Jump to content

pcmoen

Members
 View Profile  See their activity

  • Posts

    2

  • Joined

  • Last visited

 Content Type 

Posts posted by pcmoen

    unable to open malwarebytes anti malware

    in Resolved Malware Removal Logs

    Posted

    i am unable to open malwarebytes anti malware ,windows defender or commandline as  administrator,seems like most of my computer scurity has somehow been disabeled.i think my computer is infected by a virus,can anyone help me ? included are the logs from farbar recovery scan tool

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-08-2016
    Ran by pam (administrator) on DATAOPPE (30-08-2016 20:52:35)
    Running from C:\Users\pam\Å DIV\Downloads
    Loaded Profiles: pam (Available Profiles: pam & Evy & Vegard & Vilde & Julia & Eirik)
    Platform: Windows 10 Home Version 1511 (X64) Language: Norsk bokmål (Norge)
    Internet Explorer Version 11 (Default browser: Edge)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
    (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
    (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
    () C:\Program Files (x86)\AVG Security Toolbar\AVG-Secure-Search-Update_0814tb.exe
    (Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
    (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
    (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
    (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
    (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
    (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
    (CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
    (Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
    () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    (Trend Micro Inc.) C:\Users\pam\Å DIV\Downloads\HijackThis.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
    HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585048 2014-05-31] (Razer Inc.)
    HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9103976 2016-08-30] (AVAST Software)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    Winlogon\Notify\ScCertProp: wlnotify.dll [X]
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1193176 2012-10-11] ()
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8891608 2016-07-13] (Piriform Ltd)
    AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-07-26] (NVIDIA Corporation)
    ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileSyncShell64.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileSyncShell64.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileSyncShell64.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-08-30] (AVAST Software)
    ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncShell.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncShell.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncShell.dll [2016-08-22] (Microsoft Corporation)
    Startup: C:\Users\Evy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send til OneNote.lnk [2014-11-22]
    ShortcutTarget: Send til OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
    Startup: C:\Users\pam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send til OneNote.lnk [2015-06-01]
    ShortcutTarget: Send til OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1008\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1007\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1006\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1005\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1002\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1001\User: Restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{5ec62312-5a66-435e-a214-feb2223c0ba7}: [DhcpNameServer] 192.168.0.1

    Internet Explorer:
    ==================
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com?cid={47531457-3486-4600-868A-ECA01E8F8056}&mid=cd02ab70b97247d39d74294607867745-2108628ba06038436e6c05da7024fdd4125367b1&lang=da&ds=AVG&coid=&cmpid=&pr=sa&d=2013-03-07 22:45:40&v=18.3.0.885&pid=safeguard&sg=0&sap=hp
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com?cid={47531457-3486-4600-868A-ECA01E8F8056}&mid=cd02ab70b97247d39d74294607867745-2108628ba06038436e6c05da7024fdd4125367b1&lang=da&ds=AVG&coid=&cmpid=&pr=sa&d=2013-03-07 22:45:40&v=18.8.0.179&pid=safeguard&sg=0&sap=hp
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
    SearchScopes: HKU\S-1-5-21-534824535-310085861-1345720186-1001 -> {2685E613-B61A-45DB-84C6-F8C509F60DBF} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^NO&apn_uid=5604BFB0-357E-4B12-B703-B5C24B72BDCF&apn_sauid=7A82AFAD-80B9-4007-BAAB-28B8D90116E8
    SearchScopes: HKU\S-1-5-21-534824535-310085861-1345720186-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={47531457-3486-4600-868A-ECA01E8F8056}&mid=cd02ab70b97247d39d74294607867745-2108628ba06038436e6c05da7024fdd4125367b1&lang=da&ds=AVG&pr=sa&d=2013-03-07 22:45:40&v=15.2.0.5&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
    BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-07-12] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-05] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-08-30] (Oracle Corporation)
    BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-30] (Oracle Corporation)
    Toolbar: HKLM-x32 - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
    Toolbar: HKU\S-1-5-21-534824535-310085861-1345720186-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
    Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)
    Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.8.0\ViProtocol.dll [2015-08-17] (AVG Secure Search)

    FireFox:
    ========
    FF ProfilePath: C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default
    FF DefaultSearchEngine: Bing
    FF SearchEngineOrder.1: Ask.com
    FF SelectedSearchEngine: Ask.com
    FF Homepage: hxxp://www.startside.no
    FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
    FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll [No File]
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
    FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-30] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-30] (Oracle Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-10] (Microsoft Corporation)
    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA Corporation)
    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
    FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-08-14] ()
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-06-23] (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-534824535-310085861-1345720186-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\pam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-03-10] (Unity Technologies ApS)
    FF user.js: detected! => C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default\user.js [2013-03-07]
    FF SearchPlugin: C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default\searchplugins\askcom.xml [2013-05-18]
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml [2013-05-25]
    FF Extension: (Firefox Hotfix) - C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-08-30]
    FF Extension: (Adblock Plus) - C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-08-30]
    FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-08-30]
    FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
    FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-08-30]
    FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
    FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found

    Chrome:
    =======
    CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
    CHR StartupUrls: Default -> "hxxp://www.search.ask.com/?tpid=ORJ-V7C&o=APN11412&pf=V7&trgb=CR&p2=%5EBBK%5EOSJ000%5EYY%5ENO&gct=hp&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ENO&apn_dbr=cr_34.0.1847.116&apn_uid=313ADF30-E94F-40BB-AB00-98795B315741&itbv=12.10.6.48&doi=2014-04-17&psv="
    CHR Profile: C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Floorplanner) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2015-03-25]
    CHR Extension: (http://translate.google.no/) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahebpafflkkdojecafbljpimjkadcpdh [2014-12-01]
    CHR Extension: (Google Drive) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-08]
    CHR Extension: (YouTube) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-09]
    CHR Extension: (Google Search) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-08]
    CHR Extension: (http://www.wikipedia.no/) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgkfehbmnpkglhlhbhaeagnpbkionpen [2014-12-01]
    CHR Extension: (GamingWonderland) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeojlpepoljdpaoiplnlhcfkoigijimc [2016-07-05]
    CHR Extension: (Avast SafePrice) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-08-22]
    CHR Extension: (Google Docs Offline) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-26]
    CHR Extension: (AdBlock) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-22]
    CHR Extension: (Avast Online Security) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-07-05]
    CHR Extension: (Autodesk Homestyler) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2016-08-22]
    CHR Extension: (https://nb-no.facebook.com/) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhmiiebbdmappefcnmncoekfggcmacen [2014-12-01]
    CHR Extension: (Chrome Nettmarked-betalinger) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-17]
    CHR Extension: (Foreign currency converter) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\oambjpdibffejjoecjbpoldijfnckdge [2014-12-01]
    CHR Extension: (World Clocks 2) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjgoijhajhaahklokegbfnohialajpej [2015-01-16]
    CHR Extension: (Gmail) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-12]
    CHR Extension: (Chrome Media Router) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-22]
    CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
    CHR HKLM-x32\...\Chrome\Extension: [fmfnfnpmhcllokmkepffndflpnadjmma] - C:\Program Files (x86)\DealPly\DealPly.crx <not found>
    CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-08-30] (AVAST Software)
    R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-24] (Acer Incorporated)
    R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3189488 2016-07-05] (Microsoft Corporation)
    R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-23] (Acer Incorporated)
    R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-08-14] (WildTangent)
    R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [File not signed]
    R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation)
    S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-26] (Intel Corporation)
    R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
    S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
    R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
    S4 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
    S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
    S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-08-30] (AVAST Software)
    R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-08-30] (AVAST Software)
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-08-30] (AVAST Software)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-08-30] (AVAST Software)
    R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-08-30] (AVAST Software)
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969560 2016-08-30] (AVAST Software)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513496 2016-08-30] (AVAST Software)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-08-30] (AVAST Software)
    R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-30] (AVAST Software)
    R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
    S3 cxbu0x64; C:\Windows\system32\DRIVERS\cxbu0x64.sys [147576 2014-05-14] (HID Global Corporation)
    R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
    S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [113880 2015-11-30] (Malwarebytes Corporation)
    S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
    R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
    R1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)
    R3 rzp1endpt; C:\Windows\System32\drivers\rzp1endpt.sys [39080 2014-05-19] (Razer Inc)
    R3 rzvmouse; C:\Windows\System32\drivers\rzvmouse.sys [31400 2014-05-19] (Razer Inc)
    S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
    S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-08-30 20:52 - 2016-08-30 20:52 - 00000000 ____D C:\FRST
    2016-08-30 20:22 - 2016-08-30 20:22 - 00000000 ____D C:\Users\pam\AppData\Roaming\Sun
    2016-08-30 20:22 - 2016-08-30 20:22 - 00000000 ____D C:\Users\pam\.oracle_jre_usage
    2016-08-30 20:13 - 2016-08-30 20:13 - 00391496 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
    2016-08-30 20:13 - 2016-08-30 20:13 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
    2016-08-30 18:17 - 2016-08-30 18:17 - 00003756 _____ C:\WINDOWS\System32\Tasks\ALU_SelfUpgrade
    2016-08-30 17:58 - 2016-08-30 17:58 - 00000000 ____D C:\Users\pam\AppData\Local\CEF
    2016-08-30 13:48 - 2016-08-30 13:48 - 00339308 _____ C:\WINDOWS\Minidump\083016-13750-01.dmp
    2016-08-30 10:31 - 2016-08-30 10:31 - 00188132 _____ C:\WINDOWS\Minidump\083016-50171-01.dmp
    2016-08-25 10:19 - 2016-08-25 10:19 - 00336252 _____ C:\WINDOWS\Minidump\082516-17750-01.dmp
    2016-08-22 22:04 - 2016-08-22 22:04 - 00064340 _____ C:\Users\Evy\Downloads\Bjørklunds+ringstørrelser.pdf
    2016-08-22 11:52 - 2016-08-22 11:52 - 00007486 _____ C:\Users\Evy\Downloads\Arsoppgave31122014.pdf
    2016-08-22 11:50 - 2016-08-22 11:50 - 00007733 _____ C:\Users\Evy\Downloads\Kontoutskrift31072016.pdf
    2016-08-22 11:49 - 2016-08-22 11:49 - 00008876 _____ C:\Users\Evy\Downloads\Kontoutskrift31052016.pdf
    2016-08-22 11:49 - 2016-08-22 11:49 - 00008822 _____ C:\Users\Evy\Downloads\Kontoutskrift30062016.pdf
    2016-08-22 11:48 - 2016-08-22 11:48 - 00008614 _____ C:\Users\Evy\Downloads\Kontoutskrift30042016.pdf
    2016-08-22 11:46 - 2016-08-22 11:46 - 00008576 _____ C:\Users\Evy\Downloads\Kontoutskrift31032016.pdf
    2016-08-22 11:22 - 2016-08-30 13:48 - 636767713 _____ C:\WINDOWS\MEMORY.DMP
    2016-08-22 11:22 - 2016-08-22 11:22 - 00000000 _____ C:\WINDOWS\Minidump\082216-43234-01.dmp
    2016-08-22 08:10 - 2016-08-22 08:10 - 00000000 ____D C:\Users\pam\AppData\Roaming\Skype
    2016-08-17 23:03 - 2016-08-17 23:03 - 00000000 ____D C:\Users\Evy\AppData\Roaming\Skype
    2016-08-17 10:42 - 2016-08-17 10:42 - 00003328 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
    2016-08-17 10:41 - 2016-08-17 10:41 - 00000000 ____D C:\Users\Julia\AppData\Roaming\Skype
    2016-08-13 09:09 - 2016-08-13 09:14 - 00000000 ____D C:\Program Files\CCleaner
    2016-08-13 09:09 - 2016-08-13 09:09 - 08136664 _____ (Piriform Ltd) C:\Users\Evy\Downloads\ccsetup520 (3).exe
    2016-08-13 09:09 - 2016-08-13 09:09 - 08136664 _____ (Piriform Ltd) C:\Users\Evy\Downloads\ccsetup520 (2).exe
    2016-08-13 09:09 - 2016-08-13 09:09 - 00002852 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
    2016-08-13 09:09 - 2016-08-13 09:09 - 00000867 _____ C:\Users\Public\Desktop\CCleaner.lnk
    2016-08-13 09:09 - 2016-08-13 09:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
    2016-08-13 09:05 - 2016-08-13 09:05 - 08136664 _____ (Piriform Ltd) C:\Users\Evy\Downloads\ccsetup520.exe
    2016-08-13 09:05 - 2016-08-13 09:05 - 08136664 _____ (Piriform Ltd) C:\Users\Evy\Downloads\ccsetup520 (1).exe
    2016-08-12 09:54 - 2016-08-12 09:54 - 00000000 ____D C:\Users\Julia\AppData\Local\Macromedia
    2016-08-10 12:14 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2016-08-10 12:14 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
    2016-08-10 12:14 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
    2016-08-10 12:14 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
    2016-08-10 12:14 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
    2016-08-10 12:14 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
    2016-08-10 12:14 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
    2016-08-10 12:14 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
    2016-08-10 12:14 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
    2016-08-10 12:14 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
    2016-08-10 12:14 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
    2016-08-10 12:14 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
    2016-08-10 12:14 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
    2016-08-10 12:14 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
    2016-08-10 12:14 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
    2016-08-10 12:14 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
    2016-08-10 12:14 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
    2016-08-10 12:14 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
    2016-08-10 12:14 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
    2016-08-10 12:14 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
    2016-08-10 12:14 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
    2016-08-10 12:14 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
    2016-08-10 12:14 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
    2016-08-10 12:14 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
    2016-08-10 12:14 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
    2016-08-10 12:14 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
    2016-08-10 12:14 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
    2016-08-10 12:14 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
    2016-08-10 12:14 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
    2016-08-10 12:14 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
    2016-08-10 12:14 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
    2016-08-10 12:14 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
    2016-08-10 12:14 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
    2016-08-10 12:14 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
    2016-08-10 12:14 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
    2016-08-10 12:14 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
    2016-08-10 12:14 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
    2016-08-10 12:14 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
    2016-08-10 12:14 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
    2016-08-10 12:14 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
    2016-08-10 12:14 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
    2016-08-10 12:14 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
    2016-08-10 12:14 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
    2016-08-10 12:14 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2016-08-10 12:14 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
    2016-08-10 12:14 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2016-08-10 12:14 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2016-08-10 12:14 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
    2016-08-10 12:14 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
    2016-08-10 12:14 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
    2016-08-10 12:14 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
    2016-08-10 12:14 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
    2016-08-10 12:14 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
    2016-08-10 12:14 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
    2016-08-10 12:14 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
    2016-08-10 12:14 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
    2016-08-10 12:14 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
    2016-08-10 12:14 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
    2016-08-10 12:14 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
    2016-08-10 12:14 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
    2016-08-10 12:14 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
    2016-08-10 12:14 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
    2016-08-10 12:14 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
    2016-08-10 12:14 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
    2016-08-10 12:14 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
    2016-08-10 12:14 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
    2016-08-10 12:14 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
    2016-08-10 12:14 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
    2016-08-10 12:14 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
    2016-08-10 12:14 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
    2016-08-10 12:14 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
    2016-08-10 12:14 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
    2016-08-10 12:13 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
    2016-08-10 12:13 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
    2016-08-10 12:13 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
    2016-08-10 12:13 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
    2016-08-10 12:13 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
    2016-08-10 12:13 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
    2016-08-10 12:13 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
    2016-08-10 12:13 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
    2016-08-10 12:13 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
    2016-08-10 12:13 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
    2016-08-10 12:13 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
    2016-08-10 12:13 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
    2016-08-10 12:13 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
    2016-08-10 12:13 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
    2016-08-10 12:13 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
    2016-08-10 12:13 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
    2016-08-10 12:13 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
    2016-08-10 12:13 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
    2016-08-10 12:13 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
    2016-08-10 12:13 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
    2016-08-10 12:13 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
    2016-08-10 12:13 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
    2016-08-10 12:13 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
    2016-08-10 12:13 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
    2016-08-10 12:13 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2016-08-10 12:13 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
    2016-08-10 12:13 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
    2016-08-10 12:13 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
    2016-08-10 12:13 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
    2016-08-10 12:13 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
    2016-08-10 12:13 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
    2016-08-10 12:13 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2016-08-10 12:13 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
    2016-08-10 12:13 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
    2016-08-10 12:13 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
    2016-08-10 12:13 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
    2016-08-10 12:13 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
    2016-08-10 12:13 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
    2016-08-10 12:13 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
    2016-08-10 12:13 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
    2016-08-10 12:13 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
    2016-08-10 12:13 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2016-08-10 12:13 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
    2016-08-10 12:13 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
    2016-08-10 12:13 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
    2016-08-10 12:13 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
    2016-08-10 12:13 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
    2016-08-10 12:13 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
    2016-08-10 12:13 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
    2016-08-10 12:13 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2016-08-10 12:13 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
    2016-08-10 12:13 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
    2016-08-10 12:13 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
    2016-08-10 12:13 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
    2016-08-10 12:13 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2016-08-10 12:13 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2016-08-10 12:13 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
    2016-07-31 10:07 - 2016-07-31 10:07 - 00000000 ____D C:\Users\Julia\AppData\Local\CEF

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-08-30 20:48 - 2013-10-14 19:42 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
    2016-08-30 20:22 - 2015-12-25 05:01 - 00000000 ____D C:\Users\pam
    2016-08-30 20:22 - 2014-08-07 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2016-08-30 20:22 - 2014-04-22 10:16 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
    2016-08-30 20:22 - 2013-08-15 21:19 - 00000000 ____D C:\Program Files (x86)\Java
    2016-08-30 20:21 - 2015-10-30 20:07 - 00449578 _____ C:\WINDOWS\system32\perfh014.dat
    2016-08-30 20:21 - 2015-10-30 20:07 - 00076846 _____ C:\WINDOWS\system32\perfc014.dat
    2016-08-30 20:21 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
    2016-08-30 20:21 - 2015-08-06 16:31 - 01393452 _____ C:\WINDOWS\system32\PerfStringBackup.INI
    2016-08-30 20:21 - 2013-03-20 10:59 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
    2016-08-30 20:17 - 2012-12-05 05:04 - 00001014 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    2016-08-30 20:16 - 2014-12-10 00:16 - 00000404 _____ C:\WINDOWS\Tasks\AVG-Secure-Search-Update_1214tb_rmv.job
    2016-08-30 20:16 - 2014-12-10 00:16 - 00000404 _____ C:\WINDOWS\Tasks\AVG-Secure-Search-Update_1214tb_rel.job
    2016-08-30 20:16 - 2014-08-27 08:13 - 00000402 _____ C:\WINDOWS\Tasks\AVG-Secure-Search-Update_0814tb_rmv.job
    2016-08-30 20:16 - 2014-08-27 08:13 - 00000402 _____ C:\WINDOWS\Tasks\AVG-Secure-Search-Update_0814tb_rel.job
    2016-08-30 20:15 - 2016-07-15 06:59 - 00004006 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1468558762
    2016-08-30 20:15 - 2016-07-15 06:59 - 00001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
    2016-08-30 20:15 - 2015-12-25 05:27 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2016-08-30 20:15 - 2015-12-25 04:58 - 00000000 ____D C:\ProgramData\NVIDIA
    2016-08-30 20:14 - 2015-10-30 08:28 - 01572864 ___SH C:\WINDOWS\system32\config\BBI
    2016-08-30 20:14 - 2015-09-07 16:35 - 00004004 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
    2016-08-30 20:13 - 2016-07-12 09:22 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00969560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00513496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00292704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00163416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00108816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
    2016-08-30 20:04 - 2012-12-05 05:04 - 00001018 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
    2016-08-30 17:52 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
    2016-08-30 17:52 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
    2016-08-30 17:49 - 2012-12-05 14:26 - 00004148 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E6475366-39D1-466A-BA98-D35685BD38D5}
    2016-08-30 17:48 - 2013-03-08 18:10 - 00000000 ____D C:\Users\pam\AppData\Local\Adobe
    2016-08-30 17:42 - 2015-09-23 18:12 - 00000000 ____D C:\Users\pam\AppData\Local\ElevatedDiagnostics
    2016-08-30 17:41 - 2014-11-22 15:55 - 00004148 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E039BC5E-3EC9-4D8D-BF57-12BA8265F9B9}
    2016-08-30 13:51 - 2014-11-19 19:19 - 00000000 ___RD C:\Users\Evy\OneDrive
    2016-08-30 13:48 - 2015-12-28 17:21 - 00000000 ____D C:\WINDOWS\Minidump
    2016-08-30 10:37 - 2013-03-15 11:01 - 00000000 ____D C:\Users\Evy\AppData\Local\Adobe
    2016-08-28 09:30 - 2015-09-21 11:53 - 00000000 ___HD C:\OneDriveTemp
    2016-08-28 09:29 - 2015-12-25 05:00 - 00000000 ____D C:\Users\Evy
    2016-08-24 23:52 - 2016-01-04 10:38 - 00000000 ____D C:\Users\Evy\AppData\Local\Deployment
    2016-08-22 08:11 - 2015-08-06 17:00 - 00002405 _____ C:\Users\pam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2016-08-22 08:11 - 2013-01-06 21:27 - 00000000 ___RD C:\Users\pam\SkyDrive
    2016-08-22 08:10 - 2012-12-05 04:06 - 00000000 __RHD C:\Users\Public\AccountPictures
    2016-08-20 15:04 - 2012-12-05 05:04 - 00000000 ____D C:\Program Files (x86)\Google
    2016-08-17 23:25 - 2015-12-25 05:01 - 00000000 ____D C:\Users\Julia
    2016-08-17 23:04 - 2015-08-06 17:41 - 00002405 _____ C:\Users\Evy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2016-08-17 16:57 - 2014-11-30 11:24 - 00004152 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8400A307-FD79-4D17-B843-D4DC7FABF975}
    2016-08-17 11:10 - 2016-06-12 10:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2016-08-17 10:52 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2016-08-17 10:51 - 2013-03-08 18:49 - 00000000 ____D C:\Program Files\Microsoft Office 15
    2016-08-17 10:42 - 2015-11-26 17:08 - 00002411 _____ C:\Users\Julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2016-08-17 10:42 - 2014-11-30 11:24 - 00000000 ___RD C:\Users\Julia\OneDrive
    2016-08-13 09:11 - 2015-12-25 04:53 - 00000000 ___DC C:\WINDOWS\Panther
    2016-08-11 08:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
    2016-08-11 00:16 - 2015-10-30 20:11 - 00000000 ____D C:\Program Files\Windows Journal
    2016-08-11 00:16 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
    2016-08-11 00:16 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
    2016-08-10 13:52 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
    2016-08-10 13:52 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
    2016-08-10 13:52 - 2013-08-14 17:21 - 00000000 ____D C:\WINDOWS\system32\MRT
    2016-08-10 13:41 - 2012-12-19 15:10 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2016-08-08 23:05 - 2013-08-08 09:52 - 00002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
    2016-08-08 23:05 - 2012-12-05 05:06 - 00002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-07-31 09:57 - 2016-06-20 12:32 - 00000000 ____D C:\Users\Julia\AppData\Local\Mozilla

    ==================== Files in the root of some directories =======

    2015-12-01 16:27 - 2015-12-01 16:27 - 1430264 ____T (CPUID) C:\Users\pam\AppData\Roaming\cpuidsdk.dll
    2015-12-01 16:27 - 2015-12-01 16:27 - 0159200 ____T () C:\Users\pam\AppData\Roaming\CrashRpt1402.dll
    2015-12-01 16:27 - 2015-12-01 16:27 - 0008214 ____T () C:\Users\pam\AppData\Roaming\crashrpt_lang.ini
    2015-12-01 16:27 - 2015-12-01 16:27 - 0997344 ____T () C:\Users\pam\AppData\Roaming\CrashSender1402.exe
    2015-12-01 16:27 - 2015-12-01 16:27 - 1080656 ____T (Microsoft Corporation) C:\Users\pam\AppData\Roaming\dbghelp.dll
    2015-12-01 16:27 - 2015-12-01 16:27 - 1260544 ____T (The OpenSSL Project, http://www.openssl.org/) C:\Users\pam\AppData\Roaming\libeay32.dll
    2015-12-01 16:27 - 2015-12-01 16:27 - 0295936 ____T (The OpenSSL Project, http://www.openssl.org/) C:\Users\pam\AppData\Roaming\ssleay32.dll
    2013-02-03 21:39 - 2013-02-03 21:39 - 0000011 _____ () C:\ProgramData\.tv7
    2015-12-25 04:57 - 2015-12-25 04:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-08-27 10:35

    ==================== End of FRST.txt ============================

     

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-08-2016
    Ran by pam (administrator) on DATAOPPE (30-08-2016 20:52:35)
    Running from C:\Users\pam\Å DIV\Downloads
    Loaded Profiles: pam (Available Profiles: pam & Evy & Vegard & Vilde & Julia & Eirik)
    Platform: Windows 10 Home Version 1511 (X64) Language: Norsk bokmål (Norge)
    Internet Explorer Version 11 (Default browser: Edge)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
    (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
    (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
    () C:\Program Files (x86)\AVG Security Toolbar\AVG-Secure-Search-Update_0814tb.exe
    (Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
    (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
    (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
    (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
    (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
    (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
    (CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
    (Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
    () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    (Trend Micro Inc.) C:\Users\pam\Å DIV\Downloads\HijackThis.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
    HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585048 2014-05-31] (Razer Inc.)
    HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9103976 2016-08-30] (AVAST Software)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    Winlogon\Notify\ScCertProp: wlnotify.dll [X]
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1193176 2012-10-11] ()
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8891608 2016-07-13] (Piriform Ltd)
    AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-07-26] (NVIDIA Corporation)
    ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileSyncShell64.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileSyncShell64.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileSyncShell64.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-08-30] (AVAST Software)
    ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncShell.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncShell.dll [2016-08-22] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\pam\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncShell.dll [2016-08-22] (Microsoft Corporation)
    Startup: C:\Users\Evy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send til OneNote.lnk [2014-11-22]
    ShortcutTarget: Send til OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
    Startup: C:\Users\pam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send til OneNote.lnk [2015-06-01]
    ShortcutTarget: Send til OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1008\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1007\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1006\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1005\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1002\User: Restriction <======= ATTENTION
    GroupPolicyUsers\S-1-5-21-534824535-310085861-1345720186-1001\User: Restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{5ec62312-5a66-435e-a214-feb2223c0ba7}: [DhcpNameServer] 192.168.0.1

    Internet Explorer:
    ==================
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com?cid={47531457-3486-4600-868A-ECA01E8F8056}&mid=cd02ab70b97247d39d74294607867745-2108628ba06038436e6c05da7024fdd4125367b1&lang=da&ds=AVG&coid=&cmpid=&pr=sa&d=2013-03-07 22:45:40&v=18.3.0.885&pid=safeguard&sg=0&sap=hp
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com?cid={47531457-3486-4600-868A-ECA01E8F8056}&mid=cd02ab70b97247d39d74294607867745-2108628ba06038436e6c05da7024fdd4125367b1&lang=da&ds=AVG&coid=&cmpid=&pr=sa&d=2013-03-07 22:45:40&v=18.8.0.179&pid=safeguard&sg=0&sap=hp
    HKU\S-1-5-21-534824535-310085861-1345720186-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
    SearchScopes: HKU\S-1-5-21-534824535-310085861-1345720186-1001 -> {2685E613-B61A-45DB-84C6-F8C509F60DBF} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^NO&apn_uid=5604BFB0-357E-4B12-B703-B5C24B72BDCF&apn_sauid=7A82AFAD-80B9-4007-BAAB-28B8D90116E8
    SearchScopes: HKU\S-1-5-21-534824535-310085861-1345720186-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={47531457-3486-4600-868A-ECA01E8F8056}&mid=cd02ab70b97247d39d74294607867745-2108628ba06038436e6c05da7024fdd4125367b1&lang=da&ds=AVG&pr=sa&d=2013-03-07 22:45:40&v=15.2.0.5&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
    BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-07-12] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-05] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-08-30] (Oracle Corporation)
    BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-30] (Oracle Corporation)
    Toolbar: HKLM-x32 - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
    Toolbar: HKU\S-1-5-21-534824535-310085861-1345720186-1001 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
    Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)
    Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.8.0\ViProtocol.dll [2015-08-17] (AVG Secure Search)

    FireFox:
    ========
    FF ProfilePath: C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default
    FF DefaultSearchEngine: Bing
    FF SearchEngineOrder.1: Ask.com
    FF SelectedSearchEngine: Ask.com
    FF Homepage: hxxp://www.startside.no
    FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
    FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll [No File]
    FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
    FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-30] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-30] (Oracle Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-10] (Microsoft Corporation)
    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA Corporation)
    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
    FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-08-14] ()
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-06-23] (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-534824535-310085861-1345720186-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\pam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-03-10] (Unity Technologies ApS)
    FF user.js: detected! => C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default\user.js [2013-03-07]
    FF SearchPlugin: C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default\searchplugins\askcom.xml [2013-05-18]
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml [2013-05-25]
    FF Extension: (Firefox Hotfix) - C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-08-30]
    FF Extension: (Adblock Plus) - C:\Users\pam\AppData\Roaming\Mozilla\Firefox\Profiles\9c5d12t6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-08-30]
    FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-08-30]
    FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
    FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-08-30]
    FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
    FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found

    Chrome:
    =======
    CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
    CHR StartupUrls: Default -> "hxxp://www.search.ask.com/?tpid=ORJ-V7C&o=APN11412&pf=V7&trgb=CR&p2=%5EBBK%5EOSJ000%5EYY%5ENO&gct=hp&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5ENO&apn_dbr=cr_34.0.1847.116&apn_uid=313ADF30-E94F-40BB-AB00-98795B315741&itbv=12.10.6.48&doi=2014-04-17&psv="
    CHR Profile: C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Floorplanner) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2015-03-25]
    CHR Extension: (http://translate.google.no/) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahebpafflkkdojecafbljpimjkadcpdh [2014-12-01]
    CHR Extension: (Google Drive) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-08]
    CHR Extension: (YouTube) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-09]
    CHR Extension: (Google Search) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-08]
    CHR Extension: (http://www.wikipedia.no/) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgkfehbmnpkglhlhbhaeagnpbkionpen [2014-12-01]
    CHR Extension: (GamingWonderland) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeojlpepoljdpaoiplnlhcfkoigijimc [2016-07-05]
    CHR Extension: (Avast SafePrice) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-08-22]
    CHR Extension: (Google Docs Offline) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-26]
    CHR Extension: (AdBlock) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-22]
    CHR Extension: (Avast Online Security) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-07-05]
    CHR Extension: (Autodesk Homestyler) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2016-08-22]
    CHR Extension: (https://nb-no.facebook.com/) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhmiiebbdmappefcnmncoekfggcmacen [2014-12-01]
    CHR Extension: (Chrome Nettmarked-betalinger) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-17]
    CHR Extension: (Foreign currency converter) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\oambjpdibffejjoecjbpoldijfnckdge [2014-12-01]
    CHR Extension: (World Clocks 2) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjgoijhajhaahklokegbfnohialajpej [2015-01-16]
    CHR Extension: (Gmail) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-12]
    CHR Extension: (Chrome Media Router) - C:\Users\pam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-22]
    CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
    CHR HKLM-x32\...\Chrome\Extension: [fmfnfnpmhcllokmkepffndflpnadjmma] - C:\Program Files (x86)\DealPly\DealPly.crx <not found>
    CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-08-30] (AVAST Software)
    R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-24] (Acer Incorporated)
    R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3189488 2016-07-05] (Microsoft Corporation)
    R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-23] (Acer Incorporated)
    R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-08-14] (WildTangent)
    R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [File not signed]
    R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation)
    S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-26] (Intel Corporation)
    R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
    S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
    R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
    S4 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
    S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
    S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-08-30] (AVAST Software)
    R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-08-30] (AVAST Software)
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-08-30] (AVAST Software)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-08-30] (AVAST Software)
    R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-08-30] (AVAST Software)
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969560 2016-08-30] (AVAST Software)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513496 2016-08-30] (AVAST Software)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-08-30] (AVAST Software)
    R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-08-30] (AVAST Software)
    R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
    S3 cxbu0x64; C:\Windows\system32\DRIVERS\cxbu0x64.sys [147576 2014-05-14] (HID Global Corporation)
    R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
    S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [113880 2015-11-30] (Malwarebytes Corporation)
    S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
    R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
    R1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)
    R3 rzp1endpt; C:\Windows\System32\drivers\rzp1endpt.sys [39080 2014-05-19] (Razer Inc)
    R3 rzvmouse; C:\Windows\System32\drivers\rzvmouse.sys [31400 2014-05-19] (Razer Inc)
    S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
    S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-08-30 20:52 - 2016-08-30 20:52 - 00000000 ____D C:\FRST
    2016-08-30 20:22 - 2016-08-30 20:22 - 00000000 ____D C:\Users\pam\AppData\Roaming\Sun
    2016-08-30 20:22 - 2016-08-30 20:22 - 00000000 ____D C:\Users\pam\.oracle_jre_usage
    2016-08-30 20:13 - 2016-08-30 20:13 - 00391496 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
    2016-08-30 20:13 - 2016-08-30 20:13 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
    2016-08-30 18:17 - 2016-08-30 18:17 - 00003756 _____ C:\WINDOWS\System32\Tasks\ALU_SelfUpgrade
    2016-08-30 17:58 - 2016-08-30 17:58 - 00000000 ____D C:\Users\pam\AppData\Local\CEF
    2016-08-30 13:48 - 2016-08-30 13:48 - 00339308 _____ C:\WINDOWS\Minidump\083016-13750-01.dmp
    2016-08-30 10:31 - 2016-08-30 10:31 - 00188132 _____ C:\WINDOWS\Minidump\083016-50171-01.dmp
    2016-08-25 10:19 - 2016-08-25 10:19 - 00336252 _____ C:\WINDOWS\Minidump\082516-17750-01.dmp
    2016-08-22 22:04 - 2016-08-22 22:04 - 00064340 _____ C:\Users\Evy\Downloads\Bjørklunds+ringstørrelser.pdf
    2016-08-22 11:52 - 2016-08-22 11:52 - 00007486 _____ C:\Users\Evy\Downloads\Arsoppgave31122014.pdf
    2016-08-22 11:50 - 2016-08-22 11:50 - 00007733 _____ C:\Users\Evy\Downloads\Kontoutskrift31072016.pdf
    2016-08-22 11:49 - 2016-08-22 11:49 - 00008876 _____ C:\Users\Evy\Downloads\Kontoutskrift31052016.pdf
    2016-08-22 11:49 - 2016-08-22 11:49 - 00008822 _____ C:\Users\Evy\Downloads\Kontoutskrift30062016.pdf
    2016-08-22 11:48 - 2016-08-22 11:48 - 00008614 _____ C:\Users\Evy\Downloads\Kontoutskrift30042016.pdf
    2016-08-22 11:46 - 2016-08-22 11:46 - 00008576 _____ C:\Users\Evy\Downloads\Kontoutskrift31032016.pdf
    2016-08-22 11:22 - 2016-08-30 13:48 - 636767713 _____ C:\WINDOWS\MEMORY.DMP
    2016-08-22 11:22 - 2016-08-22 11:22 - 00000000 _____ C:\WINDOWS\Minidump\082216-43234-01.dmp
    2016-08-22 08:10 - 2016-08-22 08:10 - 00000000 ____D C:\Users\pam\AppData\Roaming\Skype
    2016-08-17 23:03 - 2016-08-17 23:03 - 00000000 ____D C:\Users\Evy\AppData\Roaming\Skype
    2016-08-17 10:42 - 2016-08-17 10:42 - 00003328 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
    2016-08-17 10:41 - 2016-08-17 10:41 - 00000000 ____D C:\Users\Julia\AppData\Roaming\Skype
    2016-08-13 09:09 - 2016-08-13 09:14 - 00000000 ____D C:\Program Files\CCleaner
    2016-08-13 09:09 - 2016-08-13 09:09 - 08136664 _____ (Piriform Ltd) C:\Users\Evy\Downloads\ccsetup520 (3).exe
    2016-08-13 09:09 - 2016-08-13 09:09 - 08136664 _____ (Piriform Ltd) C:\Users\Evy\Downloads\ccsetup520 (2).exe
    2016-08-13 09:09 - 2016-08-13 09:09 - 00002852 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
    2016-08-13 09:09 - 2016-08-13 09:09 - 00000867 _____ C:\Users\Public\Desktop\CCleaner.lnk
    2016-08-13 09:09 - 2016-08-13 09:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
    2016-08-13 09:05 - 2016-08-13 09:05 - 08136664 _____ (Piriform Ltd) C:\Users\Evy\Downloads\ccsetup520.exe
    2016-08-13 09:05 - 2016-08-13 09:05 - 08136664 _____ (Piriform Ltd) C:\Users\Evy\Downloads\ccsetup520 (1).exe
    2016-08-12 09:54 - 2016-08-12 09:54 - 00000000 ____D C:\Users\Julia\AppData\Local\Macromedia
    2016-08-10 12:14 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2016-08-10 12:14 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
    2016-08-10 12:14 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
    2016-08-10 12:14 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
    2016-08-10 12:14 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
    2016-08-10 12:14 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
    2016-08-10 12:14 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
    2016-08-10 12:14 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
    2016-08-10 12:14 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
    2016-08-10 12:14 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
    2016-08-10 12:14 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
    2016-08-10 12:14 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
    2016-08-10 12:14 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
    2016-08-10 12:14 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
    2016-08-10 12:14 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
    2016-08-10 12:14 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
    2016-08-10 12:14 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
    2016-08-10 12:14 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
    2016-08-10 12:14 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
    2016-08-10 12:14 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
    2016-08-10 12:14 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
    2016-08-10 12:14 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
    2016-08-10 12:14 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
    2016-08-10 12:14 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
    2016-08-10 12:14 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
    2016-08-10 12:14 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
    2016-08-10 12:14 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
    2016-08-10 12:14 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
    2016-08-10 12:14 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
    2016-08-10 12:14 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
    2016-08-10 12:14 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
    2016-08-10 12:14 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
    2016-08-10 12:14 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
    2016-08-10 12:14 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
    2016-08-10 12:14 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
    2016-08-10 12:14 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
    2016-08-10 12:14 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
    2016-08-10 12:14 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
    2016-08-10 12:14 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
    2016-08-10 12:14 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
    2016-08-10 12:14 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
    2016-08-10 12:14 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
    2016-08-10 12:14 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
    2016-08-10 12:14 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2016-08-10 12:14 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
    2016-08-10 12:14 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2016-08-10 12:14 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2016-08-10 12:14 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
    2016-08-10 12:14 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
    2016-08-10 12:14 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
    2016-08-10 12:14 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
    2016-08-10 12:14 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
    2016-08-10 12:14 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
    2016-08-10 12:14 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
    2016-08-10 12:14 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
    2016-08-10 12:14 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
    2016-08-10 12:14 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
    2016-08-10 12:14 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
    2016-08-10 12:14 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
    2016-08-10 12:14 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
    2016-08-10 12:14 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
    2016-08-10 12:14 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
    2016-08-10 12:14 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
    2016-08-10 12:14 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
    2016-08-10 12:14 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
    2016-08-10 12:14 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
    2016-08-10 12:14 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
    2016-08-10 12:14 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
    2016-08-10 12:14 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
    2016-08-10 12:14 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
    2016-08-10 12:14 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
    2016-08-10 12:14 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
    2016-08-10 12:13 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
    2016-08-10 12:13 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
    2016-08-10 12:13 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
    2016-08-10 12:13 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
    2016-08-10 12:13 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
    2016-08-10 12:13 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
    2016-08-10 12:13 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
    2016-08-10 12:13 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
    2016-08-10 12:13 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
    2016-08-10 12:13 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
    2016-08-10 12:13 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
    2016-08-10 12:13 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
    2016-08-10 12:13 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
    2016-08-10 12:13 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
    2016-08-10 12:13 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
    2016-08-10 12:13 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
    2016-08-10 12:13 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
    2016-08-10 12:13 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
    2016-08-10 12:13 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
    2016-08-10 12:13 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
    2016-08-10 12:13 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
    2016-08-10 12:13 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
    2016-08-10 12:13 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
    2016-08-10 12:13 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
    2016-08-10 12:13 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2016-08-10 12:13 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
    2016-08-10 12:13 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
    2016-08-10 12:13 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
    2016-08-10 12:13 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
    2016-08-10 12:13 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
    2016-08-10 12:13 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
    2016-08-10 12:13 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2016-08-10 12:13 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
    2016-08-10 12:13 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
    2016-08-10 12:13 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
    2016-08-10 12:13 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
    2016-08-10 12:13 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
    2016-08-10 12:13 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
    2016-08-10 12:13 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
    2016-08-10 12:13 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
    2016-08-10 12:13 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
    2016-08-10 12:13 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2016-08-10 12:13 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
    2016-08-10 12:13 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
    2016-08-10 12:13 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
    2016-08-10 12:13 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
    2016-08-10 12:13 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
    2016-08-10 12:13 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
    2016-08-10 12:13 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
    2016-08-10 12:13 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2016-08-10 12:13 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
    2016-08-10 12:13 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
    2016-08-10 12:13 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
    2016-08-10 12:13 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
    2016-08-10 12:13 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2016-08-10 12:13 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2016-08-10 12:13 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
    2016-07-31 10:07 - 2016-07-31 10:07 - 00000000 ____D C:\Users\Julia\AppData\Local\CEF

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-08-30 20:48 - 2013-10-14 19:42 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
    2016-08-30 20:22 - 2015-12-25 05:01 - 00000000 ____D C:\Users\pam
    2016-08-30 20:22 - 2014-08-07 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2016-08-30 20:22 - 2014-04-22 10:16 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
    2016-08-30 20:22 - 2013-08-15 21:19 - 00000000 ____D C:\Program Files (x86)\Java
    2016-08-30 20:21 - 2015-10-30 20:07 - 00449578 _____ C:\WINDOWS\system32\perfh014.dat
    2016-08-30 20:21 - 2015-10-30 20:07 - 00076846 _____ C:\WINDOWS\system32\perfc014.dat
    2016-08-30 20:21 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
    2016-08-30 20:21 - 2015-08-06 16:31 - 01393452 _____ C:\WINDOWS\system32\PerfStringBackup.INI
    2016-08-30 20:21 - 2013-03-20 10:59 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
    2016-08-30 20:17 - 2012-12-05 05:04 - 00001014 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    2016-08-30 20:16 - 2014-12-10 00:16 - 00000404 _____ C:\WINDOWS\Tasks\AVG-Secure-Search-Update_1214tb_rmv.job
    2016-08-30 20:16 - 2014-12-10 00:16 - 00000404 _____ C:\WINDOWS\Tasks\AVG-Secure-Search-Update_1214tb_rel.job
    2016-08-30 20:16 - 2014-08-27 08:13 - 00000402 _____ C:\WINDOWS\Tasks\AVG-Secure-Search-Update_0814tb_rmv.job
    2016-08-30 20:16 - 2014-08-27 08:13 - 00000402 _____ C:\WINDOWS\Tasks\AVG-Secure-Search-Update_0814tb_rel.job
    2016-08-30 20:15 - 2016-07-15 06:59 - 00004006 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1468558762
    2016-08-30 20:15 - 2016-07-15 06:59 - 00001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
    2016-08-30 20:15 - 2015-12-25 05:27 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2016-08-30 20:15 - 2015-12-25 04:58 - 00000000 ____D C:\ProgramData\NVIDIA
    2016-08-30 20:14 - 2015-10-30 08:28 - 01572864 ___SH C:\WINDOWS\system32\config\BBI
    2016-08-30 20:14 - 2015-09-07 16:35 - 00004004 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
    2016-08-30 20:13 - 2016-07-12 09:22 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00969560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00513496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00292704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00163416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00108816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
    2016-08-30 20:13 - 2015-09-07 16:35 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
    2016-08-30 20:04 - 2012-12-05 05:04 - 00001018 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
    2016-08-30 17:52 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
    2016-08-30 17:52 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
    2016-08-30 17:49 - 2012-12-05 14:26 - 00004148 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E6475366-39D1-466A-BA98-D35685BD38D5}
    2016-08-30 17:48 - 2013-03-08 18:10 - 00000000 ____D C:\Users\pam\AppData\Local\Adobe
    2016-08-30 17:42 - 2015-09-23 18:12 - 00000000 ____D C:\Users\pam\AppData\Local\ElevatedDiagnostics
    2016-08-30 17:41 - 2014-11-22 15:55 - 00004148 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E039BC5E-3EC9-4D8D-BF57-12BA8265F9B9}
    2016-08-30 13:51 - 2014-11-19 19:19 - 00000000 ___RD C:\Users\Evy\OneDrive
    2016-08-30 13:48 - 2015-12-28 17:21 - 00000000 ____D C:\WINDOWS\Minidump
    2016-08-30 10:37 - 2013-03-15 11:01 - 00000000 ____D C:\Users\Evy\AppData\Local\Adobe
    2016-08-28 09:30 - 2015-09-21 11:53 - 00000000 ___HD C:\OneDriveTemp
    2016-08-28 09:29 - 2015-12-25 05:00 - 00000000 ____D C:\Users\Evy
    2016-08-24 23:52 - 2016-01-04 10:38 - 00000000 ____D C:\Users\Evy\AppData\Local\Deployment
    2016-08-22 08:11 - 2015-08-06 17:00 - 00002405 _____ C:\Users\pam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2016-08-22 08:11 - 2013-01-06 21:27 - 00000000 ___RD C:\Users\pam\SkyDrive
    2016-08-22 08:10 - 2012-12-05 04:06 - 00000000 __RHD C:\Users\Public\AccountPictures
    2016-08-20 15:04 - 2012-12-05 05:04 - 00000000 ____D C:\Program Files (x86)\Google
    2016-08-17 23:25 - 2015-12-25 05:01 - 00000000 ____D C:\Users\Julia
    2016-08-17 23:04 - 2015-08-06 17:41 - 00002405 _____ C:\Users\Evy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2016-08-17 16:57 - 2014-11-30 11:24 - 00004152 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8400A307-FD79-4D17-B843-D4DC7FABF975}
    2016-08-17 11:10 - 2016-06-12 10:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2016-08-17 10:52 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2016-08-17 10:51 - 2013-03-08 18:49 - 00000000 ____D C:\Program Files\Microsoft Office 15
    2016-08-17 10:42 - 2015-11-26 17:08 - 00002411 _____ C:\Users\Julia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2016-08-17 10:42 - 2014-11-30 11:24 - 00000000 ___RD C:\Users\Julia\OneDrive
    2016-08-13 09:11 - 2015-12-25 04:53 - 00000000 ___DC C:\WINDOWS\Panther
    2016-08-11 08:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
    2016-08-11 00:16 - 2015-10-30 20:11 - 00000000 ____D C:\Program Files\Windows Journal
    2016-08-11 00:16 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
    2016-08-11 00:16 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
    2016-08-10 13:52 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
    2016-08-10 13:52 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
    2016-08-10 13:52 - 2013-08-14 17:21 - 00000000 ____D C:\WINDOWS\system32\MRT
    2016-08-10 13:41 - 2012-12-19 15:10 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2016-08-08 23:05 - 2013-08-08 09:52 - 00002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
    2016-08-08 23:05 - 2012-12-05 05:06 - 00002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-07-31 09:57 - 2016-06-20 12:32 - 00000000 ____D C:\Users\Julia\AppData\Local\Mozilla

    ==================== Files in the root of some directories =======

    2015-12-01 16:27 - 2015-12-01 16:27 - 1430264 ____T (CPUID) C:\Users\pam\AppData\Roaming\cpuidsdk.dll
    2015-12-01 16:27 - 2015-12-01 16:27 - 0159200 ____T () C:\Users\pam\AppData\Roaming\CrashRpt1402.dll
    2015-12-01 16:27 - 2015-12-01 16:27 - 0008214 ____T () C:\Users\pam\AppData\Roaming\crashrpt_lang.ini
    2015-12-01 16:27 - 2015-12-01 16:27 - 0997344 ____T () C:\Users\pam\AppData\Roaming\CrashSender1402.exe
    2015-12-01 16:27 - 2015-12-01 16:27 - 1080656 ____T (Microsoft Corporation) C:\Users\pam\AppData\Roaming\dbghelp.dll
    2015-12-01 16:27 - 2015-12-01 16:27 - 1260544 ____T (The OpenSSL Project, http://www.openssl.org/) C:\Users\pam\AppData\Roaming\libeay32.dll
    2015-12-01 16:27 - 2015-12-01 16:27 - 0295936 ____T (The OpenSSL Project, http://www.openssl.org/) C:\Users\pam\AppData\Roaming\ssleay32.dll
    2013-02-03 21:39 - 2013-02-03 21:39 - 0000011 _____ () C:\ProgramData\.tv7
    2015-12-25 04:57 - 2015-12-25 04:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-08-27 10:35

    ==================== End of FRST.txt ============================

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.