) S2 SENS; C:\Windows\System32\sens.dll [64512 2009-07-13] (Microsoft Corporation) S2 SENS; C:\Windows\SysWow64\sens.dll [49664 2009-07-13] (Microsoft Corporation) S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-13] (Microsoft Corporation) S3 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-20] (Microsoft Corporation) S3 SessionEnv; C:\Windows\SysWow64\sessenv.dll [113664 2010-11-20] (Microsoft Corporation) S2 sftlist; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [523944 2013-06-26] (Microsoft Corporation) S3 sftvsa; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [207528 2013-06-26] (Microsoft Corporation) S4 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-13] (Microsoft Corporation) S2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-11-20] (Microsoft Corporation) S2 ShellHWDetection; C:\Windows\SysWow64\shsvcs.dll [328192 2010-11-20] (Microsoft Corporation) S2 SkypeUpdate; C:\Program Files (x86)\Skype\Updater\Updater.exe [171680 2013-09-05] (Skype Technologies) S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-13] (Microsoft Corporation) S2 Spooler; C:\Windows\System32\spoolsv.exe [559104 2012-02-10] (Microsoft Corporation) S2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-20] (Microsoft Corporation) S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-13] (Microsoft Corporation) S3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-13] (Microsoft Corporation) S3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-13] (Microsoft Corporation) S2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-20] (Microsoft Corporation) S3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-13] (Microsoft Corporation) S2 SysMain; C:\Windows\system32\sysmain.dll [1743360 2010-11-20] (Microsoft Corporation) S3 TabletInputService; C:\Windows\System32\TabSvc.dll [92672 2010-11-20] (Microsoft Corporation) S3 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-20] (Microsoft Corporation) S3 TapiSrv; C:\Windows\SysWow64\tapisrv.dll [242176 2010-11-20] (Microsoft Corporation) S3 TBS; C:\Windows\System32\tbssvc.dll [65536 2009-07-13] (Microsoft Corporation) S3 TermService; C:\Windows\System32\termsrv.dll [680960 2010-11-20] (Microsoft Corporation) S2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-13] (Microsoft Corporation) S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-13] (Microsoft Corporation) S2 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-13] (Microsoft Corporation) S3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048 2010-11-20] (Microsoft Corporation) S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-13] (Microsoft Corporation) S2 UNS; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2655768 2010-10-05] (Intel Corporation) S2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-28] (Acer Group) S3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-13] (Microsoft Corporation) S2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-13] (Microsoft Corporation) S3 VaultSvc; C:\Windows\system32\lsass.exe [31232 2011-11-16] (Microsoft Corporation) S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-20] (Microsoft Corporation) S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-20] (Microsoft Corporation) S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-13] (Microsoft Corporation) S2 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2012-10-05] (Wajam) S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1255736 2013-01-14] (Microsoft Corporation) S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-20] (Microsoft Corporation) S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-13] (Microsoft Corporation) S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-20] (Microsoft Corporation) S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960 2009-07-13] (Microsoft Corporation) S3 WdiServiceHost; C:\Windows\system32\wdi.dll [90624 2009-07-13] (Microsoft Corporation) S3 WdiSystemHost; C:\Windows\system32\wdi.dll [90624 2009-07-13] (Microsoft Corporation) S3 WebClient; C:\Windows\System32\webclnt.dll [259584 2013-07-04] (Microsoft Corporation) S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-13] (Microsoft Corporation) S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480 2009-07-13] (Microsoft Corporation) S3 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-13] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation) S3 WinHttpAutoProxySvc; C:\Windows\System32\winhttp.dll [444416 2010-11-20] (Microsoft Corporation) S2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-13] (Microsoft Corporation) S3 WinRM; C:\Windows\system32\WsmSvc.dll [2018304 2010-11-20] (Microsoft Corporation) S2 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-13] (Microsoft Corporation) S4 wlcrasvc; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [57184 2010-09-22] (Microsoft Corporation) S2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corp.) S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-13] (Microsoft Corporation) S2 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-11-20] (Microsoft Corporation) S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-13] (Microsoft Corporation) S3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-20] (Microsoft Corporation) S2 wscsvc; C:\Windows\System32\wscsvc.dll [97280 2009-07-13] (Microsoft Corporation) S2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2011-05-03] (Microsoft Corporation) S2 WSearch; C:\Windows\SysWow64\SearchIndexer.exe [427520 2011-05-03] (Microsoft Corporation) S2 wuauserv; C:\Windows\system32\wuaueng.dll [2428952 2012-06-02] (Microsoft Corporation) S3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-25] (Microsoft Corporation) S3 WwanSvc; C:\Windows\System32\wwansvc.dll [230400 2013-03-18] (Microsoft Corporation) ==================== Drivers (All) ========================== S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-20] (Microsoft Corporation) S0 ACPI; C:\Windows\System32\drivers\ACPI.sys [334208 2010-11-20] (Microsoft Corporation) S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-20] (Microsoft Corporation) S3 adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys [491088 2009-07-13] (Adaptec, Inc.) S3 adpahci; C:\Windows\system32\DRIVERS\adpahci.sys [339536 2009-07-13] (Adaptec, Inc.) S3 adpu320; C:\Windows\system32\DRIVERS\adpu320.sys [182864 2009-07-13] (Adaptec, Inc.) S1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2013-09-13] (Microsoft Corporation) S3 agp440; C:\Windows\system32\drivers\agp440.sys [61008 2009-07-13] (Microsoft Corporation) S3 aliide; C:\Windows\system32\drivers\aliide.sys [15440 2009-07-13] (Acer Laboratories Inc.) S3 amdide; C:\Windows\system32\drivers\amdide.sys [15440 2009-07-13] (Microsoft Corporation) S3 AmdK8; C:\Windows\system32\DRIVERS\amdk8.sys [64512 2009-07-13] (Microsoft Corporation) S3 AmdPPM; C:\Windows\system32\DRIVERS\amdppm.sys [60928 2009-07-13] (Microsoft Corporation) S3 amdsata; C:\Windows\system32\drivers\amdsata.sys [107904 2011-03-10] (Advanced Micro Devices) S3 amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys [194128 2009-07-13] (AMD Technologies Inc.) S0 amdxata; C:\Windows\System32\drivers\amdxata.sys [27008 2011-03-10] (Advanced Micro Devices) S3 AppID; C:\Windows\system32\drivers\appid.sys [61440 2010-11-20] (Microsoft Corporation) S3 arc; C:\Windows\system32\DRIVERS\arc.sys [87632 2009-07-13] (Adaptec, Inc.) S3 arcsas; C:\Windows\system32\DRIVERS\arcsas.sys [97856 2009-07-13] (Adaptec, Inc.) S2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-07] (AVAST Software) S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-07] (AVAST Software) S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-07] (AVAST Software) S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-07] () S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-07] (AVAST Software) S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-07] (AVAST Software) S1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-07] (AVAST Software) S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-07] () S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-13] (Microsoft Corporation) S0 atapi; C:\Windows\System32\drivers\atapi.sys [24128 2009-07-13] (Microsoft Corporation) S3 athr; C:\Windows\System32\DRIVERS\athrx.sys [2350952 2010-11-23] (Atheros Communications, Inc.) S3 b06bdrv; C:\Windows\system32\DRIVERS\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation) S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation) S3 b57xdbd; C:\Windows\System32\DRIVERS\b57xdbd.sys [67112 2010-12-11] (Broadcom Corporation) S3 b57xdmp; C:\Windows\System32\DRIVERS\b57xdmp.sys [19496 2010-12-11] (Broadcom Corporation) S3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl664.sys [1311232 2009-06-10] (Broadcom Corporation) S1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-13] (Microsoft Corporation) S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20100522.001\BHDrvx64.sys [942640 2010-05-18] (Symantec Corporation) S1 blbdrive; C:\Windows\system32\DRIVERS\blbdrive.sys [45056 2009-07-13] (Microsoft Corporation) S3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-22] (Microsoft Corporation) S3 BrFiltLo; C:\Windows\system32\DRIVERS\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.) S3 BrFiltUp; C:\Windows\system32\DRIVERS\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.) S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-13] (Brother Industries Ltd.) S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.) S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.) S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] (Brother Industries Ltd.) S3 bScsiMSa; C:\Windows\System32\DRIVERS\bScsiMSa.sys [35368 2010-12-10] (Broadcom Corporation) S3 bScsiSDa; C:\Windows\System32\DRIVERS\bScsiSDa.sys [85544 2010-12-11] (Broadcom Corporation) S3 BTHMODEM; C:\Windows\system32\DRIVERS\bthmodem.sys [72192 2009-07-13] (Microsoft Corporation) S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-13] (Microsoft Corporation) S1 cdrom; C:\Windows\system32\drivers\cdrom.sys [147456 2010-11-20] (Microsoft Corporation) S3 circlass; C:\Windows\system32\DRIVERS\circlass.sys [45568 2009-07-13] (Microsoft Corporation) S0 CLFS; C:\Windows\System32\CLFS.sys [367696 2009-07-13] (Microsoft Corporation) S3 CmBatt; C:\Windows\system32\DRIVERS\CmBatt.sys [17664 2009-07-13] (Microsoft Corporation) S3 cmdide; C:\Windows\system32\drivers\cmdide.sys [17488 2009-07-13] (CMD Technology, Inc.) S0 CNG; C:\Windows\System32\Drivers\cng.sys [458704 2012-06-01] (Microsoft Corporation) S0 Compbatt; C:\Windows\System32\DRIVERS\compbatt.sys [21584 2009-07-13] (Microsoft Corporation) S3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-20] (Microsoft Corporation) S4 crcdisk; C:\Windows\system32\DRIVERS\crcdisk.sys [24144 2009-07-13] (Microsoft Corporation) S1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-20] (Microsoft Corporation) S1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-13] (Microsoft Corporation) S0 Disk; C:\Windows\System32\DRIVERS\disk.sys [73280 2009-07-13] (Microsoft Corporation) S3 drmkaud; C:\Windows\System32\drivers\drmkaud.sys [5632 2009-07-13] (Microsoft Corporation) S3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [983488 2013-08-01] (Microsoft Corporation) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [475696 2010-11-03] (Symantec Corporation) S3 elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [530496 2009-07-13] (Emulex) S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [132656 2010-11-03] (Symantec Corporation) S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-13] (Microsoft Corporation) S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-13] (Microsoft Corporation) S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-13] (Microsoft Corporation) S3 fdc; C:\Windows\system32\DRIVERS\fdc.sys [29696 2009-07-13] (Microsoft Corporation) S0 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [70224 2009-07-13] (Microsoft Corporation) S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-13] (Microsoft Corporation) S3 flpydisk; C:\Windows\system32\DRIVERS\flpydisk.sys [24576 2009-07-13] (Microsoft Corporation) S0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [289664 2010-11-20] (Microsoft Corporation) S3 FsDepends; C:\Windows\System32\drivers\FsDepends.sys [55376 2009-07-13] (Microsoft Corporation) S0 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [23408 2012-02-29] (Microsoft Corporation) S0 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [223752 2013-01-23] (Microsoft Corporation) S3 gagp30kx; C:\Windows\system32\DRIVERS\gagp30kx.sys [65088 2009-07-13] (Microsoft Corporation) S3 GEARAspiWDM; C:\Windows\System32\DRIVERS\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.) S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) S3 HdAudAddService; C:\Windows\system32\drivers\HdAudio.sys [350208 2010-11-20] (Microsoft Corporation) S3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368 2010-11-20] (Microsoft Corporation) S3 HidBatt; C:\Windows\system32\DRIVERS\HidBatt.sys [26624 2009-07-13] (Microsoft Corporation) S3 HidBth; C:\Windows\system32\DRIVERS\hidbth.sys [100864 2009-07-13] (Microsoft Corporation) S3 HidIr; C:\Windows\system32\DRIVERS\hidir.sys [46592 2009-07-13] (Microsoft Corporation) S3 HidUsb; C:\Windows\system32\drivers\hidusb.sys [30208 2010-11-20] (Microsoft Corporation) S3 HpSAMD; C:\Windows\system32\drivers\HpSAMD.sys [78720 2010-11-20] (Hewlett-Packard Company) S3 HTTP; C:\Windows\System32\drivers\HTTP.sys [753664 2010-11-20] (Microsoft Corporation) S0 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [14720 2010-11-20] (Microsoft Corporation) S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-13] (Microsoft Corporation) S0 iaStor; C:\Windows\System32\DRIVERS\iaStor.sys [438808 2010-11-05] (Intel Corporation) S3 iaStorV; C:\Windows\system32\drivers\iaStorV.sys [410496 2011-03-10] (Intel Corporation) S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20100518.002\IDSVia64.sys [463408 2010-05-17] (Symantec Corporation) S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [12262688 2011-01-07] (Intel Corporation) S3 iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [44112 2009-07-13] (Intel Corp./ICP vortex GmbH) S3 IntcAzAudAddService; C:\Windows\System32\drivers\RTKVHD64.sys [2569704 2010-11-26] (Realtek Semiconductor Corp.) S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [317440 2010-10-15] (Intel® Corporation) S3 intelide; C:\Windows\system32\drivers\intelide.sys [16960 2009-07-13] (Microsoft Corporation) S3 intelppm; C:\Windows\System32\DRIVERS\intelppm.sys [62464 2009-07-13] (Microsoft Corporation) S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-20] (Microsoft Corporation) S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-20] (Microsoft Corporation) S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-13] (Microsoft Corporation) S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-13] (Microsoft Corporation) S3 isapnp; C:\Windows\system32\drivers\isapnp.sys [20544 2009-07-13] (Microsoft Corporation) S3 iScsiPrt; C:\Windows\system32\drivers\msiscsi.sys [273792 2010-11-20] (Microsoft Corporation) S3 k57nd60a; C:\Windows\System32\DRIVERS\k57nd60a.sys [410152 2010-10-31] (Broadcom Corporation) S3 kbdclass; C:\Windows\system32\drivers\kbdclass.sys [50768 2009-07-13] (Microsoft Corporation) S3 kbdhid; C:\Windows\system32\drivers\kbdhid.sys [33280 2010-11-20] (Microsoft Corporation) S0 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [95600 2012-06-01] (Microsoft Corporation) S0 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [151920 2012-06-01] (Microsoft Corporation) S3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-13] (Microsoft Corporation) S3 L1E; C:\Windows\System32\DRIVERS\L1E62x64.sys [54272 2009-06-19] (Atheros Communications, Inc.) S2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-13] (Microsoft Corporation) S3 LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [114752 2009-07-13] (LSI Corporation) S3 LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [106560 2009-07-13] (LSI Corporation) S3 LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [65600 2009-07-13] (LSI Corporation) S3 LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [115776 2009-07-13] (LSI Corporation) S2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-13] (Microsoft Corporation) S3 megasas; C:\Windows\system32\DRIVERS\megasas.sys [35392 2009-07-13] (LSI Corporation) S3 MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [284736 2009-07-13] (LSI Corporation, Inc.) S3 MEIx64; C:\Windows\System32\DRIVERS\HECIx64.sys [56344 2010-09-21] (Intel Corporation) S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-13] (Microsoft Corporation) S3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-13] (Microsoft Corporation) S3 mouclass; C:\Windows\system32\drivers\mouclass.sys [49216 2009-07-13] (Microsoft Corporation) S3 mouhid; C:\Windows\system32\DRIVERS\mouhid.sys [31232 2009-07-13] (Microsoft Corporation) S0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94592 2010-11-20] (Microsoft Corporation) S3 mpio; C:\Windows\system32\drivers\mpio.sys [155008 2010-11-20] (Microsoft Corporation) S3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-13] (Microsoft Corporation) S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [140800 2013-07-04] (Microsoft Corporation) S3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [158208 2011-04-26] (Microsoft Corporation) S3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [288768 2011-07-08] (Microsoft Corporation) S3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [128000 2011-04-26] (Microsoft Corporation) S0 msahci; C:\Windows\System32\drivers\msahci.sys [31104 2010-11-20] (Microsoft Corporation) S3 msdsm; C:\Windows\system32\drivers\msdsm.sys [140672 2010-11-20] (Microsoft Corporation) S1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-13] (Microsoft Corporation) S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-13] (Microsoft Corporation) S0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [15424 2009-07-13] (Microsoft Corporation) S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-13] (Microsoft Corporation) S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-13] (Microsoft Corporation) S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-13] (Microsoft Corporation) S3 MsRPC; C:\Windows\System32\Drivers\MsRPC.sys [366976 2010-11-20] (Microsoft Corporation) S1 mssmbios; C:\Windows\system32\drivers\mssmbios.sys [32320 2009-07-13] (Microsoft Corporation) S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-13] (Microsoft Corporation) S3 MTConfig; C:\Windows\system32\DRIVERS\MTConfig.sys [15360 2009-07-13] (Microsoft Corporation) S0 Mup; C:\Windows\System32\Drivers\mup.sys [60496 2009-07-13] (Microsoft Corporation) S3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-13] (Microsoft Corporation) S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20101103.002\ENG64.SYS [117808 2010-11-03] (Symantec Corporation) S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20101103.002\EX64.SYS [1804336 2010-11-03] (Symantec Corporation) S0 NDIS; C:\Windows\System32\drivers\ndis.sys [950128 2012-08-22] (Microsoft Corporation) S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-13] (Microsoft Corporation) S3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-13] (Microsoft Corporation) S3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20] (Microsoft Corporation) S3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-20] (Microsoft Corporation) S3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-20] (Microsoft Corporation) S1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-13] (Microsoft Corporation) S1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-20] (Microsoft Corporation) S3 nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [51264 2009-07-13] (IBM Corporation) S2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2013-08-11] (CACE Technologies, Inc.) S1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-13] (Microsoft Corporation) S1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-13] (Microsoft Corporation) S3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1656680 2013-04-12] (Microsoft Corporation) S3 NTIDrvr; C:\Windows\system32\drivers\NTIDrvr.sys [18432 2009-05-05] (NewTech Infosystems, Inc.) S1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-13] (Microsoft Corporation) S3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [80384 2010-11-19] (Renesas Electronics Corporation) S3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [181248 2010-11-19] (Renesas Electronics Corporation) S3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [13029992 2010-12-12] (NVIDIA Corporation) S0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [25576 2010-12-12] (NVIDIA Corporation) S3 nvraid; C:\Windows\system32\drivers\nvraid.sys [148352 2011-03-10] (NVIDIA Corporation) S3 nvstor; C:\Windows\system32\drivers\nvstor.sys [166272 2011-03-10] (NVIDIA Corporation) S3 nv_agp; C:\Windows\system32\drivers\nv_agp.sys [122960 2009-07-13] (Microsoft Corporation) S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-13] (Microsoft Corporation) S3 Parport; C:\Windows\system32\DRIVERS\parport.sys [97280 2009-07-13] (Microsoft Corporation) S0 partmgr; C:\Windows\System32\drivers\partmgr.sys [75120 2012-03-16] (Microsoft Corporation) S0 pci; C:\Windows\System32\drivers\pci.sys [184704 2010-11-20] (Microsoft Corporation) S3 pciide; C:\Windows\system32\drivers\pciide.sys [12352 2009-07-13] (Microsoft Corporation) S3 pcmcia; C:\Windows\system32\DRIVERS\pcmcia.sys [220752 2009-07-13] (Microsoft Corporation) S0 pcw; C:\Windows\System32\drivers\pcw.sys [50768 2009-07-13] (Microsoft Corporation) S2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [651264 2009-07-13] (Microsoft Corporation) S3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-20] (Microsoft Corporation) S3 Processor; C:\Windows\system32\DRIVERS\processr.sys [60416 2009-07-13] (Microsoft Corporation) S1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] (Microsoft Corporation) S0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [55024 2008-06-15] (Sonic Solutions) S3 ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [1524816 2009-07-13] (QLogic Corporation) S3 ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [128592 2009-07-13] (QLogic Corporation) S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-13] (Microsoft Corporation) S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-13] (Microsoft Corporation) S3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-13] (Microsoft Corporation) S3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] (Microsoft Corporation) S3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-13] (Microsoft Corporation) S3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-13] (Microsoft Corporation) S1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20] (Microsoft Corporation) S3 rdpbus; C:\Windows\system32\DRIVERS\rdpbus.sys [24064 2009-07-13] (Microsoft Corporation) S1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-13] (Microsoft Corporation) S1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-13] (Microsoft Corporation) S1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-13] (Microsoft Corporation) S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [210944 2012-04-27] (Microsoft Corporation) S0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [213888 2010-11-20] (Microsoft Corporation) S2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-13] (Microsoft Corporation) S3 sbp2port; C:\Windows\system32\drivers\sbp2port.sys [103808 2010-11-20] (Microsoft Corporation) S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-20] (Microsoft Corporation) S3 sdbus; C:\Windows\system32\drivers\sdbus.sys [109056 2010-11-20] (Microsoft Corporation) S2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) S3 Serenum; C:\Windows\system32\DRIVERS\serenum.sys [23552 2009-07-13] (Microsoft Corporation) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-13] (Microsoft Corporation) S3 sermouse; C:\Windows\system32\DRIVERS\sermouse.sys [26624 2009-07-13] (Microsoft Corporation) S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-13] (Microsoft Corporation) S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-13] (Microsoft Corporation) S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20] (Microsoft Corporation) S3 sfloppy; C:\Windows\system32\DRIVERS\sfloppy.sys [16896 2009-07-13] (Microsoft Corporation) S3 Sftfs; C:\Windows\System32\DRIVERS\Sftfslh.sys [767144 2013-06-26] (Microsoft Corporation) S3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaylh.sys [273576 2013-06-26] (Microsoft Corporation) S3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirlh.sys [28840 2013-06-26] (Microsoft Corporation) S3 Sftvol; C:\Windows\System32\DRIVERS\Sftvollh.sys [23208 2013-06-26] (Microsoft Corporation) S3 SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [43584 2009-07-13] (Silicon Integrated Systems Corp.) S3 SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [80464 2009-07-13] (Silicon Integrated Systems) S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-13] (Microsoft Corporation) S0 spldr; C:\Windows\System32\Drivers\spldr.sys [19008 2009-07-13] (Microsoft Corporation) S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1207020.003\SRTSP64.SYS [744568 2011-03-30] (Symantec Corporation) S1 SRTSPX; C:\Windows\system32\drivers\NISx64\1207020.003\SRTSPX64.SYS [40568 2011-03-30] (Symantec Corporation) S3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-28] (Microsoft Corporation) S3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-28] (Microsoft Corporation) S3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-28] (Microsoft Corporation) S3 stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [24656 2009-07-13] (Promise Technology) S3 swenum; C:\Windows\system32\drivers\swenum.sys [12496 2009-07-13] (Microsoft Corporation) S0 SymDS; C:\Windows\System32\drivers\NISx64\1207020.003\SYMDS64.SYS [450680 2011-01-26] (Symantec Corporation) S0 SymEFA; C:\Windows\System32\drivers\NISx64\1207020.003\SYMEFA64.SYS [912504 2011-03-14] (Symantec Corporation) S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2013-01-11] (Symantec Corporation) S1 SymIRON; C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [171128 2011-01-26] (Symantec Corporation) S1 SymNetS; C:\Windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [386168 2011-04-20] (Symantec Corporation) S3 SynTP; C:\Windows\System32\DRIVERS\SynTP.sys [1395248 2010-10-08] (Synaptics Incorporated) S0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [1903552 2013-09-07] (Microsoft Corporation) S3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [1903552 2013-09-07] (Microsoft Corporation) S2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2012-10-03] (Microsoft Corporation) S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-13] (Microsoft Corporation) S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-16] (Microsoft Corporation) S1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2010-11-20] (Microsoft Corporation) S1 TermDD; C:\Windows\system32\drivers\termdd.sys [63360 2010-11-20] (Microsoft Corporation) S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2013-06-14] (Microsoft Corporation) S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [59392 2010-11-20] (Microsoft Corporation) S3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] (Microsoft Corporation) S3 uagp35; C:\Windows\system32\DRIVERS\uagp35.sys [64080 2009-07-13] (Microsoft Corporation) S3 UBHelper; C:\Windows\system32\drivers\UBHelper.sys [16896 2009-05-05] (NewTech Infosystems Corporation) S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20] (Microsoft Corporation) S3 uliagpkx; C:\Windows\system32\drivers\uliagpkx.sys [64592 2009-07-13] (Microsoft Corporation) S3 umbus; C:\Windows\system32\drivers\umbus.sys [48640 2010-11-20] (Microsoft Corporation) S3 UmPass; C:\Windows\system32\DRIVERS\umpass.sys [9728 2009-07-13] (Microsoft Corporation) S3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [98816 2011-03-24] (Microsoft Corporation) S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] (Microsoft Corporation) S3 usbehci; C:\Windows\system32\drivers\usbehci.sys [52736 2011-03-24] (Microsoft Corporation) S3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2011-03-24] (Microsoft Corporation) S3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2011-03-24] (Microsoft Corporation) S3 usbprint; C:\Windows\system32\DRIVERS\usbprint.sys [25088 2009-07-13] (Microsoft Corporation) S3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2011-03-10] (Microsoft Corporation) S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2011-03-24] (Microsoft Corporation) S3 usbvideo; C:\Windows\System32\Drivers\usbvideo.sys [185344 2013-07-12] (Microsoft Corporation) S0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [36432 2009-07-13] (Microsoft Corporation) S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-13] (Microsoft Corporation) S1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-13] (Microsoft Corporation) S3 vhdmp; C:\Windows\system32\drivers\vhdmp.sys [215936 2010-11-20] (Microsoft Corporation) S3 viaide; C:\Windows\system32\drivers\viaide.sys [17488 2009-07-13] (VIA Technologies, Inc.) S0 volmgr; C:\Windows\System32\drivers\volmgr.sys [71552 2010-11-20] (Microsoft Corporation) S0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363392 2010-11-20] (Microsoft Corporation) S0 volsnap; C:\Windows\System32\drivers\volsnap.sys [295808 2010-11-20] (Microsoft Corporation) S3 vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [161872 2009-07-13] (VIA Technologies Inc.,Ltd) S3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576 2009-07-13] (Microsoft Corporation) S1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904 2009-07-13] (Microsoft Corporation) S3 WacomPen; C:\Windows\system32\DRIVERS\wacompen.sys [27776 2009-07-13] (Microsoft Corporation) S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] (Microsoft Corporation) S1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] (Microsoft Corporation) S3 Wd; C:\Windows\system32\DRIVERS\wd.sys [21056 2009-07-13] (Microsoft Corporation) S0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [785624 2013-06-25] (Microsoft Corporation) S1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-13] (Microsoft Corporation) S3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [22096 2009-07-13] (Microsoft Corporation) S3 WIMMount; C:\Windows\SysWow64\drivers\wimmount.sys [19008 2009-07-13] (Microsoft Corporation) S3 Winsock; No ImagePath S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-20] (Microsoft Corporation) S3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-13] (Microsoft Corporation) S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-13] (Microsoft Corporation) S3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-25] (Microsoft Corporation) S3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-25] (Microsoft Corporation) S5 BattC; C:\Windows\System32\Drivers\BattC.sys [28240 2009-07-13] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-08 18:03 - 2013-11-08 18:05 - 00000000 _____ C:\Recovery.txt 2013-11-08 17:36 - 2013-11-08 17:36 - 00000000 ____D C:\FRST 2013-11-08 06:35 - 2013-11-08 07:26 - 00002673 _____ C:\Windows\WindowsUpdate.log 2013-11-08 06:03 - 2013-11-08 08:57 - 00000168 _____ C:\Windows\setupact.log 2013-11-08 06:03 - 2013-11-08 06:03 - 00000000 _____ C:\Windows\setuperr.log 2013-11-08 06:00 - 2013-11-08 06:00 - 00106428 _____ C:\Users\Bruker\Documents\cc_20131108_150027.reg 2013-11-08 05:53 - 2013-11-08 05:53 - 00000000 ____D C:\Program Files\CCleaner 2013-11-07 07:44 - 2013-11-07 07:44 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\AVAST Software 2013-11-07 07:43 - 2013-11-07 07:43 - 01032416 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00334648 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe 2013-11-07 07:43 - 2013-11-07 07:43 - 00205320 _____ C:\Windows\System32\Drivers\aswVmm.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00092544 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00084328 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00065776 _____ C:\Windows\System32\Drivers\aswRvrt.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00065264 _____ (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-07 07:43 - 2013-11-07 07:43 - 00038984 _____ (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00001978 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-07 07:43 - 2013-11-07 07:43 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job 2013-11-07 07:43 - 2013-11-07 07:43 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-07 07:41 - 2013-11-07 07:41 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\gkiecwzg.sys 2013-11-07 07:41 - 2013-11-07 07:41 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-04 08:18 - 2013-11-04 08:19 - 00043097 _____ C:\Users\Bruker\Downloads\HSphere-Slice.qt 2013-11-04 08:18 - 2013-11-04 08:18 - 00237058 _____ C:\Users\Bruker\Downloads\Sphere-Slice.mpg 2013-11-04 08:18 - 2013-11-04 08:18 - 00091097 _____ C:\Users\Bruker\Downloads\HSphere-Slice.mpg 2013-10-25 14:29 - 2013-11-05 11:31 - 00022508 _____ C:\Users\Bruker\Documents\JPIYVGUBif.odt 2013-10-23 12:33 - 2013-10-23 12:33 - 00000022 _____ C:\Users\Bruker\Downloads\iTunes Sleep Timer.zip 2013-10-23 09:26 - 2013-10-23 09:26 - 00001755 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-10-23 09:25 - 2013-10-23 09:26 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-10-23 09:25 - 2013-10-23 09:26 - 00000000 ____D C:\Program Files\iTunes 2013-10-23 09:25 - 2013-10-23 09:26 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-10-23 09:25 - 2013-10-23 09:25 - 00000000 ____D C:\Program Files\iPod 2013-10-20 11:36 - 2013-10-20 11:36 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 11:33 - 2013-10-07 21:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-20 11:33 - 2013-10-07 21:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-20 11:33 - 2013-10-07 21:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-10-20 11:33 - 2013-10-07 21:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-10-20 11:32 - 2013-10-20 11:33 - 00004717 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-20 11:22 - 2013-10-20 11:23 - 00915368 _____ (Oracle Corporation) C:\Users\Bruker\Downloads\chromeinstall-7u45.exe 2013-10-16 03:03 - 2013-10-16 03:03 - 00136390 _____ C:\Windows\Signert_Samtykkeerklæring_16_10_13_1303.sdo 2013-10-11 15:08 - 2013-09-22 15:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-11 15:08 - 2013-09-22 15:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 15:08 - 2013-09-22 15:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-11 15:08 - 2013-09-22 14:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-10-11 15:08 - 2013-09-22 14:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-10-11 15:08 - 2013-09-22 14:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-10-11 15:08 - 2013-09-22 14:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-10-11 15:08 - 2013-09-22 14:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-10-11 15:08 - 2013-09-20 19:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-10-11 15:08 - 2013-09-20 19:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 15:08 - 2013-09-20 18:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-10-11 15:08 - 2013-09-20 18:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-09 23:37 - 2013-10-09 23:37 - 00000000 ____D C:\21f5d407bb44c1dfac47 2013-10-09 23:33 - 2013-09-13 17:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys 2013-10-09 23:33 - 2013-09-07 18:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-10-09 23:33 - 2013-09-07 18:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\System32\mswsock.dll 2013-10-09 23:33 - 2013-09-07 18:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-09 23:33 - 2013-07-12 02:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbvideo.sys 2013-10-09 23:33 - 2013-07-12 02:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\usbcir.sys 2013-10-09 23:33 - 2013-07-04 04:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll 2013-10-09 23:33 - 2013-07-04 04:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\comctl32.dll 2013-10-09 23:33 - 2013-07-04 04:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\System32\davclnt.dll 2013-10-09 23:33 - 2013-07-04 03:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-09 23:33 - 2013-07-04 03:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-09 23:33 - 2013-07-04 03:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-09 23:33 - 2013-07-04 02:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys 2013-10-09 23:33 - 2013-07-02 20:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys 2013-10-09 23:33 - 2013-07-02 20:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\hidparse.sys 2013-10-09 23:33 - 2013-06-25 14:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys 2013-10-09 23:33 - 2013-06-05 21:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll 2013-10-09 23:33 - 2013-06-05 21:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll 2013-10-09 23:33 - 2013-06-05 21:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll 2013-10-09 23:33 - 2013-06-05 21:47 - 00046080 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll 2013-10-09 23:33 - 2013-06-05 20:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-09 23:33 - 2013-06-05 20:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-09 23:33 - 2013-06-05 20:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-09 23:33 - 2013-06-05 19:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll 2013-10-09 23:33 - 2013-06-05 19:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-09 23:33 - 2013-06-05 19:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-09 23:32 - 2013-08-28 18:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2013-10-09 23:32 - 2013-08-28 18:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll 2013-10-09 23:32 - 2013-08-28 18:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\System32\tdh.dll 2013-10-09 23:32 - 2013-08-28 18:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll 2013-10-09 23:32 - 2013-08-28 18:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll 2013-10-09 23:32 - 2013-08-28 17:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-09 23:32 - 2013-08-28 17:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-09 23:32 - 2013-08-28 17:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-09 23:32 - 2013-08-28 17:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-09 23:32 - 2013-08-28 17:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-09 23:32 - 2013-08-28 17:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-09 23:32 - 2013-08-28 16:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-09 23:32 - 2013-08-28 16:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-09 23:32 - 2013-08-28 16:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-09 23:32 - 2013-08-28 16:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-09 23:32 - 2013-08-27 17:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys 2013-10-09 23:32 - 2013-08-27 17:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\System32\scavengeui.dll 2013-10-09 23:32 - 2013-08-01 04:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys 2013-10-09 23:32 - 2013-07-20 02:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll 2013-10-09 23:32 - 2013-07-20 02:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ==================== One Month Modified Files and Folders ======= 2013-11-08 18:05 - 2013-11-08 18:03 - 00000000 _____ C:\Recovery.txt 2013-11-08 18:03 - 2011-05-24 09:29 - 00000000 __SHD C:\Recovery 2013-11-08 17:36 - 2013-11-08 17:36 - 00000000 ____D C:\FRST 2013-11-08 08:58 - 2013-08-30 03:26 - 00000572 _____ C:\Windows\Tasks\MATLAB R2013a Startup Accelerator.job 2013-11-08 08:58 - 2013-01-11 13:09 - 00000988 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-08 08:57 - 2013-11-08 06:03 - 00000168 _____ C:\Windows\setupact.log 2013-11-08 08:57 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-08 07:26 - 2013-11-08 06:35 - 00002673 _____ C:\Windows\WindowsUpdate.log 2013-11-08 07:23 - 2013-01-11 13:09 - 00000992 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-08 06:16 - 2013-01-11 13:56 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\Dropbox 2013-11-08 06:08 - 2013-01-11 14:04 - 00000000 ___RD C:\Users\Bruker\Dropbox 2013-11-08 06:03 - 2013-11-08 06:03 - 00000000 _____ C:\Windows\setuperr.log 2013-11-08 06:00 - 2013-11-08 06:00 - 00106428 _____ C:\Users\Bruker\Documents\cc_20131108_150027.reg 2013-11-08 05:57 - 2013-09-19 03:14 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\uTorrent 2013-11-08 05:57 - 2013-04-08 07:06 - 00000000 ____D C:\Users\Bruker\AppData\Local\CrashDumps 2013-11-08 05:57 - 2009-07-27 12:41 - 00000000 ____D C:\Windows\Panther 2013-11-08 05:54 - 2011-03-19 23:43 - 00077404 _____ C:\Windows\System32\perfc014.dat 2013-11-08 05:54 - 2011-03-19 23:43 - 00012442 _____ C:\Windows\System32\perfh014.dat 2013-11-08 05:54 - 2009-07-13 21:13 - 00802866 _____ C:\Windows\System32\PerfStringBackup.INI 2013-11-08 05:53 - 2013-11-08 05:53 - 00000000 ____D C:\Program Files\CCleaner 2013-11-08 05:18 - 2009-07-13 20:45 - 00017600 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-08 05:17 - 2009-07-13 20:45 - 00017600 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-08 04:23 - 2011-05-24 09:41 - 00000000 ____D C:\ProgramData\boost_interprocess 2013-11-07 07:44 - 2013-11-07 07:44 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\AVAST Software 2013-11-07 07:43 - 2013-11-07 07:43 - 01032416 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00334648 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe 2013-11-07 07:43 - 2013-11-07 07:43 - 00205320 _____ C:\Windows\System32\Drivers\aswVmm.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00092544 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00084328 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00065776 _____ C:\Windows\System32\Drivers\aswRvrt.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00065264 _____ (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-07 07:43 - 2013-11-07 07:43 - 00038984 _____ (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys 2013-11-07 07:43 - 2013-11-07 07:43 - 00001978 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-11-07 07:43 - 2013-11-07 07:43 - 00000350 ____H C:\Windows\Tasks\avast! Emergency Update.job 2013-11-07 07:43 - 2013-11-07 07:43 - 00000000 ____D C:\Program Files\AVAST Software 2013-11-07 07:41 - 2013-11-07 07:41 - 00409832 _____ (AVAST Software) C:\Windows\System32\Drivers\gkiecwzg.sys 2013-11-07 07:41 - 2013-11-07 07:41 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-07 06:43 - 2011-05-24 09:31 - 00000000 ____D C:\users\Bruker 2013-11-07 06:42 - 2013-01-21 10:15 - 00000000 ____D C:\users\Christian 2013-11-07 06:42 - 2010-11-26 20:27 - 00000000 ____D C:\ProgramData\Norton 2013-11-07 06:42 - 2010-11-26 19:22 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-11-07 06:42 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration 2013-11-07 06:42 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\AppCompat 2013-11-07 06:41 - 2013-03-05 13:00 - 00000000 __RHD C:\MSOCache 2013-11-07 06:41 - 2013-03-05 12:53 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\SoftGrid Client 2013-11-06 13:34 - 2013-08-30 03:35 - 00000000 ____D C:\Users\Bruker\Documents\MATLAB 2013-11-06 13:24 - 2013-08-14 11:23 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\Skype 2013-11-06 11:36 - 2013-08-14 11:22 - 00000000 ____D C:\ProgramData\Skype 2013-11-06 11:35 - 2013-08-14 11:23 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-05 11:31 - 2013-10-25 14:29 - 00022508 _____ C:\Users\Bruker\Documents\JPIYVGUBif.odt 2013-11-04 08:19 - 2013-11-04 08:18 - 00043097 _____ C:\Users\Bruker\Downloads\HSphere-Slice.qt 2013-11-04 08:19 - 2011-05-24 09:44 - 00000000 ____D C:\Users\Bruker\AppData\Local\Windows Live 2013-11-04 08:18 - 2013-11-04 08:18 - 00237058 _____ C:\Users\Bruker\Downloads\Sphere-Slice.mpg 2013-11-04 08:18 - 2013-11-04 08:18 - 00091097 _____ C:\Users\Bruker\Downloads\HSphere-Slice.mpg 2013-11-03 09:48 - 2013-01-25 02:57 - 00001142 _____ C:\Windows\wininit.ini 2013-11-03 09:47 - 2013-01-11 14:04 - 00001033 _____ C:\Users\Bruker\Desktop\Dropbox.lnk 2013-10-25 14:23 - 2013-01-21 10:49 - 00000000 ____D C:\Users\Bruker\AppData\Roaming\Spotify 2013-10-23 12:33 - 2013-10-23 12:33 - 00000022 _____ C:\Users\Bruker\Downloads\iTunes Sleep Timer.zip 2013-10-23 09:26 - 2013-10-23 09:26 - 00001755 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-10-23 09:26 - 2013-10-23 09:25 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-10-23 09:26 - 2013-10-23 09:25 - 00000000 ____D C:\Program Files\iTunes 2013-10-23 09:26 - 2013-10-23 09:25 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-10-23 09:25 - 2013-10-23 09:25 - 00000000 ____D C:\Program Files\iPod 2013-10-22 05:30 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\NDF 2013-10-21 13:01 - 2013-08-11 09:42 - 00000000 ____D C:\Users\Bruker\AppData\Local\NETGEARGenie 2013-10-21 13:01 - 2013-01-21 11:02 - 00000000 ____D C:\Users\Bruker\AppData\Local\Spotify 2013-10-20 11:36 - 2013-10-20 11:36 - 00000000 ____D C:\ProgramData\Oracle 2013-10-20 11:33 - 2013-10-20 11:32 - 00004717 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-20 11:33 - 2013-08-19 08:00 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-20 11:23 - 2013-10-20 11:22 - 00915368 _____ (Oracle Corporation) C:\Users\Bruker\Downloads\chromeinstall-7u45.exe 2013-10-18 03:16 - 2013-01-11 13:09 - 00003988 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-18 03:16 - 2013-01-11 13:09 - 00003736 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-16 07:11 - 2013-05-27 09:19 - 00000000 _____ C:\END 2013-10-16 03:03 - 2013-10-16 03:03 - 00136390 _____ C:\Windows\Signert_Samtykkeerklæring_16_10_13_1303.sdo 2013-10-15 21:19 - 2013-01-11 13:30 - 00002155 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-10-12 01:58 - 2009-07-13 20:45 - 00315424 _____ C:\Windows\System32\FNTCACHE.DAT 2013-10-12 01:54 - 2013-03-14 15:39 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-12 01:54 - 2013-03-14 15:39 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-10 10:58 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache 2013-10-09 23:37 - 2013-10-09 23:37 - 00000000 ____D C:\21f5d407bb44c1dfac47 ==================== Known DLLs (All) ========================= [2009-07-13 16:00] - [2009-07-13 17:40] - 0607744 ____A (Microsoft Corporation) C:\Windows\System32\clbcatq.dll [2009-07-13 15:44] - [2009-07-13 17:15] - 0522240 ____A (Microsoft Corporation) C:\Windows\SysWOW64\clbcatq.dll [2013-01-15 15:01] - [2010-11-20 05:27] - 2086912 ____A (Microsoft Corporation) C:\Windows\System32\ole32.dll [2013-01-15 15:00] - [2010-11-20 04:20] - 1414144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll [2013-10-09 23:32] - [2013-08-28 18:13] - 0878080 ____A (Microsoft Corporation) C:\Windows\System32\advapi32.dll [2013-10-09 23:32] - [2013-08-28 17:48] - 0640512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll [2013-01-15 15:00] - [2010-11-20 05:25] - 0594432 ____A (Microsoft Corporation) C:\Windows\System32\COMDLG32.dll [2013-01-15 15:00] - [2010-11-20 04:18] - 0485888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.dll [2013-01-15 15:00] - [2010-11-20 05:26] - 0403968 ____A (Microsoft Corporation) C:\Windows\System32\gdi32.dll [2013-01-15 15:00] - [2010-11-20 04:08] - 0311296 ____A (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll [2013-10-11 15:08] - [2013-09-22 14:54] - 2647552 ____A (Microsoft Corporation) C:\Windows\System32\IERTUTIL.dll [2013-10-11 15:08] - [2013-09-22 15:27] - 2048512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IERTUTIL.dll [2013-01-14 20:51] - [2012-02-29 22:33] - 0081408 ____A (Microsoft Corporation) C:\Windows\System32\IMAGEHLP.dll [2013-01-14 20:51] - [2012-02-29 21:33] - 0159232 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IMAGEHLP.dll [2009-07-13 15:38] - [2009-07-13 17:41] - 0167424 ____A (Microsoft Corporation) C:\Windows\System32\IMM32.dll [2013-01-15 14:59] - [2010-11-20 04:08] - 0119808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IMM32.dll [2013-09-12 22:26] - [2013-08-01 18:13] - 1161216 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll [2013-09-12 22:26] - [2013-08-01 17:50] - 1114112 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll [2013-10-09 23:33] - [2013-06-05 21:50] - 0041472 ____A (Microsoft Corporation) C:\Windows\System32\LPK.dll [2013-10-09 23:33] - [2013-06-05 20:57] - 0025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\LPK.dll [2009-07-13 15:40] - [2009-07-13 17:41] - 1067008 ____A (Microsoft Corporation) C:\Windows\System32\MSCTF.dll [2009-07-13 15:28] - [2009-07-13 17:15] - 0828928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSCTF.dll [2013-01-14 13:55] - [2011-12-16 00:46] - 0634880 ____A (Microsoft Corporation) C:\Windows\System32\MSVCRT.dll [2013-01-14 13:55] - [2011-12-15 23:52] - 0690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSVCRT.dll [2009-07-13 15:26] - [2009-07-13 17:31] - 0002560 ____A (Microsoft Corporation) C:\Windows\System32\NORMALIZ.dll [2009-07-13 15:15] - [2009-07-13 17:09] - 0002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\NORMALIZ.dll [2009-07-13 15:21] - [2009-07-13 17:41] - 0013824 ____A (Microsoft Corporation) C:\Windows\System32\NSI.dll [2009-07-13 15:12] - [2009-07-13 17:16] - 0008704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\NSI.dll [2013-01-14 13:52] - [2011-08-26 21:37] - 0861696 ____A (Microsoft Corporation) C:\Windows\System32\OLEAUT32.dll [2013-01-14 13:52] - [2011-08-26 20:26] - 0571904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\OLEAUT32.dll [2009-07-13 15:26] - [2009-07-13 17:41] - 0009216 ____A (Microsoft Corporation) C:\Windows\System32\PSAPI.dll [2009-07-13 15:15] - [2009-07-13 17:16] - 0006144 ____A (Microsoft Corporation) C:\Windows\SysWOW64\PSAPI.dll [2013-08-17 05:59] - [2013-07-08 21:51] - 1217024 ____A (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll [2013-08-17 05:59] - [2013-07-08 20:52] - 0663552 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll [2009-07-13 15:20] - [2009-07-13 17:41] - 0113664 ____A (Microsoft Corporation) C:\Windows\System32\sechost.dll [2009-07-13 15:11] - [2009-07-13 17:16] - 0092160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll [2013-01-15 15:00] - [2010-11-20 05:27] - 1900544 ____A (Microsoft Corporation) C:\Windows\System32\Setupapi.dll [2013-01-15 15:00] - [2010-11-20 04:21] - 1667584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Setupapi.dll [2013-09-12 22:26] - [2013-07-25 18:24] - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\SHELL32.dll [2013-09-12 22:26] - [2013-07-25 17:55] - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SHELL32.dll [2013-01-15 15:00] - [2010-11-20 05:27] - 0448512 ____A (Microsoft Corporation) C:\Windows\System32\SHLWAPI.dll [2013-01-15 15:00] - [2010-11-20 04:21] - 0350208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SHLWAPI.dll [2013-10-11 15:08] - [2013-09-22 14:55] - 1365504 ____A (Microsoft Corporation) C:\Windows\System32\URLMON.dll [2013-10-11 15:08] - [2013-09-22 15:28] - 1141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\URLMON.dll [2013-01-15 15:00] - [2010-11-20 05:27] - 1008128 ____A (Microsoft Corporation) C:\Windows\System32\user32.dll [2013-01-15 15:00] - [2010-11-20 04:08] - 0833024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll [2013-01-14 14:00] - [2012-11-21 21:44] - 0800768 ____A (Microsoft Corporation) C:\Windows\System32\USP10.dll [2013-01-14 14:00] - [2012-11-21 20:45] - 0626688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\USP10.dll [2013-10-11 15:08] - [2013-09-22 14:55] - 2241024 ____A (Microsoft Corporation) C:\Windows\System32\WININET.dll [2013-10-11 15:08] - [2013-09-22 15:28] - 1767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WININET.dll [2013-01-15 15:00] - [2010-11-20 05:27] - 0312832 ____A (Microsoft Corporation) C:\Windows\System32\WLDAP32.dll [2013-01-15 15:00] - [2010-11-20 04:21] - 0269824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WLDAP32.dll [2013-01-15 15:00] - [2010-11-20 05:27] - 0297984 ____A (Microsoft Corporation) C:\Windows\System32\WS2_32.dll [2013-01-15 15:00] - [2010-11-20 04:21] - 0206848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WS2_32.dll [2009-07-13 15:27] - [2009-07-13 17:40] - 0504320 ____A (Microsoft Corporation) C:\Windows\System32\DifxApi.dll [2009-07-13 15:16] - [2009-07-13 17:15] - 0315904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DifxApi.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\...\.exe: exefile => OK HKLM\...\exefile\DefaultIcon: %1 => OK HKLM\...\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= 6 Restore point made on: 2013-10-05 09:50:59 Restore point made on: 2013-10-09 23:34:12 Restore point made on: 2013-10-11 15:06:10 Restore point made on: 2013-10-20 11:32:30 Restore point made on: 2013-10-28 04:06:35 Restore point made on: 2013-11-05 07:13:28 ==================== Memory info =========================== Percentage of memory in use: 18% Total physical RAM: 3946.17 MB Available physical RAM: 3220.78 MB Total Pagefile: 3944.32 MB Available Pagefile: 3207.5 MB Total Virtual: 8192 MB Available Virtual: 8191.88 MB ==================== Drives ================================ Drive c: (Packard Bell) (Fixed) (Total:451.01 GB) (Free:370.74 GB) NTFS Drive e: (PQSERVICE) (Fixed) (Total:14.65 GB) (Free:1.14 GB) NTFS Drive g: (STORE N GO) (Removable) (Total:3.63 GB) (Free:3.45 GB) FAT32 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Drive y: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[system with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: ADE70019) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 4 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=4 GB) - (Type=0C) LastRegBack: 2013-10-31 09:59 ==================== End Of Log ============================ Lenke til kommentar
Beskbrownie Skrevet 8. november 2013 Forfatter Del Skrevet 8. november 2013 Da kan du huke vekk alt unntatt additions i FRST. Prøvde heller å kjøre frst i sikkerhetsmodus, og da fikk jeg en frst og addition, skal jeg poste denne addition filen isteden? Lenke til kommentar
Chavalito Skrevet 8. november 2013 Del Skrevet 8. november 2013 Raskt lest gjennom loggen, du har visst to antivirus program, Norton og Avast, kvitt deg med et, helt unødvendig med to, og de arbeider ofte mot hverandre. Lenke til kommentar
BirgerCaC Skrevet 8. november 2013 Del Skrevet 8. november 2013 Behold Avsat og glem Norton. Selv går jeg for Midrosoft Security Scan Lenke til kommentar
mobile999 Skrevet 9. november 2013 Del Skrevet 9. november 2013 Prøvde heller å kjøre frst i sikkerhetsmodus, og da fikk jeg en frst og addition, skal jeg poste denne addition filen isteden? Jeg har visst ikke fått med med denne. Ja post addition.txt filen du har fått. Lenke til kommentar
Beskbrownie Skrevet 9. november 2013 Forfatter Del Skrevet 9. november 2013 Jeg har visst ikke fått med med denne. Ja post addition.txt filen du har fått. Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-10-2013 Ran by Bruker at 2013-11-08 18:50:31 Running from E:\ Boot Mode: Safe Mode (minimal) ========================================================== ==================== Security Center ======================== AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Internet Security (Disabled - Out of date) {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} ==================== Installed Programs ====================== µTorrent (HKCU Version: 3.3.1.30017) 7-Zip 9.20 (x32) Acrobat.com (x32 Version: 1.6.65) Adobe AIR (x32 Version: 1.5.0.7220) Adobe Flash Player 10 ActiveX (x32 Version: 10.1.102.64) Adobe Photoshop Elements 8.0 (x32 Version: 8.0) Adobe Reader 9.1 MUI (x32 Version: 9.1.0) Advertising Center (x32 Version: 0.0.0.2) Agatha Christie - Death on the Nile (x32 Version: 2.2.0.95) Apple Mobile Device Support (Version: 7.0.0.117) Apple Software Update (x32 Version: 2.1.3.127) Apple-programsupport (x32 Version: 2.3.6) Ask Toolbar (x32 Version: 1.15.25.0) Ask Toolbar Updater (HKCU Version: 1.2.6.36191) avast! Free Antivirus (x32 Version: 9.0.2007) Backup Manager V3 (x32 Version: 3.0.0.69) Bejeweled 2 Deluxe (x32 Version: 2.2.0.95) Bing Rewards Client Installer (x32 Version: 16.0.345.0) Bonjour (Version: 3.0.0.10) Broadcom Card Reader Driver Installer (Version: 14.4.9.2) Broadcom Gigabit NetLink Controller (Version: 14.4.6.1) Build-a-lot 2 (x32 Version: 2.2.0.95) CCleaner (Version: 4.07) Chuzzle Deluxe (x32 Version: 2.2.0.95) CyberLink MediaEspresso (x32 Version: 6.0.1027_32100) D3DX10 (x32 Version: 15.4.2368.0902) Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95) Dropbox (HKCU Version: 2.4.6) eBay Worldwide (x32 Version: 2.1.0901) Farm Frenzy (x32 Version: 2.2.0.95) FATE (x32 Version: 2.2.0.95) Final Drive Nitro (x32 Version: 2.2.0.95) Free YouTube Download version 3.2.0.128 (x32 Version: 3.2.0.128) Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128) Funmoods (x32) GeoGebra 4.2 (x32 Version: 4.2.13.0) Google Chrome (x32 Version: 30.0.1599.101) Google Update Helper (x32 Version: 1.3.21.165) HomeMedia (x32 Version: 2.0.8423) Identity Card (x32 Version: 1.00.3003) ImagXpress (x32 Version: 7.0.74.0) Insaniquarium Deluxe (x32 Version: 2.2.0.95) Intel® Control Center (x32 Version: 1.2.1.1007) Intel® Management Engine Components (x32 Version: 7.0.0.1118) Intel® Processor Graphics (x32 Version: 8.15.10.2279) Intel® Rapid Storage Technology (x32 Version: 10.1.0.1008) iTunes (Version: 11.1.2.31) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95) John Deere Drive Green (x32 Version: 2.2.0.95) Junk Mail filter update (x32 Version: 15.4.3502.0922) Launch Manager (x32 Version: 5.1.3) MATLAB R2013a (32-bit) (x32 Version: 8.1) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile NOR Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Klikk og bruk 2010 (Version: 14.0.4763.1004) Microsoft Office Klikk og bruk 2010 (x32 Version: 14.0.4763.1004) Microsoft Office Starter 2010 - norsk (x32 Version: 14.0.4763.1004) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) MiKTeX 2.9 (Version: 2.9) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Nero 9 Essentials (x32) Nero ControlCenter (x32 Version: 9.0.0.1) Nero DiscSpeed (x32 Version: 5.4.13.100) Nero DiscSpeed Help (x32 Version: 5.4.4.100) Nero DriveSpeed (x32 Version: 4.4.12.100) Nero DriveSpeed Help (x32 Version: 4.4.4.100) Nero Express Help (x32 Version: 9.4.37.100) Nero InfoTool (x32 Version: 6.4.12.100) Nero InfoTool Help (x32 Version: 6.4.4.100) Nero Installer (x32 Version: 4.4.9.0) Nero Online Upgrade (x32 Version: 1.3.0.0) Nero StartSmart (x32 Version: 9.4.37.100) Nero StartSmart Help (x32 Version: 9.4.27.100) Nero StartSmart OEM (x32 Version: 9.4.10.100) NeroExpress (x32 Version: 9.4.37.100) neroxml (x32 Version: 1.0.0) Norton Internet Security (x32 Version: 18.7.2.3) Norton Online Backup (x32 Version: 2.1.17869) NVIDIA Control Panel 266.19 (Version: 266.19) NVIDIA Graphics Driver 266.19 (Version: 266.19) NVIDIA Install Application (Version: 2.265.36.0) NVIDIA Optimus 1.0.11 (Version: 1.0.11) NVIDIA PhysX (x32 Version: 9.10.0513) NVIDIA Update Components (Version: 1.0.11) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Packard Bell Games (x32 Version: 1.0.1.3) Packard Bell MyBackup (x32 Version: 3.0.0.69) Packard Bell Power Management (x32 Version: 6.00.3000) Packard Bell Recovery Management (x32 Version: 5.00.3001) Packard Bell Registration (x32 Version: 1.03.3003) Packard Bell ScreenSaver (x32 Version: 1.1.1025.2010) Packard Bell Social Networks (x32 Version: 2.0.2211) Packard Bell Updater (x32 Version: 1.02.3001) Paintribbon 1.1.3 (x32 Version: 1.1.3) Penguins! (x32 Version: 2.2.0.95) Plants vs. Zombies (x32 Version: 2.2.0.95) Polar Bowler (x32 Version: 2.2.0.95) Polar Golfer (x32 Version: 2.2.0.95) QuickShare (x32 Version: 1.6.1.697) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6254) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0) SA-ScreenV2 (x32) Skype™ 6.7 (x32 Version: 6.7.102) Spotify (HKCU Version: 0.9.4.185.g7545a404) Synaptics Pointing Device Driver (Version: 15.1.18.0) TreeMaker 5.0 (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update Installer for WildTangent Games App (x32) Video Web Camera (x32 Version: 1.0.1306) Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95) Wajam (x32 Version: 1.51) Welcome Center (x32 Version: 1.02.3007) WildTangent Games App (Packard Bell Games) (x32 Version: 4.0.5.32) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Fotogalleri (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3502.0922) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3502.0922) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Yontoo 1.12.02 (Version: 1.12.02) Zuma's Revenge (x32 Version: 2.2.0.95) ==================== Restore Points ========================= 05-10-2013 17:50:38 Planlagt kontrollpunkt 10-10-2013 07:33:54 Windows Update 11-10-2013 23:05:46 Windows Update 20-10-2013 19:32:04 Installed Java 7 Update 45 28-10-2013 12:05:58 Planlagt kontrollpunkt 05-11-2013 15:13:05 Planlagt kontrollpunkt ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {287F618F-754F-4311-A2AD-34C826F97763} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-11] (Google Inc.) Task: {36E36A04-3EAF-499A-A272-E9D3FFF09040} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2010-10-28] (CyberLink) Task: {390B9EEB-1316-4580-87CC-9B7954DBC3E4} - System32\Tasks\Funmoods => C:\Users\Bruker\AppData\Roaming\Funmoods\UpdateProc\UpdateTask.exe [2013-01-12] () Task: {4DBDFAA5-F218-4BFE-94EC-7C8DB2ED8F86} - System32\Tasks\MATLAB R2013a Startup Accelerator => C:\Program Files (x86)\MATLAB\R2013a\bin\win32\MATLABStartupAccelerator.exe [2013-01-16] () Task: {76FE26C8-8812-4F02-B0B0-32A9C9C48EED} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {7F5B136A-CF4D-44DD-85F0-A7CF9ED4B823} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation) Task: {B62058F8-05E8-4F3B-9945-818CBFA69D57} - System32\Tasks\{E4D273F4-699B-4B82-A939-E3B7635C1586} => Iexplore.exe http://ui.skype.com/ui/0/4.1.0.179.370/nl/abandoninstall?source=lightinstaller&page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;notincluded Task: {C3521A92-1FC6-4218-BFB8-82542808B85C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-11] (Google Inc.) Task: {D5513620-B9D4-4506-B049-B0409B445C19} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\symerr.exe [2012-06-08] (Symantec Corporation) Task: {DA15A6E0-A2B8-42E8-9EF2-A2A1E19A17F6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {EF710285-C3DD-4196-A1F0-A60BB9E8336E} - System32\Tasks\Symantec\Norton Error Processor 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\symerr.exe [2012-06-08] (Symantec Corporation) Task: {F9145E44-8036-4433-A0A0-FDE6994F6B01} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-04-25] () Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\MATLAB R2013a Startup Accelerator.job => C:\Program Files (x86)\MATLAB\R2013a\bin\win32\MATLABStartupAccelerator.exe ==================== Loaded Modules (whitelisted) ============= ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1" ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: avast! Revert Description: avast! Revert Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswRvrt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: avast! VM Monitor Description: avast! VM Monitor Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswVmm Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service) (User: ) Description: Windows Search-tjenesten blir stoppet fordi det er et problem med indeksereren,The catalog is corrupt. Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service) (User: ) Description: Kan ikke initialisere indeksen. Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service) (User: ) Description: Kan ikke initialisere programmet. Kontekst: Windows-program Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service) (User: ) Description: Kan ikke initialisere Innsamler-objektet. Kontekst: Windows-program, SystemIndex-katalog Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service) (User: ) Description: Kan ikke initialisere plugin-modulen <Search.TripoliIndexer>. Kontekst: Windows-program, SystemIndex-katalog Detaljer: Elementet ble ikke funnet. (HRESULT : 0x80070490) (0x80070490) Error: (11/08/2013 03:09:03 PM) (Source: Windows Search Service) (User: ) Description: Kan ikke initialisere plugin-modulen <Search.JetPropStore>. Kontekst: Windows-program, SystemIndex-katalog Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:09:03 PM) (Source: Windows Search Service) (User: ) Description: Windows Search-tjenesten kan ikke laste egenskapslagerinformasjonen. Kontekst: Windows-program, SystemIndex-katalog Detaljer: Innholdsindeksserveren kan ikke oppdatere eller få tilgang til informasjon på grunn av den databasefeil. Stopp og start søketjenesten på nytt. Hvis problemet fortsetter, tilbakestiller du innholdsindeksen og kravlesøker den på nytt. I noen tilfeller kan det være nødvendig å slette innholdsindeksen og opprette den på nytt. (HRESULT : 0x8004117f) (0x8004117f) Error: (11/08/2013 03:09:03 PM) (Source: Windows Search Service) (User: ) Description: Søketjenesten har oppdaget ødelagte datafiler i indeksen {id=1100}. Tjenesten vil forsøke å rette dette problemet automatisk ved å bygge indeksen på nytt. Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:09:03 PM) (Source: Windows Search Service) (User: ) Description: Windows Search-tjenesten kan ikke åpne Jet-egenskapslageret. Detaljer: 0x%08x (0x8004117f - Innholdsindeksserveren kan ikke oppdatere eller få tilgang til informasjon på grunn av den databasefeil. Stopp og start søketjenesten på nytt. Hvis problemet fortsetter, tilbakestiller du innholdsindeksen og kravlesøker den på nytt. I noen tilfeller kan det være nødvendig å slette innholdsindeksen og opprette den på nytt. (HRESULT : 0x8004117f)) Error: (11/08/2013 03:04:34 PM) (Source: ESENT) (User: ) Description: taskhost (1304) WebCacheLocal: Error -1811 occurred while opening logfile C:\Users\Bruker\AppData\Local\Microsoft\Windows\WebCache\V0100038.log. System errors: ============= Error: (11/08/2013 06:49:18 PM) (Source: iaStor) (User: ) Description: Enheten \Device\Ide\iaStor0 svarte ikke før tidsavbruddet utløp. Error: (11/08/2013 06:49:17 PM) (Source: iaStor) (User: ) Description: Enheten \Device\Ide\iaStor0 svarte ikke før tidsavbruddet utløp. Error: (11/08/2013 06:49:15 PM) (Source: iaStor) (User: ) Description: Enheten \Device\Ide\iaStor0 svarte ikke før tidsavbruddet utløp. Error: (11/08/2013 06:44:38 PM) (Source: Service Control Manager) (User: ) Description: Tjenesten Network List Service avhenger av tjenesten Network Location Awareness som ikke kan starte på grunn av følgende feil: %%1068 Error: (11/08/2013 06:44:38 PM) (Source: Service Control Manager) (User: ) Description: Tjenesten Network List Service avhenger av tjenesten Network Location Awareness som ikke kan starte på grunn av følgende feil: %%1068 Error: (11/08/2013 06:44:38 PM) (Source: Service Control Manager) (User: ) Description: Tjenesten Network List Service avhenger av tjenesten Network Location Awareness som ikke kan starte på grunn av følgende feil: %%1068 Error: (11/08/2013 06:44:38 PM) (Source: Service Control Manager) (User: ) Description: Tjenesten Network List Service avhenger av tjenesten Network Location Awareness som ikke kan starte på grunn av følgende feil: %%1068 Error: (11/08/2013 06:44:38 PM) (Source: Service Control Manager) (User: ) Description: Tjenesten Network List Service avhenger av tjenesten Network Location Awareness som ikke kan starte på grunn av følgende feil: %%1068 Error: (11/08/2013 06:44:38 PM) (Source: Service Control Manager) (User: ) Description: Tjenesten Network List Service avhenger av tjenesten Network Location Awareness som ikke kan starte på grunn av følgende feil: %%1068 Error: (11/08/2013 06:44:37 PM) (Source: DCOM) (User: ) Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030} Microsoft Office Sessions: ========================= Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service)(User: ) Description: Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) The catalog is corrupt Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service)(User: ) Description: Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service)(User: ) Description: Kontekst: Windows-program Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service)(User: ) Description: Kontekst: Windows-program, SystemIndex-katalog Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Error: (11/08/2013 03:10:51 PM) (Source: Windows Search Service)(User: ) Description: Kontekst: Windows-program, SystemIndex-katalog Detaljer: Elementet ble ikke funnet. (HRESULT : 0x80070490) (0x80070490) Search.TripoliIndexer Error: (11/08/2013 03:09:03 PM) (Source: Windows Search Service)(User: ) Description: Kontekst: Windows-program, SystemIndex-katalog Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) Search.JetPropStore Error: (11/08/2013 03:09:03 PM) (Source: Windows Search Service)(User: ) Description: Kontekst: Windows-program, SystemIndex-katalog Detaljer: Innholdsindeksserveren kan ikke oppdatere eller få tilgang til informasjon på grunn av den databasefeil. Stopp og start søketjenesten på nytt. Hvis problemet fortsetter, tilbakestiller du innholdsindeksen og kravlesøker den på nytt. I noen tilfeller kan det være nødvendig å slette innholdsindeksen og opprette den på nytt. (HRESULT : 0x8004117f) (0x8004117f) Error: (11/08/2013 03:09:03 PM) (Source: Windows Search Service)(User: ) Description: Detaljer: Innholdsindekskatalogen er skadet. (HRESULT : 0xc0041801) (0xc0041801) 1100 Error: (11/08/2013 03:09:03 PM) (Source: Windows Search Service)(User: ) Description: Detaljer: 0x%08x (0x8004117f - Innholdsindeksserveren kan ikke oppdatere eller få tilgang til informasjon på grunn av den databasefeil. Stopp og start søketjenesten på nytt. Hvis problemet fortsetter, tilbakestiller du innholdsindeksen og kravlesøker den på nytt. I noen tilfeller kan det være nødvendig å slette innholdsindeksen og opprette den på nytt. (HRESULT : 0x8004117f)) Error: (11/08/2013 03:04:34 PM) (Source: ESENT)(User: ) Description: taskhost1304WebCacheLocal: C:\Users\Bruker\AppData\Local\Microsoft\Windows\WebCache\V0100038.log-1811 ==================== Memory info =========================== Percentage of memory in use: 13% Total physical RAM: 3946.17 MB Available physical RAM: 3395.35 MB Total Pagefile: 7890.52 MB Available Pagefile: 7356.64 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (Packard Bell) (Fixed) (Total:451.01 GB) (Free:370.74 GB) NTFS Drive e: (KINGSTON) (Removable) (Total:29.06 GB) (Free:20.42 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: ADE70019) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 29 GB) (Disk ID: C3072E18) Partition 1: (Active) - (Size=29 GB) - (Type=0C) ==================== End Of Log ============================ Lenke til kommentar
mobile999 Skrevet 9. november 2013 Del Skrevet 9. november 2013 Å, huff. Avinstaller følgende i rekkefølge: Advertising Center (x32 Version: 0.0.0.2) Ask Toolbar Updater (HKCU Version: 1.2.6.36191) Ask Toolbar (x32 Version: 1.15.25.0) Free YouTube Download version 3.2.0.128 (x32 Version: 3.2.0.128) Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128) Funmoods (x32) Norton Online Backup (x32 Version: 2.1.17869)Norton Internet Security (x32 Version: 18.7.2.3) Følg instruksjonene gitt på følgende nettside bortsett fra instruksjonene om å kjøre HitmanPro: http://malwaretips.com/blogs/funmoods-virus/ Post Malwarebytes Antimalware loggen. Lenke til kommentar
sveinsel Skrevet 9. november 2013 Del Skrevet 9. november 2013 Mener så avgjort at dere må vente med jule-brusen! Og ta en "Clean Install" i stedet. Lenke til kommentar
Maxi1234 Skrevet 10. november 2013 Del Skrevet 10. november 2013 Hvorfor kjører du TO antivirus? Både Norton og Avast? Lenke til kommentar
BirgerCaC Skrevet 10. november 2013 Del Skrevet 10. november 2013 Av installer de begge også instellerer du Microsoft Security Essensiales. Lenke til kommentar
Anbefalte innlegg
Opprett en konto eller logg inn for å kommentere
Du må være et medlem for å kunne skrive en kommentar
Opprett konto
Det er enkelt å melde seg inn for å starte en ny konto!
Start en kontoLogg inn
Har du allerede en konto? Logg inn her.
Logg inn nå