Jump to content

Wepeel

Members
  • Posts

    13
  • Joined

  • Last visited

Everything posted by Wepeel

  1. So I run MBAM by itself without any AV installed and it still behaved the same. However, I installed Avira and it slowed down my system in a similar manner so it's probably an issue with my system and likely not only a problem with MBAM. I think the only thing left to do at this point is to do a clean OS reinstall but since I don't want to do that just yet, can we do a cleanup of the tools we've been using?
  2. I had already added exclusions in both MBAM and KAV and I also had this issue when I was running MSE instead of KAV, so I don't think that's the issue. My KAV trial is running out in a few days anyway so I'll try to run MBAM by itself before I install another AV. In the sticky it says to not alter the system while getting help but with the trial running out I don't have much choice.
  3. CHKDSK ran without any errors. JavaRa log JavaRa 1.16 Removal Log. Report follows after line. ------------------------------------ The JavaRa removal process was started on Thu Oct 22 00:58:16 2015 There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0001-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0002-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0003-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0004-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0005-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0006-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0007-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0008-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0009-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0010-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0011-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0012-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0013-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0014-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0015-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0016-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0017-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0018-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0019-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0020-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0021-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0022-ABCDEFFDCBA}. The error returned was 124. Found and removed: SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} Found and removed: SOFTWARE\Classes\CLSID\{5852F5ED-8BF4-11D4-A245-0080C6F74284} Found and removed: SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} Found and removed: SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} Found and removed: SOFTWARE\Classes\Interface\{5852F5EC-8BF4-11D4-A245-0080C6F74284} Found and removed: SOFTWARE\Classes\MIME\Database\Content Type\application/java-deployment-toolkit Found and removed: SOFTWARE\Classes\TypeLib\{5852F5E0-8BF4-11D4-A245-0080C6F74284} Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.7.0.0 Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects Found and removed: SOFTWARE\JavaSoft Found and removed: SOFTWARE\JreMetrics ------------------------------------ Finished reporting. Regarding the Firefox errors. I uninstalled Firefox and ran JavaRa again but it still gave me those errors and the directory doesn't even exist. It's nowhere near as bad as it first was, but I think the only noticeable improvement was from updating from 2.1.8 to 2.2.0. It is always the slowest during the first startup of processes like task manager and windows explorer and when I open them after having them closed for a few minutes. The slowdown does seem more normal but it's not satisfactory to me. I think MBAM is simply not optimized for my system, unless you have anymore suggestions to try?
  4. Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-10-2015 Ran by Erik (2015-10-20 22:13:39) Running from C:\Users\Erik\Desktop\08 Windows 7 Home Premium Service Pack 1 (X64) (2014-04-19 18:08:58) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administratör (S-1-5-21-1060546239-1868508752-2705153983-500 - Administrator - Disabled) Erik (S-1-5-21-1060546239-1868508752-2705153983-1000 - Administrator - Enabled) => C:\Users\Erik Gäst (S-1-5-21-1060546239-1868508752-2705153983-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1060546239-1868508752-2705153983-1002 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Internet Security (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B} AS: Kaspersky Internet Security (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - ) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Acoustica Mixcraft 6 (HKLM-x32\...\Acoustica Mixcraft 6) (Version: b217 - Acoustica) Adobe Reader XI (11.0.13) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated) Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version: - Creative Assembly) Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive) Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team) AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.5 - GPL Public release.) BankID säkerhetsprogram (HKLM-x32\...\{4B2557F9-8C03-4BE7-9984-4DE525076580}) (Version: 6.4.0.22 - Finansiell ID-Teknik BID AB) Bulk Image Downloader v4.91.0.0 (HKLM-x32\...\Bulk Image Downloader_is1) (Version: - Antibody Software) Bully: Scholarship Edition (HKLM-x32\...\Steam App 12200) (Version: - Rockstar New England) CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform) Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Elite: Dangerous (HKLM-x32\...\Steam App 359320) (Version: - Frontier Developments) ERUNT 1.1j (HKLM-x32\...\ERUNT_is1) (Version: - Lars Hederer) FFmpeg (Windows) for Audacity version 2.2.2 (HKLM-x32\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - ) foobar2000 v1.3.8 (HKLM-x32\...\foobar2000) (Version: 1.3.8 - Peter Pawlowski) GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden Grim Fandango Remastered (HKLM-x32\...\Steam App 316790) (Version: - Double Fine Productions) HandBrake 0.10.2 (HKLM-x32\...\HandBrake) (Version: 0.10.2 - ) Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.) HexChat (HKLM\...\HexChat_is1) (Version: 2.10.2 - HexChat) HF pAppLoc version 1.1.1 (HKLM-x32\...\{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1) (Version: 1.1.1 - Inquisitor) Honeyview (HKLM\...\Honeyview) (Version: 5.14 - Bandisoft.com) ILLUSION ジンコウガクエン2 (HKLM-x32\...\{AF83EF7D-353A-4E0C-9919-C4E4BCB5F742}) (Version: 1.00.0000 - ILLUSION) ILLUSION ジンコウガクエン2 きゃらめいく (HKLM-x32\...\{A56F495B-7075-4510-AC91-485416140DA2}) (Version: 1.00.0000 - ILLUSION) Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive) Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Macrium Reflect Home Edition (HKLM\...\MacriumReflect) (Version: 6.1 - Paramount Software (UK) Ltd.) Macrium Reflect Home Edition (Version: 6.1.865 - Paramount Software (UK) Ltd.) Hidden Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) M-Audio Fast Track 6.1.12 (x64) (HKLM\...\{102B819F-54FB-4CD3-8B48-B80C210D55BC}) (Version: 6.1.12 - M-Audio) METAL GEAR SOLID V: THE PHANTOM PAIN (HKLM-x32\...\Steam App 287700) (Version: - Konami Digital Entertainment) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (svenska) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1053) (Version: 4.5.51209 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - ) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft) Mozilla Firefox 41.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 41.0 (x86 en-US)) (Version: 41.0 - Mozilla) Mozilla Firefox 41.0.2 (x86 en-US) (HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\...\Mozilla Firefox 41.0.2 (x86 en-US)) (Version: 41.0.2 - Mozilla) Mp3tag v2.71 (HKLM-x32\...\Mp3tag) (Version: v2.71 - Florian Heidenreich) MPC-HC 1.7.9 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.9 - MPC-HC Team) MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD) MusicBee 2.4 (HKLM-x32\...\MusicBee) (Version: 2.4 - Steven Mayall) MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.3.2 - MusicBrainz) NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.17.0 - NEC Electronics Corporation) NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation) Hidden NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation) NVIDIA Grafikdrivrutin 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation) NVIDIA HD audiodrivrutin 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation) NVIDIA PhysX systemprogramvara 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) piaip AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS) Port Forward Network Utilities (HKLM-x32\...\{88B1D36C-7B70-4C48-8D2F-AAB956ECF4C3}) (Version: 2.0.5 - Portforward, LLC) qBittorrent 3.2.4 (HKLM-x32\...\qBittorrent) (Version: 3.2.4 - The qBittorrent project) Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.2.1 r2386 - ) Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.17.304.2010 - Realtek) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder) Sandboxie 4.20 (64-bit) (HKLM\...\Sandboxie) (Version: 4.20 - Sandboxie Holdings, LLC) SeaTools for Windows 1.4.0.2 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.2 - Seagate Technology) SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden Spectro (HKLM-x32\...\{1F8D186D-8C5C-4589-BC28-1A8964CA74A6}) (Version: 1.0.93 - ) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) SteelSeries Engine 3.5.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.5.2 - SteelSeries ApS) The Talos Principle (HKLM-x32\...\Steam App 257510) (Version: - Croteam) TuxGuitar (HKLM-x32\...\{03534DA5-2F88-4B8E-A978-849B979E1B8F}) (Version: 1.2 - Herac) Unity Web Player (HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS) War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment) Visual Similarity Duplicate Image Finder Professional 6.1.0.1 (HKLM-x32\...\{72D6BE71-2A6F-4D01-809E-A3174D1738A0}_is1) (Version: 6.1.0.1 - MindGems, Inc.) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1060546239-1868508752-2705153983-1000_Classes\CLSID\{9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF}\InprocServer32 -> C:\Mina Program\Honeyview\HVShell64.dll (Bandisoft.com) ==================== Restore Points ========================= 12-10-2015 13:45:35 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 13-10-2015 00:25:46 Installed Macrium Reflect Home Edition 15-10-2015 18:07:12 DirectX har installerats 19-10-2015 15:53:13 Windows Update 20-10-2015 20:45:55 JRT Pre-Junkware Removal ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {2781C932-AAAF-4331-B60C-06EA558974D6} - System32\Tasks\MSIAfterburner => C:\Mina Program\MSI Afterburner\MSIAfterburner.exe [2015-05-27] () Task: {6AF83D57-14E3-4846-A1C8-E39F56FC9D63} - System32\Tasks\Macrium-Backup-{1B6175E4-FD2A-41AB-98AE-B2DBF6CAB7E7} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd) Task: {7103DB46-42D1-41E1-AAF0-213C77D2EB88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {8200AD9A-C194-4BC9-98E4-4ECB561E26EC} - System32\Tasks\Macrium-Backup-{2881A448-4F2B-413D-A175-7D23978D95E0} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd) Task: {94A5B23D-3F11-433C-A9BF-C6DF618F5CBE} - System32\Tasks\Macrium-Backup-{FE1F0019-49EB-4013-BD06-53F15E553BF9} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd) Task: {A3AC1714-E072-48A2-B320-C5238241AED6} - System32\Tasks\CCleanerSkipUAC => C:\Mina Program\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd) Task: {A4231DCE-238B-462B-A252-FDD99584BE37} - System32\Tasks\Core Temp Autostart Erik => C:\Program Files\Core Temp\Core Temp.exe [2013-10-08] () Task: {E208449A-7B1B-4386-9D5C-1D604443D894} - System32\Tasks\Macrium-Backup-{27D13B0C-E7AC-4411-A00A-3507CCCCE1C3} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd) Task: {E47443AF-7FFA-4FA6-81AB-4201A8EB0C24} - System32\Tasks\Macrium-Backup-{8EAC26F9-0877-41FE-9A53-34DEFEB978D0} => C:\Mina Program\Macrium\Reflect\reflect.exe [2015-10-14] (Paramount Software UK Ltd) Task: {EFC4C03E-A0FA-4E19-B441-336E0686C30D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated) Task: {F5FE6A8F-96B9-4FC8-8BE0-B316D6CF213D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Macrium-Backup-{1B6175E4-FD2A-41AB-98AE-B2DBF6CAB7E7}.job => C:\Mina Program\Macrium\Reflect\reflect.exet-e -w D:\Software\Essential\Macrium Reflect\HDD1 Differential.xml Task: C:\Windows\Tasks\Macrium-Backup-{27D13B0C-E7AC-4411-A00A-3507CCCCE1C3}.job => C:\Mina Program\Macrium\Reflect\reflect.exet-e -w D:\Software\Essential\Macrium Reflect\HDD1 Differential.xml Task: C:\Windows\Tasks\Macrium-Backup-{2881A448-4F2B-413D-A175-7D23978D95E0}.job => C:\Mina Program\Macrium\Reflect\reflect.exeq-e -w D:\Software\Essential\Macrium Reflect\OS Backup Win7.xml Task: C:\Windows\Tasks\Macrium-Backup-{8EAC26F9-0877-41FE-9A53-34DEFEB978D0}.job => C:\Mina Program\Macrium\Reflect\reflect.exem-e -w D:\Software\Essential\Macrium Reflect\HDD2 Backup.xml Task: C:\Windows\Tasks\Macrium-Backup-{FE1F0019-49EB-4013-BD06-53F15E553BF9}.job => C:\Mina Program\Macrium\Reflect\reflect.exeq-e -w D:\Software\Essential\Macrium Reflect\OS Backup Win7.xml ==================== Loaded Modules (Whitelisted) ============== 2015-10-09 13:47 - 2015-10-03 04:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-05-16 18:39 - 2014-11-09 13:37 - 00402432 _____ () C:\Mina Program\RivaTuner Statistics Server\RTSSHooks64.dll 2015-05-27 12:05 - 2015-05-27 12:05 - 00578272 _____ () C:\Mina Program\MSI Afterburner\MSIAfterburner.exe 2014-04-19 20:54 - 2013-10-08 13:23 - 00890016 _____ () C:\Program Files\Core Temp\Core Temp.exe 2015-10-13 20:53 - 2015-10-13 20:53 - 00507144 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\SSEdevice.dll 2015-03-24 15:28 - 2015-03-24 15:28 - 00036544 _____ () C:\Mina Program\Rainmeter\Rainmeter.exe 2015-03-24 15:28 - 2015-03-24 15:28 - 00775872 _____ () C:\Mina Program\Rainmeter\Rainmeter.dll 2015-07-27 18:34 - 2015-09-16 00:47 - 00013312 _____ () C:\Users\Erik\AppData\Roaming\Rainmeter\Plugins\ActiveNet.DLL 2015-03-24 15:27 - 2015-03-24 15:27 - 00011776 _____ () C:\Mina Program\Rainmeter\Plugins\PowerPlugin.DLL 2015-03-24 15:27 - 2015-03-24 15:27 - 00012800 _____ () C:\Mina Program\Rainmeter\Plugins\PerfMon.DLL 2015-03-24 15:27 - 2015-03-24 15:27 - 00014848 _____ () C:\Mina Program\Rainmeter\Plugins\CoreTemp.DLL 2015-03-24 15:27 - 2015-03-24 15:27 - 00010240 _____ () C:\Mina Program\Rainmeter\Plugins\SpeedFanPlugin.DLL 2015-03-24 15:27 - 2015-03-24 15:27 - 00058368 _____ () C:\Mina Program\Rainmeter\Plugins\WebParser.DLL 2015-03-24 15:27 - 2015-03-24 15:27 - 00020992 _____ () C:\Mina Program\Rainmeter\Plugins\SysInfo.DLL 2014-11-09 13:37 - 2014-11-09 13:37 - 00197632 _____ () C:\Mina Program\RivaTuner Statistics Server\RTSS.exe 2014-11-09 13:37 - 2014-11-09 13:37 - 00026112 _____ () C:\Mina Program\RivaTuner Statistics Server\EncoderServer.exe 2014-11-09 13:37 - 2014-11-09 13:37 - 00088576 _____ () C:\Mina Program\RivaTuner Statistics Server\RTSSHooksLoader64.exe 2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll 2015-05-18 13:43 - 2015-05-18 13:43 - 00071680 _____ () C:\Mina Program\MSI Afterburner\RTMUI.dll 2015-05-18 13:43 - 2015-05-18 13:43 - 00057856 _____ () C:\Mina Program\MSI Afterburner\RTFC.dll 2015-05-18 13:43 - 2015-05-18 13:43 - 00218624 _____ () C:\Mina Program\MSI Afterburner\RTCore.dll 2015-05-22 12:56 - 2015-05-22 12:56 - 00357888 _____ () C:\Mina Program\MSI Afterburner\RTUI.dll 2015-05-22 13:36 - 2015-05-22 13:36 - 00649216 _____ () C:\Mina Program\MSI Afterburner\RTHAL.dll 2014-05-16 18:38 - 2014-11-09 13:37 - 00356864 _____ () C:\Mina Program\RivaTuner Statistics Server\RTSSHooks.dll 2015-04-14 01:20 - 2015-10-12 05:05 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2014-11-09 13:37 - 2014-11-09 13:37 - 00056832 _____ () C:\Mina Program\RivaTuner Statistics Server\RTFC.dll 2014-11-09 13:37 - 2014-11-09 13:37 - 00353792 _____ () C:\Mina Program\RivaTuner Statistics Server\RTUI.dll 2014-11-09 13:37 - 2014-11-09 13:37 - 00071680 _____ () C:\Mina Program\RivaTuner Statistics Server\RTMUI.dll 2015-10-15 05:13 - 2015-10-09 02:53 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libglesv2.dll 2015-10-15 05:13 - 2015-10-09 02:53 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Erik\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: SandboxieControl => "C:\Mina Program\Sandboxie\SbieCtrl.exe" MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{F0520AB8-A233-4322-8E5B-5E914AD5B925}] => (Allow) C:\Mina Program\Steam\Steam.exe FirewallRules: [{B84E1109-C9AA-496F-BA6D-E55BE50C3AD1}] => (Allow) C:\Mina Program\Steam\Steam.exe FirewallRules: [{C6E7C960-19E6-4CBC-9975-A1A79B431188}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe FirewallRules: [{58F7331D-CD83-4323-9AEA-EA3FE3602D0F}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe FirewallRules: [{07600017-AF79-45EF-BA11-5D68F68AF425}] => (Allow) C:\Mina Program\Steam\bin\steamwebhelper.exe FirewallRules: [{F24B7A86-D028-47E7-917B-90E12919F36E}] => (Allow) C:\Mina Program\Steam\bin\steamwebhelper.exe FirewallRules: [TCP Query User{89AAA050-89E5-47A1-BD95-C1D08B4DD901}C:\mina program\musicbrainz picard\picard.exe] => (Allow) C:\mina program\musicbrainz picard\picard.exe FirewallRules: [uDP Query User{71352BD8-A96A-4129-BD9E-903B68FB9DD1}C:\mina program\musicbrainz picard\picard.exe] => (Allow) C:\mina program\musicbrainz picard\picard.exe FirewallRules: [TCP Query User{77F39873-3FDD-4988-A7A3-2BBBD5335EE8}C:\mina program\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\mina program\portforward\port forward network utilities\pfportchecker.exe FirewallRules: [uDP Query User{DF2A1760-C9C5-47EE-8A81-958C6ACC7B93}C:\mina program\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\mina program\portforward\port forward network utilities\pfportchecker.exe FirewallRules: [{DDDB127B-816A-4134-8B37-59B1C84FFCCD}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe FirewallRules: [{7938D7C9-F0A4-4D51-8F3A-D1DB5B6621B1}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe FirewallRules: [{CA9C7053-7E01-4CC5-AD24-0D967D5055EF}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe FirewallRules: [{00987BE9-940F-41C1-871A-8241401FD634}] => (Allow) C:\Mina Program\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{AFBC782D-1831-420A-BFA4-B51AE2E041D8}C:\mina program\hexchat\hexchat.exe] => (Allow) C:\mina program\hexchat\hexchat.exe FirewallRules: [uDP Query User{BA7210BB-3970-49A3-8CF4-0A01B19A8AA2}C:\mina program\hexchat\hexchat.exe] => (Allow) C:\mina program\hexchat\hexchat.exe FirewallRules: [{A37870BA-016E-4AEE-86F9-E56A3E82D07D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{1CA58279-5FAA-406E-B4BE-DB246873A804}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{64A30C7F-EEBF-4F4A-98F2-555DD1394E8E}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{93E50D70-7C9B-406F-82ED-60E40DD98FF8}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{AFF0CC77-2B2A-4678-BCEA-6BB64F3D421F}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Bully Scholarship Edition\Bully.exe FirewallRules: [{1F3FC2EE-CDA3-4725-97CC-2991C06E9B0A}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Bully Scholarship Edition\Bully.exe FirewallRules: [{F937675B-7999-4FBE-9E4C-6222CF18BFB8}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Arma 3\arma3launcher.exe FirewallRules: [{CB371523-E92E-4F5A-AD67-B0AF88C4750A}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Arma 3\arma3launcher.exe FirewallRules: [{602AA1D5-4F61-472C-8C9C-ECE01D8465D6}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Alien Isolation\AI.exe FirewallRules: [{D6BCDA39-0AA1-4415-A00B-1336CB810064}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Alien Isolation\AI.exe FirewallRules: [{68EDA48A-FA8A-4FC9-875C-154623723312}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Grim Fandango Remastered\GrimFandango.exe FirewallRules: [{999524BE-9B0C-44B2-836D-79FA355C5157}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Grim Fandango Remastered\GrimFandango.exe FirewallRules: [TCP Query User{855AC5CB-1AE4-4EE9-BD9F-57D7F2D652A9}C:\mina program\steam\steamapps\common\war thunder\launcher.exe] => (Allow) C:\mina program\steam\steamapps\common\war thunder\launcher.exe FirewallRules: [uDP Query User{FDED08C1-589D-45C2-9854-3EB009D3DF67}C:\mina program\steam\steamapps\common\war thunder\launcher.exe] => (Allow) C:\mina program\steam\steamapps\common\war thunder\launcher.exe FirewallRules: [TCP Query User{AB5690BE-A7B3-4B49-B575-9E02E0CDC56B}C:\mina program\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\mina program\steam\steamapps\common\war thunder\aces.exe FirewallRules: [uDP Query User{46100C65-45EA-497B-8B0D-5E0E6D70F200}C:\mina program\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\mina program\steam\steamapps\common\war thunder\aces.exe FirewallRules: [{A7A6D00F-9A46-405C-A31C-0F16357A8CD4}] => (Allow) C:\Mina Program\Steam\SteamApps\common\insurgency2\insurgency.exe FirewallRules: [{6C9C8EBD-CB36-4C15-A085-9F8B7E74638D}] => (Allow) C:\Mina Program\Steam\SteamApps\common\insurgency2\insurgency.exe FirewallRules: [{743E52A4-3A9E-4E37-A07A-B262D0921D37}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{52E297CB-A14D-44C6-8C76-3AECEED8D791}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{884ACA57-11C6-49ED-B002-8082821C52D9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{D4AB015C-8BCA-4350-BAAA-3AF8BFBDFFA0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{C7E2C607-6068-4D44-8D51-7952EDC7CC72}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{41A0E05D-50A5-48B0-88B4-CCE2276C1F5A}] => (Allow) C:\Mina Program\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe FirewallRules: [{9121D3A4-7608-4528-8633-BEA213607584}] => (Allow) C:\Mina Program\Steam\SteamApps\common\MGS_TPP\mgsvtpp.exe FirewallRules: [{0D2CD1DA-3448-4BA6-9782-CB82108AA970}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Elite Dangerous\EDLaunch.exe FirewallRules: [{6CFFB212-255A-4646-A83A-B3182A05DC30}] => (Allow) C:\Mina Program\Steam\SteamApps\common\Elite Dangerous\EDLaunch.exe FirewallRules: [{E3DF8D71-D153-46C5-B6FD-EA0724ED4A8A}] => (Allow) C:\Mina Program\Mozilla Firefox\firefox.exe FirewallRules: [{2E4FD030-2663-4807-AFA4-6B9FEE1929E5}] => (Allow) C:\Mina Program\Mozilla Firefox\firefox.exe FirewallRules: [{CA0B5334-0A6C-4E1D-AC59-0258B7910A32}] => (Allow) C:\Mina Program\Steam\SteamApps\common\The Talos Principle\Bin\Talos.exe FirewallRules: [{A715139E-2381-4B7D-B7BC-E16631DD3153}] => (Allow) C:\Mina Program\Steam\SteamApps\common\The Talos Principle\Bin\Talos.exe FirewallRules: [{6CD87BD4-A012-4E43-9D0E-F024A4E01238}] => (Allow) C:\Mina Program\Steam\SteamApps\common\The Talos Principle\Bin\Talos_Unrestricted.exe FirewallRules: [{8CAD71AF-EFEC-402A-AFB2-32421917438B}] => (Allow) C:\Mina Program\Steam\SteamApps\common\The Talos Principle\Bin\Talos_Unrestricted.exe FirewallRules: [{4BDBEDF2-BBD4-4577-BDBD-5604D99DF3F5}] => (Allow) C:\Mina Program\qBittorrent\qbittorrent.exe FirewallRules: [{C679A2AA-F135-43F7-BB02-B9AF575794BB}] => (Allow) C:\Mina Program\qBittorrent\qbittorrent.exe FirewallRules: [{95CB3FC1-E7B4-4C16-8F95-E209B2491045}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (10/20/2015 10:09:31 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Det gick inte att skapa aktiveringskontext för C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1. Det finns ett fel i manifest- eller principfilen C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2 på rad C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. En komponentversion som begärs av programmet står i konflikt med en annan komponentversion som redan är aktiv. Följande komponenter orsakar konflikten: Komponent 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponent 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (10/20/2015 09:20:13 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Det gick inte att skapa aktiveringskontext för C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1. Det finns ett fel i manifest- eller principfilen C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2 på rad C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. En komponentversion som begärs av programmet står i konflikt med en annan komponentversion som redan är aktiv. Följande komponenter orsakar konflikten: Komponent 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponent 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (10/20/2015 09:20:12 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Det gick inte att skapa aktiveringskontext för C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1. Det finns ett fel i manifest- eller principfilen C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2 på rad C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. En komponentversion som begärs av programmet står i konflikt med en annan komponentversion som redan är aktiv. Följande komponenter orsakar konflikten: Komponent 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponent 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (10/20/2015 09:20:12 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Det gick inte att skapa aktiveringskontext för C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1. Det finns ett fel i manifest- eller principfilen C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2 på rad C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. En komponentversion som begärs av programmet står i konflikt med en annan komponentversion som redan är aktiv. Följande komponenter orsakar konflikten: Komponent 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponent 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (10/20/2015 09:19:15 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Det gick inte att skapa aktiveringskontext för C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1. Det finns ett fel i manifest- eller principfilen C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2 på rad C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. En komponentversion som begärs av programmet står i konflikt med en annan komponentversion som redan är aktiv. Följande komponenter orsakar konflikten: Komponent 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponent 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (10/20/2015 09:19:13 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Det gick inte att skapa aktiveringskontext för C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1. Det finns ett fel i manifest- eller principfilen C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2 på rad C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. En komponentversion som begärs av programmet står i konflikt med en annan komponentversion som redan är aktiv. Följande komponenter orsakar konflikten: Komponent 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Komponent 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (10/19/2015 03:34:22 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programmet firefox.exe, version 41.0.2.5765, avslutades eftersom det slutade att samverka med Windows. Ytterligare information kan finnas i problemhistoriken på kontrollpanelen för Åtgärdscentret och lösningar. Process-ID: 17a4 Starttid: 01d10a72a9087f55 Avslutningstid: 138 Programsökväg: C:\Mina Program\Mozilla Firefox\firefox.exe Rapport-ID: 19598ea3-7666-11e5-b8be-1c6f65939779 Error: (10/16/2015 05:23:25 PM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Det går inte att initiera indexet. Information: Innehållsindexets katalog är skadad. (HRESULT : 0xc0041801) (0xc0041801) Error: (10/16/2015 05:23:25 PM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Det går inte att initiera programmet. Kontext: program Windows Information: Innehållsindexets katalog är skadad. (HRESULT : 0xc0041801) (0xc0041801) Error: (10/16/2015 05:23:25 PM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Det går inte att initiera insamlingsobjektet. Kontext: program Windows, katalog SystemIndex Information: Innehållsindexets katalog är skadad. (HRESULT : 0xc0041801) (0xc0041801) System errors: ============= Error: (10/20/2015 09:26:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Tjänsten eapihdrv kunde inte startas på grund av följande fel: %%1275 Error: (10/20/2015 09:26:11 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Erik\AppData\Local\Temp\ehdrv.sys har hindrats från att läsas in eftersom den är inkompatibel med den här datorn. Kontakta enhetens tillverkare och fråga om en kompatibel version av drivrutinen. Error: (10/20/2015 09:26:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Tjänsten eapihdrv kunde inte startas på grund av följande fel: %%1275 Error: (10/20/2015 09:26:10 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Erik\AppData\Local\Temp\ehdrv.sys har hindrats från att läsas in eftersom den är inkompatibel med den här datorn. Kontakta enhetens tillverkare och fråga om en kompatibel version av drivrutinen. Error: (10/20/2015 09:26:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Tjänsten eapihdrv kunde inte startas på grund av följande fel: %%1275 Error: (10/20/2015 09:26:10 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Erik\AppData\Local\Temp\ehdrv.sys har hindrats från att läsas in eftersom den är inkompatibel med den här datorn. Kontakta enhetens tillverkare och fråga om en kompatibel version av drivrutinen. Error: (10/20/2015 09:22:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Tjänsten eapihdrv kunde inte startas på grund av följande fel: %%1275 Error: (10/20/2015 09:22:07 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Erik\AppData\Local\Temp\ehdrv.sys har hindrats från att läsas in eftersom den är inkompatibel med den här datorn. Kontakta enhetens tillverkare och fråga om en kompatibel version av drivrutinen. Error: (10/20/2015 09:22:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Tjänsten eapihdrv kunde inte startas på grund av följande fel: %%1275 Error: (10/20/2015 09:22:07 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Erik\AppData\Local\Temp\ehdrv.sys har hindrats från att läsas in eftersom den är inkompatibel med den här datorn. Kontakta enhetens tillverkare och fråga om en kompatibel version av drivrutinen. ==================== Memory info =========================== Processor: Intel® Core i7 CPU 870 @ 2.93GHz Percentage of memory in use: 35% Total physical RAM: 8183.42 MB Available physical RAM: 5314.32 MB Total Virtual: 16373.63 MB Available Virtual: 13123.3 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:465.76 GB) (Free:284.03 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: (HDD1) (Fixed) (Total:931.51 GB) (Free:416.71 GB) NTFS Drive e: (HDD2) (Fixed) (Total:2794.39 GB) (Free:870.08 GB) NTFS Drive f: (Backup 1) (Fixed) (Total:931.51 GB) (Free:629.68 GB) NTFS Drive g: (Backup 2) (Fixed) (Total:1863.01 GB) (Free:856.5 GB) NTFS Drive h: (Backup 3) (Fixed) (Total:2794.39 GB) (Free:871.98 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 049287AA) Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: E5940355) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 2794.5 GB) (Disk ID: 8EA8E099) Partition: GPT. ======================================================== Disk: 3 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 3A1839D1) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 4 (Size: 1863 GB) (Disk ID: 9B52073B) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 5 (Size: 2794.5 GB) (Disk ID: 9D2B1F96) Partition: GPT. ==================== End of Addition.txt ============================
  5. Step 08 Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-10-2015 Ran by Erik (administrator) on ERIK-DATOR (20-10-2015 22:13:24) Running from C:\Users\Erik\Desktop\08 Loaded Profiles: Erik (Available Profiles: Erik) Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Svenska (Sverige) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe (M-Audio) C:\Program Files (x86)\M-Audio\Fast Track\AudioDevMon.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Paramount Software UK Ltd) C:\Mina Program\Macrium\Reflect\ReflectService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe () C:\Mina Program\MSI Afterburner\MSIAfterburner.exe () C:\Program Files\Core Temp\Core Temp.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe () C:\Mina Program\Rainmeter\Rainmeter.exe (NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Mina Program\RivaTuner Statistics Server\RTSS.exe () C:\Mina Program\RivaTuner Statistics Server\EncoderServer.exe () C:\Mina Program\RivaTuner Statistics Server\RTSSHooksLoader64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Piotr Pawlowski) C:\Mina Program\foobar2000\foobar2000.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation) HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-10-21] (NEC Electronics Corporation) HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-04-20] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2015-07-17] ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS) Startup: C:\Users\Erik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2015-07-27] ShortcutTarget: Rainmeter.lnk -> C:\Mina Program\Rainmeter\Rainmeter.exe () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [s-1-5-21-1060546239-1868508752-2705153983-1000] => 199.15.248.179:7808 Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{82FBCCF8-3B14-4E0D-90DE-D76E94413B72}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{82FBCCF8-3B14-4E0D-90DE-D76E94413B72}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab) BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation) BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab) BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation) Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-20] (AO Kaspersky Lab) FireFox: ======== FF ProfilePath: C:\Users\Erik\AppData\Roaming\Mozilla\Firefox\Profiles\sauckvp4.default-1438031807148 FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=6.4.0.22 -> C:\Program Files (x86)\BankID\npBispBrowser.dll [2015-03-17] (Finansiell ID-Teknik BID AB) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1060546239-1868508752-2705153983-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Erik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-09] (Unity Technologies ApS) FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2015-09-27] [not signed] StartMenuInternet: FIREFOX.EXE - C:\Mina Program\Mozilla Firefox\firefox.exe Chrome: ======= CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.) CHR Plugin: (Shockwave Flash) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\PepperFlash\19.0.0.226\pepflashplayer.dll () CHR Profile: C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-01] CHR Extension: (Google Docs) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-01] CHR Extension: (Google Drive) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-01] CHR Extension: (YouTube) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-01] CHR Extension: (Adblock Plus) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-06-01] CHR Extension: (Google Search) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-01] CHR Extension: (Tampermonkey) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-06-01] CHR Extension: (Kaspersky Protection) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2015-10-19] CHR Extension: (imgur Extension by Metronomik) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehoopddfhgaehhmphfcooacjdpmbjlao [2015-10-20] CHR Extension: (Bulk Image Downloader) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\facoldpeadablbngjnohbmgaehknhcaj [2015-06-01] CHR Extension: (Google Sheets) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-01] CHR Extension: (EditThisCookie) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2015-06-01] CHR Extension: (Google Docs Offline) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03] CHR Extension: (Nextvid Stopper for YouTube™) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgkhlpecokabjdphcgfakhegiacmoca [2015-06-01] CHR Extension: (Chrome Web Store Payments) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-01] CHR Extension: (Gmail) - C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-01] CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-09-27] (Kaspersky Lab ZAO) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1060352 2015-06-10] () R2 FastTrackAudioDevMon; C:\Program Files (x86)\M-Audio\Fast Track\AudioDevMon.exe [1962768 2013-05-21] (M-Audio) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation) S4 MBAMScheduler; C:\Mina Program\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) S2 MBAMService; C:\Mina Program\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation) R2 ReflectService.exe; C:\Mina Program\Macrium\Reflect\ReflectService.exe [3476432 2015-10-12] (Paramount Software UK Ltd) S3 SbieSvc; C:\Mina Program\Sandboxie\SbieSvc.exe [175752 2015-06-23] (Sandboxie Holdings, LLC) S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO) R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO) R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70000 2015-06-27] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [68280 2015-06-06] (Kaspersky Lab ZAO) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [181640 2015-10-20] (AO Kaspersky Lab) R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [227000 2015-10-20] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [940936 2015-10-20] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [39096 2015-06-11] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [41144 2015-06-06] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-09-27] (AO Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-06-11] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [103096 2015-06-16] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO) R3 MAUSBFASTTRACK; C:\Windows\System32\DRIVERS\MAudioFastTrack.sys [460048 2013-05-21] (M-Audio) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) S3 PSVolAcc; C:\Windows\System32\Drivers\PSVolAcc.sys [12760 2014-07-21] (Paramount Software UK Ltd) R3 RTCore64; C:\Mina Program\MSI Afterburner\RTCore64.sys [13536 2015-05-27] () S3 SbieDrv; C:\Mina Program\Sandboxie\SbieDrv.sys [190088 2015-06-23] (Sandboxie Holdings, LLC) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-12-05] (Duplex Secure Ltd.) R3 ssdevfactory; C:\Windows\System32\DRIVERS\ssdevfactory.sys [32792 2015-06-01] (SteelSeries ApS) R3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [42672 2015-09-29] (SteelSeries ApS) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [File not signed] R3 ALSysIO; \??\C:\Users\Erik\AppData\Local\Temp\ALSysIO64.sys [X] S3 gdrv; \??\C:\Windows\gdrv.sys [X] U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-10-20 22:11 - 2015-10-20 22:13 - 00000000 ____D C:\FRST 2015-10-20 21:28 - 2015-10-20 21:28 - 00000000 ____D C:\Users\Erik\Desktop\07 2015-10-20 21:27 - 2015-10-20 22:13 - 00000000 ____D C:\Users\Erik\Desktop\08 2015-10-20 21:02 - 2015-10-20 21:07 - 00000000 ____D C:\Users\Erik\Desktop\05 2015-10-20 20:56 - 2015-10-20 21:03 - 00000000 ____D C:\AdwCleaner 2015-10-20 20:42 - 2015-10-20 20:49 - 00000000 ____D C:\Users\Erik\Desktop\04 2015-10-20 19:43 - 2015-10-20 21:05 - 00001671 _____ C:\Windows\setupact.log 2015-10-20 19:43 - 2015-10-20 19:43 - 00000000 _____ C:\Windows\setuperr.log 2015-10-19 19:48 - 2015-10-20 20:42 - 00000000 ____D C:\Users\Erik\Desktop\Ny mapp 2015-10-19 15:53 - 2015-09-16 06:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-10-19 15:53 - 2015-09-16 06:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-10-19 15:53 - 2015-09-16 06:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-10-19 15:53 - 2015-09-16 05:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-10-19 15:53 - 2015-09-16 05:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-10-19 15:53 - 2015-09-16 05:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-10-19 15:53 - 2015-09-16 05:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-10-19 15:52 - 2015-09-18 21:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-10-19 15:52 - 2015-09-18 20:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-10-19 15:52 - 2015-09-16 06:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-10-19 15:52 - 2015-09-16 06:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-10-19 15:52 - 2015-09-16 06:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-10-19 15:52 - 2015-09-16 06:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-10-19 15:52 - 2015-09-16 06:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-10-19 15:52 - 2015-09-16 06:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-10-19 15:52 - 2015-09-16 06:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-10-19 15:52 - 2015-09-16 06:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-10-19 15:52 - 2015-09-16 06:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-10-19 15:52 - 2015-09-16 06:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-10-19 15:52 - 2015-09-16 06:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-10-19 15:52 - 2015-09-16 06:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-10-19 15:52 - 2015-09-16 06:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-10-19 15:52 - 2015-09-16 06:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-10-19 15:52 - 2015-09-16 06:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-10-19 15:52 - 2015-09-16 05:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-10-19 15:52 - 2015-09-16 05:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-10-19 15:52 - 2015-09-16 05:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-10-19 15:52 - 2015-09-16 05:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-10-19 15:52 - 2015-09-16 05:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-10-19 15:52 - 2015-09-16 05:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-10-19 15:52 - 2015-09-16 05:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-10-19 15:52 - 2015-09-16 05:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-10-19 15:52 - 2015-09-16 05:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-10-19 15:52 - 2015-09-16 05:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-10-19 15:52 - 2015-09-16 05:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-10-19 15:52 - 2015-09-16 05:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-10-19 15:52 - 2015-09-16 05:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-10-19 15:52 - 2015-09-16 05:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-10-19 15:52 - 2015-09-16 05:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-10-19 15:52 - 2015-09-16 05:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-10-19 15:52 - 2015-09-16 05:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-10-19 15:52 - 2015-09-16 05:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-10-19 15:52 - 2015-09-16 05:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-10-19 15:52 - 2015-09-16 05:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-10-19 15:52 - 2015-09-16 05:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-10-19 15:52 - 2015-09-16 05:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-10-19 15:52 - 2015-09-16 05:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-10-19 15:52 - 2015-09-16 05:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-10-19 15:52 - 2015-09-16 05:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-10-19 15:52 - 2015-09-16 05:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-10-19 15:52 - 2015-09-16 05:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-10-19 15:52 - 2015-09-16 05:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-10-19 15:52 - 2015-09-16 05:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-10-19 15:52 - 2015-09-16 05:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-10-19 15:52 - 2015-09-16 04:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-10-19 15:52 - 2015-09-16 04:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-10-19 15:52 - 2015-09-16 04:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-10-19 15:52 - 2015-09-16 04:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-10-19 15:52 - 2015-09-16 04:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-10-19 15:52 - 2015-09-16 04:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-10-19 15:52 - 2015-09-16 04:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-10-19 15:52 - 2015-09-16 04:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-10-19 15:52 - 2015-09-16 04:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-10-19 15:52 - 2015-09-16 04:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-10-19 15:47 - 2015-10-01 20:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-10-19 15:47 - 2015-10-01 20:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-10-19 15:47 - 2015-10-01 20:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-10-19 15:47 - 2015-10-01 20:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-10-19 15:47 - 2015-10-01 20:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-10-19 15:47 - 2015-10-01 20:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-10-19 15:47 - 2015-10-01 20:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-10-19 15:47 - 2015-10-01 19:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2015-10-19 15:47 - 2015-10-01 19:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-10-19 15:47 - 2015-09-29 05:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-10-19 15:47 - 2015-09-29 05:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-10-19 15:47 - 2015-09-29 05:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-10-19 15:47 - 2015-09-29 05:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-10-19 15:47 - 2015-09-29 05:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-10-19 15:47 - 2015-09-29 05:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-10-19 15:47 - 2015-09-29 05:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-10-19 15:47 - 2015-09-29 05:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-10-19 15:47 - 2015-09-29 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-10-19 15:47 - 2015-09-29 05:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-10-19 15:47 - 2015-09-29 05:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-10-19 15:47 - 2015-09-29 05:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-10-19 15:47 - 2015-09-29 05:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-10-19 15:47 - 2015-09-29 05:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-10-19 15:47 - 2015-09-29 05:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-10-19 15:47 - 2015-09-29 05:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-10-19 15:47 - 2015-09-29 05:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-10-19 15:47 - 2015-09-29 05:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-10-19 15:47 - 2015-09-29 05:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-10-19 15:47 - 2015-09-29 05:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 05:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-10-19 15:47 - 2015-09-29 04:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-10-19 15:47 - 2015-09-29 04:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-10-19 15:47 - 2015-09-29 04:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-10-19 15:47 - 2015-09-29 04:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-10-19 15:47 - 2015-09-29 04:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-10-19 15:47 - 2015-09-29 04:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-10-19 15:47 - 2015-09-29 04:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2015-10-19 15:47 - 2015-09-29 04:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-10-19 15:47 - 2015-09-29 04:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-10-19 15:47 - 2015-09-29 04:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-10-19 15:47 - 2015-09-29 04:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-10-19 15:47 - 2015-09-29 04:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-10-19 15:47 - 2015-09-29 04:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-10-19 15:47 - 2015-09-29 04:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-10-19 15:47 - 2015-09-29 04:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 04:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 03:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-10-19 15:47 - 2015-09-29 03:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-10-19 15:47 - 2015-09-29 03:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-10-19 15:47 - 2015-09-29 03:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-10-19 15:47 - 2015-09-29 03:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-10-19 15:47 - 2015-09-29 03:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 03:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 03:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-10-19 15:47 - 2015-09-29 03:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-10-19 15:47 - 2015-09-15 20:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-10-19 15:47 - 2015-09-15 20:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-10-19 15:47 - 2015-09-15 20:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-10-19 15:47 - 2015-09-15 20:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-10-19 15:47 - 2015-09-15 20:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-10-19 15:47 - 2015-09-15 20:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-10-19 15:47 - 2015-09-15 20:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-10-19 15:47 - 2015-09-15 20:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-10-19 15:47 - 2015-09-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-10-19 15:47 - 2015-09-15 19:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-10-19 15:47 - 2015-09-15 19:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-10-19 15:47 - 2015-09-15 19:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-10-19 15:47 - 2015-09-15 19:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-10-19 15:46 - 2015-08-06 20:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-10-19 15:46 - 2015-08-06 20:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-10-19 15:46 - 2015-08-06 19:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-10-19 15:46 - 2015-08-06 19:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2015-10-18 23:28 - 2015-10-18 23:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT 2015-10-16 17:31 - 2015-10-20 21:07 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-10-16 17:30 - 2015-10-16 17:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-10-16 17:30 - 2015-10-16 17:30 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-10-16 17:30 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-10-16 17:30 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-10-16 17:30 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2015-10-13 00:25 - 2015-10-13 00:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium 2015-10-12 15:39 - 2015-10-12 15:39 - 00168968 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\psmounterex.sys 2015-10-10 23:51 - 2015-10-10 23:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent 2015-10-09 21:34 - 2015-10-09 21:34 - 00000000 ____D C:\Users\Erik\AppData\Roaming\NVIDIA 2015-10-09 13:53 - 2015-10-09 13:53 - 00000000 ____D C:\ProgramData\NVIDIA 2015-10-09 13:51 - 2015-10-03 07:06 - 42914096 _____ C:\Windows\system32\nvcompiler.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 37882488 _____ C:\Windows\SysWOW64\nvcompiler.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 22306936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 18359928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 17395512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 16541040 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 15716648 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 15002304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 14832968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 13518496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 12769408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 12032200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 11114616 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-10-09 13:51 - 2015-10-03 07:06 - 03573832 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 03154104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 02869880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 02489976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 01905456 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435850.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 01567576 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435850.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00877176 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00689456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00512720 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00467912 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00414000 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00388024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00369272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00204648 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2015-10-09 13:51 - 2015-10-03 07:06 - 00177416 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00155976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2015-10-09 13:51 - 2015-10-03 07:06 - 00040280 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2015-10-09 13:47 - 2015-10-03 07:06 - 00112944 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2015-10-09 13:47 - 2015-10-03 07:06 - 00105080 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2015-10-09 13:47 - 2015-10-03 04:49 - 06358648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-10-09 13:47 - 2015-10-03 04:49 - 02982520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-10-09 13:47 - 2015-10-03 04:49 - 02554488 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-10-09 13:47 - 2015-10-03 04:49 - 00938800 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-10-09 13:47 - 2015-10-03 04:49 - 00385328 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-10-09 13:47 - 2015-10-03 04:49 - 00062768 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-10-09 13:47 - 2015-10-01 11:33 - 05284082 _____ C:\Windows\system32\nvcoproc.bin 2015-10-09 02:19 - 2015-10-09 02:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2015-10-08 23:37 - 2015-10-08 23:38 - 00000000 ____D C:\Users\Erik\Documents\STAR WARS Battlefront Beta 2015-10-08 17:48 - 2015-10-08 17:49 - 00000000 ____D C:\Users\Erik\AppData\Roaming\Origin 2015-09-30 15:24 - 2015-09-30 15:24 - 00000000 ____D C:\Users\Erik\AppData\Roaming\steelseries-engine-3-client 2015-09-29 16:44 - 2015-09-29 16:44 - 00042672 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\sshid.sys 2015-09-29 16:44 - 2015-09-29 16:44 - 00016928 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys 2015-09-28 19:48 - 2015-09-28 19:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate 2015-09-27 14:10 - 2015-09-27 14:10 - 00000891 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-09-27 05:00 - 2015-10-20 21:05 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2015-09-27 05:00 - 2015-10-20 10:24 - 00940936 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2015-09-27 05:00 - 2015-10-20 10:24 - 00181640 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys 2015-09-27 05:00 - 2015-09-27 05:00 - 00000000 ____D C:\Windows\ELAMBKUP 2015-09-27 05:00 - 2015-09-27 05:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2015-09-27 05:00 - 2015-09-27 05:00 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2015-09-27 05:00 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2015-09-26 17:46 - 2015-09-26 17:46 - 00000000 ____D C:\Users\Erik\AppData\Local\Apps\2.0 2015-09-23 22:03 - 2015-09-23 22:03 - 00005912 _____ C:\Users\Erik\AppData\Local\recently-used.xbel 2015-09-22 14:06 - 2015-09-22 14:06 - 00015872 ___SH C:\Users\Erik\Thumbs.db 2015-09-22 10:59 - 2015-09-22 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spectro 2015-09-22 10:43 - 2008-09-21 22:31 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71.dll 2015-09-22 10:43 - 2008-09-21 22:31 - 00505128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2015-09-22 10:43 - 2008-09-21 22:31 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2015-09-22 10:43 - 2008-09-15 00:55 - 01008432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCHRT20.OCX 2015-09-22 10:43 - 2000-05-22 16:58 - 00140488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.ocx 2015-09-22 10:43 - 1998-06-18 00:00 - 00089360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB5DB.DLL 2015-09-20 15:29 - 2015-09-20 15:31 - 00001672 _____ C:\Windows\Sandboxie.ini 2015-09-20 15:29 - 2015-09-20 15:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie 2015-09-20 15:04 - 2015-09-20 15:20 - 00000000 ____D C:\Users\Erik\AppData\Roaming\Guitar Pro 6 2015-09-20 15:04 - 2015-09-20 15:04 - 00000000 ____D C:\ProgramData\Guitar Pro 6 ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-10-20 22:13 - 2015-07-31 14:55 - 00000000 ____D C:\Users\Erik\AppData\Roaming\foobar2000 2015-10-20 22:12 - 2014-04-19 20:52 - 00000994 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-20 21:13 - 2009-07-14 06:45 - 00023072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-20 21:13 - 2009-07-14 06:45 - 00023072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-20 21:11 - 2009-07-14 09:43 - 00663802 _____ C:\Windows\system32\perfh01D.dat 2015-10-20 21:11 - 2009-07-14 09:43 - 00142602 _____ C:\Windows\system32\perfc01D.dat 2015-10-20 21:11 - 2009-07-14 07:13 - 01580482 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-20 21:08 - 2015-09-16 14:47 - 01767455 _____ C:\Windows\WindowsUpdate.log 2015-10-20 21:05 - 2014-04-19 20:52 - 00000990 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-20 21:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-20 21:04 - 2015-06-09 12:54 - 00003010 _____ C:\Windows\System32\Tasks\MSIAfterburner 2015-10-20 21:01 - 2009-07-14 07:08 - 00032514 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-10-20 15:48 - 2014-04-19 21:18 - 00000000 ___RD C:\Users\Erik\AppData\Roaming\uTorrent 2015-10-20 10:24 - 2015-07-04 02:18 - 00227000 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys 2015-10-20 00:26 - 2015-04-01 01:55 - 00000498 _____ C:\Windows\Tasks\Macrium-Backup-{2881A448-4F2B-413D-A175-7D23978D95E0}.job 2015-10-20 00:19 - 2015-06-11 23:10 - 00000504 _____ C:\Windows\Tasks\Macrium-Backup-{27D13B0C-E7AC-4411-A00A-3507CCCCE1C3}.job 2015-10-20 00:07 - 2015-06-17 22:50 - 00000490 _____ C:\Windows\Tasks\Macrium-Backup-{8EAC26F9-0877-41FE-9A53-34DEFEB978D0}.job 2015-10-19 22:59 - 2015-02-18 03:34 - 00000000 ____D C:\Users\Erik\AppData\Roaming\qBittorrent 2015-10-19 22:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-10-19 16:17 - 2014-04-20 01:22 - 00000000 ____D C:\Windows\system32\MRT 2015-10-19 16:13 - 2014-04-20 01:22 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-10-19 15:43 - 2014-04-19 20:10 - 00000000 ____D C:\Mina Program 2015-10-19 04:20 - 2015-04-01 01:55 - 00000498 _____ C:\Windows\Tasks\Macrium-Backup-{FE1F0019-49EB-4013-BD06-53F15E553BF9}.job 2015-10-19 03:39 - 2015-06-11 23:10 - 00000504 _____ C:\Windows\Tasks\Macrium-Backup-{1B6175E4-FD2A-41AB-98AE-B2DBF6CAB7E7}.job 2015-10-18 23:41 - 2014-12-16 01:27 - 00000000 __SHD C:\Users\Erik\AppData\LocalLow\EmieBrowserModeList 2015-10-18 23:41 - 2014-06-01 03:39 - 00000000 __SHD C:\Users\Erik\AppData\LocalLow\EmieUserList 2015-10-18 23:41 - 2014-06-01 03:39 - 00000000 __SHD C:\Users\Erik\AppData\LocalLow\EmieSiteList 2015-10-18 15:49 - 2014-08-15 22:47 - 00000000 ____D C:\Users\Erik\AppData\Roaming\Mp3tag 2015-10-17 22:59 - 2014-04-19 20:13 - 00000000 ____D C:\Users\Erik\AppData\Roaming\Audacity 2015-10-14 00:55 - 2015-05-12 21:43 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-10-14 00:55 - 2014-05-07 00:54 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-10-12 14:42 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-10-12 05:05 - 2015-03-16 01:11 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2015-10-12 05:05 - 2015-03-16 01:11 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2015-10-12 05:04 - 2015-03-16 01:11 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2015-10-12 05:04 - 2015-03-16 01:11 - 01710752 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2015-10-11 16:26 - 2014-05-09 17:10 - 00000000 ____D C:\Users\Erik\AppData\Roaming\vlc 2015-10-11 14:42 - 2015-04-01 01:55 - 00003644 _____ C:\Windows\System32\Tasks\Macrium-Backup-{2881A448-4F2B-413D-A175-7D23978D95E0} 2015-10-11 14:41 - 2015-06-11 23:10 - 00003414 _____ C:\Windows\System32\Tasks\Macrium-Backup-{1B6175E4-FD2A-41AB-98AE-B2DBF6CAB7E7} 2015-10-11 14:41 - 2015-04-01 01:55 - 00003408 _____ C:\Windows\System32\Tasks\Macrium-Backup-{FE1F0019-49EB-4013-BD06-53F15E553BF9} 2015-10-09 13:47 - 2014-04-19 20:42 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-10-09 13:47 - 2014-04-19 20:42 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-10-09 13:47 - 2014-04-19 20:40 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2015-10-09 13:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help 2015-10-09 13:34 - 2009-07-14 06:45 - 00268872 _____ C:\Windows\system32\FNTCACHE.DAT 2015-10-08 22:09 - 2014-06-10 03:57 - 00000000 ____D C:\ProgramData\Package Cache 2015-10-08 17:44 - 2014-04-19 20:17 - 00058808 _____ C:\Users\Erik\AppData\Local\GDIPFONTCACHEV1.DAT 2015-10-03 07:06 - 2015-06-23 08:18 - 00033507 _____ C:\Windows\system32\nvinfo.pb 2015-09-30 15:23 - 2015-07-17 16:00 - 00000000 ____D C:\Users\Erik\AppData\Local\SteelSeries Engine 3 Client 2015-09-30 15:06 - 2015-07-27 15:15 - 00007640 _____ C:\Users\Erik\AppData\Local\Resmon.ResmonCfg 2015-09-27 05:04 - 2015-06-08 19:43 - 00041352 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klpd.sys 2015-09-27 05:00 - 2015-09-05 21:40 - 00000000 ____D C:\Users\admin 2015-09-27 04:53 - 2014-04-20 01:41 - 00001912 _____ C:\Windows\epplauncher.mif 2015-09-23 22:03 - 2015-04-19 20:33 - 00000000 ____D C:\Users\Erik\.gimp-2.8 2015-09-23 22:03 - 2015-03-13 00:26 - 00000000 ____D C:\Users\Erik\AppData\Local\gtk-2.0 2015-09-22 15:09 - 2014-12-15 04:27 - 00000000 ____D C:\Users\Erik\AppData\Roaming\CUE Tools 2015-09-22 14:06 - 2014-04-19 20:09 - 00000000 ____D C:\Users\Erik 2015-09-22 10:44 - 2014-04-19 20:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information ==================== Files in the root of some directories ======= 2014-04-19 20:49 - 2015-07-28 19:47 - 0000626 _____ () C:\Users\Erik\AppData\Roaming\All CPU MeterV3_Settings.ini 2015-06-10 06:26 - 2015-06-11 15:36 - 2128896 _____ () C:\Users\Erik\AppData\Local\file__0.localstorage 2014-05-04 20:43 - 2015-06-02 20:28 - 0048677 _____ () C:\Users\Erik\AppData\Local\HDGraph.log 2015-09-23 22:03 - 2015-09-23 22:03 - 0005912 _____ () C:\Users\Erik\AppData\Local\recently-used.xbel 2015-07-27 15:15 - 2015-09-30 15:06 - 0007640 _____ () C:\Users\Erik\AppData\Local\Resmon.ResmonCfg Some files in TEMP: ==================== C:\Users\Erik\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-10-11 06:12 ==================== End of FRST.txt ============================
  6. STEP 04 LOG ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by MalwarebytesVersion: 7.6.4 (09.28.2015:1)OS: Windows 7 Home Premium x64Ran by Erik on 2015-10-20 at 20:45:53,97~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values ~~~ Registry Keys ~~~ Files Successfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_lyrics.wikia.com_0.localstorageSuccessfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_st.chatango.com_0.localstorageSuccessfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorageSuccessfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.lyricsfreak.com_0.localstorageSuccessfully deleted: [File] C:\Users\Erik\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.metrolyrics.com_0.localstorage ~~~ Folders Successfully deleted: [Folder] C:\Users\Erik\Appdata\Local\crashrpt ~~~ Chrome [C:\Users\Erik\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\Erik\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\Erik\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\Erik\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:[] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on 2015-10-20 at 20:47:52,20End of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ STEP 05 LOG # AdwCleaner v5.014 - Logfile created 20/10/2015 at 20:59:58# Updated 18/10/2015 by Xplode# Database : 2015-10-18.5 [server]# Operating system : Windows 7 Home Premium Service Pack 1 (x64)# Username : Erik - ERIK-DATOR# Running from : C:\Users\Erik\Desktop\AdwCleaner.exe# Option : Cleaning# Support : http://toolslib.net/forum ***** [ Services ] ***** ***** [ Folders ] ***** [-] Folder Deleted : C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehoopddfhgaehhmphfcooacjdpmbjlao ***** [ Files ] ***** [-] File Deleted : C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ehoopddfhgaehhmphfcooacjdpmbjlao_0.localstorage ***** [ DLLs ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** ***** [ Registry ] ***** [-] Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}[!] Key Not Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}[-] Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}[-] Key Deleted : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}[-] Key Deleted : HKU\S-1-5-19\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}[!] Key Not Deleted : HKU\S-1-5-21-1060546239-1868508752-2705153983-1000\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} ***** [ Web browsers ] ***** [-] [C:\Users\Erik\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : ehoopddfhgaehhmphfcooacjdpmbjlao ************************* :: Winsock settings cleared ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1892 bytes] ########## STEP 06 LOG Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 2015-10-20Scan Time: 21:07Logfile: Administrator: Yes Version: 2.2.0.1024Malware Database: v2015.10.20.06Rootkit Database: v2015.10.16.01License: PremiumMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: Disabled OS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: Erik Scan Type: Threat ScanResult: CompletedObjects Scanned: 337841Time Elapsed: 5 min, 17 sec Memory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledDeep Rootkit Scan: EnabledHeuristics: EnabledPUP: EnabledPUM: Enabled Processes: 0(No malicious items detected) Modules: 0(No malicious items detected) Registry Keys: 0(No malicious items detected) Registry Values: 0(No malicious items detected) Registry Data: 0(No malicious items detected) Folders: 0(No malicious items detected) Files: 0(No malicious items detected) Physical Sectors: 0(No malicious items detected) (end) STEP 07No threats found
  7. Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 2015-10-18 Scan Time: 23:36 Logfile: Administrator: Yes Version: 2.2.0.1024 Malware Database: v2015.10.18.04 Rootkit Database: v2015.10.16.01 License: Premium Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Erik Scan Type: Threat Scan Result: Completed Objects Scanned: 341193 Time Elapsed: 5 min, 22 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Deep Rootkit Scan: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end)
  8. Reinstalling this time seems to have at least reduced the slowdown, which is weird because I have tried doing a MBAM Clean Removal Process 2x before as I was told in the other thread. I didn't do anything different this time and although it is reduced, there is still a noticeable performance decrease. Any other possible ways to mitigate this?
  9. I already posted this in another forum, but was redirected here. Here's the link but I'll paste the same post here anyway. (https://forums.malwarebytes.org/index.php?/topic/172945-anti-malware-slows-down-computer/) I'm running Windows 7 64bit Home Premium and everything is installed on a Samsung 850 EVO. For example, when I have Anti-Malware not running, the task manager opens instantly and clicking viewing processes is just as fast. If I turn on Anti-Malware and turn off Malware Protection, the task manager is still fast. However, when I turn on the Malware Protection it slows down and it takes several seconds to open the task manager and even longer to click view processes for all users. I even looked in ProcessExplorer and the mbamservice.exe process spikes up the CPU usage when I use the task manager. A few seconds delay may not sound like a big deal to you, but it is for me. Especially when I know that Malware Protection is causing it. This is a real bummer for me because I bought a Premium license only for the real time protection, but this slowdown makes my PC practically unusable to me. Note, I do have torrent clients installed but not running. I didn't get a warning in the other thread so I assume it's okay. Any other software is either legit or free/trial. I also did a full scan with Kaspersky and Malwarebytes, nothing detected. FRST.txt Addition.txt
  10. I followed the installation directions but the problem still persists and there is no mention of this kind of problem in the FAQ. Here are the logs. FRST.txt Addition.txt CheckResults.txt
  11. I'm running Windows 7 64bit Home Premium and everything is installed on a Samsung 850 EVO. For example, when I have Anti-Malware not running, the task manager opens instantly and clicking viewing processes is just as fast. If I turn on Anti-Malware and turn off Malware Protection, the task manager is still fast. However, when I turn on the Malware Protection it slows down and it takes several seconds to open the task manager and even longer to click view processes for all users. I even looked in ProcessExplorer and the mbamservice.exe process spikes up the CPU usage when I use the task manager. A few seconds delay may not sound like a big deal to you, but it is for me. Especially when I know that Malware Protection is causing it. This is a real bummer for me because I bought a Premium license only for the real time protection, but this slowdown makes my PC practically unusable to me. Is there a fix for this? Is it an intended effect? Is it a known issue? Can I get a refund?
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.